This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json) Hash identifier: 7dxL45DI80uNfOWjhoOH5LEdCQ1+2S1NIy7dbvpv0ts= Subject key identifier: 37:EC:FB:E3:18:37:BB:70:FE:20:DE:0A:B3:3F:38:5A:AD:8B:39:DA Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Certificate serial: 019AF3F7AA7D5E43794975F80A50806B136F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:01:25 +0000 Manifest this update: Sat 06 Dec 2025 14:01:25 +0000 Manifest next update: Sun 07 Dec 2025 14:01:25 +0000 Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: bUzPUphoZIiGlijb70jqRY5fCZOVKlBCG/mUWdwl0xI=) 2: mvqabtX_vOansql-seMJOhDdwZw.roa (hash: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:aa:7d:5e:43:79:49:75:f8:0a:50:80:6b:13:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Validity Not Before: Dec 6 14:01:25 2025 GMT Not After : Dec 7 14:01:25 2025 GMT Subject: CN=37ecfbe31837bb70fe20de0ab33f385aad8b39da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:7f:58:93:5a:35:24:f7:09:e2:d5:3f:4e: a8:81:e1:6a:60:f6:b7:22:51:f3:23:c1:62:d2:f8: ba:a2:0c:38:03:0c:40:64:11:6d:25:08:bb:50:af: a0:4c:f6:7d:9d:4b:c5:f7:cc:d7:9f:6e:83:d3:a7: f5:75:29:2d:19:3e:ae:42:6d:b9:71:1b:9f:8f:0c: 5d:c5:79:ae:b6:56:81:7e:a8:bf:e1:a4:8b:38:a9: 70:5b:a9:f3:b8:0c:68:9b:31:2b:80:37:e5:8b:9f: 9c:34:0d:f7:b7:5b:17:4e:ed:a5:8f:b6:28:6f:55: 5a:ee:88:17:05:34:de:99:8a:52:01:b6:bb:08:d9: c3:18:b0:86:f4:09:10:d9:0f:b4:6f:5a:4b:14:da: d3:34:f7:53:61:03:54:0d:a9:37:6c:bb:02:4b:e9: 08:0c:bc:73:a5:ec:47:7b:a6:10:50:de:14:5c:b4: 64:59:dc:a6:aa:0e:8d:8d:91:43:07:6e:9f:d4:41: f4:a1:6f:18:0a:f2:eb:cf:61:c7:5d:4e:ea:2c:2b: 67:46:5b:9a:1b:0c:5c:58:cf:a5:10:8b:94:5d:e9: 7e:fa:03:0a:db:8e:19:f5:ad:cb:e5:54:13:9f:b8: c8:e4:c5:3c:e4:e7:40:5b:95:c0:19:c1:72:e8:bb: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EC:FB:E3:18:37:BB:70:FE:20:DE:0A:B3:3F:38:5A:AD:8B:39:DA X509v3 Authority Key Identifier: keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:35:30:2c:aa:64:c2:6e:07:d0:3d:4f:a5:64:c1:70:c9:48: 20:d8:53:db:31:2e:9c:cf:f1:49:21:1d:b4:c1:4e:09:35:67: eb:48:cd:05:ab:61:28:19:0b:6c:33:b6:99:6e:3b:d1:d3:59: a7:3d:fc:55:3d:2a:a2:e6:5a:b8:15:19:ba:62:e3:6f:dd:40: 27:2d:19:17:76:a3:a6:93:e2:f6:8f:60:af:32:16:0d:16:fc: ea:e6:eb:83:38:7c:0e:85:7a:88:2a:80:37:90:87:2f:97:ab: f2:eb:3e:24:23:f4:7a:e2:c9:5d:0d:8d:56:a7:65:a2:86:f6: 42:21:b8:d8:00:c6:4e:45:bf:4d:95:a5:55:0f:b3:2f:f5:26: 1f:40:1f:55:a2:f3:0a:04:72:2b:a4:ca:ac:2b:b2:80:f6:4d: 91:fa:6b:54:a3:63:95:04:3b:37:7f:84:2d:cf:c5:a1:86:cb: 59:fa:d8:2f:02:bf:4c:c8:d2:cd:c7:d9:0c:ae:61:9e:63:43: 9a:7a:fc:cb:c7:97:b0:bf:ee:2a:6e:ec:80:0d:40:4b:8b:30: cf:a7:85:cd:17:4d:1d:87:d0:08:78:7a:ea:1d:56:11:fb:00: a8:fc:29:14:1a:68:6f:a2:04:ec:72:7f:ae:bc:f4:cf:a6:7c: cb:4b:b4:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96p9XkN5SXX4ClCAaxNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz YWNhM2MwHhcNMjUxMjA2MTQwMTI1WhcNMjUxMjA3MTQwMTI1WjAzMTEwLwYDVQQD EygzN2VjZmJlMzE4MzdiYjcwZmUyMGRlMGFiMzNmMzg1YWFkOGIzOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+1/WJNaNST3CeLVP06ogeFqYPa3 IlHzI8Fi0vi6ogw4AwxAZBFtJQi7UK+gTPZ9nUvF98zXn26D06f1dSktGT6uQm25 cRufjwxdxXmutlaBfqi/4aSLOKlwW6nzuAxomzErgDfli5+cNA33t1sXTu2lj7Yo b1Va7ogXBTTemYpSAba7CNnDGLCG9AkQ2Q+0b1pLFNrTNPdTYQNUDak3bLsCS+kI DLxzpexHe6YQUN4UXLRkWdymqg6NjZFDB26f1EH0oW8YCvLrz2HHXU7qLCtnRlua GwxcWM+lEIuUXel++gMK244Z9a3L5VQTn7jI5MU85OdAW5XAGcFy6LvFZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfs++MYN7tw/iDeCrM/OFqtiznaMB8GA1UdIwQY MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct ZmM2OWUwYmNhNjIyLzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDUwLKpk wm4H0D1PpWTBcMlIINhT2zEunM/xSSEdtMFOCTVn60jNBathKBkLbDO2mW470dNZ pz38VT0qouZauBUZumLjb91AJy0ZF3ajppPi9o9grzIWDRb86ubrgzh8DoV6iCqA N5CHL5er8us+JCP0euLJXQ2NVqdloob2QiG42ADGTkW/TZWlVQ+zL/UmH0AfVaLz CgRyK6TKrCuygPZNkfprVKNjlQQ7N3+ELc/FoYbLWfrYLwK/TMjSzcfZDK5hnmND mnr8y8eXsL/uKm7sgA1AS4swz6eFzRdNHYfQCHh66h1WEfsAqPwpFBpob6IE7HJ/ rrz0z6Z8y0u0vw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:45 2025 by rpki-client