This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft File: cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json) Hash identifier: 0lF1YEQP8bgZqEiNQMIAiVY7Hla1sYNbMe6/RI71c04= Subject key identifier: 66:FD:DA:3D:B5:39:B4:22:E7:F9:08:C3:45:0C:E8:4A:92:4F:8E:E1 Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61 Certificate issuer: /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561 Certificate serial: 019AF2AD831E417C9510786E424562809CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=) 2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: DIhjuu4Cu9Y/tTrT4s3+/pYTPsYtENHMT0WrEdvIE5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:83:1e:41:7c:95:10:78:6e:42:45:62:80:9c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561 Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=66fdda3db539b422e7f908c3450ce84a924f8ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8c:94:ee:76:cb:ce:65:bd:fc:01:75:c4:09: 7b:0c:cb:b7:ad:33:db:44:8a:a4:be:a1:3f:39:ed: af:64:cb:ab:ed:1d:d5:1e:c4:33:91:a8:ae:19:19: 30:30:4e:44:46:d6:60:5c:c8:6a:ec:4f:e6:af:6f: 0b:ac:b3:d6:3b:ec:73:27:b4:66:04:8c:f0:9a:3c: c7:3e:21:e7:e9:10:f9:92:94:de:20:b0:9d:c2:5f: d3:99:27:5c:d8:9b:46:4d:31:5f:54:ea:80:89:df: 22:e6:87:05:84:1f:eb:04:28:d7:d8:24:47:82:7a: e1:49:dc:29:e8:cf:b8:ff:5f:7c:aa:52:a0:4a:fe: cd:50:f4:09:d8:fc:9b:7a:49:cc:ac:4b:4e:a9:e5: 01:e0:26:16:70:30:f2:b2:c3:9b:da:9f:df:a6:86: 82:45:e2:85:94:6f:31:7a:10:16:d7:cc:60:67:6e: c2:c5:68:8b:82:fc:25:f3:35:68:cd:fa:78:a9:8a: 2d:5d:3c:79:70:55:a4:8e:d9:2c:0a:21:a3:4f:a5: 4b:64:ca:82:3c:d6:9c:dd:31:8d:c4:5d:5e:16:63: d0:96:9b:d4:27:22:42:9f:4f:c8:74:81:05:fb:29: f9:5d:9d:12:ae:9f:f7:21:e7:5f:79:cb:81:87:93: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FD:DA:3D:B5:39:B4:22:E7:F9:08:C3:45:0C:E8:4A:92:4F:8E:E1 X509v3 Authority Key Identifier: keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8c:5d:02:54:87:a6:36:3d:fe:cf:38:36:69:19:9c:e2:95: 50:7d:03:c6:fa:67:84:2d:26:2e:81:29:b6:9d:73:43:d2:38: d5:c6:52:16:e1:9f:08:6f:ce:2e:12:50:22:66:cd:09:00:82: 19:92:d9:ef:2d:36:1c:82:15:bf:3c:e5:09:a0:32:80:ab:31: 96:7a:ea:cb:a1:b6:89:dd:98:13:e3:4f:50:96:49:4a:a1:27: 7e:26:92:88:31:ca:e8:3a:d1:a1:80:8c:f4:3e:d5:25:24:79: a7:09:f8:20:c0:61:d1:ad:b8:3b:3c:1d:16:fa:29:cf:83:c1: 8a:48:d2:f1:cb:5d:fe:21:21:63:d7:c2:5b:99:b6:d9:b2:8c: 42:34:3a:10:6e:34:47:47:14:db:9f:09:08:f7:04:c1:59:ed: fd:9c:28:57:09:11:b3:31:83:2f:d7:ca:e3:eb:33:22:5a:68: 61:73:e3:36:28:40:89:56:21:fd:68:bf:67:a6:2e:29:be:78: c9:d4:93:72:50:79:95:6b:d2:42:b0:d4:70:eb:ea:03:2b:7c: 1e:80:15:2c:82:1f:ff:de:75:1f:38:0f:28:fe:87:04:ed:33: 9a:14:c1:b4:40:92:64:91:21:fc:9b:62:15:8f:f4:78:f8:4a: 14:ff:d0:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYMeQXyVEHhuQkVigJzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMjYwYWFmZWZlMmVlMDcyZTQwNjJlN2JmMWFiOGQ5YzQy MDg1NjEwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD Eyg2NmZkZGEzZGI1MzliNDIyZTdmOTA4YzM0NTBjZTg0YTkyNGY4ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64yU7nbLzmW9/AF1xAl7DMu3rTPb RIqkvqE/Oe2vZMur7R3VHsQzkaiuGRkwME5ERtZgXMhq7E/mr28LrLPWO+xzJ7Rm BIzwmjzHPiHn6RD5kpTeILCdwl/TmSdc2JtGTTFfVOqAid8i5ocFhB/rBCjX2CRH gnrhSdwp6M+4/198qlKgSv7NUPQJ2PybeknMrEtOqeUB4CYWcDDyssOb2p/fpoaC ReKFlG8xehAW18xgZ27CxWiLgvwl8zVozfp4qYotXTx5cFWkjtksCiGjT6VLZMqC PNac3TGNxF1eFmPQlpvUJyJCn0/IdIEF+yn5XZ0Srp/3IedfecuBh5NItQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb92j21ObQi5/kIw0UM6EqST47hMB8GA1UdIwQY MBaAFHMmCq/v4u4HLkBi578auNnEIIVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zNmMyYjgtMTJkZi00NTUyLTlhMWUt OGFkMGYwNjhkMTYxLzEvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8zNmMyYjgtMTJkZi00NTUyLTlhMWUtOGFkMGYwNjhkMTYx LzEvY3lZS3ItX2k3Z2N1UUdMbnZ4cTQyY1FnaFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoxdAlSH pjY9/s84NmkZnOKVUH0DxvpnhC0mLoEptp1zQ9I41cZSFuGfCG/OLhJQImbNCQCC GZLZ7y02HIIVvzzlCaAygKsxlnrqy6G2id2YE+NPUJZJSqEnfiaSiDHK6DrRoYCM 9D7VJSR5pwn4IMBh0a24OzwdFvopz4PBikjS8ctd/iEhY9fCW5m22bKMQjQ6EG40 R0cU258JCPcEwVnt/ZwoVwkRszGDL9fK4+szIlpoYXPjNihAiVYh/Wi/Z6YuKb54 ydSTclB5lWvSQrDUcOvqAyt8HoAVLIIf/951HzgPKP6HBO0zmhTBtECSZJEh/Jti FY/0ePhKFP/Q5A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:23 2025 by rpki-client