This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft File: GyceKuYih3VSuJ28R016EwWEpI4.mft (raw, json) Hash identifier: O2FCQWBElBnEcuJDJNGs4qGqSqh7W684lc/1X2aZzM8= Subject key identifier: 1C:39:46:30:D1:FE:8F:24:3D:EE:EF:50:7E:0A:89:8C:4C:AD:B9:35 Authority key identifier: 1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E Certificate issuer: /CN=1b271e2ae622877552b89dbc474d7a130584a48e Certificate serial: 019AF20956D287B568CD8A6D837C66701D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft Manifest number: 0B6E Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: GyceKuYih3VSuJ28R016EwWEpI4.crl (hash: kLs0Es2Kl0Z/sjNd0+KaSdAWdUIs+Jj5DHGgOuIU7D8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:56:d2:87:b5:68:cd:8a:6d:83:7c:66:70:1d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b271e2ae622877552b89dbc474d7a130584a48e Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=1c394630d1fe8f243deeef507e0a898c4cadb935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:1c:dd:67:ee:92:4d:01:4e:50:78:a3:0d: df:25:63:2a:09:e7:83:87:21:94:0c:10:f7:7b:41: 6a:5e:1f:19:a4:c3:41:11:89:bd:a5:d8:51:52:f9: a6:fb:f4:85:4d:98:d3:ed:0b:d3:cf:97:e7:53:82: fb:f8:25:c0:e8:0f:0e:7d:33:6d:48:08:ee:e8:30: 29:71:76:15:a9:12:d0:15:9b:d7:30:d9:0d:df:2d: 06:bd:c2:58:06:97:15:ba:dd:13:a6:3e:dd:86:8f: 88:d2:f3:79:a6:18:99:7d:2b:35:c6:44:24:06:e8: 18:0c:dd:8d:d0:a7:e9:71:89:58:38:bc:f1:fe:4a: c2:ba:a2:6e:35:4a:3f:dd:83:35:21:96:93:79:31: 63:57:bd:47:df:68:73:82:6b:c6:d2:c6:0b:ee:ff: a7:19:6b:23:48:b3:12:47:77:45:ae:f5:47:5b:b6: d0:75:7e:b6:c5:f6:7e:50:d8:28:97:a6:f2:ad:5b: 66:e3:21:eb:cc:78:c1:81:81:08:37:a8:19:f5:71: b7:47:7a:29:33:2f:a8:69:35:9a:94:57:fa:18:5a: a0:f5:fa:44:24:99:14:c7:1e:1d:0e:73:7e:fc:27: 88:75:f3:24:15:06:85:30:db:61:b9:46:cb:71:33: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:39:46:30:D1:FE:8F:24:3D:EE:EF:50:7E:0A:89:8C:4C:AD:B9:35 X509v3 Authority Key Identifier: keyid:1B:27:1E:2A:E6:22:87:75:52:B8:9D:BC:47:4D:7A:13:05:84:A4:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyceKuYih3VSuJ28R016EwWEpI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/20d6a8-c4e2-47e3-90df-1c8ed36d2566/1/GyceKuYih3VSuJ28R016EwWEpI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f0:56:fb:9b:9d:5d:40:a0:ca:65:67:d2:f9:2c:4e:37:bd: da:73:df:08:e2:19:87:92:17:92:51:6b:13:c4:75:9d:d1:8c: 5f:d9:94:7a:26:53:71:81:c1:58:d4:e9:27:8a:c4:c9:ae:8e: de:c7:4b:15:81:7d:d3:53:b6:ae:2e:6e:60:08:36:7e:db:4c: 81:76:c6:10:2e:9f:ff:ea:05:ce:43:2e:3f:eb:88:f4:48:ea: db:8d:7e:42:90:af:3f:34:60:72:07:28:6f:7d:b1:8c:ba:65: 7a:8d:c6:b7:55:6c:f6:27:de:f4:0a:04:d7:5c:dc:81:2e:d8: 3b:eb:8a:8b:87:63:ed:3c:20:e1:59:7f:22:9c:76:5a:b8:34: 31:2f:f9:6c:bf:8c:dd:3b:19:f6:da:3d:dc:71:ca:b0:49:e0: b3:8b:14:ac:df:56:d1:e9:e8:1e:3e:88:46:00:f6:77:43:23: ef:15:99:f7:0b:bf:1c:1d:27:8f:0c:20:52:42:d8:86:eb:a4: f8:9e:aa:3b:bd:4a:de:4f:d5:dc:b7:36:26:fd:ab:1d:22:a7: 32:c2:95:09:35:21:0b:f2:a1:ae:7d:98:f9:de:3f:69:19:31: 7a:62:a5:81:6c:50:f6:79:9c:c0:5d:28:8d:a0:3a:bc:3f:69: 9f:fe:68:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVbSh7VozYptg3xmcB1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjcxZTJhZTYyMjg3NzU1MmI4OWRiYzQ3NGQ3YTEzMDU4 NGE0OGUwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EygxYzM5NDYzMGQxZmU4ZjI0M2RlZWVmNTA3ZTBhODk4YzRjYWRiOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY0c3Wfukk0BTlB4ow3fJWMqCeeD hyGUDBD3e0FqXh8ZpMNBEYm9pdhRUvmm+/SFTZjT7QvTz5fnU4L7+CXA6A8OfTNt SAju6DApcXYVqRLQFZvXMNkN3y0GvcJYBpcVut0Tpj7dho+I0vN5phiZfSs1xkQk BugYDN2N0KfpcYlYOLzx/krCuqJuNUo/3YM1IZaTeTFjV71H32hzgmvG0sYL7v+n GWsjSLMSR3dFrvVHW7bQdX62xfZ+UNgol6byrVtm4yHrzHjBgYEIN6gZ9XG3R3op My+oaTWalFf6GFqg9fpEJJkUxx4dDnN+/CeIdfMkFQaFMNthuUbLcTMe8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBw5RjDR/o8kPe7vUH4KiYxMrbk1MB8GA1UdIwQY MBaAFBsnHirmIod1UridvEdNehMFhKSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMGQ2YTgtYzRlMi00N2UzLTkwZGYt MWM4ZWQzNmQyNTY2LzEvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yMGQ2YTgtYzRlMi00N2UzLTkwZGYtMWM4ZWQzNmQyNTY2 LzEvR3ljZUt1WWloM1ZTdUoyOFIwMTZFd1dFcEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvBW+5ud XUCgymVn0vksTje92nPfCOIZh5IXklFrE8R1ndGMX9mUeiZTcYHBWNTpJ4rEya6O 3sdLFYF901O2ri5uYAg2fttMgXbGEC6f/+oFzkMuP+uI9Ejq241+QpCvPzRgcgco b32xjLpleo3Gt1Vs9ife9AoE11zcgS7YO+uKi4dj7Twg4Vl/Ipx2Wrg0MS/5bL+M 3TsZ9to93HHKsEngs4sUrN9W0enoHj6IRgD2d0Mj7xWZ9wu/HB0njwwgUkLYhuuk +J6qO71K3k/V3Lc2Jv2rHSKnMsKVCTUhC/Khrn2Y+d4/aRkxemKlgWxQ9nmcwF0o jaA6vD9pn/5oKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:45 2025 by rpki-client