This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft File: GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json) Hash identifier: /R9O/AscX4OEIEsP7czTsSRXAyPV5qgD6QDu/tigAY0= Subject key identifier: C0:70:08:3E:6D:DB:84:46:37:45:50:02:DB:52:15:8D:80:74:62:95 Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E Certificate issuer: /CN=1b271e2ae622877552b89dbc474d7a130584a48e Certificate serial: 019B2BF8B2270BE3031FCB5B0892FB9F3079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft Manifest number: 0B8C Signing time: Wed 17 Dec 2025 11:01:17 +0000 Manifest this update: Wed 17 Dec 2025 11:01:17 +0000 Manifest next update: Thu 18 Dec 2025 11:01:17 +0000 Files and hashes: 1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: aMyDKbOqge4sZuA54RIhzBKpVlQXze97yPt+X43GfyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:b2:27:0b:e3:03:1f:cb:5b:08:92:fb:9f:30:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e Validity Not Before: Dec 17 11:01:17 2025 GMT Not After : Dec 18 11:01:17 2025 GMT Subject: CN=c070083e6ddb844637455002db52158d80746295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:6e:b2:ad:0c:c4:b5:e8:5e:2b:24:32:82: 99:a6:21:e6:44:96:b6:e4:60:e2:25:70:fc:2b:8f: 02:f3:89:dc:b8:93:a4:26:c0:6a:ee:2e:c0:38:fd: 22:4f:59:c6:d2:65:d7:67:5e:bf:36:d8:fe:34:fa: 99:02:b3:c0:a3:96:ac:b4:4b:28:d6:d3:47:d0:62: 04:b5:dc:2c:8a:23:a1:13:44:d9:9e:db:d7:37:eb: 29:6f:29:d7:4f:34:78:3e:14:1f:ad:f6:8c:2a:d4: 02:b8:b0:4e:91:c0:b5:53:2f:81:4d:29:7e:7c:a8: 3b:fb:38:27:05:46:92:8e:9e:41:dd:8a:2a:5a:97: 71:18:20:db:9f:86:a2:f2:25:19:fb:6b:94:d2:aa: 1b:f4:40:ff:18:55:ff:50:7e:dc:f6:f3:ff:66:d6: 52:cb:bd:42:80:e0:78:3c:be:48:ad:c7:a3:4f:a8: 62:d1:bd:b4:8d:71:64:eb:2c:8f:bb:51:82:91:7f: 19:a4:c1:37:6b:4c:de:93:07:04:07:76:94:ca:29: 28:99:16:31:41:9a:59:79:a5:25:38:ac:45:84:c0: ab:1d:0e:4b:73:e3:68:5a:74:4e:ad:00:e9:bb:7d: 48:c5:fd:00:c2:ad:46:8f:7b:0c:59:cb:9c:98:e4: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:70:08:3E:6D:DB:84:46:37:45:50:02:DB:52:15:8D:80:74:62:95 X509v3 Authority Key Identifier: keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:03:fe:d3:47:b8:4c:43:08:88:af:7a:93:cf:8a:17:c5:1d: a9:91:96:d5:c2:2f:5d:cd:d0:9d:c5:64:58:24:8b:1c:0f:ba: 79:96:5f:0d:de:26:e7:6c:75:a2:b0:9e:b3:93:e7:2d:81:b4: 60:c6:18:88:b1:41:a7:72:58:3b:9d:72:3f:79:82:26:6f:5d: 2b:a4:1c:b6:ce:73:b5:b2:d8:16:67:1e:dd:97:0c:93:5c:1e: 7b:d8:91:ee:81:f6:88:f6:e2:95:1b:30:00:9d:3a:f6:a6:d8: 66:85:6d:72:76:16:bb:7e:54:ee:16:e5:02:15:ab:51:ef:54: e7:49:92:51:fa:11:11:34:89:fa:c3:83:cf:cd:65:60:cf:70: b9:62:e5:65:c3:87:c9:4c:83:98:97:6c:13:c0:76:96:38:aa: 67:63:25:b4:91:2a:c6:e3:b7:3a:42:56:50:15:71:7e:ca:17: 1a:2d:64:c1:b9:49:4a:39:50:37:5b:7a:c0:f6:90:3e:f7:a5: 07:94:b5:0c:df:97:6c:3c:b9:aa:66:7f:ed:29:4d:a4:1e:95: cd:61:a4:b0:6d:0d:37:f7:3e:9d:d9:42:09:0b:f5:0c:87:f0: 5b:34:f8:b5:a9:29:d1:4a:0b:18:75:50:5e:2a:70:ff:c2:a7: 69:f1:aa:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+LInC+MDH8tbCJL7nzB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjcxZTJhZTYyMjg3NzU1MmI4OWRiYzQ3NGQ3YTEzMDU4 NGE0OGUwHhcNMjUxMjE3MTEwMTE3WhcNMjUxMjE4MTEwMTE3WjAzMTEwLwYDVQQD EyhjMDcwMDgzZTZkZGI4NDQ2Mzc0NTUwMDJkYjUyMTU4ZDgwNzQ2Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rtusq0MxLXoXiskMoKZpiHmRJa2 5GDiJXD8K48C84ncuJOkJsBq7i7AOP0iT1nG0mXXZ16/Ntj+NPqZArPAo5astEso 1tNH0GIEtdwsiiOhE0TZntvXN+spbynXTzR4PhQfrfaMKtQCuLBOkcC1Uy+BTSl+ fKg7+zgnBUaSjp5B3YoqWpdxGCDbn4ai8iUZ+2uU0qob9ED/GFX/UH7c9vP/ZtZS y71CgOB4PL5IrcejT6hi0b20jXFk6yyPu1GCkX8ZpME3a0zekwcEB3aUyikomRYx QZpZeaUlOKxFhMCrHQ5Lc+NoWnROrQDpu31Ixf0Awq1Gj3sMWcucmORB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBwCD5t24RGN0VQAttSFY2AdGKVMB8GA1UdIwQY MBaAFBsnHirmIod1UridvEdNehMFhKSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMGQ2YTgtYzRlMi00N2UzLTkwZGYt MWM4ZWQzNmQyNTY2LzEvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMGQ2YTgtYzRlMi00N2UzLTkwZGYtMWM4ZWQzNmQyNTY2 LzEvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgP+00e4 TEMIiK96k8+KF8UdqZGW1cIvXc3QncVkWCSLHA+6eZZfDd4m52x1orCes5PnLYG0 YMYYiLFBp3JYO51yP3mCJm9dK6Qcts5ztbLYFmce3ZcMk1wee9iR7oH2iPbilRsw AJ069qbYZoVtcnYWu35U7hblAhWrUe9U50mSUfoRETSJ+sODz81lYM9wuWLlZcOH yUyDmJdsE8B2ljiqZ2MltJEqxuO3OkJWUBVxfsoXGi1kwblJSjlQN1t6wPaQPvel B5S1DN+XbDy5qmZ/7SlNpB6VzWGksG0NN/c+ndlCCQv1DIfwWzT4takp0UoLGHVQ Xipw/8KnafGqkw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:16 2025 by rpki-client