This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json) Hash identifier: 7jik0aXwLygrSKD8XupNEoXwshKm3ItXdt2nsLS6Bos= Subject key identifier: 4F:6D:66:E6:C8:A2:D7:2E:9C:F1:EA:DC:89:71:6A:E6:67:96:F6:CA Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41 Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41 Certificate serial: 019B33B1AF3FD27235A89CB17C5FB650DEA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft Manifest number: 04B4 Signing time: Thu 18 Dec 2025 23:00:41 +0000 Manifest this update: Thu 18 Dec 2025 23:00:41 +0000 Manifest next update: Fri 19 Dec 2025 23:00:41 +0000 Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=) 2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: jilmsMsc1vWcsyznyHnZWnDBVEgQq98rXFbxxSaKAqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:af:3f:d2:72:35:a8:9c:b1:7c:5f:b6:50:de:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41 Validity Not Before: Dec 18 23:00:41 2025 GMT Not After : Dec 19 23:00:41 2025 GMT Subject: CN=4f6d66e6c8a2d72e9cf1eadc89716ae66796f6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:ba:f7:17:71:23:5e:fa:cf:6e:c3:c4:ba: 1c:45:53:8d:f4:c5:40:9a:3b:c5:ad:3c:3a:27:0e: 63:d9:81:60:25:1b:36:a9:a3:b9:35:a9:8f:73:86: a8:d2:4d:2c:f0:5a:17:2a:3e:c0:77:5f:63:6a:58: 24:fb:d2:97:94:8f:40:c3:2d:79:16:b6:64:55:94: 48:ed:bf:77:ae:f1:28:12:50:48:4c:12:f5:ea:2c: d9:31:db:e0:02:ee:1e:fd:e6:9c:70:5d:91:0f:56: e9:a5:3e:41:02:4c:9f:9b:b8:e4:0d:de:eb:64:9a: b0:f3:30:ec:83:7b:da:56:b0:8d:db:29:10:d6:07: 4d:af:37:8e:31:47:4f:b2:68:c0:b8:79:cc:16:49: e7:8a:7d:e9:2e:46:c3:4d:ed:d0:71:2d:5e:d6:3d: 8d:d8:c7:5f:6e:cc:6d:89:e5:eb:8f:31:77:c2:6c: 44:b9:c5:24:91:00:50:4b:8d:dd:d0:44:22:4e:ae: 99:3b:c0:c1:03:2a:a3:ae:01:49:54:c1:b4:57:e7: 5f:f9:f8:5b:0e:8c:64:56:0e:df:13:34:ae:c5:26: 56:8f:9d:01:3e:61:18:1d:3a:9b:83:99:3b:c7:1d: 09:f0:fd:cb:83:92:5a:d2:c0:19:06:5a:98:b6:b9: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:66:E6:C8:A2:D7:2E:9C:F1:EA:DC:89:71:6A:E6:67:96:F6:CA X509v3 Authority Key Identifier: keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8c:b7:47:62:bb:b4:eb:80:38:f1:2c:fb:95:f6:c3:da:64: bb:6e:9d:d9:5f:a3:6a:cd:2b:74:12:dc:b9:bd:76:82:9a:0e: c9:31:2f:f4:a9:06:01:42:26:36:30:ce:de:29:40:26:04:05: d1:5d:2a:54:9f:d3:1b:2a:3f:7f:ea:e8:12:95:52:89:46:82: 65:e4:94:6c:46:1d:56:cf:db:04:5e:69:6e:45:ed:3b:ce:6e: a3:8d:98:00:8d:f5:83:7c:9b:44:ff:e6:ca:3e:2f:05:0c:36: 91:15:2e:ba:74:ed:f6:b7:5e:90:8b:dc:b6:ba:04:76:74:2e: 14:96:24:ce:42:34:a7:b5:fd:59:d3:4d:d8:63:64:dd:3a:a5: 5b:b1:b4:b4:a7:b3:ae:4b:1e:8f:43:1c:bf:d7:3b:95:ab:80: ab:c5:b6:e3:f6:bb:0c:ed:39:0f:36:44:2c:b8:90:83:b2:9b: 1f:ad:2d:8a:b0:4a:62:dc:ee:55:96:21:e3:97:e0:39:19:27: c5:ec:49:9f:21:a6:2f:0f:d5:04:aa:27:40:36:d9:3b:02:d7: b0:f3:11:ed:b9:f9:d5:05:a8:a6:ef:a6:a5:18:0a:36:39:66: eb:a4:ab:db:15:17:2c:37:62:f8:8c:88:6d:97:c7:f9:76:a6: f0:b1:57:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsa8/0nI1qJyxfF+2UN6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjU1YmQ3YTJlOGIzYzc3NzQ4YzNjNTZhMzA0M2JiYzEx MjZjNDEwHhcNMjUxMjE4MjMwMDQxWhcNMjUxMjE5MjMwMDQxWjAzMTEwLwYDVQQD Eyg0ZjZkNjZlNmM4YTJkNzJlOWNmMWVhZGM4OTcxNmFlNjY3OTZmNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAO69xdxI176z27DxLocRVON9MVA mjvFrTw6Jw5j2YFgJRs2qaO5NamPc4ao0k0s8FoXKj7Ad19jalgk+9KXlI9Awy15 FrZkVZRI7b93rvEoElBITBL16izZMdvgAu4e/eaccF2RD1bppT5BAkyfm7jkDd7r ZJqw8zDsg3vaVrCN2ykQ1gdNrzeOMUdPsmjAuHnMFknnin3pLkbDTe3QcS1e1j2N 2MdfbsxtieXrjzF3wmxEucUkkQBQS43d0EQiTq6ZO8DBAyqjrgFJVMG0V+df+fhb DoxkVg7fEzSuxSZWj50BPmEYHTqbg5k7xx0J8P3Lg5Ja0sAZBlqYtrkbRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9tZubIotcunPHq3IlxauZnlvbKMB8GA1UdIwQY MBaAFIMlW9ei6LPHd0jDxWowQ7vBEmxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEt ZTE0Mzg4ZTYxNDVkLzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEtZTE0Mzg4ZTYxNDVk LzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoy3R2K7 tOuAOPEs+5X2w9pku26d2V+jas0rdBLcub12gpoOyTEv9KkGAUImNjDO3ilAJgQF 0V0qVJ/TGyo/f+roEpVSiUaCZeSUbEYdVs/bBF5pbkXtO85uo42YAI31g3ybRP/m yj4vBQw2kRUuunTt9rdekIvctroEdnQuFJYkzkI0p7X9WdNN2GNk3TqlW7G0tKez rksej0Mcv9c7lauAq8W24/a7DO05DzZELLiQg7KbH60tirBKYtzuVZYh45fgORkn xexJnyGmLw/VBKonQDbZOwLXsPMR7bn51QWopu+mpRgKNjlm66Sr2xUXLDdi+IyI bZfH+Xam8LFXDQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:57 2025 by rpki-client