This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json) Hash identifier: wo6swGPmQprGNOUZdkivYn4+/czPJKyPTccNrX6lrOc= Subject key identifier: C8:4E:A2:7E:51:D9:A3:46:99:4D:B9:E2:BA:E7:C1:3B:9E:0B:2D:DD Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Certificate serial: 019AF12ED7B52B5F126A711136FD1DB166CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft Manifest number: 024E Signing time: Sat 06 Dec 2025 01:02:50 +0000 Manifest this update: Sat 06 Dec 2025 01:02:50 +0000 Manifest next update: Sun 07 Dec 2025 01:02:50 +0000 Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: EDo1HUYer7eH/kB12Mjp2iuRzhrugeGXEeBpHyhvARw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d7:b5:2b:5f:12:6a:71:11:36:fd:1d:b1:66:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Validity Not Before: Dec 6 01:02:50 2025 GMT Not After : Dec 7 01:02:50 2025 GMT Subject: CN=c84ea27e51d9a346994db9e2bae7c13b9e0b2ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:e4:50:20:4c:e6:83:e2:2b:da:ee:ff:c1: f4:7b:69:b7:50:56:f4:15:37:19:65:71:ef:67:8a: 7e:bc:b8:ee:bb:89:47:f6:f1:59:1a:bc:61:e2:74: 38:16:bd:05:03:36:f2:f7:ee:be:38:d4:96:23:1a: 22:29:67:b6:24:61:c4:68:a4:47:dd:ac:37:ae:f4: 4f:b0:03:c3:59:31:5d:3d:35:28:0f:65:0b:56:61: 69:7f:5c:15:91:30:61:ec:0d:10:5b:4e:bf:84:fe: b6:54:37:6c:3f:1f:82:6a:bb:ae:03:4e:4c:d7:82: 0c:4e:b6:b5:8e:de:c8:dc:68:7f:e6:60:66:85:1f: a0:52:f7:2d:59:81:47:fd:e0:4c:34:4c:68:37:ea: a6:3c:8c:33:c0:1a:ae:c3:ab:09:f7:d3:76:00:e4: 4a:62:69:e8:1c:94:40:1c:02:dd:22:a7:15:86:1b: 61:a4:0f:f0:9b:7c:8f:cb:03:9a:40:3e:4a:cd:b3: 70:aa:44:ea:a1:c3:89:66:e0:32:a0:6f:c0:6f:b1: 5e:eb:8c:d5:b3:f1:d5:30:5d:46:e9:09:77:57:69: 1e:c9:7e:a3:f8:53:9d:fe:9e:dd:b0:52:ed:8e:1d: 1f:c4:6a:37:50:53:99:dc:a0:82:0c:3f:92:ec:ea: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4E:A2:7E:51:D9:A3:46:99:4D:B9:E2:BA:E7:C1:3B:9E:0B:2D:DD X509v3 Authority Key Identifier: keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3d:1b:62:d5:ad:04:60:21:dc:45:fc:5d:7d:50:68:44:81: 08:8c:b2:f2:8b:a3:6f:0a:86:67:31:8d:f1:79:82:0f:83:d8: c1:08:52:09:c4:53:7f:d9:71:c0:f7:98:f1:eb:f5:e4:b3:dd: 75:f2:1f:13:b9:a2:bc:e3:0f:86:f0:62:3d:61:1f:29:fd:9a: 36:ca:44:61:13:6b:22:e3:16:f7:f0:aa:74:f6:75:57:ce:26: a8:b9:65:90:a7:ce:d0:48:ab:8f:81:7b:aa:08:4c:1f:56:b7: 55:28:c4:98:56:5f:c2:8c:9d:f5:bd:51:f7:86:d7:22:1d:50: 30:70:b1:47:d3:b0:e9:07:48:9b:98:81:c6:f0:f6:7c:f7:e4: 4f:1c:82:46:c7:09:a1:31:f7:fe:53:3f:c1:e6:76:5e:7e:d6: 6c:82:5a:aa:9e:4e:7e:1c:2f:c9:18:49:00:4d:6d:20:1e:81: d4:d5:56:a6:8f:d1:2c:74:09:c0:b3:04:61:4b:61:01:fb:5e: b3:cd:3a:db:64:d6:cc:e5:3f:c9:36:6a:f6:8e:00:f9:56:9f: fc:66:c3:b7:8c:c0:f7:2d:e5:59:91:ae:81:a9:47:24:27:37: 00:5a:b0:5f:9f:70:bc:e8:ef:a5:7e:32:a4:de:2a:ba:9a:44: 1e:ee:41:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLte1K18SanERNv0dsWbKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODNmOTI4NmE1ODE3MGNkYmVmNmUwZTQ4ZDBkZjczMTM4 ZGM3NjcwHhcNMjUxMjA2MDEwMjUwWhcNMjUxMjA3MDEwMjUwWjAzMTEwLwYDVQQD EyhjODRlYTI3ZTUxZDlhMzQ2OTk0ZGI5ZTJiYWU3YzEzYjllMGIyZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDnkUCBM5oPiK9ru/8H0e2m3UFb0 FTcZZXHvZ4p+vLjuu4lH9vFZGrxh4nQ4Fr0FAzby9+6+ONSWIxoiKWe2JGHEaKRH 3aw3rvRPsAPDWTFdPTUoD2ULVmFpf1wVkTBh7A0QW06/hP62VDdsPx+CaruuA05M 14IMTra1jt7I3Gh/5mBmhR+gUvctWYFH/eBMNExoN+qmPIwzwBquw6sJ99N2AORK YmnoHJRAHALdIqcVhhthpA/wm3yPywOaQD5KzbNwqkTqocOJZuAyoG/Ab7Fe64zV s/HVMF1G6Ql3V2keyX6j+FOd/p7dsFLtjh0fxGo3UFOZ3KCCDD+S7OpMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhOon5R2aNGmU254rrnwTueCy3dMB8GA1UdIwQY MBaAFAmD+ShqWBcM2+9uDkjQ33MTjcdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQt YWZmOGI5ZWQ5OWM5LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQtYWZmOGI5ZWQ5OWM5 LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD0bYtWt BGAh3EX8XX1QaESBCIyy8oujbwqGZzGN8XmCD4PYwQhSCcRTf9lxwPeY8ev15LPd dfIfE7mivOMPhvBiPWEfKf2aNspEYRNrIuMW9/CqdPZ1V84mqLllkKfO0Eirj4F7 qghMH1a3VSjEmFZfwoyd9b1R94bXIh1QMHCxR9Ow6QdIm5iBxvD2fPfkTxyCRscJ oTH3/lM/weZ2Xn7WbIJaqp5OfhwvyRhJAE1tIB6B1NVWpo/RLHQJwLMEYUthAfte s80622TWzOU/yTZq9o4A+Vaf/GbDt4zA9y3lWZGugalHJCc3AFqwX59wvOjvpX4y pN4quppEHu5BVA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:02 2025 by rpki-client