This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft File: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json) Hash identifier: WQsJ4HxB7hEHtFxU86czmG6mIwGsRlILaYNVjOEYrTs= Subject key identifier: 4B:78:0A:84:30:0C:51:0B:19:28:9D:A0:03:40:E0:93:29:70:6C:91 Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA Certificate issuer: /CN=d46c9be46cba3051066233ca4f9628a26df8fcca Certificate serial: 019B59E3B6C0628057508962C5530F06B96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft Manifest number: 1113 Signing time: Fri 26 Dec 2025 09:00:54 +0000 Manifest this update: Fri 26 Dec 2025 09:00:54 +0000 Manifest next update: Sat 27 Dec 2025 09:00:54 +0000 Files and hashes: 1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: LF3rxibAcPHp7LTA3leAqFa2U8Ue0A9QpqQ7Ju8OX3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:b6:c0:62:80:57:50:89:62:c5:53:0f:06:b9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca Validity Not Before: Dec 26 09:00:54 2025 GMT Not After : Dec 27 09:00:54 2025 GMT Subject: CN=4b780a84300c510b19289da00340e09329706c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:1f:e7:a2:ec:63:63:7c:80:d1:c6:04:a0: 87:70:53:d8:8b:38:91:ae:a2:f7:90:f2:0b:ef:10: af:89:cb:5b:4a:6d:5b:7d:e2:0f:f4:8e:24:e5:50: 11:4d:1b:dc:84:df:ca:a3:12:ba:3c:d8:31:24:aa: d0:1a:ed:59:d2:77:d6:c9:90:e9:4d:ad:e1:15:44: 2c:a9:27:a3:f5:9f:25:05:a7:4b:6e:06:dc:26:d7: f6:ac:c0:95:63:c7:b9:b2:d4:cd:b6:30:e5:d0:64: 6d:c0:7f:60:0d:14:71:65:62:d6:bd:64:5d:81:79: 41:66:ec:58:cc:fd:0d:40:ea:bc:fc:f0:01:87:28: 0b:8f:f2:1d:6e:c4:d2:47:8e:cb:4e:c9:4a:4d:2d: c1:87:1e:b0:9d:ff:4d:54:96:c1:01:61:84:70:21: 8f:9e:7b:55:89:2d:6c:f4:cb:22:d4:ef:d3:7b:d7: 35:98:11:c5:a6:0d:f7:3d:c5:94:cb:93:4d:70:84: d2:5d:f1:e9:8e:41:53:5c:c1:e9:65:56:a4:7e:ae: dd:3f:33:01:1c:1d:c0:0b:5c:a2:58:96:c7:aa:d9: 82:82:1c:ec:8b:ab:65:99:96:6d:31:0d:1e:fd:3c: 8f:5c:18:50:b2:ed:1a:c5:4e:d6:cd:05:bd:32:08: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:78:0A:84:30:0C:51:0B:19:28:9D:A0:03:40:E0:93:29:70:6C:91 X509v3 Authority Key Identifier: keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:65:4a:75:db:04:e8:04:8f:c1:47:71:2c:b6:19:91:86:c2: 63:0e:60:e4:1c:8e:85:ac:e5:de:12:9a:4c:fc:db:03:b4:84: a8:fc:2f:d5:8c:14:15:fc:fe:27:09:1b:3d:a4:66:27:57:37: 7e:9f:69:b8:6e:fe:d4:c1:28:b8:5e:b9:f3:45:44:2d:dd:9d: 53:f5:b3:47:5a:37:60:d1:c5:88:6b:f7:54:c0:ce:80:ab:a2: 1b:da:49:b9:d2:27:39:ac:cd:54:9a:62:4e:d4:89:e1:ac:e4: 37:ea:36:6a:22:57:b1:37:23:3d:69:14:a3:f4:48:01:d0:a6: 97:5d:95:f3:12:13:40:21:d1:60:fe:3d:d1:6f:17:08:2d:e4: de:0b:b5:89:54:18:0a:3c:65:9e:48:e7:f3:92:2d:f5:29:42: 24:6b:5b:dc:68:11:39:59:b3:1d:1d:88:2e:2c:96:d8:64:45: fa:17:35:09:9a:a1:b8:45:92:b0:c7:a4:ab:6d:4b:a7:4d:67: 78:71:d2:63:78:c9:37:d0:cb:33:7c:74:1e:79:69:64:01:a9: 60:f3:99:e6:f8:9a:49:f7:80:c0:64:b3:79:e0:9a:b1:27:31: 62:16:40:0f:e3:73:0b:ed:91:f6:f8:2b:45:99:db:fd:e4:41: 46:ab:fb:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ47bAYoBXUIlixVMPBrlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NmM5YmU0NmNiYTMwNTEwNjYyMzNjYTRmOTYyOGEyNmRm OGZjY2EwHhcNMjUxMjI2MDkwMDU0WhcNMjUxMjI3MDkwMDU0WjAzMTEwLwYDVQQD Eyg0Yjc4MGE4NDMwMGM1MTBiMTkyODlkYTAwMzQwZTA5MzI5NzA2YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkgf56LsY2N8gNHGBKCHcFPYiziR rqL3kPIL7xCvictbSm1bfeIP9I4k5VARTRvchN/KoxK6PNgxJKrQGu1Z0nfWyZDp Ta3hFUQsqSej9Z8lBadLbgbcJtf2rMCVY8e5stTNtjDl0GRtwH9gDRRxZWLWvWRd gXlBZuxYzP0NQOq8/PABhygLj/IdbsTSR47LTslKTS3Bhx6wnf9NVJbBAWGEcCGP nntViS1s9Msi1O/Te9c1mBHFpg33PcWUy5NNcITSXfHpjkFTXMHpZVakfq7dPzMB HB3AC1yiWJbHqtmCghzsi6tlmZZtMQ0e/TyPXBhQsu0axU7WzQW9Mgjq5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt4CoQwDFELGSidoANA4JMpcGyRMB8GA1UdIwQY MBaAFNRsm+RsujBRBmIzyk+WKKJt+PzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTIt NzNjODY3MWE5MGY2LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTItNzNjODY3MWE5MGY2 LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWVKddsE 6ASPwUdxLLYZkYbCYw5g5ByOhazl3hKaTPzbA7SEqPwv1YwUFfz+JwkbPaRmJ1c3 fp9puG7+1MEouF6580VELd2dU/WzR1o3YNHFiGv3VMDOgKuiG9pJudInOazNVJpi TtSJ4azkN+o2aiJXsTcjPWkUo/RIAdCml12V8xITQCHRYP490W8XCC3k3gu1iVQY Cjxlnkjn85It9SlCJGtb3GgROVmzHR2ILiyW2GRF+hc1CZqhuEWSsMekq21Lp01n eHHSY3jJN9DLM3x0HnlpZAGpYPOZ5viaSfeAwGSzeeCasScxYhZAD+NzC+2R9vgr RZnb/eRBRqv7rA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:12 2025 by rpki-client