This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json) Hash identifier: b9/MFOqA7ZQeWpI/80/k1qV/5IPm0SbkcB24cLK46GA= Subject key identifier: 49:16:D9:BA:84:91:5E:E9:E0:80:C3:3D:B3:48:C1:19:79:31:02:F3 Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d Certificate serial: 019B5BD2798389C4B9C8192D4C7A91C11272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft Manifest number: 06E6 Signing time: Fri 26 Dec 2025 18:01:18 +0000 Manifest this update: Fri 26 Dec 2025 18:01:18 +0000 Manifest next update: Sat 27 Dec 2025 18:01:18 +0000 Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: Bd7zBGgiYXCL26u8SFUzdDCB/uNcgu4Fk65Owj1Iwsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:79:83:89:c4:b9:c8:19:2d:4c:7a:91:c1:12:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d Validity Not Before: Dec 26 18:01:18 2025 GMT Not After : Dec 27 18:01:18 2025 GMT Subject: CN=4916d9ba84915ee9e080c33db348c119793102f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:22:a6:b9:fa:61:0b:24:55:25:d4:9a:d7: 92:75:43:89:39:31:ed:55:fb:62:1d:32:ed:34:06: 7f:46:f6:db:16:e5:fc:13:92:c9:ef:10:61:13:d7: 35:13:60:dd:4c:4d:8d:d3:5e:01:15:e9:6e:bc:8b: fc:89:fd:23:43:77:f6:3c:89:40:94:c3:d8:f8:9e: 39:39:6b:06:70:a5:9c:cf:0d:6e:89:45:ed:34:63: a3:7f:8a:e1:58:d7:f7:8e:66:5e:6b:7c:30:0f:be: b1:95:91:f2:90:04:de:c7:aa:4f:53:c7:2d:97:52: c1:ad:4d:35:66:1b:00:2a:c3:d2:70:06:85:cb:ea: 09:dd:b0:15:07:ac:bc:a1:28:45:0e:fd:17:34:94: 16:71:16:9c:74:c9:90:0c:9a:ab:39:56:bb:11:bb: 76:ec:9d:36:a4:be:5c:80:c8:80:05:cb:7b:31:da: c4:e7:76:e9:2a:68:44:45:bd:10:7b:e8:82:2d:4f: c0:8b:c5:c7:f7:35:e3:f2:c2:0a:dd:5e:39:da:50: bf:d9:ec:10:8a:12:51:2b:23:14:ae:d7:6a:6e:41: 3b:c8:d1:8f:c5:e6:87:f5:9b:56:a3:09:f4:88:b5: c8:1f:91:d5:a8:ed:f5:03:52:cb:b4:82:41:49:a6: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:16:D9:BA:84:91:5E:E9:E0:80:C3:3D:B3:48:C1:19:79:31:02:F3 X509v3 Authority Key Identifier: keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b6:8f:fd:6d:38:1a:5e:09:0e:a1:78:d5:c8:ac:ac:2d:03: 06:7c:d4:36:ff:11:99:60:2d:a3:2c:b6:86:81:33:ae:eb:5f: d7:c7:6b:73:e5:4c:f2:50:16:f2:c3:2a:e1:81:18:2b:f8:64: 41:f7:88:ed:25:44:69:f0:72:9d:90:61:fe:1d:29:17:6d:42: d6:2e:51:69:41:87:7c:90:3d:d3:39:b9:73:0b:33:28:33:ab: ea:fe:39:b2:1d:37:9f:33:58:b4:64:c5:0f:bd:52:33:0d:5b: 29:af:a7:8a:2f:b0:a2:f3:5b:f0:4f:c8:e5:95:21:c6:73:fc: ba:46:25:d9:b6:39:08:40:ca:00:b8:f7:31:c1:97:cf:7f:37: b6:f8:eb:2b:f1:08:3b:11:a6:e4:b7:87:ef:7a:53:26:99:bf: 7e:51:0d:0c:ce:0c:c2:2e:2f:b4:66:7a:08:cc:6e:1c:22:45: 88:35:dc:b9:02:9d:f3:fc:7d:ef:26:a9:25:8b:ae:ff:57:5d: 87:f6:44:99:39:70:22:30:a3:b8:b9:f7:33:5c:15:ff:f3:e8: 68:38:82:64:55:89:01:f1:8a:b5:99:66:ee:05:c4:b2:44:c3: d2:17:90:ab:5b:76:41:cb:df:c4:8e:3e:42:bc:d7:d9:4d:e7: bd:96:db:33 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtb0nmDicS5yBktTHqRwRJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmQ2NjYxNmZmNjk3ZDUxNzY4ODY4ZThhMzUyMWI5YWRj Y2VlNmQwHhcNMjUxMjI2MTgwMTE4WhcNMjUxMjI3MTgwMTE4WjAzMTEwLwYDVQQD Eyg0OTE2ZDliYTg0OTE1ZWU5ZTA4MGMzM2RiMzQ4YzExOTc5MzEwMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ0iprn6YQskVSXUmteSdUOJOTHt VftiHTLtNAZ/RvbbFuX8E5LJ7xBhE9c1E2DdTE2N014BFeluvIv8if0jQ3f2PIlA lMPY+J45OWsGcKWczw1uiUXtNGOjf4rhWNf3jmZea3wwD76xlZHykATex6pPU8ct l1LBrU01ZhsAKsPScAaFy+oJ3bAVB6y8oShFDv0XNJQWcRacdMmQDJqrOVa7Ebt2 7J02pL5cgMiABct7MdrE53bpKmhERb0Qe+iCLU/Ai8XH9zXj8sIK3V452lC/2ewQ ihJRKyMUrtdqbkE7yNGPxeaH9ZtWown0iLXIH5HVqO31A1LLtIJBSaZWgwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEkW2bqEkV7p4IDDPbNIwRl5MQLzMB8GA1UdIwQY MBaAFPstZmFv9pfVF2iGjoo1IbmtzO5tMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15MW1ZV18ybDlVWGFJYU9palVodWEzTTdtMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYWQwZWFiLWUyYTEtNDM5OC05ODcx LWZmYWNhN2UzMDlhNi8xLzEteTFtWVdfMmw5VVhhSWFPaWpVaHVhM003bTAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM2L2FkMGVhYi1lMmExLTQzOTgtOTg3MS1mZmFjYTdlMzA5 YTYvMS8xLXkxbVlXXzJsOVVYYUlhT2lqVWh1YTNNN20wLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7aP /W04Gl4JDqF41cisrC0DBnzUNv8RmWAtoyy2hoEzrutf18drc+VM8lAW8sMq4YEY K/hkQfeI7SVEafBynZBh/h0pF21C1i5RaUGHfJA90zm5cwszKDOr6v45sh03nzNY tGTFD71SMw1bKa+nii+wovNb8E/I5ZUhxnP8ukYl2bY5CEDKALj3McGXz383tvjr K/EIOxGm5LeH73pTJpm/flENDM4Mwi4vtGZ6CMxuHCJFiDXcuQKd8/x97yapJYuu /1ddh/ZEmTlwIjCjuLn3M1wV//PoaDiCZFWJAfGKtZlm7gXEskTD0heQq1t2Qcvf xI4+QrzX2U3nvZbbMw== -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:14 2025 by rpki-client