This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json) Hash identifier: s+5VdRIzr3A0Q8HcWoXKh9lIQBvz8vUAHuP3u6eBxa8= Subject key identifier: 2E:BF:03:BE:70:49:3E:A5:62:D8:B3:DD:FB:AE:99:61:21:93:26:7A Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Certificate serial: 019B12A69D1783AB59F41B1C4D26109EBE2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft Manifest number: 0B52 Signing time: Fri 12 Dec 2025 13:01:07 +0000 Manifest this update: Fri 12 Dec 2025 13:01:07 +0000 Manifest next update: Sat 13 Dec 2025 13:01:07 +0000 Files and hashes: 1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: fHQJBEkRfXUbjjX0y7MlTnhQkDN0YrL5294mJIC2aAk=) 2: gLnx7gZxz0WAj-K4vzwKgIeet84.roa (hash: YbYZtWJrwErlFGA26FKrq1zki7cmTkbU1yt/QbkuJOY=) 3: vCbENDmcVZ7OLkrsquYLfwcmWAU.roa (hash: oWU17RHNGxYAka9AZYJ6zi/xRdBcOReKT32VVVtlyEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:9d:17:83:ab:59:f4:1b:1c:4d:26:10:9e:be:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Validity Not Before: Dec 12 13:01:07 2025 GMT Not After : Dec 13 13:01:07 2025 GMT Subject: CN=2ebf03be70493ea562d8b3ddfbae99612193267a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:ee:14:3a:cf:54:41:0f:1a:98:e1:cd:a5: 8f:45:ea:8f:7f:c7:de:5f:99:7e:ca:09:a4:ab:89: 0b:00:bb:2c:47:ff:b7:11:7a:ed:a5:45:db:8c:b6: e9:ae:e3:2a:c6:e1:26:cf:fc:86:fd:3a:56:36:4d: 59:58:1b:dd:a3:30:4b:50:32:07:71:63:1f:ed:f3: 9a:1c:65:6e:6f:b9:19:37:35:7b:e7:a9:a5:05:96: 18:03:7d:a8:45:c1:31:3a:c5:51:89:11:b1:80:73: b7:a6:06:2a:0a:79:d6:15:b3:c5:14:0f:27:66:4a: 5c:f9:ed:20:a5:d7:41:fc:b6:20:4c:0c:97:e0:ac: f7:2a:8d:1f:18:66:83:5a:80:bd:bb:7f:20:2d:bb: 1f:32:14:3b:b6:e3:85:65:0f:34:47:9d:06:6d:5f: 45:9c:db:66:b2:32:56:b5:bd:67:35:59:34:5a:9b: 34:2d:84:ba:e3:c4:02:0e:31:cf:b9:5a:5d:3f:ce: 19:26:ad:79:0a:20:92:e1:16:fe:d2:38:b7:4d:9d: f9:35:43:f3:60:bb:19:92:53:46:7a:6a:4d:f5:4e: 83:d4:08:41:f5:3d:46:fe:41:8f:3b:a4:bb:2e:d9: 32:53:e4:5b:72:98:09:c0:fc:c0:2a:77:90:b9:01: e8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BF:03:BE:70:49:3E:A5:62:D8:B3:DD:FB:AE:99:61:21:93:26:7A X509v3 Authority Key Identifier: keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:79:b6:34:a2:38:03:b9:c7:fd:ed:ac:d8:6f:9d:a2:3b:d0: 08:5e:7c:40:41:c1:77:58:7e:9b:5c:a0:64:53:24:67:58:7e: 19:04:a1:30:9c:de:20:bf:a7:4e:57:24:31:de:c5:aa:c1:20: e8:0e:8e:0d:eb:72:36:f0:0c:74:f3:0a:c4:ba:1a:5c:fb:f1: 79:a1:08:61:67:6a:ad:fc:09:8c:da:04:99:fc:dd:16:80:5c: b7:5f:5f:06:c7:7c:c4:42:75:9a:13:c3:40:71:6d:74:29:1c: 5f:fb:13:da:4b:96:ce:1f:9f:73:79:ea:48:f4:6b:a0:53:2f: b8:36:4d:7e:43:66:5f:f4:30:34:ed:a0:c4:a2:4f:0d:2a:e9: 8d:c8:61:10:d0:c6:cb:2c:b0:dd:7b:5f:73:67:a3:ee:f9:c9: a5:9b:2a:60:0d:ee:88:19:19:05:5f:14:52:5f:91:82:9d:e2: ee:52:f9:7d:59:83:ea:d3:6b:e7:0a:0b:3e:8c:ed:eb:05:1b: d4:f8:6d:7e:08:87:08:f8:cc:42:63:99:6e:4b:ca:04:91:a1: 88:57:e3:5c:25:a0:98:c2:74:29:e4:4d:90:28:a7:3b:ce:53: 5c:d4:e3:e2:07:0d:ff:e5:dc:38:18:51:4c:cf:dc:42:d0:e7: 49:71:c5:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpp0Xg6tZ9BscTSYQnr4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux YjBmM2YwHhcNMjUxMjEyMTMwMTA3WhcNMjUxMjEzMTMwMTA3WjAzMTEwLwYDVQQD EygyZWJmMDNiZTcwNDkzZWE1NjJkOGIzZGRmYmFlOTk2MTIxOTMyNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x/uFDrPVEEPGpjhzaWPReqPf8fe X5l+ygmkq4kLALssR/+3EXrtpUXbjLbpruMqxuEmz/yG/TpWNk1ZWBvdozBLUDIH cWMf7fOaHGVub7kZNzV756mlBZYYA32oRcExOsVRiRGxgHO3pgYqCnnWFbPFFA8n Zkpc+e0gpddB/LYgTAyX4Kz3Ko0fGGaDWoC9u38gLbsfMhQ7tuOFZQ80R50GbV9F nNtmsjJWtb1nNVk0Wps0LYS648QCDjHPuVpdP84ZJq15CiCS4Rb+0ji3TZ35NUPz YLsZklNGempN9U6D1AhB9T1G/kGPO6S7LtkyU+RbcpgJwPzAKneQuQHozQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6/A75wST6lYtiz3fuumWEhkyZ6MB8GA1UdIwQY MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt ZGY1NzJmZTk2NzJhLzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXm2NKI4 A7nH/e2s2G+dojvQCF58QEHBd1h+m1ygZFMkZ1h+GQShMJzeIL+nTlckMd7FqsEg 6A6ODetyNvAMdPMKxLoaXPvxeaEIYWdqrfwJjNoEmfzdFoBct19fBsd8xEJ1mhPD QHFtdCkcX/sT2kuWzh+fc3nqSPRroFMvuDZNfkNmX/QwNO2gxKJPDSrpjchhENDG yyyw3Xtfc2ej7vnJpZsqYA3uiBkZBV8UUl+Rgp3i7lL5fVmD6tNr5woLPozt6wUb 1PhtfgiHCPjMQmOZbkvKBJGhiFfjXCWgmMJ0KeRNkCinO85TXNTj4gcN/+XcOBhR TM/cQtDnSXHFeA== -----END CERTIFICATE-----Generated at Fri Dec 12 14:40:59 2025 by rpki-client