This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json) Hash identifier: qj9WZZHfDERkjhgBW8FVQX+w2ELnvNecRKIwnMEd0gc= Subject key identifier: 3C:96:5D:F6:BC:7A:00:E7:D6:59:B7:72:B6:80:96:F1:BC:0B:6E:76 Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b Certificate serial: 019AF12D4F6BA2A318B0266E4B0A509F489E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft Manifest number: 152C Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: 4eFi8oHL440Nuny1+VvuwCk5DKfCZxtd0OW1FtVTrsc=) 2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4f:6b:a2:a3:18:b0:26:6e:4b:0a:50:9f:48:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=3c965df6bc7a00e7d659b772b68096f1bc0b6e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:37:82:e5:2b:8c:04:f0:21:da:d4:f2:aa: a1:3c:d4:d9:05:f6:00:fc:9e:a6:0e:d2:d9:00:46: dd:0e:fb:30:e6:06:e7:92:7f:b2:8d:47:52:3b:c5: 14:5c:3a:d9:96:88:7d:15:97:ff:6b:ad:d0:07:4e: 45:0d:a3:24:36:4d:01:93:f9:98:c6:57:79:c0:35: dc:da:13:91:17:07:5e:fa:22:c1:12:35:7f:09:a6: b4:49:17:31:96:ff:19:c9:08:f8:54:68:b4:90:02: 52:c2:25:d1:b9:a4:20:20:a8:c9:80:8a:28:f1:8e: c7:ae:dc:2b:f9:e6:10:d1:88:0f:75:05:62:fe:d0: 53:03:70:27:21:4c:f2:c8:32:8f:41:ae:55:d5:26: 48:03:76:c7:21:d5:1f:9d:82:b6:5d:52:df:fb:37: f2:f3:08:c8:87:17:8f:b0:1d:08:5c:ac:2e:1d:72: 00:e7:aa:55:20:58:be:af:55:b0:18:69:a1:c6:70: d1:ec:b4:27:b0:42:01:a4:c1:48:69:a1:f6:53:a3: 6d:b8:8e:c0:ba:08:c5:be:cb:6a:9d:40:6a:a5:2e: 20:b1:07:b4:1c:9c:a8:05:54:34:1b:cf:a1:4b:e8: 75:57:d8:9d:aa:93:a7:9d:62:b7:63:16:bb:ae:ae: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:5D:F6:BC:7A:00:E7:D6:59:B7:72:B6:80:96:F1:BC:0B:6E:76 X509v3 Authority Key Identifier: keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7d:08:36:9e:96:7c:4e:c5:b2:00:11:64:ed:37:1c:11:67: 82:65:8d:87:87:54:35:46:fb:ce:4a:47:1f:fd:02:a3:1c:25: c6:7b:96:eb:2a:15:fa:86:2e:c0:5d:c2:48:47:a8:21:5f:3e: 43:3c:3c:c2:3b:a4:c4:2c:95:43:38:9d:bf:75:13:e4:bc:fc: f3:f2:f7:e9:b0:35:21:a7:86:d6:a6:ed:7e:10:70:5f:a0:6e: 3b:77:cd:56:f6:42:03:ad:bf:b3:b4:25:75:e9:8c:75:ce:9f: 39:22:a0:dd:9b:8c:a3:a2:24:88:5a:71:41:db:5a:d6:87:72: b8:8b:b1:74:ee:cb:7f:7c:40:13:44:78:18:b9:66:04:2c:b6: 4d:e4:9a:10:0f:5c:c7:6f:21:2c:e5:20:6b:43:ed:a1:6c:0a: 75:3a:b1:c0:e0:0b:db:ed:15:1e:f8:d5:33:a7:22:20:aa:91: fc:7c:5f:9e:49:58:23:98:4e:9b:bb:e7:a7:9c:00:05:d7:2b: 18:ed:03:e4:cc:b2:6c:ad:2f:43:ef:2c:d4:b4:24:a9:c4:18: 20:92:45:96:e7:e6:f1:88:f3:b3:1a:62:d2:e0:8f:69:6a:bb: 12:7f:18:2d:3b:3e:72:3e:56:61:77:ca:b0:a9:37:44:4f:a5: 32:9d:4a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU9roqMYsCZuSwpQn0ieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4 NjM4NWIwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EygzYzk2NWRmNmJjN2EwMGU3ZDY1OWI3NzJiNjgwOTZmMWJjMGI2ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttg3guUrjATwIdrU8qqhPNTZBfYA /J6mDtLZAEbdDvsw5gbnkn+yjUdSO8UUXDrZloh9FZf/a63QB05FDaMkNk0Bk/mY xld5wDXc2hORFwde+iLBEjV/Caa0SRcxlv8ZyQj4VGi0kAJSwiXRuaQgIKjJgIoo 8Y7Hrtwr+eYQ0YgPdQVi/tBTA3AnIUzyyDKPQa5V1SZIA3bHIdUfnYK2XVLf+zfy 8wjIhxePsB0IXKwuHXIA56pVIFi+r1WwGGmhxnDR7LQnsEIBpMFIaaH2U6NtuI7A ugjFvstqnUBqpS4gsQe0HJyoBVQ0G8+hS+h1V9idqpOnnWK3Yxa7rq5AjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyWXfa8egDn1lm3craAlvG8C252MB8GA1UdIwQY MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4 LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeX0INp6W fE7FsgARZO03HBFngmWNh4dUNUb7zkpHH/0CoxwlxnuW6yoV+oYuwF3CSEeoIV8+ Qzw8wjukxCyVQzidv3UT5Lz88/L36bA1IaeG1qbtfhBwX6BuO3fNVvZCA62/s7Ql demMdc6fOSKg3ZuMo6IkiFpxQdta1odyuIuxdO7Lf3xAE0R4GLlmBCy2TeSaEA9c x28hLOUga0PtoWwKdTqxwOAL2+0VHvjVM6ciIKqR/HxfnklYI5hOm7vnp5wABdcr GO0D5MyybK0vQ+8s1LQkqcQYIJJFlufm8Yjzsxpi0uCPaWq7En8YLTs+cj5WYXfK sKk3RE+lMp1Kvw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:46 2025 by rpki-client