This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json) Hash identifier: m74m92mccxJbjJ6BIMsAPX1O+IqKHAuBmoLN2zcb8F0= Subject key identifier: CA:10:60:E4:39:05:4D:71:93:4D:BB:41:3F:D4:45:CB:53:8D:F7:39 Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e Certificate serial: 019B2C9D822FCFEF2AFEAFFB19766997361E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft Manifest number: 129B Signing time: Wed 17 Dec 2025 14:01:18 +0000 Manifest this update: Wed 17 Dec 2025 14:01:18 +0000 Manifest next update: Thu 18 Dec 2025 14:01:18 +0000 Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: frLIa7pambHjTyE28LRT5s95k1k4YqWgKbgPadR6ktw=) 2: mkwCWTxmc30gqkOebhkEdIG_cF0.roa (hash: 4rCdfiogFwUs2SpdCyxEcJMMRqRddcLgQufEvr3KNGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:82:2f:cf:ef:2a:fe:af:fb:19:76:69:97:36:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e Validity Not Before: Dec 17 14:01:18 2025 GMT Not After : Dec 18 14:01:18 2025 GMT Subject: CN=ca1060e439054d71934dbb413fd445cb538df739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:45:ae:f7:ca:02:f8:07:28:db:bb:9d:7a: f8:b7:00:bd:9e:c5:f4:b2:f8:76:7b:94:60:5c:27: d3:cb:90:c5:ab:9f:94:ac:e2:f4:47:48:21:c6:52: e2:18:0d:81:60:3d:99:f1:51:83:2e:84:cb:02:9d: c9:2d:7e:e5:a1:5c:50:b8:56:7b:03:37:c3:e2:f1: 7a:a7:66:56:be:6a:40:e3:f0:72:72:bd:e2:7e:f7: 50:2b:15:36:6e:38:28:0b:a9:cf:a8:d5:0e:54:13: c2:4e:a6:59:54:c7:73:26:77:7a:80:ab:5b:e7:7a: 0a:1f:be:ab:28:a7:d3:2c:35:cb:5f:44:74:a0:e5: 28:24:46:38:49:a9:5b:d9:cb:3f:f9:78:14:77:f9: 60:1a:19:81:4f:74:ad:a6:de:9e:05:9e:23:54:28: b3:94:03:0b:f7:66:b7:3d:15:a1:45:81:32:8b:40: 68:01:67:50:5b:8a:e9:e4:d1:74:26:0c:97:4b:b0: 33:2f:64:d3:11:a5:89:b5:8d:3f:bf:8d:ce:33:ae: 31:90:31:1e:e1:cd:6b:82:d0:04:23:b9:9e:ae:f1: cd:19:13:c5:30:37:2a:c0:25:16:8b:33:be:9e:92: 74:8f:b7:c1:85:51:12:f1:dc:67:fa:70:e2:b4:74: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:10:60:E4:39:05:4D:71:93:4D:BB:41:3F:D4:45:CB:53:8D:F7:39 X509v3 Authority Key Identifier: keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5b:22:21:2f:33:6a:f2:87:cd:4d:7a:64:f8:b2:3f:85:1b: 63:8f:c5:0c:94:6f:e1:2f:04:99:77:8b:d1:ce:77:7c:d2:30: 3d:b6:5c:e2:2e:ae:15:ba:08:09:5e:8b:2a:52:2c:c7:e6:e0: 7e:98:8e:e9:72:be:29:c5:43:94:ea:04:0e:82:31:6e:5f:8c: dd:9b:d7:7e:4c:74:3c:88:9b:09:f4:82:ad:92:1f:81:ac:9c: 7d:68:1d:17:7f:48:39:8d:27:7a:51:50:5a:ca:8f:38:03:af: ae:17:fb:bd:33:19:12:94:8e:57:16:2c:31:b4:f3:8e:66:50: 67:40:1d:f5:39:0f:a4:9f:7c:2a:98:d1:ed:c1:39:95:67:99: 5e:df:d4:5d:52:7f:56:2f:b7:6d:13:f7:eb:4a:1b:75:2d:f3: bd:44:2f:85:57:fe:e7:91:75:a1:5b:61:c6:b7:00:68:60:42: b6:43:55:ef:c4:ce:1b:9e:23:77:83:d7:8a:b1:77:3b:8e:07: cd:1b:87:60:65:21:25:c7:47:f9:a8:e1:93:45:59:70:a6:0c: 4b:40:49:79:0c:ba:0d:e0:b3:9f:fa:da:aa:0e:f6:25:04:65: 3c:f2:be:a6:60:7d:e1:ec:fa:cc:1c:2d:c0:b9:72:c5:fe:04: 03:e6:af:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnYIvz+8q/q/7GXZplzYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi ODVjNmUwHhcNMjUxMjE3MTQwMTE4WhcNMjUxMjE4MTQwMTE4WjAzMTEwLwYDVQQD EyhjYTEwNjBlNDM5MDU0ZDcxOTM0ZGJiNDEzZmQ0NDVjYjUzOGRmNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mhFrvfKAvgHKNu7nXr4twC9nsX0 svh2e5RgXCfTy5DFq5+UrOL0R0ghxlLiGA2BYD2Z8VGDLoTLAp3JLX7loVxQuFZ7 AzfD4vF6p2ZWvmpA4/Bycr3ifvdQKxU2bjgoC6nPqNUOVBPCTqZZVMdzJnd6gKtb 53oKH76rKKfTLDXLX0R0oOUoJEY4Salb2cs/+XgUd/lgGhmBT3Stpt6eBZ4jVCiz lAML92a3PRWhRYEyi0BoAWdQW4rp5NF0JgyXS7AzL2TTEaWJtY0/v43OM64xkDEe 4c1rgtAEI7mervHNGRPFMDcqwCUWizO+npJ0j7fBhVES8dxn+nDitHQLKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoQYOQ5BU1xk027QT/URctTjfc5MB8GA1UdIwQY MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVsiIS8z avKHzU16ZPiyP4UbY4/FDJRv4S8EmXeL0c53fNIwPbZc4i6uFboICV6LKlIsx+bg fpiO6XK+KcVDlOoEDoIxbl+M3ZvXfkx0PIibCfSCrZIfgaycfWgdF39IOY0nelFQ WsqPOAOvrhf7vTMZEpSOVxYsMbTzjmZQZ0Ad9TkPpJ98KpjR7cE5lWeZXt/UXVJ/ Vi+3bRP360obdS3zvUQvhVf+55F1oVthxrcAaGBCtkNV78TOG54jd4PXirF3O44H zRuHYGUhJcdH+ajhk0VZcKYMS0BJeQy6DeCzn/raqg72JQRlPPK+pmB94ez6zBwt wLlyxf4EA+avTg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:12 2025 by rpki-client