This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json) Hash identifier: nelUKeqNSWlzAUgPyxvdtun4Rs3YlzpEXPe0Xs7k43U= Subject key identifier: A8:62:EA:EA:80:1F:6D:96:10:DE:D5:D8:DF:A6:7F:D4:AE:6B:6A:8E Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d Certificate serial: 019B3721010B1AC1650E6A4127745D8C8292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft Manifest number: 06D3 Signing time: Fri 19 Dec 2025 15:01:08 +0000 Manifest this update: Fri 19 Dec 2025 15:01:08 +0000 Manifest next update: Sat 20 Dec 2025 15:01:08 +0000 Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: O7fM4VJ/3PnZ8peEha+zhSkaygMWSz7VxgMqz1RCbjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:01:0b:1a:c1:65:0e:6a:41:27:74:5d:8c:82:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d Validity Not Before: Dec 19 15:01:08 2025 GMT Not After : Dec 20 15:01:08 2025 GMT Subject: CN=a862eaea801f6d9610ded5d8dfa67fd4ae6b6a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:db:d5:c8:aa:7e:47:b3:fd:77:23:c6:92: a1:da:7d:63:af:6c:d1:58:9c:bd:1a:e1:d2:79:3f: 89:01:9f:3a:3c:32:e6:da:c8:23:eb:06:2d:3f:f7: aa:13:f2:c3:92:18:d4:c5:22:05:69:94:6f:17:c4: f7:d9:5d:48:cd:b5:12:cc:72:3f:1c:4d:89:a8:fe: c4:c2:1a:e0:84:e5:53:8f:57:74:7e:96:ba:8c:00: f8:96:ff:76:4f:32:3d:6e:58:bc:9b:53:af:10:31: c8:90:c7:51:44:9e:64:5b:03:cf:38:58:ff:15:b0: 76:30:cc:79:07:95:ef:8c:d4:c6:a3:01:ad:58:7d: ec:26:c0:9a:bc:9d:ea:46:84:da:2e:0c:43:e1:54: 18:78:72:46:a8:eb:2c:3d:19:e8:41:93:5a:c7:ec: e8:c4:42:76:e8:71:d4:fc:4b:12:17:eb:aa:90:19: b7:e3:eb:57:2b:ed:a0:27:c4:b0:ea:af:0e:d1:80: e1:87:52:87:e5:93:eb:0d:be:c8:2f:0d:e4:15:2a: 39:49:21:07:c1:e2:c9:c9:ac:da:76:4b:e8:b2:d6: cf:af:ae:1f:18:6a:a5:ef:62:e4:52:9b:5c:3b:ca: a7:1a:60:7f:ef:54:48:35:e6:1a:0e:f7:74:d7:b9: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:62:EA:EA:80:1F:6D:96:10:DE:D5:D8:DF:A6:7F:D4:AE:6B:6A:8E X509v3 Authority Key Identifier: keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ca:57:41:1e:9e:9e:f4:d9:d7:92:76:93:de:83:69:a9:7e: 61:e5:be:ec:a6:1d:41:9d:c2:b7:57:34:c2:7e:69:55:77:f9: 21:dc:4a:4c:16:b6:02:f0:ad:fd:56:7b:f8:bb:30:8d:02:43: 99:a7:dc:c4:0b:05:62:8b:7b:7f:f7:9d:c2:70:3c:0c:33:ad: 36:d1:95:e8:66:6b:fb:cb:64:3f:4f:ad:d8:4f:cf:97:fa:f6: 7a:ce:3c:e4:e3:0c:c5:1d:4e:51:2d:a8:32:b1:56:c3:9f:eb: cc:3b:38:57:d6:b7:4f:ee:d7:b9:37:2a:f7:1b:d7:56:02:0e: 78:a5:70:09:16:24:79:37:1b:4f:e8:1f:e5:f5:a0:21:df:4e: 1b:b6:6c:10:24:90:5b:25:db:50:cf:18:c1:f4:2b:a7:a3:be: 3a:d1:01:6f:77:d7:36:77:73:79:97:a8:e8:a3:9a:a7:9e:0f: af:a8:84:d2:bf:96:11:b9:24:ea:30:f2:9b:20:c4:a1:9b:fb: 6c:2d:d3:ef:dd:ce:ba:d4:1a:ff:98:f8:76:62:9f:ed:65:7b: 8c:16:6b:e9:d8:7e:74:f1:cd:cb:03:77:c8:ba:5f:2e:9e:6e: d6:c0:a7:7a:a1:ce:8f:05:9a:5d:e1:b5:e1:09:56:67:f7:75: 6e:58:c0:08 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs3IQELGsFlDmpBJ3RdjIKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMmQ2NjYxNmZmNjk3ZDUxNzY4ODY4ZThhMzUyMWI5YWRj Y2VlNmQwHhcNMjUxMjE5MTUwMTA4WhcNMjUxMjIwMTUwMTA4WjAzMTEwLwYDVQQD EyhhODYyZWFlYTgwMWY2ZDk2MTBkZWQ1ZDhkZmE2N2ZkNGFlNmI2YThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUPb1ciqfkez/XcjxpKh2n1jr2zR WJy9GuHSeT+JAZ86PDLm2sgj6wYtP/eqE/LDkhjUxSIFaZRvF8T32V1IzbUSzHI/ HE2JqP7EwhrghOVTj1d0fpa6jAD4lv92TzI9bli8m1OvEDHIkMdRRJ5kWwPPOFj/ FbB2MMx5B5XvjNTGowGtWH3sJsCavJ3qRoTaLgxD4VQYeHJGqOssPRnoQZNax+zo xEJ26HHU/EsSF+uqkBm34+tXK+2gJ8Sw6q8O0YDhh1KH5ZPrDb7ILw3kFSo5SSEH weLJyazadkvostbPr64fGGql72LkUptcO8qnGmB/71RINeYaDvd017mvPwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKhi6uqAH22WEN7V2N+mf9Sua2qOMB8GA1UdIwQY MBaAFPstZmFv9pfVF2iGjoo1IbmtzO5tMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15MW1ZV18ybDlVWGFJYU9palVodWEzTTdtMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvYWQwZWFiLWUyYTEtNDM5OC05ODcx LWZmYWNhN2UzMDlhNi8xLzEteTFtWVdfMmw5VVhhSWFPaWpVaHVhM003bTAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzM2L2FkMGVhYi1lMmExLTQzOTgtOTg3MS1mZmFjYTdlMzA5 YTYvMS8xLXkxbVlXXzJsOVVYYUlhT2lqVWh1YTNNN20wLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMpX QR6envTZ15J2k96Daal+YeW+7KYdQZ3Ct1c0wn5pVXf5IdxKTBa2AvCt/VZ7+Lsw jQJDmafcxAsFYot7f/edwnA8DDOtNtGV6GZr+8tkP0+t2E/Pl/r2es485OMMxR1O US2oMrFWw5/rzDs4V9a3T+7XuTcq9xvXVgIOeKVwCRYkeTcbT+gf5fWgId9OG7Zs ECSQWyXbUM8YwfQrp6O+OtEBb3fXNndzeZeo6KOap54Pr6iE0r+WEbkk6jDymyDE oZv7bC3T793OutQa/5j4dmKf7WV7jBZr6dh+dPHNywN3yLpfLp5u1sCneqHOjwWa XeG14QlWZ/d1bljACA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:03 2025 by rpki-client