This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json) Hash identifier: vhJN9EKPY+rTO7c0pXJDHoHVzjwOVIVVKOStjNvz85o= Subject key identifier: 43:52:43:3F:60:08:2E:4F:E1:7E:95:AB:D6:C3:32:C3:3A:F7:85:F9 Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96 Certificate serial: 019AF12D0FD6E09807CC1E9FD5AC54C3BC17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft Manifest number: 0A90 Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: IVIT0ysV+BQw3OGTDNuGGztr+Ld0CbKX4REOgf7Mnmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0f:d6:e0:98:07:cc:1e:9f:d5:ac:54:c3:bc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=4352433f60082e4fe17e95abd6c332c33af785f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:14:b9:9d:75:84:6f:74:88:a9:4b:d7:aa:ff: c2:60:ab:c0:ec:ac:b9:f7:58:d7:51:eb:16:11:be: c1:cd:18:7f:5c:cf:85:8c:a2:9c:b6:cc:20:f7:3e: 0a:f0:2e:d9:e8:11:dc:4d:74:e8:cb:e5:6a:19:5a: e0:d6:75:89:ba:24:c6:5e:28:b4:4c:ee:63:c4:50: 91:a3:50:66:9f:94:b9:55:d5:6e:48:0c:a7:d4:20: 15:f4:85:7e:18:53:cb:31:8b:e7:27:17:15:48:58: ef:83:0e:3a:91:c9:7c:1d:20:70:b4:70:2a:f5:dd: a4:91:8f:69:22:a8:2c:4d:96:ae:ed:04:09:3f:4c: 6a:49:aa:fe:71:a8:bb:70:41:93:ff:f7:0c:4d:40: aa:a0:40:d5:65:75:4f:da:79:4f:72:ae:66:5f:63: 14:b1:00:40:2d:23:96:cf:ab:90:7a:41:ba:ce:cc: 9b:d9:d2:95:96:a6:78:4c:57:2b:5c:87:38:e1:1f: 71:78:21:fc:d5:5d:a8:d0:b5:f9:88:86:be:15:d1: 47:e7:88:fa:96:1f:bd:e8:e8:2c:7b:e6:2f:46:d9: 1c:f1:ab:b5:13:4e:32:3a:5e:38:f5:77:94:e4:11: ed:95:55:5a:66:04:4e:9e:f1:b1:35:a3:2e:8b:c6: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:43:3F:60:08:2E:4F:E1:7E:95:AB:D6:C3:32:C3:3A:F7:85:F9 X509v3 Authority Key Identifier: keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:0b:b0:7c:b4:4f:b0:ee:b7:08:91:1c:23:74:2b:b3:0a:39: d9:1d:30:58:85:23:7e:c9:57:37:45:99:72:fd:ae:f3:e5:27: f6:5e:83:00:04:d4:d8:26:32:40:fa:a6:f0:f5:34:f4:6a:06: 6e:47:e5:16:ba:5a:89:c9:34:77:96:a2:11:12:12:10:47:5a: 06:d5:1a:f0:dd:04:c8:37:16:64:ad:4e:7a:cb:eb:f9:b0:78: 15:9f:9d:07:7d:30:12:8d:83:e4:90:11:7b:54:7b:db:55:d2: 76:b0:d0:6a:48:27:c7:47:b7:3b:f1:e5:b6:e6:74:66:4b:d9: 89:86:bb:b1:96:16:a1:70:4a:00:0b:67:0c:fc:31:e7:fb:f2: 68:30:ad:57:63:83:4e:c2:e9:bc:a0:86:ef:d8:56:2a:2d:e0: 89:53:12:62:77:08:a1:78:af:db:c5:74:2b:30:dc:d7:b4:f9: ee:bb:53:0f:cf:ab:b4:d8:fb:b9:f8:a4:cd:1b:67:87:d4:a3: c8:e6:27:83:05:a7:14:75:cf:14:c5:0b:c2:3b:c9:1a:3b:92: f0:85:46:b1:12:8e:01:86:37:e0:b1:51:49:6d:91:bb:1c:46: ba:25:b6:54:ef:9e:52:bc:dc:42:14:3c:2a:e8:78:7f:66:91: 9a:e7:25:d7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLQ/W4JgHzB6f1axUw7wXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjgwYzA1Yjc2OTEyYTA5Y2IxMjkzNGRiMzNjOGU1MjBh Y2RkOTYwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD Eyg0MzUyNDMzZjYwMDgyZTRmZTE3ZTk1YWJkNmMzMzJjMzNhZjc4NWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BS5nXWEb3SIqUvXqv/CYKvA7Ky5 91jXUesWEb7BzRh/XM+FjKKctswg9z4K8C7Z6BHcTXToy+VqGVrg1nWJuiTGXii0 TO5jxFCRo1Bmn5S5VdVuSAyn1CAV9IV+GFPLMYvnJxcVSFjvgw46kcl8HSBwtHAq 9d2kkY9pIqgsTZau7QQJP0xqSar+cai7cEGT//cMTUCqoEDVZXVP2nlPcq5mX2MU sQBALSOWz6uQekG6zsyb2dKVlqZ4TFcrXIc44R9xeCH81V2o0LX5iIa+FdFH54j6 lh+96Ogse+YvRtkc8au1E04yOl449XeU5BHtlVVaZgROnvGxNaMui8ainQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFENSQz9gCC5P4X6Vq9bDMsM694X5MB8GA1UdIwQY MBaAFPsoDAW3aRKgnLEpNNszyOUgrN2WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15Z01CYmRwRXFDY3NTazAyelBJNVNDczNaWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjQ4Nzg0LWY1ODktNGFiNi1iZTI2 LTI1ZDJmZGJlYTdkMi8xLzEteWdNQmJkcEVxQ2NzU2swMnpQSTVTQ3MzWlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y0ODc4NC1mNTg5LTRhYjYtYmUyNi0yNWQyZmRiZWE3 ZDIvMS8xLXlnTUJiZHBFcUNjc1NrMDJ6UEk1U0NzM1pZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAywuw fLRPsO63CJEcI3Qrswo52R0wWIUjfslXN0WZcv2u8+Un9l6DAATU2CYyQPqm8PU0 9GoGbkflFrpaick0d5aiERISEEdaBtUa8N0EyDcWZK1Oesvr+bB4FZ+dB30wEo2D 5JARe1R721XSdrDQakgnx0e3O/HltuZ0ZkvZiYa7sZYWoXBKAAtnDPwx5/vyaDCt V2ODTsLpvKCG79hWKi3giVMSYncIoXiv28V0KzDc17T57rtTD8+rtNj7ufikzRtn h9SjyOYngwWnFHXPFMULwjvJGjuS8IVGsRKOAYY34LFRSW2RuxxGuiW2VO+eUrzc QhQ8Kuh4f2aRmucl1w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:16 2025 by rpki-client