This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft File: cyrf7tpQvgNppSvklRoJOWh0T2c.mft (raw, json) Hash identifier: DCQ0hg/8nYyZdv1n9+hbmXe7fNSjQQxq9/hav1pWusU= Subject key identifier: AF:5E:A1:83:D7:14:C7:06:66:1B:77:5F:5C:9A:E0:F4:A7:85:46:99 Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67 Certificate issuer: /CN=732adfeeda50be0369a52be4951a093968744f67 Certificate serial: 019AF20991B6E3B5564E3E0462CE7CAA1726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: cyrf7tpQvgNppSvklRoJOWh0T2c.crl (hash: KZYZPv9HDoEIEyACkz7GuQm1NzA5byOMe/NMyaL5ru4=) 2: iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa (hash: LWKn33EIgWdLazFAzsPhYYYyYUHzgB/1rOhW1vxG50c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:91:b6:e3:b5:56:4e:3e:04:62:ce:7c:aa:17:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732adfeeda50be0369a52be4951a093968744f67 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=af5ea183d714c706661b775f5c9ae0f4a7854699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:a2:6a:71:8e:0f:e5:95:27:20:15:dd:e2: 5e:e5:23:c7:d7:1d:43:d1:85:cc:b0:ba:1a:a6:f3: 68:ae:ee:a4:da:d4:c7:d5:87:64:58:59:f8:1a:dc: 72:42:a1:b6:4f:11:a4:bb:3d:24:3c:5e:cd:97:22: 1d:6f:53:23:d2:0a:26:c2:ac:1d:ee:a6:d3:c9:8b: 78:11:ed:cc:29:84:76:32:54:0e:3a:5a:80:2b:2d: ef:22:6d:82:b4:e6:4b:a0:96:25:04:00:d6:4b:b7: 2a:f6:00:5b:e2:73:39:a9:62:21:f0:dd:72:e9:5e: 78:7a:0e:d5:ce:9d:c4:bf:b5:5f:11:25:7f:f5:27: 4f:8d:7c:44:a1:0b:db:ca:05:2b:5c:d3:84:47:ea: 51:db:53:ae:c7:c1:f6:62:41:92:ca:f7:aa:47:08: a4:38:f1:c2:82:86:2b:08:65:37:99:e3:fb:ba:d8: 46:99:81:62:43:f5:1c:ca:db:6d:ef:16:cc:22:e4: c3:e0:29:fc:bc:b8:2f:b0:e9:44:b0:bc:eb:c2:16: 20:94:94:22:ce:a0:85:f7:7f:56:55:30:df:d2:4b: 71:cc:da:ef:15:8a:4a:a3:72:06:64:c0:e6:6c:4b: 19:63:bc:02:9b:6f:80:b4:ba:8a:08:44:99:ff:4a: 16:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5E:A1:83:D7:14:C7:06:66:1B:77:5F:5C:9A:E0:F4:A7:85:46:99 X509v3 Authority Key Identifier: keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1a:68:87:1f:59:69:bc:67:b8:e6:00:5d:65:a4:3f:61:bb: 82:9d:17:e0:4c:a8:dd:35:dd:c9:a1:29:5f:38:0a:20:f8:71: 2c:05:0a:c3:6e:6f:20:65:ef:43:9c:f7:14:e6:ef:21:97:5e: d6:f0:4a:c1:7d:20:32:80:15:32:8a:4d:32:a1:e9:f9:73:03: 58:78:bb:63:63:f5:fa:2d:c4:e5:df:2b:77:6e:22:bb:60:87: 3b:80:d4:3b:3c:cd:66:7e:6c:ec:c9:7f:e0:82:4a:97:6d:c7: bc:de:4a:c5:2f:ee:fb:08:65:86:63:30:74:ee:4d:8b:5d:10: 0b:df:6e:40:64:cf:24:1b:91:d2:48:a6:61:4e:bc:d7:2a:28: 70:52:d0:03:02:59:05:52:c7:28:ce:9a:c6:9a:ea:f0:c2:69: b7:1e:b9:d0:db:da:90:06:eb:7d:b7:bc:f4:f2:99:75:c6:5e: 27:a5:8b:a0:15:eb:37:9d:a8:d5:8c:06:12:cc:6d:0d:b5:6c: 9b:06:e1:32:1f:6c:e1:9b:2a:69:45:c6:b7:37:48:79:44:f9: ee:1d:69:5b:ed:aa:cc:90:c3:b0:bb:66:6b:6a:8e:65:9e:25: f5:a6:4e:89:88:f1:ea:f9:48:30:29:8a:20:26:25:0f:b6:30: 21:a7:eb:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZG247VWTj4EYs58qhcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMmFkZmVlZGE1MGJlMDM2OWE1MmJlNDk1MWEwOTM5Njg3 NDRmNjcwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD EyhhZjVlYTE4M2Q3MTRjNzA2NjYxYjc3NWY1YzlhZTBmNGE3ODU0Njk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEqianGOD+WVJyAV3eJe5SPH1x1D 0YXMsLoapvNoru6k2tTH1YdkWFn4GtxyQqG2TxGkuz0kPF7NlyIdb1Mj0gomwqwd 7qbTyYt4Ee3MKYR2MlQOOlqAKy3vIm2CtOZLoJYlBADWS7cq9gBb4nM5qWIh8N1y 6V54eg7Vzp3Ev7VfESV/9SdPjXxEoQvbygUrXNOER+pR21Oux8H2YkGSyveqRwik OPHCgoYrCGU3meP7uthGmYFiQ/Ucyttt7xbMIuTD4Cn8vLgvsOlEsLzrwhYglJQi zqCF939WVTDf0ktxzNrvFYpKo3IGZMDmbEsZY7wCm2+AtLqKCESZ/0oW/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9eoYPXFMcGZht3X1ya4PSnhUaZMB8GA1UdIwQY MBaAFHMq3+7aUL4DaaUr5JUaCTlodE9nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3lyZjd0cFF2Z05wcFN2a2xSb0pPV2gwVDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lNzcyMmItZTU0ZC00MjRkLWI2Yzct ZTMyZDA1ZDE5MjM1LzEvY3lyZjd0cFF2Z05wcFN2a2xSb0pPV2gwVDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lNzcyMmItZTU0ZC00MjRkLWI2YzctZTMyZDA1ZDE5MjM1 LzEvY3lyZjd0cFF2Z05wcFN2a2xSb0pPV2gwVDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRpohx9Z abxnuOYAXWWkP2G7gp0X4Eyo3TXdyaEpXzgKIPhxLAUKw25vIGXvQ5z3FObvIZde 1vBKwX0gMoAVMopNMqHp+XMDWHi7Y2P1+i3E5d8rd24iu2CHO4DUOzzNZn5s7Ml/ 4IJKl23HvN5KxS/u+whlhmMwdO5Ni10QC99uQGTPJBuR0kimYU681yoocFLQAwJZ BVLHKM6axprq8MJptx650NvakAbrfbe89PKZdcZeJ6WLoBXrN52o1YwGEsxtDbVs mwbhMh9s4ZsqaUXGtzdIeUT57h1pW+2qzJDDsLtma2qOZZ4l9aZOiYjx6vlIMCmK ICYlD7YwIafrQA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:33 2025 by rpki-client