This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft File: 27s70rCfy7vfiVsOOpxaAGRW_aY.mft (raw, json) Hash identifier: 1yTkfDjy6oOr2P4LmHoy2R6uOOECJX6DR5GnMzi0UuA= Subject key identifier: 86:56:0A:E8:68:CB:E2:13:D4:80:E5:E0:86:00:07:3E:5C:BF:8C:5B Authority key identifier: DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6 Certificate issuer: /CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6 Certificate serial: 019C446C319D6EC398C6F3BF47B7C2D053DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft Manifest number: 097B Signing time: Mon 09 Feb 2026 22:01:07 +0000 Manifest this update: Mon 09 Feb 2026 22:01:07 +0000 Manifest next update: Tue 10 Feb 2026 22:01:07 +0000 Files and hashes: 1: 27s70rCfy7vfiVsOOpxaAGRW_aY.crl (hash: 9R2wuFXdPGxaLonP4zBkvKvHwTB4XIkK1dxb8ZvzUPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:31:9d:6e:c3:98:c6:f3:bf:47:b7:c2:d0:53:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbbb3bd2b09fcbbbdf895b0e3a9c5a006456fda6 Validity Not Before: Feb 9 22:01:07 2026 GMT Not After : Feb 10 22:01:07 2026 GMT Subject: CN=86560ae868cbe213d480e5e08600073e5cbf8c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:0e:50:e6:8a:02:6c:37:f4:99:ca:a9:54: be:cb:ef:ec:7b:c4:cb:a2:25:77:b7:80:cc:14:50: 7a:89:88:14:ef:79:0b:69:ef:d2:7a:b6:21:39:9e: 87:58:b3:60:a2:2c:6e:12:a8:9f:d4:26:26:b1:f2: af:d1:5e:45:46:4b:06:59:30:62:2f:e6:65:bb:f9: 79:87:fb:2b:39:25:47:27:e0:32:d7:c9:cb:4c:95: a2:6d:b9:ad:b3:2c:75:1e:c2:9b:dd:6d:1e:f7:75: 8b:62:19:f9:59:fe:f7:db:90:f9:73:97:d6:24:da: 05:d1:66:65:0e:ff:fa:67:00:88:e0:6b:fc:aa:45: d1:e0:18:57:ba:ff:ae:52:f6:f7:7c:8f:aa:f2:06: 07:68:5e:a0:f7:54:74:22:8c:32:7d:c9:42:8f:14: 39:7e:0e:04:15:d6:e9:ec:c4:84:ba:fb:b0:23:08: 28:b6:c3:a6:0f:ca:45:10:c1:03:a3:95:70:2b:a6: 31:ca:0b:b5:3b:74:14:18:d3:ad:1a:9a:6b:a7:69: df:e8:be:40:bc:16:23:9c:26:e7:67:3e:96:9a:a5: ed:ea:04:d4:c8:de:71:f6:75:4e:84:ff:38:94:cc: 47:86:a6:e1:a6:f1:b0:b7:8b:ce:c3:95:e9:90:8a: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:0A:E8:68:CB:E2:13:D4:80:E5:E0:86:00:07:3E:5C:BF:8C:5B X509v3 Authority Key Identifier: keyid:DB:BB:3B:D2:B0:9F:CB:BB:DF:89:5B:0E:3A:9C:5A:00:64:56:FD:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27s70rCfy7vfiVsOOpxaAGRW_aY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32529-b08b-4235-b9b9-e869b34d2c6a/1/27s70rCfy7vfiVsOOpxaAGRW_aY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:62:3b:44:ae:8a:e4:2c:e6:ad:e8:45:3f:61:29:94:53:90: 