This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft File: cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json) Hash identifier: c9h4QGQClMcPxt91iTEyko5qMrv//fL37vFc4OmB+Rw= Subject key identifier: DB:B7:21:CB:21:BC:06:24:30:0E:E8:A0:52:39:DA:0A:BF:7B:47:0F Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7 Certificate serial: 019B2E8B29362F3E3C8EEA8E4B7141DD6CA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft Manifest number: 0BC1 Signing time: Wed 17 Dec 2025 23:00:30 +0000 Manifest this update: Wed 17 Dec 2025 23:00:30 +0000 Manifest next update: Thu 18 Dec 2025 23:00:30 +0000 Files and hashes: 1: 6mH1yDlUh6pG9RleZb3EGXu59Zg.roa (hash: etKxea+yPAs2ZwU2gpdjs53mOsUOx8jQ/xZdi5xgXfI=) 2: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: FzUBjBMQwBMlO/4Ul7r6sUbiT5vyuUPECKlBLvJqVRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:29:36:2f:3e:3c:8e:ea:8e:4b:71:41:dd:6c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7 Validity Not Before: Dec 17 23:00:30 2025 GMT Not After : Dec 18 23:00:30 2025 GMT Subject: CN=dbb721cb21bc0624300ee8a05239da0abf7b470f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:80:14:db:f2:b2:d2:de:a4:39:33:08:25: 6f:3d:b0:4c:94:30:a5:d7:b6:9c:7c:78:a9:3e:d1: 6f:f6:95:d8:b5:e4:2e:0e:2c:7b:2c:c1:10:86:c9: 94:3e:47:7e:28:d5:33:5b:d2:c2:31:a0:ef:a6:a3: 0e:3f:2a:83:c6:ca:73:85:8e:72:bf:12:25:56:0b: a7:f6:a0:8c:89:a6:7c:b8:a3:16:f7:32:f6:0b:6b: c7:a1:20:5b:be:77:64:aa:2b:c1:1a:f6:86:a2:47: 7b:c9:ba:de:2a:8b:b3:1a:a0:ff:4a:0c:91:14:11: 16:cf:1e:d5:ef:9d:e0:90:d1:a2:cb:59:62:09:5e: 40:d8:8f:70:b0:f6:80:04:ac:cf:4d:eb:82:b4:3f: fb:3b:bb:c8:73:5d:6f:3e:fd:94:21:98:b1:12:f8: 35:0c:21:54:44:bb:0e:b7:40:65:8c:b0:e5:a6:23: d5:d6:cf:1f:a5:f6:d7:1e:4d:11:d7:e5:03:8c:65: 47:36:21:e1:06:bb:a7:c1:29:0c:f9:2a:e3:0b:e7: 90:aa:33:e9:26:f4:83:b1:2f:62:42:bf:78:ad:fe: 9a:6b:ca:34:6a:a6:97:66:0f:02:7b:aa:4b:30:fa: a4:72:54:c0:5b:ba:31:e7:2f:07:9e:14:e8:72:4b: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B7:21:CB:21:BC:06:24:30:0E:E8:A0:52:39:DA:0A:BF:7B:47:0F X509v3 Authority Key Identifier: keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:2c:d3:c4:78:17:e9:c9:91:31:f1:88:a3:1b:16:9f:3c: 57:69:b1:c3:28:e2:77:6d:22:60:87:59:67:96:10:3d:06:ed: ff:e6:0f:31:72:ff:aa:cd:da:2a:5f:bb:33:8a:45:6d:8a:b2: 62:23:87:3e:9d:09:c4:7e:30:74:7c:af:f1:15:cd:24:c5:43: ba:10:71:93:10:76:02:ec:dc:d4:e0:e1:56:6d:29:8a:9d:15: df:68:0e:3c:73:87:08:8c:2c:3f:fe:3b:b5:c3:86:c0:75:71: 6b:5b:a1:bd:eb:9d:53:c1:4f:02:50:9c:19:0f:c4:af:d2:e2: a2:22:04:25:49:3c:c3:20:9c:02:4b:f1:5f:62:bf:f3:bd:c2: 6f:27:b3:14:f2:5f:72:a1:68:ad:0d:2d:8d:ca:3e:11:af:9e: 84:36:9d:ff:3d:cb:cb:9d:84:15:73:c8:60:10:4e:05:35:40: 85:3a:f7:49:5f:67:08:ff:1d:ce:71:3e:f6:52:14:77:99:c7: 99:2c:50:5e:ae:af:0a:98:49:52:c9:c9:99:d1:ae:39:89:a5: 38:47:f8:5f:75:eb:a2:6d:84:9d:c7:08:70:99:a1:38:73:85: dd:cd:38:8b:36:df:3b:71:2d:f2:1d:89:b2:d6:88:37:10:fd: 22:05:f8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuiyk2Lz48juqOS3FB3WylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMjk0NGE4NTM4MzU1YjJhZWM3NjY0NWZkOTQ5NDQ4OGFl NzAyZTcwHhcNMjUxMjE3MjMwMDMwWhcNMjUxMjE4MjMwMDMwWjAzMTEwLwYDVQQD EyhkYmI3MjFjYjIxYmMwNjI0MzAwZWU4YTA1MjM5ZGEwYWJmN2I0NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBKAFNvystLepDkzCCVvPbBMlDCl 17acfHipPtFv9pXYteQuDix7LMEQhsmUPkd+KNUzW9LCMaDvpqMOPyqDxspzhY5y vxIlVgun9qCMiaZ8uKMW9zL2C2vHoSBbvndkqivBGvaGokd7ybreKouzGqD/SgyR FBEWzx7V753gkNGiy1liCV5A2I9wsPaABKzPTeuCtD/7O7vIc11vPv2UIZixEvg1 DCFURLsOt0BljLDlpiPV1s8fpfbXHk0R1+UDjGVHNiHhBrunwSkM+SrjC+eQqjPp JvSDsS9iQr94rf6aa8o0aqaXZg8Ce6pLMPqkclTAW7ox5y8HnhTockua4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu3IcshvAYkMA7ooFI52gq/e0cPMB8GA1UdIwQY MBaAFHMpRKhTg1WyrsdmRf2UlEiK5wLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMt YzJjZjQ1M2MzZTJlLzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMtYzJjZjQ1M2MzZTJl LzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY8s08R4 F+nJkTHxiKMbFp88V2mxwyjid20iYIdZZ5YQPQbt/+YPMXL/qs3aKl+7M4pFbYqy YiOHPp0JxH4wdHyv8RXNJMVDuhBxkxB2Auzc1ODhVm0pip0V32gOPHOHCIwsP/47 tcOGwHVxa1uhveudU8FPAlCcGQ/Er9LioiIEJUk8wyCcAkvxX2K/873CbyezFPJf cqForQ0tjco+Ea+ehDad/z3Ly52EFXPIYBBOBTVAhTr3SV9nCP8dznE+9lIUd5nH mSxQXq6vCphJUsnJmdGuOYmlOEf4X3Xrom2EnccIcJmhOHOF3c04izbfO3Et8h2J staINxD9IgX4Wg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:44:57 2025 by rpki-client