This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json) Hash identifier: 90kFRZmfTv11Bmf+VWJ0Td4CtU2dKljWQzqlTtGAqm8= Subject key identifier: F9:DB:53:46:93:34:AB:FF:BD:56:A5:C4:EF:F2:FC:2C:4F:FF:FE:DC Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96 Certificate serial: 019B5975F9C2E594F75D2CDA27A72BF78DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft Manifest number: 0AC6 Signing time: Fri 26 Dec 2025 07:01:02 +0000 Manifest this update: Fri 26 Dec 2025 07:01:02 +0000 Manifest next update: Sat 27 Dec 2025 07:01:02 +0000 Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: INIkchHv+iBgKfbILI3NludbWEPGaPLUlKJm21Jdo68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:f9:c2:e5:94:f7:5d:2c:da:27:a7:2b:f7:8d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96 Validity Not Before: Dec 26 07:01:02 2025 GMT Not After : Dec 27 07:01:02 2025 GMT Subject: CN=f9db53469334abffbd56a5c4eff2fc2c4ffffedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e4:8c:6c:a8:b8:c7:49:5e:8e:cd:86:80:ce: ba:2f:ce:db:8c:54:3a:b8:01:ec:2e:fd:4b:73:b3: 95:ea:d6:a0:61:09:73:84:74:6c:8d:8e:c3:3d:ea: 23:a1:fc:18:79:24:94:a9:da:9f:11:4f:9b:63:79: 13:b3:90:ab:86:54:ad:5b:b8:13:88:c1:a7:67:7c: b8:e4:9c:c4:4a:1d:f1:a0:b7:ce:df:8f:f1:fb:63: 37:40:9a:79:af:d0:ff:8f:cc:be:98:7d:b5:58:7f: 24:a4:8b:0c:a5:fb:67:6a:ab:7d:70:e3:dc:b4:06: 30:90:28:a1:1c:4a:ae:f1:f8:9c:a2:23:08:41:98: 67:39:e4:ac:11:be:80:00:be:7d:7a:17:df:bf:90: 2c:59:35:4e:77:fb:f8:60:64:8d:25:11:e0:8f:e3: 1c:30:14:20:d9:6f:9c:26:41:a4:a0:2f:32:2f:1c: 69:1b:f9:67:96:34:ed:d8:30:eb:be:50:fd:50:a3: 16:b1:f3:62:e7:97:67:05:a2:d7:7a:e9:d5:3a:cd: dd:6c:d0:ac:77:0f:bc:79:50:f9:a3:ac:7a:ab:55: 08:8c:0e:ea:5f:51:2f:3f:93:1f:97:40:c1:39:0e: 49:fd:f7:c4:6c:b3:8e:4d:88:56:6b:60:66:ee:94: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:53:46:93:34:AB:FF:BD:56:A5:C4:EF:F2:FC:2C:4F:FF:FE:DC X509v3 Authority Key Identifier: keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:77:29:6e:ab:e7:ed:05:b4:b3:5d:13:6a:6d:b9:01:4b:70: 78:e1:b7:0d:2d:b7:75:08:ff:ba:66:93:31:bd:3e:87:a0:32: b2:5e:ac:3a:a5:3e:8d:72:e2:e7:68:23:e7:63:77:25:bb:a7: ad:7d:82:59:9c:62:dd:79:d9:13:31:75:d8:56:0a:aa:78:30: 24:f4:36:5f:83:91:b7:90:13:7c:8e:c5:f6:d9:e4:8c:7d:67: d4:0e:bd:7f:e2:01:49:a1:12:65:d4:05:bc:ba:d1:65:83:54: de:6e:11:a4:72:31:eb:a7:6c:52:8c:5f:65:39:1f:b3:d2:f4: 38:51:0d:df:7c:7a:52:50:62:2d:10:ca:25:c3:a0:54:43:05: 0d:d7:59:30:ef:52:1c:82:33:8f:a2:a0:db:1d:25:a9:0b:82: ad:1d:80:c9:09:d2:b0:f2:16:2c:fe:e1:b0:1d:b8:06:a6:1a: 1b:81:53:5a:76:b7:57:ba:ee:de:8d:e7:88:b0:1b:4b:10:b1: 0a:fc:15:b6:06:4c:e3:eb:fd:58:1c:1f:fd:48:38:ee:94:92: 8a:0e:e3:98:ae:25:66:9c:37:a3:24:b9:71:b4:2f:b5:bf:27: 1b:a4:a7:34:b2:36:9e:e0:16:e8:8d:8a:0a:04:2e:7b:c2:85: 63:fc:2b:dc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZdfnC5ZT3XSzaJ6cr942nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMjgwYzA1Yjc2OTEyYTA5Y2IxMjkzNGRiMzNjOGU1MjBh Y2RkOTYwHhcNMjUxMjI2MDcwMTAyWhcNMjUxMjI3MDcwMTAyWjAzMTEwLwYDVQQD EyhmOWRiNTM0NjkzMzRhYmZmYmQ1NmE1YzRlZmYyZmMyYzRmZmZmZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+SMbKi4x0lejs2GgM66L87bjFQ6 uAHsLv1Lc7OV6tagYQlzhHRsjY7DPeojofwYeSSUqdqfEU+bY3kTs5CrhlStW7gT iMGnZ3y45JzESh3xoLfO34/x+2M3QJp5r9D/j8y+mH21WH8kpIsMpftnaqt9cOPc tAYwkCihHEqu8ficoiMIQZhnOeSsEb6AAL59ehffv5AsWTVOd/v4YGSNJRHgj+Mc MBQg2W+cJkGkoC8yLxxpG/lnljTt2DDrvlD9UKMWsfNi55dnBaLXeunVOs3dbNCs dw+8eVD5o6x6q1UIjA7qX1EvP5Mfl0DBOQ5J/ffEbLOOTYhWa2Bm7pSy0wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPnbU0aTNKv/vValxO/y/CxP//7cMB8GA1UdIwQY MBaAFPsoDAW3aRKgnLEpNNszyOUgrN2WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS15Z01CYmRwRXFDY3NTazAyelBJNVNDczNaWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjQ4Nzg0LWY1ODktNGFiNi1iZTI2 LTI1ZDJmZGJlYTdkMi8xLzEteWdNQmJkcEVxQ2NzU2swMnpQSTVTQ3MzWlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y0ODc4NC1mNTg5LTRhYjYtYmUyNi0yNWQyZmRiZWE3 ZDIvMS8xLXlnTUJiZHBFcUNjc1NrMDJ6UEk1U0NzM1pZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXcp bqvn7QW0s10Tam25AUtweOG3DS23dQj/umaTMb0+h6Aysl6sOqU+jXLi52gj52N3 JbunrX2CWZxi3XnZEzF12FYKqngwJPQ2X4ORt5ATfI7F9tnkjH1n1A69f+IBSaES ZdQFvLrRZYNU3m4RpHIx66dsUoxfZTkfs9L0OFEN33x6UlBiLRDKJcOgVEMFDddZ MO9SHIIzj6Kg2x0lqQuCrR2AyQnSsPIWLP7hsB24BqYaG4FTWna3V7ru3o3niLAb SxCxCvwVtgZM4+v9WBwf/Ug47pSSig7jmK4lZpw3oyS5cbQvtb8nG6SnNLI2nuAW 6I2KCgQue8KFY/wr3A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:07 2025 by rpki-client