This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json) Hash identifier: IYU6Oxft600/UxQVg60gfmzOIjsKIiY0mrFB3avQAVs= Subject key identifier: D0:B2:70:7B:29:F4:5B:C1:CD:52:D0:2C:EE:A0:6C:32:60:29:C2:C4 Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Certificate serial: 019B33B2425C26B710F1307F6E5939652320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 23:01:18 +0000 Manifest this update: Thu 18 Dec 2025 23:01:18 +0000 Manifest next update: Fri 19 Dec 2025 23:01:18 +0000 Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: tKtBHUKfx0aV7+bv6AeaD87oTO01o53RLWdI6rR3sXY=) 2: mvqabtX_vOansql-seMJOhDdwZw.roa (hash: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:42:5c:26:b7:10:f1:30:7f:6e:59:39:65:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c Validity Not Before: Dec 18 23:01:18 2025 GMT Not After : Dec 19 23:01:18 2025 GMT Subject: CN=d0b2707b29f45bc1cd52d02ceea06c326029c2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:c2:76:5c:b7:2e:4f:72:cb:3d:7f:7a:08: 0e:8d:e2:07:33:b6:78:08:d4:9e:14:77:da:1e:83: 7a:44:3a:57:32:a1:ed:aa:d8:c0:05:0f:cd:70:f8: e1:49:89:b3:af:80:c0:4d:15:c4:36:6f:a8:be:b4: 2f:1c:f2:f3:c2:2a:9a:ca:d5:e9:15:de:38:22:97: 41:d6:ff:fc:3d:b9:cd:ec:74:dc:bb:1d:72:6b:24: 70:4a:93:22:95:a9:ca:05:86:8e:c8:7e:56:c8:e4: 22:b0:89:36:01:80:f0:9d:1e:da:9a:7f:ad:ff:37: 11:cc:bb:87:a7:4b:e0:1b:62:66:57:39:14:5a:f4: d3:d6:a2:cd:cb:3f:48:69:83:c6:86:63:50:3d:ed: 78:e5:a6:d2:9b:96:8c:af:07:6c:39:f1:7a:58:d4: 4e:e5:fe:89:67:f0:ef:d4:60:b4:14:54:d7:1b:1c: 00:f1:8b:8e:7c:ad:ac:78:0b:bf:98:f8:d3:18:84: 66:ba:4b:50:74:60:ab:e3:c6:1b:09:6f:8a:52:d0: 90:80:7d:5f:f1:ca:7d:72:69:d9:aa:fe:1a:4a:1a: 82:f9:df:f9:31:1f:6d:1d:f2:13:f0:14:0d:9c:c2: d6:3c:ad:c6:cc:91:24:f3:fb:cc:ef:04:e7:db:03: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B2:70:7B:29:F4:5B:C1:CD:52:D0:2C:EE:A0:6C:32:60:29:C2:C4 X509v3 Authority Key Identifier: keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:13:3a:9c:09:45:0c:24:f3:1a:78:cd:76:78:01:fc:7e:c4: eb:3c:96:bd:b4:90:57:77:ab:1f:b0:85:96:94:41:eb:d5:da: 03:f2:f4:80:1d:00:27:fc:8b:6e:f6:66:1f:9b:e1:8b:64:68: 4c:70:29:b0:42:eb:9f:e1:04:24:e7:87:40:04:65:da:73:6e: 2f:8a:52:d1:83:f6:ac:29:ad:95:01:60:26:c9:a5:e7:ea:9e: e7:69:02:cd:0a:00:a4:d5:df:1e:bd:9a:27:34:64:20:e5:a8: 63:36:af:00:96:c8:63:20:74:82:65:fd:b1:12:2a:3c:e3:8f: c2:95:6d:a7:91:a1:bf:2c:85:29:e6:4d:a6:90:3d:50:bb:bd: 02:f7:34:1f:86:ac:9c:f7:6a:32:3b:2b:a7:91:9b:b6:09:e8: 3c:86:e7:8f:23:fd:05:cd:03:d3:ed:3f:d7:c1:2c:68:58:d4: 68:04:bc:62:2c:32:d3:14:ce:54:55:78:b8:a9:ca:93:17:33: 4c:0d:d5:1d:48:d8:8f:4e:1c:b6:9b:4a:16:f2:35:59:a6:f6: 61:b7:e8:3f:16:f6:90:9c:1a:9a:ed:72:f4:22:1a:dd:92:d6: ce:0b:7d:5f:40:ce:b2:75:2a:71:c2:65:8f:d5:ce:22:77:f6: ae:a3:be:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszskJcJrcQ8TB/blk5ZSMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz YWNhM2MwHhcNMjUxMjE4MjMwMTE4WhcNMjUxMjE5MjMwMTE4WjAzMTEwLwYDVQQD EyhkMGIyNzA3YjI5ZjQ1YmMxY2Q1MmQwMmNlZWEwNmMzMjYwMjljMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCvCdly3Lk9yyz1/eggOjeIHM7Z4 CNSeFHfaHoN6RDpXMqHtqtjABQ/NcPjhSYmzr4DATRXENm+ovrQvHPLzwiqaytXp Fd44IpdB1v/8PbnN7HTcux1yayRwSpMilanKBYaOyH5WyOQisIk2AYDwnR7amn+t /zcRzLuHp0vgG2JmVzkUWvTT1qLNyz9IaYPGhmNQPe145abSm5aMrwdsOfF6WNRO 5f6JZ/Dv1GC0FFTXGxwA8YuOfK2seAu/mPjTGIRmuktQdGCr48YbCW+KUtCQgH1f 8cp9cmnZqv4aShqC+d/5MR9tHfIT8BQNnMLWPK3GzJEk8/vM7wTn2wPdbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCycHsp9FvBzVLQLO6gbDJgKcLEMB8GA1UdIwQY MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct ZmM2OWUwYmNhNjIyLzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhM6nAlF DCTzGnjNdngB/H7E6zyWvbSQV3erH7CFlpRB69XaA/L0gB0AJ/yLbvZmH5vhi2Ro THApsELrn+EEJOeHQARl2nNuL4pS0YP2rCmtlQFgJsml5+qe52kCzQoApNXfHr2a JzRkIOWoYzavAJbIYyB0gmX9sRIqPOOPwpVtp5GhvyyFKeZNppA9ULu9Avc0H4as nPdqMjsrp5GbtgnoPIbnjyP9Bc0D0+0/18EsaFjUaAS8Yiwy0xTOVFV4uKnKkxcz TA3VHUjYj04ctptKFvI1Wab2YbfoPxb2kJwamu1y9CIa3ZLWzgt9X0DOsnUqccJl j9XOInf2rqO+7g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:22:32 2025 by rpki-client