This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json) Hash identifier: Vno8HJrLfAFUrDPcMUigwL7i7uz+7hlAckDhNyKgtCA= Subject key identifier: A1:91:AB:5D:93:E2:14:03:C9:3E:63:92:10:34:82:91:B2:20:21:3E Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d Certificate serial: 019AF389C55938FBE9D0CD3565CBA4199EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft Manifest number: 06B0 Signing time: Sat 06 Dec 2025 12:01:23 +0000 Manifest this update: Sat 06 Dec 2025 12:01:23 +0000 Manifest next update: Sun 07 Dec 2025 12:01:23 +0000 Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: wGYMyMuOFrFsj2lmXKl6IcPTlzvZUsNVKa4eBWFoiTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c5:59:38:fb:e9:d0:cd:35:65:cb:a4:19:9e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d Validity Not Before: Dec 6 12:01:23 2025 GMT Not After : Dec 7 12:01:23 2025 GMT Subject: CN=a191ab5d93e21403c93e639210348291b220213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:43:38:f6:fb:cf:7b:1a:a0:ad:82:e9:c3: 87:09:c9:bf:43:e6:bb:7d:1f:d5:55:31:1b:d0:f1: e1:c4:1a:83:44:5c:6d:18:37:2b:f9:a3:03:4b:3e: 4e:01:dd:f8:eb:6f:18:fb:53:93:29:59:06:08:63: ef:b9:e7:f2:be:43:e4:79:af:da:03:f1:5a:8d:a9: 64:be:bc:5b:db:32:da:ee:9d:65:29:39:fc:3e:08: 41:8a:26:77:54:f5:e1:53:e0:fd:14:61:39:cd:c9: 12:d7:15:d2:8b:62:ba:80:05:cc:1f:a1:c0:52:01: 1e:37:7a:46:8c:5a:91:b1:4e:80:71:6a:b0:7d:a5: 6b:a7:37:9a:0a:cc:06:f9:cb:15:01:c7:9c:db:89: 86:35:ba:83:f9:bf:f4:59:62:6e:18:58:d5:55:ec: 7f:47:88:d7:71:1d:58:6c:d8:4c:4b:b1:92:58:6f: ce:25:55:bc:74:3b:89:95:09:09:a7:1c:6f:f7:39: 9b:97:d7:a6:92:33:ab:3f:31:83:22:26:bb:21:a9: ff:fc:08:8c:af:8d:ff:de:93:a3:34:a7:0b:33:89: 0c:94:b6:4f:d6:42:50:21:4d:b2:49:e5:ee:ea:35: 47:5d:75:48:3b:b5:be:90:6c:dc:07:6c:2f:2a:99: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:91:AB:5D:93:E2:14:03:C9:3E:63:92:10:34:82:91:B2:20:21:3E X509v3 Authority Key Identifier: keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:60:63:9d:9e:65:dd:4c:bc:f7:5e:bb:64:01:88:e0:f5:9a: 30:fc:63:0b:86:62:0d:b3:58:ea:75:e6:38:62:6f:98:3a:11: 9a:eb:2f:25:a7:96:5a:6f:31:90:d8:8d:46:9c:fc:99:2f:2e: 7c:ed:73:13:16:23:df:f6:3a:85:ab:83:e5:12:16:98:bf:2b: 23:7d:8b:cc:eb:0a:de:6a:e8:eb:6a:e1:db:bf:8b:66:04:a7: 8f:4d:c0:fa:8f:6e:b4:c9:3c:a9:05:eb:d0:0b:44:ec:68:d0: 29:e7:8a:55:bf:57:d5:5e:de:81:3e:b7:82:db:09:d9:e1:89: 86:e1:01:04:04:64:59:55:9d:2f:11:65:e5:e0:4c:91:91:33: b3:fa:0d:d1:be:0b:ac:62:bf:e0:a7:47:dd:db:04:a4:79:76: 95:6f:03:1c:1a:3c:e6:76:62:d3:be:f1:42:ef:aa:3f:2b:f1: 57:ba:cd:17:92:09:d0:80:31:e5:23:ee:b6:2c:a3:af:49:13: 0e:8f:8e:dc:e2:37:4b:2b:52:88:e5:e8:b3:f6:45:f0:45:30: d2:0d:69:04:55:a5:00:1b:9f:cb:e4:57:dc:e6:7d:60:3b:b8: d1:40:c8:92:8d:d7:dc:68:53:14:3e:43:e2:f5:cb:4e:49:8b: 55:42:6d:f8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzicVZOPvp0M01ZcukGZ7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmQ2NjYxNmZmNjk3ZDUxNzY4ODY4ZThhMzUyMWI5YWRj Y2VlNmQwHhcNMjUxMjA2MTIwMTIzWhcNMjUxMjA3MTIwMTIzWjAzMTEwLwYDVQQD EyhhMTkxYWI1ZDkzZTIxNDAzYzkzZTYzOTIxMDM0ODI5MWIyMjAyMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mFDOPb7z3saoK2C6cOHCcm/Q+a7 fR/VVTEb0PHhxBqDRFxtGDcr+aMDSz5OAd34628Y+1OTKVkGCGPvuefyvkPkea/a A/Fajalkvrxb2zLa7p1lKTn8PghBiiZ3VPXhU+D9FGE5zckS1xXSi2K6gAXMH6HA UgEeN3pGjFqRsU6AcWqwfaVrpzeaCswG+csVAcec24mGNbqD+b/0WWJuGFjVVex/ R4jXcR1YbNhMS7GSWG/OJVW8dDuJlQkJpxxv9zmbl9emkjOrPzGDIia7Ian//AiM r43/3pOjNKcLM4kMlLZP1kJQIU2ySeXu6jVHXXVIO7W+kGzcB2wvKpl8MQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKGRq12T4hQDyT5jkhA0gpGyICE+MB8GA1UdIwQY MBaAFPstZmFv9pfVF2iGjoo1IbmtzO5tMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15MW1ZV18ybDlVWGFJYU9palVodWEzTTdtMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYWQwZWFiLWUyYTEtNDM5OC05ODcx LWZmYWNhN2UzMDlhNi8xLzEteTFtWVdfMmw5VVhhSWFPaWpVaHVhM003bTAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM2L2FkMGVhYi1lMmExLTQzOTgtOTg3MS1mZmFjYTdlMzA5 YTYvMS8xLXkxbVlXXzJsOVVYYUlhT2lqVWh1YTNNN20wLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2Bj nZ5l3Uy89167ZAGI4PWaMPxjC4ZiDbNY6nXmOGJvmDoRmusvJaeWWm8xkNiNRpz8 mS8ufO1zExYj3/Y6hauD5RIWmL8rI32LzOsK3mro62rh27+LZgSnj03A+o9utMk8 qQXr0AtE7GjQKeeKVb9X1V7egT63gtsJ2eGJhuEBBARkWVWdLxFl5eBMkZEzs/oN 0b4LrGK/4KdH3dsEpHl2lW8DHBo85nZi077xQu+qPyvxV7rNF5IJ0IAx5SPutiyj r0kTDo+O3OI3SytSiOXos/ZF8EUw0g1pBFWlABufy+RX3OZ9YDu40UDIko3X3GhT FD5D4vXLTkmLVUJt+A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:43 2025 by rpki-client