This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json) Hash identifier: 2k+x3ULrGifeWyVY5zG/aQ+UICauVBFYCuqULH66uWQ= Subject key identifier: 05:7A:B0:F4:03:7D:86:C9:4F:E8:08:37:DB:A0:AE:DF:3C:70:93:77 Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96 Certificate serial: 019B405AF2AB7915C6FE46E6F60A0D894D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft Manifest number: 0AB9 Signing time: Sun 21 Dec 2025 10:01:00 +0000 Manifest this update: Sun 21 Dec 2025 10:01:00 +0000 Manifest next update: Mon 22 Dec 2025 10:01:00 +0000 Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: 1XrnvWxZsj6sM/5Y0RJLpRgC1Nelh1kURNOXcTNNxDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:f2:ab:79:15:c6:fe:46:e6:f6:0a:0d:89:4d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96 Validity Not Before: Dec 21 10:01:00 2025 GMT Not After : Dec 22 10:01:00 2025 GMT Subject: CN=057ab0f4037d86c94fe80837dba0aedf3c709377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:72:23:29:66:9e:c9:59:8f:f6:76:62:0d: f1:11:42:e4:68:cc:69:ca:26:af:52:0f:1f:ec:19: be:aa:43:19:81:ac:46:0c:bd:1b:a5:fb:74:f0:f9: d1:bc:9f:18:81:09:ec:70:b3:ce:2c:54:d2:fa:7c: 53:d6:9e:0f:35:46:79:67:f0:c5:02:8a:68:b4:3c: 65:0f:c3:d8:1d:11:95:9a:4e:04:ce:b2:57:c4:91: 14:f8:d9:a8:63:7b:d9:14:00:d5:3a:f0:4f:e9:e7: 59:1c:da:ab:4a:7a:81:21:65:df:56:0f:88:88:50: 2c:ff:83:8a:ef:9f:52:f4:5f:ea:30:27:5b:3b:49: 1d:ae:86:94:a5:68:97:3d:69:42:77:52:15:7e:49: ed:86:34:f9:18:d4:54:6c:dd:59:fe:71:c3:12:0e: 8a:3a:eb:05:f0:91:b0:7e:8b:0b:b3:4c:bc:dc:23: c0:8f:15:82:d9:dd:52:c6:4c:c6:32:dc:c9:cc:06: 02:31:aa:51:22:ff:6c:2d:8e:7d:96:de:9e:f0:87: 93:86:f3:3e:fd:01:b3:6d:92:29:58:f0:b9:da:ba: a4:bd:0e:90:ea:05:43:3c:39:7d:d5:7c:55:ae:1f: 13:cc:a3:b6:15:4a:7c:d9:6c:94:47:06:44:89:18: 7a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7A:B0:F4:03:7D:86:C9:4F:E8:08:37:DB:A0:AE:DF:3C:70:93:77 X509v3 Authority Key Identifier: keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:94:13:df:c0:c9:fb:37:a9:57:3b:67:9d:09:6c:87:a9:1e: 42:41:48:52:ce:54:3c:83:84:be:54:78:2d:00:59:21:26:ce: 66:b2:a9:be:98:23:d2:40:99:f0:84:7f:15:d4:c1:05:88:85: 46:6c:4f:6e:77:7c:c4:2e:6c:fd:95:d1:bd:d0:b0:b7:ce:0d: e2:40:4b:69:d1:2b:3f:36:62:01:87:aa:4b:1b:cb:54:6d:0c: a3:e4:33:b6:2c:26:de:d8:a9:51:bb:cc:3d:cb:b6:de:9e:cc: 9c:bb:53:99:bb:2d:79:f4:b5:ea:97:be:b5:b6:0b:cc:23:2b: 82:d2:0d:d9:9f:2f:2c:1c:a1:af:eb:d0:8e:bf:28:77:dd:38: 7e:c6:06:df:97:8c:ab:80:5d:85:c7:28:af:14:f9:4f:02:e6: 7b:3a:43:e7:90:e9:37:5a:58:6f:a0:47:8a:42:cf:db:30:ea: a3:3c:75:67:8b:8f:2f:68:b5:a9:92:8e:20:0a:4f:4c:54:3e: e2:c5:2d:ea:75:4d:d5:b9:1d:5f:4b:93:2d:1c:71:28:02:ae: ba:bb:ef:cb:a1:0c:de:d6:2b:89:88:cc:57:0e:5e:cb:aa:7b: 17:f1:cd:5f:f3:e5:48:b9:3d:05:a9:ff:56:7a:85:59:23:29: f3:cc:4e:26 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAWvKreRXG/kbm9goNiU18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjgwYzA1Yjc2OTEyYTA5Y2IxMjkzNGRiMzNjOGU1MjBh Y2RkOTYwHhcNMjUxMjIxMTAwMTAwWhcNMjUxMjIyMTAwMTAwWjAzMTEwLwYDVQQD EygwNTdhYjBmNDAzN2Q4NmM5NGZlODA4MzdkYmEwYWVkZjNjNzA5Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEByIylmnslZj/Z2Yg3xEULkaMxp yiavUg8f7Bm+qkMZgaxGDL0bpft08PnRvJ8YgQnscLPOLFTS+nxT1p4PNUZ5Z/DF AopotDxlD8PYHRGVmk4EzrJXxJEU+NmoY3vZFADVOvBP6edZHNqrSnqBIWXfVg+I iFAs/4OK759S9F/qMCdbO0kdroaUpWiXPWlCd1IVfknthjT5GNRUbN1Z/nHDEg6K OusF8JGwfosLs0y83CPAjxWC2d1SxkzGMtzJzAYCMapRIv9sLY59lt6e8IeThvM+ /QGzbZIpWPC52rqkvQ6Q6gVDPDl91XxVrh8TzKO2FUp82WyURwZEiRh6BQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAV6sPQDfYbJT+gIN9ugrt88cJN3MB8GA1UdIwQY MBaAFPsoDAW3aRKgnLEpNNszyOUgrN2WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15Z01CYmRwRXFDY3NTazAyelBJNVNDczNaWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjQ4Nzg0LWY1ODktNGFiNi1iZTI2 LTI1ZDJmZGJlYTdkMi8xLzEteWdNQmJkcEVxQ2NzU2swMnpQSTVTQ3MzWlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y0ODc4NC1mNTg5LTRhYjYtYmUyNi0yNWQyZmRiZWE3 ZDIvMS8xLXlnTUJiZHBFcUNjc1NrMDJ6UEk1U0NzM1pZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpQT 38DJ+zepVztnnQlsh6keQkFIUs5UPIOEvlR4LQBZISbOZrKpvpgj0kCZ8IR/FdTB BYiFRmxPbnd8xC5s/ZXRvdCwt84N4kBLadErPzZiAYeqSxvLVG0Mo+Qztiwm3tip UbvMPcu23p7MnLtTmbstefS16pe+tbYLzCMrgtIN2Z8vLByhr+vQjr8od904fsYG 35eMq4BdhccorxT5TwLmezpD55DpN1pYb6BHikLP2zDqozx1Z4uPL2i1qZKOIApP TFQ+4sUt6nVN1bkdX0uTLRxxKAKuurvvy6EM3tYriYjMVw5ey6p7F/HNX/PlSLk9 Ban/VnqFWSMp88xOJg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:00 2025 by rpki-client