This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft File: CyOsILweRYXE_UzI57yXYzG4XG4.mft (raw, json) Hash identifier: dfRvCnZpXfOGePMKmSwrFOS/VVQYoO/g/+gxK3sJDf0= Subject key identifier: E4:03:94:C1:DE:A1:65:C7:D5:00:D3:13:CA:DA:7A:DA:00:09:D3:10 Authority key identifier: 0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E Certificate issuer: /CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e Certificate serial: 019AF2AD7FCDD3521836E3FFDFD16C7E5566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft Manifest number: 127D Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: CyOsILweRYXE_UzI57yXYzG4XG4.crl (hash: wcdxHuWWlyJlDLBIZ9toPColXYIgTKoWMjHxtkb6nIs=) 2: mkwCWTxmc30gqkOebhkEdIG_cF0.roa (hash: 4rCdfiogFwUs2SpdCyxEcJMMRqRddcLgQufEvr3KNGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7f:cd:d3:52:18:36:e3:ff:df:d1:6c:7e:55:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b23ac20bc1e4585c4fd4cc8e7bc976331b85c6e Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=e40394c1dea165c7d500d313cada7ada0009d310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:63:d5:bc:fc:5e:ae:4a:ea:60:3a:71:b3:2a: 2c:ba:a3:77:10:fc:a2:8a:e8:2b:5f:91:b4:39:e4: 6a:77:49:3e:bf:1a:3c:be:ed:5f:b6:0c:ef:72:bc: a9:f2:ef:80:67:92:2e:e0:19:c3:a9:46:21:e7:c6: 40:04:d6:7b:89:91:3a:55:0e:e8:80:7f:90:c8:4c: 6b:1b:77:a2:f4:82:06:e7:35:ed:4b:24:da:b6:07: 36:8c:7c:2a:1d:83:ba:0f:cd:86:4e:27:34:17:a6: 3c:da:36:17:8c:88:df:51:9e:f4:bb:27:b9:fd:39: 5b:8e:b3:9e:51:8f:6e:b6:8a:69:4c:14:53:e1:bc: 83:9a:32:59:56:72:ba:f0:a5:84:48:04:68:87:d8: 44:6c:82:dc:e3:67:3e:8e:b7:0e:8c:6e:e7:f1:7c: c1:d8:43:1b:c9:e4:be:fc:1f:bb:43:ec:4f:d3:6a: 73:7f:ac:11:7e:25:21:3c:ff:1a:42:97:7e:a5:ab: f4:78:13:cd:5f:95:ad:13:62:75:95:07:cd:76:30: b0:0f:1f:db:d0:cd:e9:20:c7:a2:d5:bd:86:7c:bd: e4:c0:d9:40:4a:1b:f5:2f:b1:34:ba:cf:ac:c9:ba: 3d:5e:c8:43:dc:62:3d:10:91:d1:ee:c0:94:22:56: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:03:94:C1:DE:A1:65:C7:D5:00:D3:13:CA:DA:7A:DA:00:09:D3:10 X509v3 Authority Key Identifier: keyid:0B:23:AC:20:BC:1E:45:85:C4:FD:4C:C8:E7:BC:97:63:31:B8:5C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyOsILweRYXE_UzI57yXYzG4XG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2720f-106d-476f-80af-06188cf7a3c2/1/CyOsILweRYXE_UzI57yXYzG4XG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:7c:94:1d:53:1a:c1:c3:17:0d:6f:b8:73:23:ce:85:c3:c8: 23:64:a2:7b:96:78:fa:48:6b:2a:b4:d0:f3:a9:ce:82:77:3a: da:10:40:6b:20:80:89:b4:68:26:d2:92:c9:35:5d:ef:f2:6b: eb:96:03:0d:81:74:ab:5c:f9:04:93:5e:b8:a1:9b:06:a2:2e: 46:7b:16:d0:00:9a:4d:f6:35:ab:e7:63:8e:19:c0:4d:0a:e8: e9:4a:ee:bc:d8:b6:e2:f5:83:40:87:5f:93:3d:f2:38:f7:32: 5c:72:9f:c0:d9:a1:8d:ee:4c:40:66:56:9c:09:5a:33:cb:ec: 5a:a9:49:ac:df:f1:4a:7e:aa:dd:31:cf:55:31:18:76:0a:59: c6:f8:6c:bb:93:36:be:de:bf:dc:4e:9c:d7:f7:7e:78:c8:89: 83:e1:10:cc:a1:21:fe:8a:e0:de:d5:0e:49:f6:e2:b4:4b:8a: 58:5a:00:d4:a5:3f:8f:d1:bf:f0:a5:48:fb:28:8c:50:b8:ff: bb:f2:9b:5b:a9:ef:ae:fa:01:3b:fe:d5:90:1a:4d:63:b3:e7: 29:78:5e:37:11:34:f6:97:e3:9f:18:39:3c:ee:c3:50:79:8b: 39:03:4e:37:4d:79:e4:fc:fd:6f:d8:a9:a2:33:5c:95:a5:c2: 89:d7:7b:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX/N01IYNuP/39FsflVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjNhYzIwYmMxZTQ1ODVjNGZkNGNjOGU3YmM5NzYzMzFi ODVjNmUwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EyhlNDAzOTRjMWRlYTE2NWM3ZDUwMGQzMTNjYWRhN2FkYTAwMDlkMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GPVvPxerkrqYDpxsyosuqN3EPyi iugrX5G0OeRqd0k+vxo8vu1ftgzvcryp8u+AZ5Iu4BnDqUYh58ZABNZ7iZE6VQ7o gH+QyExrG3ei9IIG5zXtSyTatgc2jHwqHYO6D82GTic0F6Y82jYXjIjfUZ70uye5 /TlbjrOeUY9utoppTBRT4byDmjJZVnK68KWESARoh9hEbILc42c+jrcOjG7n8XzB 2EMbyeS+/B+7Q+xP02pzf6wRfiUhPP8aQpd+pav0eBPNX5WtE2J1lQfNdjCwDx/b 0M3pIMei1b2GfL3kwNlAShv1L7E0us+sybo9XshD3GI9EJHR7sCUIlbM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQDlMHeoWXH1QDTE8raetoACdMQMB8GA1UdIwQY MBaAFAsjrCC8HkWFxP1MyOe8l2MxuFxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYt MDYxODhjZjdhM2MyLzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jMjcyMGYtMTA2ZC00NzZmLTgwYWYtMDYxODhjZjdhM2My LzEvQ3lPc0lMd2VSWVhFX1V6STU3eVhZekc0WEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXyUHVMa wcMXDW+4cyPOhcPII2Sie5Z4+khrKrTQ86nOgnc62hBAayCAibRoJtKSyTVd7/Jr 65YDDYF0q1z5BJNeuKGbBqIuRnsW0ACaTfY1q+djjhnATQro6UruvNi24vWDQIdf kz3yOPcyXHKfwNmhje5MQGZWnAlaM8vsWqlJrN/xSn6q3THPVTEYdgpZxvhsu5M2 vt6/3E6c1/d+eMiJg+EQzKEh/org3tUOSfbitEuKWFoA1KU/j9G/8KVI+yiMULj/ u/KbW6nvrvoBO/7VkBpNY7PnKXheNxE09pfjnxg5PO7DUHmLOQNON0155Pz9b9ip ojNclaXCidd7DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:20 2025 by rpki-client