80:7f:99:8f:2f:3c:e1:a2:95:48:e9:95:0f:f2:26:82:a2:4e: 64:6e:40:28:58:90:2c:74:8e:bd:69:9e:d0:8c:a1:9a:fa:4a: c3:9f:45:78:ae:c3:c1:bd:1d:57:aa:e6:22:72:7d:8b:bf:7e: 4f:4f:6d:32:45:66:e3:1d:c8:f2:06:51:55:2a:4a:8d:79:56: 0e:d3:63:23:7b:20:d4:9f:ae:20:1b:34:45:3a:94:90:d9:0e: c6:e8:46:f5:16:f2:f5:40:61:2d:1a:27:16:6a:5d:fb:96:5b: 06:cf:32:69:87:58:80:f1:53:e1:e0:0c:a0:0d:a2:a1:26:47: 01:68:fa:4a:43:08:bb:3c:0a:8e:bd:42:68:79:0a:0d:91:11: c7:a2:aa:52:81:a0:9b:91:0a:f8:69:da:1f:13:4f:8d:f5:66: 7c:a5:81:85:f8:b6:34:70:9a:b8:53:a4:8d:7c:50:7a:89:3c: 5c:43:bf:c1:63:77:bc:e6:b3:d4:43:69:8b:b4:e6:f8:5e:71: bf:d2:ad:7b:03:e9:d5:81:ad:ba:83:c1:11:ba:14:dd:db:34: 78:e3:c3:0d:ff:48:0c:a8:ea:b2:10:7a:2e:99:f0:31:e2:47: 91:a4:48:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbDGdbsOYxvO/R7fC0FPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYmIzYmQyYjA5ZmNiYmJkZjg5NWIwZTNhOWM1YTAwNjQ1 NmZkYTYwHhcNMjYwMjA5MjIwMTA3WhcNMjYwMjEwMjIwMTA3WjAzMTEwLwYDVQQD Eyg4NjU2MGFlODY4Y2JlMjEzZDQ4MGU1ZTA4NjAwMDczZTVjYmY4YzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXwOUOaKAmw39JnKqVS+y+/se8TL oiV3t4DMFFB6iYgU73kLae/SerYhOZ6HWLNgoixuEqif1CYmsfKv0V5FRksGWTBi L+Zlu/l5h/srOSVHJ+Ay18nLTJWibbmtsyx1HsKb3W0e93WLYhn5Wf7325D5c5fW JNoF0WZlDv/6ZwCI4Gv8qkXR4BhXuv+uUvb3fI+q8gYHaF6g91R0IowyfclCjxQ5 fg4EFdbp7MSEuvuwIwgotsOmD8pFEMEDo5VwK6Yxygu1O3QUGNOtGpprp2nf6L5A vBYjnCbnZz6WmqXt6gTUyN5x9nVOhP84lMxHhqbhpvGwt4vOw5XpkIrL6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZWCuhoy+IT1IDl4IYABz5cv4xbMB8GA1UdIwQY MBaAFNu7O9Kwn8u734lbDjqcWgBkVv2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5Yjkt ZTg2OWIzNGQyYzZhLzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9jMzI1MjktYjA4Yi00MjM1LWI5YjktZTg2OWIzNGQyYzZh LzEvMjdzNzByQ2Z5N3ZmaVZzT09weGFBR1JXX2FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2I7RK6K 5CzmrehFP2EplFOQgH+Zjy884aKVSOmVD/ImgqJOZG5AKFiQLHSOvWme0IyhmvpK w59FeK7Dwb0dV6rmInJ9i79+T09tMkVm4x3I8gZRVSpKjXlWDtNjI3sg1J+uIBs0 RTqUkNkOxuhG9Rby9UBhLRonFmpd+5ZbBs8yaYdYgPFT4eAMoA2ioSZHAWj6SkMI uzwKjr1CaHkKDZERx6KqUoGgm5EK+GnaHxNPjfVmfKWBhfi2NHCauFOkjXxQeok8 XEO/wWN3vOaz1ENpi7Tm+F5xv9KtewPp1YGtuoPBEboU3ds0eOPDDf9IDKjqshB6 LpnwMeJHkaRIVg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:51 2026 by rpki-client