This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft File: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json) Hash identifier: 9PfSPwswGAnFITzPrtSNv6CnAy/9FGiLKLfzSsphPLs= Subject key identifier: D0:CA:C2:A2:68:A7:BE:44:13:EE:F3:FF:A5:C9:66:48:5F:58:0C:16 Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA Certificate issuer: /CN=d46c9be46cba3051066233ca4f9628a26df8fcca Certificate serial: 019B390F2AD7A5A8E10BD1F5C0FB440FCD2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft Manifest number: 1102 Signing time: Sat 20 Dec 2025 00:00:53 +0000 Manifest this update: Sat 20 Dec 2025 00:00:53 +0000 Manifest next update: Sun 21 Dec 2025 00:00:53 +0000 Files and hashes: 1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: zDW5a6O94sF1hr1NtCqRfSRDkBosjl1Szq16kzlvJXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:2a:d7:a5:a8:e1:0b:d1:f5:c0:fb:44:0f:cd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca Validity Not Before: Dec 20 00:00:53 2025 GMT Not After : Dec 21 00:00:53 2025 GMT Subject: CN=d0cac2a268a7be4413eef3ffa5c966485f580c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:bb:32:63:d8:d3:5a:1e:b6:e4:ce:c9:23: 19:55:d1:bd:fa:97:e2:5b:a7:77:51:6b:01:a2:37: 22:c2:9e:a9:f6:96:55:57:a8:6b:9c:3a:5c:62:bf: 72:1f:0c:ec:11:f2:2b:07:46:13:10:d9:a1:ff:06: 7d:d2:6c:f6:0f:59:b1:3b:22:5c:53:bf:1f:79:46: 54:95:41:4d:ab:da:cc:3f:16:f7:42:00:da:5f:31: be:24:4f:f3:2b:3b:20:1f:c6:b6:ff:88:58:25:a8: 41:bf:ad:40:3c:9b:b1:5d:24:9b:f4:c8:f4:92:ab: 0d:df:7d:76:e4:50:94:d9:af:ef:3f:7c:4d:1a:13: 68:d1:93:cc:42:f7:48:1a:38:02:da:05:14:53:9e: 5f:e5:36:f1:b2:97:31:f9:54:16:c8:74:cc:7a:fa: dc:2b:05:5f:5e:4a:69:e0:4d:ab:86:b3:ad:23:1f: db:ba:19:76:b3:41:7e:b2:d8:4b:86:74:b9:96:55: a1:4d:11:92:fa:91:38:da:58:f1:34:c0:3b:1e:d7: 7e:15:7c:6e:a1:7f:ff:90:39:ae:98:87:45:70:73: c2:a5:b3:be:d6:fe:18:fc:3a:d8:e7:88:9b:1f:6f: d7:47:68:15:f7:f7:d9:e4:0e:25:74:1f:50:67:f6: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CA:C2:A2:68:A7:BE:44:13:EE:F3:FF:A5:C9:66:48:5F:58:0C:16 X509v3 Authority Key Identifier: keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7e:2b:7d:b0:b2:7e:b5:48:23:1e:96:b0:7e:a1:4d:90:28: 64:0d:a3:58:da:f0:42:2f:ed:a8:b0:70:37:e2:6c:5e:95:d2: a0:83:ea:d5:f6:13:fe:6d:0f:a5:fc:9e:3f:c1:4c:96:b7:38: ae:55:61:fb:32:b7:01:33:26:bc:d7:cb:01:73:e7:0a:0d:5a: 36:66:0f:3e:7c:74:c2:2f:32:0b:96:b3:28:5f:8d:db:29:36: 70:3c:ad:10:2b:1c:23:a0:9d:24:a5:5c:8b:14:1b:e3:00:5b: 04:df:a8:2f:b7:1c:e2:ca:80:9b:ab:83:6a:d5:7f:e7:7c:32: 6b:40:77:d5:b7:59:54:f1:37:ce:a6:53:8c:4e:27:0a:3f:63: 3f:1b:29:f7:a4:6b:e6:39:06:0e:28:c2:3c:9a:99:0d:0f:eb: 6b:b8:56:d2:bd:7b:8d:69:eb:7f:9d:f6:78:92:ee:ea:7b:27: d4:6e:c8:22:83:54:0b:4f:7d:2d:9f:94:73:8d:50:0f:66:36: 4d:1d:67:19:9f:7d:08:8d:d6:b7:fb:23:60:5c:64:d3:59:d9: 1f:cb:a3:82:6b:e2:9d:cd:fb:39:da:fb:ab:5c:64:69:77:98: 1f:25:be:67:63:32:3d:b2:77:8f:b2:da:77:92:4b:cb:ff:3e: 13:97:1f:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DyrXpajhC9H1wPtED80rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NmM5YmU0NmNiYTMwNTEwNjYyMzNjYTRmOTYyOGEyNmRm OGZjY2EwHhcNMjUxMjIwMDAwMDUzWhcNMjUxMjIxMDAwMDUzWjAzMTEwLwYDVQQD EyhkMGNhYzJhMjY4YTdiZTQ0MTNlZWYzZmZhNWM5NjY0ODVmNTgwYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleC7MmPY01oetuTOySMZVdG9+pfi W6d3UWsBojciwp6p9pZVV6hrnDpcYr9yHwzsEfIrB0YTENmh/wZ90mz2D1mxOyJc U78feUZUlUFNq9rMPxb3QgDaXzG+JE/zKzsgH8a2/4hYJahBv61APJuxXSSb9Mj0 kqsN33125FCU2a/vP3xNGhNo0ZPMQvdIGjgC2gUUU55f5Tbxspcx+VQWyHTMevrc KwVfXkpp4E2rhrOtIx/buhl2s0F+sthLhnS5llWhTRGS+pE42ljxNMA7Htd+FXxu oX//kDmumIdFcHPCpbO+1v4Y/DrY54ibH2/XR2gV9/fZ5A4ldB9QZ/aMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDKwqJop75EE+7z/6XJZkhfWAwWMB8GA1UdIwQY MBaAFNRsm+RsujBRBmIzyk+WKKJt+PzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTIt NzNjODY3MWE5MGY2LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTItNzNjODY3MWE5MGY2 LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX4rfbCy frVIIx6WsH6hTZAoZA2jWNrwQi/tqLBwN+JsXpXSoIPq1fYT/m0PpfyeP8FMlrc4 rlVh+zK3ATMmvNfLAXPnCg1aNmYPPnx0wi8yC5azKF+N2yk2cDytECscI6CdJKVc ixQb4wBbBN+oL7cc4sqAm6uDatV/53wya0B31bdZVPE3zqZTjE4nCj9jPxsp96Rr 5jkGDijCPJqZDQ/ra7hW0r17jWnrf532eJLu6nsn1G7IIoNUC099LZ+Uc41QD2Y2 TR1nGZ99CI3Wt/sjYFxk01nZH8ujgmvinc37Odr7q1xkaXeYHyW+Z2MyPbJ3j7La d5JLy/8+E5cfUA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:24 2025 by rpki-client