This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json) Hash identifier: cyfZBet3L+jQWRSoyiR1rjWStPk+wFPDzULgLeQM9+M= Subject key identifier: 1E:39:CC:96:FF:47:B4:FC:02:9F:6C:23:E0:F3:E1:FE:82:E0:23:AF Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b Certificate serial: 019AF31C2BC3EA696A66F9BD0A8535F8433C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft Manifest number: 0F6E Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: +dJfsATtfys3c3XGrKPqbH/SNuGRuHXsGIB7q0PstCk=) 2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2b:c3:ea:69:6a:66:f9:bd:0a:85:35:f8:43:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=1e39cc96ff47b4fc029f6c23e0f3e1fe82e023af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:93:f1:d1:3e:97:1a:c7:c9:26:05:64:78: 47:fb:51:9f:80:74:e0:3e:33:13:7e:2f:20:91:58: e5:1f:7f:0e:40:e8:15:b6:00:0b:3c:86:1d:c0:57: db:65:eb:bd:af:96:7d:cf:4e:7a:48:7f:3b:29:a1: 13:1d:d7:c2:32:79:7e:35:8a:1a:99:90:8a:74:bd: e3:27:ca:b4:f0:25:5a:5d:8e:16:b0:bc:d1:f8:e2: 07:78:11:fa:b5:df:3b:8b:c0:24:08:24:ee:e1:e9: 6b:d5:11:aa:f3:2d:dc:58:b6:14:7a:42:e3:a0:63: 23:f6:7e:95:15:be:dc:82:c5:65:a4:15:63:a8:89: 0d:2b:3c:e3:42:97:6b:86:01:d9:50:7e:ab:7a:51: 2d:23:6e:4d:72:3b:7f:e4:98:94:93:a7:8d:1a:41: d3:16:60:dc:38:09:6f:81:30:39:0e:1b:13:ec:9f: 72:e1:30:a2:60:af:b7:5e:79:78:2c:c8:a9:4a:6a: db:df:bc:33:23:ba:11:5f:32:8d:6d:4f:65:26:4f: 21:32:b5:f3:db:7a:93:5e:81:c2:a5:73:60:4d:84: ef:8e:ab:de:94:62:0e:27:e6:2a:af:57:c7:83:a7: 8b:9e:33:09:b7:2b:81:0b:31:bf:5e:42:9e:97:a6: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:39:CC:96:FF:47:B4:FC:02:9F:6C:23:E0:F3:E1:FE:82:E0:23:AF X509v3 Authority Key Identifier: keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:82:3c:ae:e1:47:19:97:fb:2f:ca:2b:60:a9:57:f8:ee:d1: 0c:d7:40:20:d4:53:9b:60:9a:a7:dc:b4:bf:c1:77:cf:0f:c9: c7:44:b1:c5:64:cb:ba:7c:4d:38:03:d7:70:8e:39:05:be:17: ce:0a:2a:ed:42:60:57:a2:b8:e9:fd:6b:02:90:94:77:38:21: 26:86:1c:15:c8:90:2e:5c:33:73:9d:c3:70:8e:97:89:5d:8d: 5b:32:38:e4:25:89:a5:32:31:70:4b:b2:21:64:e4:e4:22:40: b6:32:b3:9e:09:cc:40:41:a5:4e:8b:84:54:6a:34:b7:68:17: 64:d8:d6:15:38:42:95:2c:cc:1e:11:58:78:48:9d:e1:48:be: ba:a6:3a:f9:96:bd:91:a8:3f:97:4e:4a:f4:76:c0:53:a2:a3: 0f:e1:b3:f2:94:c3:55:6f:11:36:70:03:df:eb:99:de:a9:04: 0a:a5:af:40:a5:55:9f:1a:0a:27:c3:b3:9c:f1:10:56:2e:05: e7:42:70:5c:85:97:16:77:b9:ed:e1:b0:91:35:8f:ad:e4:2e: d3:bf:82:34:26:e1:f2:b7:19:96:7a:8f:11:7d:75:a3:97:05: ee:4d:af:26:82:e1:16:49:78:15:7a:73:b1:5e:cc:39:0c:89: 25:d9:3d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCvD6mlqZvm9CoU1+EM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMmVkMjQ3MDNkMzM0YjExY2QyMmVlNDg5ZmMzYzY0YmRj MDZmNGIwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD EygxZTM5Y2M5NmZmNDdiNGZjMDI5ZjZjMjNlMGYzZTFmZTgyZTAyM2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKuT8dE+lxrHySYFZHhH+1GfgHTg PjMTfi8gkVjlH38OQOgVtgALPIYdwFfbZeu9r5Z9z056SH87KaETHdfCMnl+NYoa mZCKdL3jJ8q08CVaXY4WsLzR+OIHeBH6td87i8AkCCTu4elr1RGq8y3cWLYUekLj oGMj9n6VFb7cgsVlpBVjqIkNKzzjQpdrhgHZUH6relEtI25Ncjt/5JiUk6eNGkHT FmDcOAlvgTA5DhsT7J9y4TCiYK+3Xnl4LMipSmrb37wzI7oRXzKNbU9lJk8hMrXz 23qTXoHCpXNgTYTvjqvelGIOJ+Yqr1fHg6eLnjMJtyuBCzG/XkKel6YpbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB45zJb/R7T8Ap9sI+Dz4f6C4COvMB8GA1UdIwQY MBaAFAsu0kcD0zSxHNIu5In8PGS9wG9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEt YjY0ODhhZWM1MzNiLzEvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS83MTcwZTAtYTA0My00Yjc4LWFhYjEtYjY0ODhhZWM1MzNi LzEvQ3k3U1J3UFROTEVjMGk3a2lmdzhaTDNBYjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4I8ruFH GZf7L8orYKlX+O7RDNdAINRTm2Cap9y0v8F3zw/Jx0SxxWTLunxNOAPXcI45Bb4X zgoq7UJgV6K46f1rApCUdzghJoYcFciQLlwzc53DcI6XiV2NWzI45CWJpTIxcEuy IWTk5CJAtjKzngnMQEGlTouEVGo0t2gXZNjWFThClSzMHhFYeEid4Ui+uqY6+Za9 kag/l05K9HbAU6KjD+Gz8pTDVW8RNnAD3+uZ3qkECqWvQKVVnxoKJ8OznPEQVi4F 50JwXIWXFne57eGwkTWPreQu07+CNCbh8rcZlnqPEX11o5cF7k2vJoLhFkl4FXpz sV7MOQyJJdk9aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:09 2025 by rpki-client