This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json) Hash identifier: Rlh86e2r/qWoDVdFYknCX5oXywBJmiChH6s5G4qSsS0= Subject key identifier: 81:F5:75:84:94:B5:CF:CD:F3:4D:E0:4E:44:56:6D:CD:14:29:4B:4E Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54 Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754 Certificate serial: 019AF31B896FF922B5487FC15E670519A0C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: SDen3+IBERkKgah7OoLlFbKZ1yw45mFCyVxeKMjtp6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:89:6f:f9:22:b5:48:7f:c1:5e:67:05:19:a0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=81f5758494b5cfcdf34de04e44566dcd14294b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:ef:48:d0:8e:c7:a4:e3:b4:33:14:82:ca: 31:3f:33:66:fd:ed:06:60:05:b1:43:69:8b:c2:6c: 73:0d:04:4d:9a:f1:49:3a:e8:a3:e4:4e:b0:ea:46: 42:8b:f9:7f:da:c6:9a:ca:f7:15:96:c4:c4:ce:0e: ac:50:c5:8c:f2:4c:a0:f8:e9:03:4a:ab:dc:ae:94: 29:92:76:5c:65:9b:79:dc:56:c5:9c:10:20:2b:d7: 13:ad:50:e3:2c:39:00:19:35:90:5a:1d:3c:51:d7: 7d:91:de:75:27:65:b2:bd:1a:7d:a1:ef:db:2e:6f: db:92:9f:f9:25:75:50:f1:16:0c:00:6e:e8:85:a5: 3c:42:d0:96:fb:97:e8:f9:f0:52:d1:e1:56:71:ce: a2:eb:bd:71:a2:98:67:ec:d6:ec:cb:f8:0d:75:fb: 30:c5:78:bf:a6:b4:c9:96:91:31:fc:68:69:17:ef: e9:d1:a2:28:47:12:10:7c:d9:99:d5:ff:10:2a:d9: cd:35:bc:71:ce:81:5a:31:7c:9e:08:5d:14:81:a5: 98:b9:85:9f:a3:18:f2:98:bf:80:cb:30:b0:7c:50: 98:55:5f:5d:97:05:57:f0:93:e1:55:fb:da:37:c0: 56:64:a9:fa:17:48:8c:57:ef:d9:56:69:ee:f6:62: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F5:75:84:94:B5:CF:CD:F3:4D:E0:4E:44:56:6D:CD:14:29:4B:4E X509v3 Authority Key Identifier: keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:95:f4:f3:29:a6:1b:53:f0:41:fd:81:db:e5:66:09:d4:ab: 6e:50:f2:44:e9:36:75:72:1d:46:07:6f:4d:52:b5:5d:c6:74: 50:54:28:f1:6f:e0:60:05:e6:47:ed:3f:48:1f:1b:f5:e0:16: 9d:f4:78:35:0b:7e:5e:f5:15:24:77:4a:a7:0d:0a:59:46:3f: 0d:fd:07:9c:0e:4c:e3:0a:33:d1:a4:ce:1f:9f:c4:88:68:b9: 07:e7:82:25:1b:1b:cf:8c:e9:b6:8d:39:5c:43:85:d5:6d:48: 5a:92:34:22:d3:3c:1a:1e:45:a9:63:cc:e4:ba:86:7d:ee:35: a0:58:ba:4c:fd:08:03:5c:a0:2c:c8:18:44:ce:ba:6f:f0:75: 1b:91:2a:bb:56:08:97:a1:03:01:22:87:92:45:7d:6e:1d:e2: c5:15:6b:cc:6d:83:d6:1c:08:b5:b1:15:d0:f1:94:71:ad:56: 50:93:9d:33:c2:35:c1:9d:2b:dd:d0:0e:e8:85:00:e6:01:34: 43:e2:d2:28:d3:a2:53:3a:91:40:69:98:0b:e6:52:51:56:7f: 96:7d:c0:53:71:08:c7:f2:3c:01:61:b3:29:43:0d:15:70:b8: a9:ea:b5:ac:8f:63:0d:4e:7a:a2:63:53:90:64:88:79:b4:3e: 7a:2c:01:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4lv+SK1SH/BXmcFGaDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1 ZTQ3NTQwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD Eyg4MWY1NzU4NDk0YjVjZmNkZjM0ZGUwNGU0NDU2NmRjZDE0Mjk0YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBnvSNCOx6TjtDMUgsoxPzNm/e0G YAWxQ2mLwmxzDQRNmvFJOuij5E6w6kZCi/l/2saayvcVlsTEzg6sUMWM8kyg+OkD SqvcrpQpknZcZZt53FbFnBAgK9cTrVDjLDkAGTWQWh08Udd9kd51J2WyvRp9oe/b Lm/bkp/5JXVQ8RYMAG7ohaU8QtCW+5fo+fBS0eFWcc6i671xophn7Nbsy/gNdfsw xXi/prTJlpEx/GhpF+/p0aIoRxIQfNmZ1f8QKtnNNbxxzoFaMXyeCF0UgaWYuYWf oxjymL+AyzCwfFCYVV9dlwVX8JPhVfvaN8BWZKn6F0iMV+/ZVmnu9mJovQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIH1dYSUtc/N803gTkRWbc0UKUtOMB8GA1UdIwQY MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5X08ymm G1PwQf2B2+VmCdSrblDyROk2dXIdRgdvTVK1XcZ0UFQo8W/gYAXmR+0/SB8b9eAW nfR4NQt+XvUVJHdKpw0KWUY/Df0HnA5M4woz0aTOH5/EiGi5B+eCJRsbz4zpto05 XEOF1W1IWpI0ItM8Gh5FqWPM5LqGfe41oFi6TP0IA1ygLMgYRM66b/B1G5Equ1YI l6EDASKHkkV9bh3ixRVrzG2D1hwItbEV0PGUca1WUJOdM8I1wZ0r3dAO6IUA5gE0 Q+LSKNOiUzqRQGmYC+ZSUVZ/ln3AU3EIx/I8AWGzKUMNFXC4qeq1rI9jDU56omNT kGSIebQ+eiwBLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:50 2025 by rpki-client