This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft File: cybGPef_oxXiAl1pZw11dSWf98c.mft (raw, json) Hash identifier: uTJIxNVBbEhuEy1D34BJyIoppFIELnGplSAQPw6wVLg= Subject key identifier: 23:85:96:5F:B5:94:BA:D4:D0:27:2F:BE:95:65:6A:1B:1F:5D:C4:07 Authority key identifier: 73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7 Certificate issuer: /CN=7326c63de7ffa315e2025d69670d7575259ff7c7 Certificate serial: 019AF389104A0CB5A7486AB10C3AB9BE96C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft Manifest number: 07A0 Signing time: Sat 06 Dec 2025 12:00:37 +0000 Manifest this update: Sat 06 Dec 2025 12:00:37 +0000 Manifest next update: Sun 07 Dec 2025 12:00:37 +0000 Files and hashes: 1: cybGPef_oxXiAl1pZw11dSWf98c.crl (hash: 4DLG2WeX93q0DtXkBonpf71fYEcul0MOIb00HIWT5II=) 2: ysTrPVZVxXb25-RsUjAAsVm9Fhs.roa (hash: wMiYBEmRQakoObcIju3eVEr8bEdfvqRbzn+KIxKAXDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:10:4a:0c:b5:a7:48:6a:b1:0c:3a:b9:be:96:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7326c63de7ffa315e2025d69670d7575259ff7c7 Validity Not Before: Dec 6 12:00:37 2025 GMT Not After : Dec 7 12:00:37 2025 GMT Subject: CN=2385965fb594bad4d0272fbe95656a1b1f5dc407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0f:60:ce:53:e1:a2:33:40:58:14:c8:a0:52: 34:75:d7:d9:2f:a7:cf:5e:d1:85:a0:69:5b:8b:f1: 95:45:f7:90:6f:5b:b9:83:24:6f:a5:6a:6f:e8:87: ed:87:d9:c3:88:9b:88:e8:5f:51:11:6b:9f:25:30: 1d:63:01:d4:81:2d:b0:52:68:01:cc:6e:5b:72:42: 64:41:94:69:1e:0f:b3:14:ec:20:53:8f:53:32:5e: 57:ef:fb:9c:0d:c5:b1:2f:10:fd:6e:30:c6:0d:06: c3:b5:86:55:12:ee:af:e2:f8:a5:22:06:36:2b:61: a5:8f:44:04:73:01:d5:cf:a1:c6:20:60:49:29:b8: 3c:72:fa:b6:fb:b7:5b:2d:a5:79:e1:6c:b4:2a:79: d5:8a:7f:ab:d5:05:37:de:d6:56:61:89:01:fc:34: 5b:30:18:86:dd:a7:69:70:fa:63:45:44:18:32:dc: 15:c2:93:22:6f:34:3f:27:95:31:ae:d4:2e:6e:3f: a6:00:32:2d:29:b2:84:68:4d:87:eb:72:be:9c:ca: 35:4a:cc:b1:74:b3:14:2d:75:6a:69:7c:77:c9:01: 43:e7:7c:89:59:42:e7:81:45:98:fa:95:e0:d4:a5: 80:d1:ee:ac:16:30:06:63:ba:4f:ab:fc:02:0c:d2: 39:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:96:5F:B5:94:BA:D4:D0:27:2F:BE:95:65:6A:1B:1F:5D:C4:07 X509v3 Authority Key Identifier: keyid:73:26:C6:3D:E7:FF:A3:15:E2:02:5D:69:67:0D:75:75:25:9F:F7:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cybGPef_oxXiAl1pZw11dSWf98c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/cybGPef_oxXiAl1pZw11dSWf98c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7b:39:1c:87:68:96:be:6d:39:3e:48:cc:32:56:29:62:36: