This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft File: GyN3Poe34e0LVeFQuncWsYJbPiY.mft (raw, json) Hash identifier: 89N+zPK2PeTUm1RE2mj4GEwQICaCiIUiJBOEOMbjooQ= Subject key identifier: 9A:FB:BD:C9:1A:89:AA:A2:1A:DD:70:D7:06:0E:2D:63:2C:19:40:10 Authority key identifier: 1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26 Certificate issuer: /CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26 Certificate serial: 019B32D6B5D8CF0F70685A9186185D2C5F65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft Manifest number: 14C1 Signing time: Thu 18 Dec 2025 19:01:30 +0000 Manifest this update: Thu 18 Dec 2025 19:01:30 +0000 Manifest next update: Fri 19 Dec 2025 19:01:30 +0000 Files and hashes: 1: GyN3Poe34e0LVeFQuncWsYJbPiY.crl (hash: BqCqSE/G5W7XKv//ZsBGpZk0zBigjL4DZ27X0OI0HxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:b5:d8:cf:0f:70:68:5a:91:86:18:5d:2c:5f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26 Validity Not Before: Dec 18 19:01:30 2025 GMT Not After : Dec 19 19:01:30 2025 GMT Subject: CN=9afbbdc91a89aaa21add70d7060e2d632c194010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:32:22:d3:2c:cd:e1:ae:f5:fb:ff:8b:32: 70:03:65:07:49:d5:41:95:a7:84:57:3d:75:6c:d8: 9e:7d:80:a4:58:b6:8b:09:24:04:88:7b:3d:1c:53: c1:b4:9a:d9:e3:7d:e4:80:92:e0:4c:ba:f3:69:05: 2d:21:d6:6a:d8:07:e3:b9:f2:0d:53:17:65:51:d5: b5:19:61:f2:f5:05:1f:a4:8b:b2:ec:67:15:0e:a5: e6:ca:4b:1f:66:55:e8:e6:61:f9:fe:da:55:32:99: 21:ae:53:f7:d2:73:c0:21:e1:50:1b:54:13:48:71: ab:40:dc:f3:e0:e2:11:f6:d4:93:03:4f:1d:cb:41: c2:4a:42:19:26:30:87:2a:b1:54:2e:d4:fc:3a:55: cf:dc:95:5e:4a:0f:cd:d1:5c:ce:d8:43:47:c5:2d: d8:f6:a8:35:7c:40:f9:9a:2b:ff:ce:e3:f5:de:6f: e5:9d:f4:8c:6c:f3:1e:2b:f6:b5:8a:16:e9:46:6a: f5:b7:17:a6:89:3d:45:f8:eb:0d:a8:b7:88:1e:fe: 07:4d:76:4c:89:6f:46:ee:02:21:a9:27:3c:2d:92: b4:4d:4c:ff:b9:30:31:f6:94:c7:92:8b:98:15:e2: c7:0f:7b:86:8c:bb:f8:ee:d6:8d:69:a3:6b:c8:cc: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FB:BD:C9:1A:89:AA:A2:1A:DD:70:D7:06:0E:2D:63:2C:19:40:10 X509v3 Authority Key Identifier: keyid:1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:e3:54:21:6f:a6:55:4d:ad:42:d0:01:bf:b6:10:0d:1b:fd: bf:b1:84:86:0a:1b:8d:04:ee:80:8f:61:89:7c:29:78:1d:2c: 4b:d2:79:10:ad:68:7c:b4:ef:1f:d5:ac:ad:aa:b4:4b:06:79: 81:c9:6f:3d:9f:c6:9b:aa:9d:e3:fc:7a:db:81:3a:d2:01:8d: 64:f9:9e:f7:06:c8:0a:6a:de:cf:ee:01:ce:f7:64:a5:84:10: 7e:ed:2b:39:bf:30:ea:dc:cd:63:80:ab:a5:90:6d:10:21:29: bf:2c:5d:da:0a:a6:54:44:9a:48:e6:05:c6:52:fc:4e:5f:17: db:6c:b7:98:29:df:ff:f2:8e:12:78:aa:9b:eb:37:52:48:e0: 33:b2:f5:49:b1:a6:96:25:41:05:5c:87:3f:65:95:2d:ac:0e: 0c:5c:17:22:b0:6f:63:5c:43:de:33:69:9c:92:cf:42:9c:9e: c8:27:0d:f9:22:1f:ab:53:c2:9f:27:d0:11:40:81:4f:c2:06: b7:2f:7f:7c:ba:86:78:6b:eb:f2:15:95:3f:66:0f:9a:a1:1c: 74:58:97:49:3c:72:aa:f8:a2:a4:61:8b:ae:df:7e:ff:b3:76: ef:7e:77:3c:a0:e5:35:26:47:44:cb:ef:cd:f9:73:19:5e:04: 7d:37:db:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1rXYzw9waFqRhhhdLF9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjM3NzNlODdiN2UxZWQwYjU1ZTE1MGJhNzcxNmIxODI1 YjNlMjYwHhcNMjUxMjE4MTkwMTMwWhcNMjUxMjE5MTkwMTMwWjAzMTEwLwYDVQQD Eyg5YWZiYmRjOTFhODlhYWEyMWFkZDcwZDcwNjBlMmQ2MzJjMTk0MDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFcyItMszeGu9fv/izJwA2UHSdVB laeEVz11bNiefYCkWLaLCSQEiHs9HFPBtJrZ433kgJLgTLrzaQUtIdZq2AfjufIN UxdlUdW1GWHy9QUfpIuy7GcVDqXmyksfZlXo5mH5/tpVMpkhrlP30nPAIeFQG1QT SHGrQNzz4OIR9tSTA08dy0HCSkIZJjCHKrFULtT8OlXP3JVeSg/N0VzO2ENHxS3Y 9qg1fED5miv/zuP13m/lnfSMbPMeK/a1ihbpRmr1txemiT1F+OsNqLeIHv4HTXZM iW9G7gIhqSc8LZK0TUz/uTAx9pTHkouYFeLHD3uGjLv47taNaaNryMzSaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJr7vckaiaqiGt1w1wYOLWMsGUAQMB8GA1UdIwQY MBaAFBsjdz6Ht+HtC1XhULp3FrGCWz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3lOM1BvZTM0ZTBMVmVGUXVuY1dzWUpiUGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hNDg4NDYtODg1YS00OTBkLTg1Nzct ZGM5YmE0MzFkNTdhLzEvR3lOM1BvZTM0ZTBMVmVGUXVuY1dzWUpiUGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9hNDg4NDYtODg1YS00OTBkLTg1NzctZGM5YmE0MzFkNTdh LzEvR3lOM1BvZTM0ZTBMVmVGUXVuY1dzWUpiUGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzuNUIW+m VU2tQtABv7YQDRv9v7GEhgobjQTugI9hiXwpeB0sS9J5EK1ofLTvH9Wsraq0SwZ5 gclvPZ/Gm6qd4/x624E60gGNZPme9wbICmrez+4BzvdkpYQQfu0rOb8w6tzNY4Cr pZBtECEpvyxd2gqmVESaSOYFxlL8Tl8X22y3mCnf//KOEniqm+s3UkjgM7L1SbGm liVBBVyHP2WVLawODFwXIrBvY1xD3jNpnJLPQpyeyCcN+SIfq1PCnyfQEUCBT8IG ty9/fLqGeGvr8hWVP2YPmqEcdFiXSTxyqviipGGLrt9+/7N27353PKDlNSZHRMvv zflzGV4EfTfbqw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:02:16 2025 by rpki-client