This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json) Hash identifier: e2iRLfBquLsZf7C9OC1TMGjl6MWAVnVxsY1s9s4MxOk= Subject key identifier: 69:9F:3C:2C:71:39:61:5E:A6:CA:32:96:F7:FE:8C:89:B3:09:12:3E Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Certificate serial: 019B4439369C3BB80D747782A9E8F91EAAA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft Manifest number: 0279 Signing time: Mon 22 Dec 2025 04:02:38 +0000 Manifest this update: Mon 22 Dec 2025 04:02:38 +0000 Manifest next update: Tue 23 Dec 2025 04:02:38 +0000 Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: 8WBWwiBz3xp6IROQT/6lyvLgKKvz57Hn9NoZF0iJvPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:36:9c:3b:b8:0d:74:77:82:a9:e8:f9:1e:aa:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Validity Not Before: Dec 22 04:02:38 2025 GMT Not After : Dec 23 04:02:38 2025 GMT Subject: CN=699f3c2c7139615ea6ca3296f7fe8c89b309123e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:87:60:cd:74:e9:ea:c8:39:c1:33:d3:65:1d: 63:1e:72:de:32:ea:11:79:61:2c:5e:6a:14:83:58: 68:80:1a:3d:db:43:2f:2c:0f:7e:c2:bb:77:01:ba: 7e:2a:9f:ff:6b:4e:e3:48:b6:74:87:6a:3e:fd:0f: 7a:13:3c:17:e7:cd:8d:70:c8:41:a0:8d:d3:50:98: ac:9a:19:09:c2:4c:dc:c4:81:f1:41:9a:20:ea:5f: 4a:64:c2:2a:ca:bf:ab:f6:5e:4e:e3:1c:d2:29:58: a8:a0:81:b8:be:11:ea:c2:0e:73:a1:f8:dd:9f:f1: ff:fc:57:f6:ba:63:3c:96:af:e9:5d:d8:a0:19:51: 5e:36:f1:c5:91:4c:92:ee:72:ea:19:c1:71:8e:88: e8:dd:5d:e5:c6:14:54:99:14:9d:ff:7b:76:c6:55: 0f:d9:a3:92:40:48:68:6d:84:ca:a9:f0:87:5f:d9: cc:99:d8:44:09:11:5a:10:30:14:98:52:be:b6:a9: eb:ce:7e:3b:b4:b8:e3:bb:40:ab:19:7d:18:43:90: 99:3d:12:54:e0:41:fd:b5:96:3f:80:67:70:c5:b5: 8e:8c:43:df:7b:0e:ef:7b:cb:cb:67:0e:93:4b:4b: b3:9e:56:f0:80:3e:28:9f:51:a4:94:9a:fc:81:e5: 8a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:3C:2C:71:39:61:5E:A6:CA:32:96:F7:FE:8C:89:B3:09:12:3E X509v3 Authority Key Identifier: keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:97:b5:77:55:6f:1c:ad:78:1c:16:86:05:a3:1c:2c:b4:74: c6:39:3f:77:df:ac:65:26:30:5b:2d:f3:b0:fd:11:b4:c3:27: 47:7f:73:e2:d3:01:74:38:b3:89:41:62:55:f1:af:0e:d1:dc: 37:e0:8e:5d:f7:45:9f:31:f0:5a:70:9b:f8:b1:96:72:b9:c2: 6f:56:7b:d4:b5:38:de:0b:22:12:23:67:27:b2:79:a9:82:35: bc:a6:a9:9f:42:1c:d7:45:cb:db:d8:05:fb:74:c4:f5:ca:42: 12:61:63:89:16:57:da:fc:19:78:54:86:3f:dc:e0:6a:f3:27: 54:de:85:d8:1c:b4:35:c7:ac:7f:80:28:41:c8:7d:9e:63:29: 8b:54:1f:ca:1a:e1:e0:83:87:e9:5e:13:4e:1f:eb:69:eb:47: 00:15:3c:d4:36:d8:3e:12:0f:47:28:fd:f5:f2:80:ff:90:f3: 6f:0e:f7:54:e0:47:ae:21:44:3a:5d:67:00:cd:e7:5a:c9:ce: 02:1a:e0:f8:37:bf:fd:34:96:d7:0c:df:e2:f3:58:05:2b:0e: dd:6e:07:65:2e:b7:38:f5:72:1e:5c:85:99:c1:bd:9f:bb:56: 95:38:fb:e3:68:70:a0:91:ef:98:ff:3f:4c:17:1a:f6:70:83: e0:b5:7f:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOTacO7gNdHeCqej5HqqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODNmOTI4NmE1ODE3MGNkYmVmNmUwZTQ4ZDBkZjczMTM4 ZGM3NjcwHhcNMjUxMjIyMDQwMjM4WhcNMjUxMjIzMDQwMjM4WjAzMTEwLwYDVQQD Eyg2OTlmM2MyYzcxMzk2MTVlYTZjYTMyOTZmN2ZlOGM4OWIzMDkxMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04dgzXTp6sg5wTPTZR1jHnLeMuoR eWEsXmoUg1hogBo920MvLA9+wrt3Abp+Kp//a07jSLZ0h2o+/Q96EzwX582NcMhB oI3TUJismhkJwkzcxIHxQZog6l9KZMIqyr+r9l5O4xzSKViooIG4vhHqwg5zofjd n/H//Ff2umM8lq/pXdigGVFeNvHFkUyS7nLqGcFxjojo3V3lxhRUmRSd/3t2xlUP 2aOSQEhobYTKqfCHX9nMmdhECRFaEDAUmFK+tqnrzn47tLjju0CrGX0YQ5CZPRJU 4EH9tZY/gGdwxbWOjEPfew7ve8vLZw6TS0uznlbwgD4on1GklJr8geWKOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmfPCxxOWFepsoylvf+jImzCRI+MB8GA1UdIwQY MBaAFAmD+ShqWBcM2+9uDkjQ33MTjcdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQt YWZmOGI5ZWQ5OWM5LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQtYWZmOGI5ZWQ5OWM5 LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZe1d1Vv HK14HBaGBaMcLLR0xjk/d9+sZSYwWy3zsP0RtMMnR39z4tMBdDiziUFiVfGvDtHc N+COXfdFnzHwWnCb+LGWcrnCb1Z71LU43gsiEiNnJ7J5qYI1vKapn0Ic10XL29gF +3TE9cpCEmFjiRZX2vwZeFSGP9zgavMnVN6F2By0Ncesf4AoQch9nmMpi1Qfyhrh 4IOH6V4TTh/raetHABU81DbYPhIPRyj99fKA/5Dzbw73VOBHriFEOl1nAM3nWsnO Ahrg+De//TSW1wzf4vNYBSsO3W4HZS63OPVyHlyFmcG9n7tWlTj742hwoJHvmP8/ TBca9nCD4LV/5Q== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:10 2025 by rpki-client