This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft File: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json) Hash identifier: ZDj626H10lQqmlxGKmGebTPAQ+rX0vfFg7pv/DiKQzE= Subject key identifier: 81:8A:6B:37:A6:AB:E3:7D:60:E4:FD:6E:FB:B3:FD:4D:D8:6F:D9:DC Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA Certificate issuer: /CN=d46c9be46cba3051066233ca4f9628a26df8fcca Certificate serial: 019B2D78FE0A2061FE0A1427139D443D05E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft Manifest number: 10FC Signing time: Wed 17 Dec 2025 18:01:02 +0000 Manifest this update: Wed 17 Dec 2025 18:01:02 +0000 Manifest next update: Thu 18 Dec 2025 18:01:02 +0000 Files and hashes: 1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: jrODOCQaoj7iQOVMncGjTm7inLhhByjnYmGZrazs724=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:fe:0a:20:61:fe:0a:14:27:13:9d:44:3d:05:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca Validity Not Before: Dec 17 18:01:02 2025 GMT Not After : Dec 18 18:01:02 2025 GMT Subject: CN=818a6b37a6abe37d60e4fd6efbb3fd4dd86fd9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:e1:9f:bd:7b:b2:0c:b6:9b:9d:b6:bf:ea: a2:e6:8b:ce:a4:b7:e7:30:c1:0d:16:ea:20:64:90: b0:0e:cf:97:9b:07:f6:bf:c8:40:b0:d3:f2:9c:b6: 1e:e6:09:7b:2b:b1:80:c0:80:58:2c:08:eb:af:a4: 67:49:ae:3c:78:e6:10:19:b1:e3:af:97:06:68:61: 98:61:80:15:df:28:7b:fa:32:e8:cb:64:53:d7:bc: e1:c0:81:f7:b2:1b:2d:f9:ac:4a:7f:f4:18:13:cd: b1:90:cc:58:95:0d:51:29:e3:49:cb:d6:ef:2e:c2: 6f:6e:d4:ca:01:ff:4f:6f:27:e8:7f:c0:59:d2:a3: 45:3a:70:28:02:f6:65:50:18:8a:5e:15:5e:37:aa: 92:2a:02:4b:97:eb:9d:b6:30:90:51:de:c6:5b:a6: 46:e9:87:5e:a9:fe:46:19:f6:47:1d:9d:91:b6:a9: 60:b6:12:df:19:cd:03:94:16:50:80:e2:fd:68:74: 14:3d:b2:9e:bb:0d:12:60:05:22:ca:3d:4e:26:ac: ea:e0:0a:a2:bf:63:83:91:c4:b8:d5:a6:df:a0:e5: db:50:bb:b3:dd:58:25:ac:02:8c:09:70:b9:02:d6: b8:5b:d9:1c:54:62:82:67:7e:d2:2a:72:25:a1:e3: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:6B:37:A6:AB:E3:7D:60:E4:FD:6E:FB:B3:FD:4D:D8:6F:D9:DC X509v3 Authority Key Identifier: keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e1:84:47:f4:24:ad:2a:b9:0f:67:6f:97:db:e0:79:5b:c4: b1:cc:2f:6f:e2:5b:c1:70:a7:af:ff:79:73:1c:78:aa:c1:27: 96:d3:96:b5:e3:fc:bc:f0:6f:f7:6b:4c:1a:03:ca:7d:c9:90: b6:8d:72:df:1c:70:0a:7f:7a:7c:c7:21:97:7f:26:c0:f1:fc: d3:69:23:7b:7e:70:6c:45:a5:99:94:01:55:6a:81:e4:69:18: 13:7b:ff:f7:c4:82:38:9e:42:c0:bf:63:f7:f3:3b:cf:9c:11: 1f:ef:2e:95:a1:a7:c0:aa:aa:d3:90:75:9f:b1:92:11:65:d6: ce:9c:ca:54:ca:08:d1:fb:ee:0c:aa:49:06:71:74:b0:fe:0c: d1:36:17:b7:1c:ce:6c:4e:31:2a:95:a7:61:e4:e6:d9:cc:5e: 9e:7c:b3:0a:05:e1:9f:ac:86:49:32:52:a2:d9:ac:14:d2:f6: 41:15:c5:f6:9c:87:db:0a:68:f4:47:74:86:72:c3:d4:70:e6: 83:f6:84:1f:54:f9:65:27:8e:71:ed:aa:26:5a:33:e7:9b:40: 5d:25:f4:cc:34:63:20:84:b3:a0:98:52:12:fa:1a:6d:b9:b5: 58:05:32:9a:5b:45:78:4d:52:6f:91:ff:fa:b3:c6:fc:a8:50: b1:e3:f2:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteP4KIGH+ChQnE51EPQXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NmM5YmU0NmNiYTMwNTEwNjYyMzNjYTRmOTYyOGEyNmRm OGZjY2EwHhcNMjUxMjE3MTgwMTAyWhcNMjUxMjE4MTgwMTAyWjAzMTEwLwYDVQQD Eyg4MThhNmIzN2E2YWJlMzdkNjBlNGZkNmVmYmIzZmQ0ZGQ4NmZkOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5vhn717sgy2m522v+qi5ovOpLfn MMENFuogZJCwDs+Xmwf2v8hAsNPynLYe5gl7K7GAwIBYLAjrr6RnSa48eOYQGbHj r5cGaGGYYYAV3yh7+jLoy2RT17zhwIH3shst+axKf/QYE82xkMxYlQ1RKeNJy9bv LsJvbtTKAf9Pbyfof8BZ0qNFOnAoAvZlUBiKXhVeN6qSKgJLl+udtjCQUd7GW6ZG 6Ydeqf5GGfZHHZ2RtqlgthLfGc0DlBZQgOL9aHQUPbKeuw0SYAUiyj1OJqzq4Aqi v2ODkcS41abfoOXbULuz3VglrAKMCXC5Ata4W9kcVGKCZ37SKnIloeP9hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGKazemq+N9YOT9bvuz/U3Yb9ncMB8GA1UdIwQY MBaAFNRsm+RsujBRBmIzyk+WKKJt+PzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTIt NzNjODY3MWE5MGY2LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTItNzNjODY3MWE5MGY2 LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuGER/Qk rSq5D2dvl9vgeVvEscwvb+JbwXCnr/95cxx4qsEnltOWteP8vPBv92tMGgPKfcmQ to1y3xxwCn96fMchl38mwPH802kje35wbEWlmZQBVWqB5GkYE3v/98SCOJ5CwL9j 9/M7z5wRH+8ulaGnwKqq05B1n7GSEWXWzpzKVMoI0fvuDKpJBnF0sP4M0TYXtxzO bE4xKpWnYeTm2cxennyzCgXhn6yGSTJSotmsFNL2QRXF9pyH2wpo9Ed0hnLD1HDm g/aEH1T5ZSeOce2qJloz55tAXSX0zDRjIISzoJhSEvoabbm1WAUymltFeE1Sb5H/ +rPG/KhQsePy7g== -----END CERTIFICATE-----Generated at Wed Dec 17 22:23:38 2025 by rpki-client