This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json) Hash identifier: hYx1gVuBaUz0J4fJFqpCGdPOmb/xpMtGVF+B8tNll+o= Subject key identifier: B8:AA:D2:28:CD:76:D4:1B:D6:FF:5E:AE:7D:D0:4B:22:B2:7D:C7:1D Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Certificate serial: 019B2EF9A2EBAE598ABAEB1ECEBB6FA0D56F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft Manifest number: 026E Signing time: Thu 18 Dec 2025 01:01:10 +0000 Manifest this update: Thu 18 Dec 2025 01:01:10 +0000 Manifest next update: Fri 19 Dec 2025 01:01:10 +0000 Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: G67NU7Bvw154j0W7xLUxKEJWPZwpzaCYi6AkiOYAMN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:a2:eb:ae:59:8a:ba:eb:1e:ce:bb:6f:a0:d5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Validity Not Before: Dec 18 01:01:10 2025 GMT Not After : Dec 19 01:01:10 2025 GMT Subject: CN=b8aad228cd76d41bd6ff5eae7dd04b22b27dc71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:88:00:d1:5d:73:85:4b:2c:aa:d3:49:9d: 89:c4:7d:7d:aa:6b:63:df:64:9f:9d:4e:be:5c:c3: 03:54:70:df:72:45:d3:14:1a:6a:ac:91:0b:b1:6f: 52:26:1d:af:3b:9f:65:ee:9d:71:2b:a3:84:74:52: b3:a8:fd:c0:b6:e6:90:6f:c3:59:fe:db:93:d6:28: 21:69:fb:e9:1b:6e:73:d4:ad:a4:49:b4:93:4d:d2: 5e:0e:b0:99:68:63:3f:9f:9d:1b:a3:59:7d:ab:09: b1:cd:16:1c:d9:ec:bc:53:35:4e:6a:81:bc:e8:0d: e9:d4:c3:67:8c:02:d0:7d:84:44:05:da:8c:17:0a: cf:73:45:84:ed:5a:50:46:26:5d:3f:9f:f6:6c:45: 66:bf:a4:e9:9e:64:e2:c5:48:97:40:f4:7b:90:49: e1:1c:98:aa:63:9e:75:d0:43:75:57:99:2a:64:d8: a0:f7:16:c4:4d:9a:8f:fe:fd:d6:0d:1e:4c:54:90: 14:f3:8a:c4:88:69:16:45:14:20:df:e0:2b:a2:ca: be:ef:fb:d9:5a:4b:33:ad:a2:c0:56:3f:42:9c:df: 01:e5:e0:da:d8:8b:76:a9:51:b6:69:5f:84:81:e9: 9c:ef:1d:3f:50:61:45:ef:cf:59:e9:28:fd:6a:c0: 25:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:D2:28:CD:76:D4:1B:D6:FF:5E:AE:7D:D0:4B:22:B2:7D:C7:1D X509v3 Authority Key Identifier: keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5e:5b:7a:4a:be:d6:98:56:7d:f1:bb:86:31:4a:bc:ba:1f: d6:a9:bb:8a:c8:73:e9:60:d6:67:d0:6d:ff:42:7c:7e:8f:2d: a6:cd:d2:22:db:91:32:32:34:2b:03:16:44:f6:b7:a8:f5:80: 35:eb:85:99:ea:79:b6:b2:37:bf:52:1f:70:ea:69:b2:25:dc: 06:64:8a:60:8a:6c:dd:7e:b3:6a:02:ec:4e:4f:9f:2e:d9:b8: d1:ac:13:4a:f6:60:0f:dd:10:28:fe:20:85:4b:b3:d4:aa:14: 9e:05:74:f9:24:c7:08:dd:9e:87:fd:69:80:c8:24:e5:c3:7c: 5b:99:b5:88:01:5e:f4:e7:1c:ac:7f:12:9d:61:8e:33:bb:eb: 2d:42:8b:47:bf:48:48:b8:51:97:fd:b5:8d:13:ba:6d:3a:3c: 71:e7:c6:22:f9:eb:36:7d:ad:68:65:45:79:5d:73:b2:b6:8f: ce:44:57:27:d8:ab:a1:bf:25:36:b0:70:6c:5e:3d:67:fc:7d: 1b:e0:67:4d:0c:6e:1b:86:b1:10:d3:8f:ef:3f:8e:7f:3f:0f: 6f:0f:ff:d1:28:73:64:48:16:12:c2:e3:d5:ba:6e:fb:4a:7c: 37:a2:a4:8d:34:c1:5b:19:24:70:00:ae:72:91:3d:ba:60:f5: b1:30:cd:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+aLrrlmKuusezrtvoNVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODNmOTI4NmE1ODE3MGNkYmVmNmUwZTQ4ZDBkZjczMTM4 ZGM3NjcwHhcNMjUxMjE4MDEwMTEwWhcNMjUxMjE5MDEwMTEwWjAzMTEwLwYDVQQD EyhiOGFhZDIyOGNkNzZkNDFiZDZmZjVlYWU3ZGQwNGIyMmIyN2RjNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQCIANFdc4VLLKrTSZ2JxH19qmtj 32SfnU6+XMMDVHDfckXTFBpqrJELsW9SJh2vO59l7p1xK6OEdFKzqP3AtuaQb8NZ /tuT1ighafvpG25z1K2kSbSTTdJeDrCZaGM/n50bo1l9qwmxzRYc2ey8UzVOaoG8 6A3p1MNnjALQfYREBdqMFwrPc0WE7VpQRiZdP5/2bEVmv6TpnmTixUiXQPR7kEnh HJiqY5510EN1V5kqZNig9xbETZqP/v3WDR5MVJAU84rEiGkWRRQg3+Arosq+7/vZ WkszraLAVj9CnN8B5eDa2It2qVG2aV+Egemc7x0/UGFF789Z6Sj9asAlOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiq0ijNdtQb1v9ern3QSyKyfccdMB8GA1UdIwQY MBaAFAmD+ShqWBcM2+9uDkjQ33MTjcdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQt YWZmOGI5ZWQ5OWM5LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQtYWZmOGI5ZWQ5OWM5 LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk15bekq+ 1phWffG7hjFKvLof1qm7ishz6WDWZ9Bt/0J8fo8tps3SItuRMjI0KwMWRPa3qPWA NeuFmep5trI3v1IfcOppsiXcBmSKYIps3X6zagLsTk+fLtm40awTSvZgD90QKP4g hUuz1KoUngV0+STHCN2eh/1pgMgk5cN8W5m1iAFe9OccrH8SnWGOM7vrLUKLR79I SLhRl/21jRO6bTo8cefGIvnrNn2taGVFeV1zsraPzkRXJ9irob8lNrBwbF49Z/x9 G+BnTQxuG4axENOP7z+Ofz8Pbw//0ShzZEgWEsLj1bpu+0p8N6KkjTTBWxkkcACu cpE9umD1sTDNMA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:51:33 2025 by rpki-client