f5:51:60:d8:b0:0a:4e:b7:01:d0:b1:c3:5d:d9:c4:b7:60:ee: d5:00:2f:d8:50:fe:b2:7a:c0:99:26:29:2c:22:38:7c:30:9f: 42:7c:00:87:35:ba:00:53:ad:9a:f5:2a:e9:02:fe:a6:5a:56: 8a:88:22:ea:0d:14:31:40:ee:d4:db:1c:87:8b:84:76:c7:7d: c2:a4:80:e4:6d:eb:7f:c5:eb:d8:9f:01:8b:7f:6b:09:d9:bd: 54:04:ab:87:05:f4:6a:0d:1e:e5:c6:d5:c9:d7:6e:33:ce:8c: eb:c8:19:c3:27:07:b4:b0:44:b3:61:22:6f:fe:eb:5d:4d:4a: 6d:70:37:58:38:4e:df:79:a5:09:7c:60:66:2e:45:a5:17:57: fc:23:3b:9b:e6:52:94:ad:ba:5f:d3:0c:65:e0:3e:33:8e:bf: 8e:bb:36:f1:4a:b9:ad:b5:61:20:6a:e6:eb:81:6c:c4:5a:9c: 09:be:96:ae:65:45:63:f2:3e:fa:1f:bf:87:05:b1:45:d2:81: 52:62:1e:32:a4:f1:d2:10:b4:25:6a:2e:17:3f:f1:7b:0c:9d: 59:12:98:9d:54:0b:97:c9:d6:ec:15:e4:b1:55:5c:aa:d5:d5: b2:16:e5:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRBKDLWnSGqxDDq5vpbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMjZjNjNkZTdmZmEzMTVlMjAyNWQ2OTY3MGQ3NTc1MjU5 ZmY3YzcwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD EygyMzg1OTY1ZmI1OTRiYWQ0ZDAyNzJmYmU5NTY1NmExYjFmNWRjNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g9gzlPhojNAWBTIoFI0ddfZL6fP XtGFoGlbi/GVRfeQb1u5gyRvpWpv6Ifth9nDiJuI6F9REWufJTAdYwHUgS2wUmgB zG5bckJkQZRpHg+zFOwgU49TMl5X7/ucDcWxLxD9bjDGDQbDtYZVEu6v4vilIgY2 K2Glj0QEcwHVz6HGIGBJKbg8cvq2+7dbLaV54Wy0KnnVin+r1QU33tZWYYkB/DRb MBiG3adpcPpjRUQYMtwVwpMibzQ/J5UxrtQubj+mADItKbKEaE2H63K+nMo1Ssyx dLMULXVqaXx3yQFD53yJWULngUWY+pXg1KWA0e6sFjAGY7pPq/wCDNI5MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOFll+1lLrU0CcvvpVlahsfXcQHMB8GA1UdIwQY MBaAFHMmxj3n/6MV4gJdaWcNdXUln/fHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xZGNlYTktYjNhMS00MGY2LWI2ZmYt Y2RkM2U1NWVhNGZjLzEvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xZGNlYTktYjNhMS00MGY2LWI2ZmYtY2RkM2U1NWVhNGZj LzEvY3liR1BlZl9veFhpQWwxcFp3MTFkU1dmOThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3s5HIdo lr5tOT5IzDJWKWI29VFg2LAKTrcB0LHDXdnEt2Du1QAv2FD+snrAmSYpLCI4fDCf QnwAhzW6AFOtmvUq6QL+plpWiogi6g0UMUDu1Nsch4uEdsd9wqSA5G3rf8Xr2J8B i39rCdm9VASrhwX0ag0e5cbVydduM86M68gZwycHtLBEs2Eib/7rXU1KbXA3WDhO 33mlCXxgZi5FpRdX/CM7m+ZSlK26X9MMZeA+M46/jrs28Uq5rbVhIGrm64FsxFqc Cb6WrmVFY/I++h+/hwWxRdKBUmIeMqTx0hC0JWouFz/xewydWRKYnVQLl8nW7BXk sVVcqtXVshbljQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:32 2025 by rpki-client