This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft File: cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json) Hash identifier: KETd/mYF4pDakQ85ZUp5Qb+bdtOO1umNbUIh+oFqpQ0= Subject key identifier: 23:C3:4F:CF:81:E1:0E:E6:88:6F:6E:97:68:AB:6E:F2:19:0F:29:DE Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7 Certificate serial: 019B4F5FC11202FF29476847FBD810E6B7BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft Manifest number: 0BD2 Signing time: Wed 24 Dec 2025 08:00:33 +0000 Manifest this update: Wed 24 Dec 2025 08:00:33 +0000 Manifest next update: Thu 25 Dec 2025 08:00:33 +0000 Files and hashes: 1: 6mH1yDlUh6pG9RleZb3EGXu59Zg.roa (hash: etKxea+yPAs2ZwU2gpdjs53mOsUOx8jQ/xZdi5xgXfI=) 2: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: PeZ3FjwGwv6eqPyxuqoNHOI3MMXbA4WhE8+/bYdulXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:c1:12:02:ff:29:47:68:47:fb:d8:10:e6:b7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7 Validity Not Before: Dec 24 08:00:33 2025 GMT Not After : Dec 25 08:00:33 2025 GMT Subject: CN=23c34fcf81e10ee6886f6e9768ab6ef2190f29de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:f0:ca:d6:d0:08:c8:1d:d8:6e:ab:07:df: 12:5c:00:9c:26:d8:9e:2e:0d:54:97:f7:97:d0:32: 0b:e4:14:62:30:98:cb:ca:6a:fc:bc:eb:fb:1f:97: 64:c3:d4:d2:74:d6:52:a0:a9:9d:ed:3c:ec:6f:77: 21:4a:ed:34:b6:80:57:f7:95:fa:fd:43:8f:38:79: 00:0b:e1:37:bb:62:5e:6f:cb:8d:3d:54:ff:c0:75: 9c:ed:6a:b5:d8:5e:0a:91:db:26:7e:40:89:5d:ae: 64:4a:92:ca:52:64:d9:37:6c:d1:01:8f:65:0b:3b: a3:42:74:f9:39:a4:de:a9:8a:7c:de:30:ff:e2:20: da:81:8d:cb:e1:61:1a:bf:87:bc:7c:7d:59:65:c9: ba:48:7b:e8:b6:d0:e8:f4:1c:3a:ce:79:9f:1d:6f: be:83:2f:a8:3b:ec:a6:dc:af:a3:c9:e2:69:bd:60: 06:46:1c:ad:96:eb:ce:62:f7:34:05:8c:f8:40:b9: 7e:23:ff:0a:7a:73:4e:ea:91:97:13:a5:49:bd:48: 7f:47:95:13:e5:5e:1e:0b:36:e6:b5:a3:fa:83:2b: 54:4d:6c:60:2d:16:d3:36:ac:ac:8f:d0:f3:f4:fe: 38:4f:85:5a:e5:89:c4:af:65:83:0a:e4:1d:18:50: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C3:4F:CF:81:E1:0E:E6:88:6F:6E:97:68:AB:6E:F2:19:0F:29:DE X509v3 Authority Key Identifier: keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:88:27:0d:46:03:b3:dd:15:93:35:3e:a9:aa:76:13:ed:ff: 55:87:9e:aa:97:9a:3b:bd:0c:b4:a5:27:61:5d:92:7e:6d:30: 44:70:7e:03:fe:87:40:5b:dd:b3:34:7a:b1:b0:64:3c:cb:c9: 32:f5:3d:d7:a5:f9:1f:24:b6:de:03:71:db:de:95:92:fb:82: fc:49:78:fd:7f:5f:0a:aa:24:58:4f:27:11:d1:5a:b8:6b:70: e3:91:f8:e5:5f:85:c4:2b:13:22:7a:80:84:02:e5:21:af:c9: e2:b3:b6:35:18:71:bd:7e:3d:7b:e8:68:89:6c:db:62:78:cc: e4:e7:9e:5b:aa:8a:39:82:5c:fd:1b:66:f1:70:c6:2f:96:a1: a5:7a:a9:b4:e0:7a:cd:4e:12:73:d9:85:93:e4:84:12:fc:6b: 57:97:25:ae:d1:a7:88:51:21:ea:78:0c:71:f4:70:68:ae:36: 12:4c:7e:83:ff:32:86:3e:e8:42:54:0c:9b:b5:c4:9d:23:c3: 74:67:86:c8:57:01:83:ab:ca:b8:ca:8f:e1:1a:df:4d:f4:6a: 93:42:96:a1:3f:05:68:50:f0:43:7a:a9:16:49:32:69:c8:6c: 13:d6:11:9f:b2:59:af:6e:f1:6b:8d:cd:7c:f0:7c:94:d6:31: 09:9f:1f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX8ESAv8pR2hH+9gQ5re9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMjk0NGE4NTM4MzU1YjJhZWM3NjY0NWZkOTQ5NDQ4OGFl NzAyZTcwHhcNMjUxMjI0MDgwMDMzWhcNMjUxMjI1MDgwMDMzWjAzMTEwLwYDVQQD EygyM2MzNGZjZjgxZTEwZWU2ODg2ZjZlOTc2OGFiNmVmMjE5MGYyOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VfwytbQCMgd2G6rB98SXACcJtie Lg1Ul/eX0DIL5BRiMJjLymr8vOv7H5dkw9TSdNZSoKmd7Tzsb3chSu00toBX95X6 /UOPOHkAC+E3u2Jeb8uNPVT/wHWc7Wq12F4KkdsmfkCJXa5kSpLKUmTZN2zRAY9l CzujQnT5OaTeqYp83jD/4iDagY3L4WEav4e8fH1ZZcm6SHvottDo9Bw6znmfHW++ gy+oO+ym3K+jyeJpvWAGRhytluvOYvc0BYz4QLl+I/8KenNO6pGXE6VJvUh/R5UT 5V4eCzbmtaP6gytUTWxgLRbTNqysj9Dz9P44T4Va5YnEr2WDCuQdGFBofwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPDT8+B4Q7miG9ul2irbvIZDyneMB8GA1UdIwQY MBaAFHMpRKhTg1WyrsdmRf2UlEiK5wLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMt YzJjZjQ1M2MzZTJlLzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMtYzJjZjQ1M2MzZTJl LzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIgnDUYD s90VkzU+qap2E+3/VYeeqpeaO70MtKUnYV2Sfm0wRHB+A/6HQFvdszR6sbBkPMvJ MvU916X5HyS23gNx296VkvuC/El4/X9fCqokWE8nEdFauGtw45H45V+FxCsTInqA hALlIa/J4rO2NRhxvX49e+hoiWzbYnjM5OeeW6qKOYJc/Rtm8XDGL5ahpXqptOB6 zU4Sc9mFk+SEEvxrV5clrtGniFEh6ngMcfRwaK42Ekx+g/8yhj7oQlQMm7XEnSPD dGeGyFcBg6vKuMqP4RrfTfRqk0KWoT8FaFDwQ3qpFkkyachsE9YRn7JZr27xa43N fPB8lNYxCZ8fqg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:17 2025 by rpki-client