This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json) Hash identifier: bx9ArDpbLeROr8FX/eg8d7yudS9LNsL6IuLGKIBCBgI= Subject key identifier: DD:83:24:65:FF:A6:54:A2:89:7F:A6:64:82:E3:B8:92:04:AE:85:B0 Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019B41001D46D93FA360B7EBF99C98CE0A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft Manifest number: 0C3B Signing time: Sun 21 Dec 2025 13:01:25 +0000 Manifest this update: Sun 21 Dec 2025 13:01:25 +0000 Manifest next update: Mon 22 Dec 2025 13:01:25 +0000 Files and hashes: 1: A48VLfLas4GofoONy0y-iW32tS0.roa (hash: XUwjPqoCqVEzVNtm5ilLL312ff7h/TufDYbq8BzMhcE=) 2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: EjgEreT5l0pi0NS7tVqhfUYut9AnJ1ss8y6LM9/W170=) 3: KK4PgryL9RQ2bV0X4Zecm87C66E.roa (hash: jlHF0tT/m//s5tmxoH49xo4uUVeECgDPKLc+Pykma4M=) 4: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=) 5: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=) 6: fCyg3nd-harMTi4pUtJhTBh_cYM.roa (hash: Kcvhuze+vwAD4la29HziGrt0+sJ8/kodFTmW8OQ5Pko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:1d:46:d9:3f:a3:60:b7:eb:f9:9c:98:ce:0a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Dec 21 13:01:25 2025 GMT Not After : Dec 22 13:01:25 2025 GMT Subject: CN=dd832465ffa654a2897fa66482e3b89204ae85b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:6d:f9:73:aa:a9:62:0a:8f:48:cd:56:b4: df:ed:e3:5e:53:45:79:22:97:45:7b:66:4d:16:18: c9:28:f0:b3:8a:df:b7:11:ec:9e:35:c5:18:96:b3: 9b:d0:02:bc:50:f5:37:94:71:62:73:24:6f:a3:ac: b2:8a:5c:68:63:bd:1e:52:bf:b9:34:97:72:41:f4: 7d:f8:61:cb:96:61:97:2c:ae:0f:d7:ef:81:53:30: 1f:df:6b:d9:ed:70:11:9a:92:b3:ae:3f:a0:1f:cf: 71:87:1b:5d:f3:aa:a6:c2:7f:4e:68:37:c3:b5:df: ce:84:06:e4:fc:27:77:ab:79:e1:9f:d2:0f:c9:07: 9e:32:cc:a3:64:db:37:c1:97:c1:d6:38:aa:f5:c7: 14:ff:6f:53:59:46:b1:d7:86:7b:76:3f:1c:d7:7f: c7:91:62:bb:ee:6e:26:c9:0f:ee:62:71:28:70:11: ec:5b:5e:36:96:6a:49:d8:54:00:bc:80:a7:7e:32: 36:e5:12:85:8f:50:cd:4b:d1:c8:a8:06:7a:6d:cb: 89:43:ee:ab:71:c4:f3:a2:c5:06:cb:8f:a8:98:72: 92:75:9f:18:f1:ff:91:18:4f:62:99:19:74:fd:22: dd:c0:5f:27:9a:8d:d5:1c:4f:46:ac:9f:4e:07:9f: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:83:24:65:FF:A6:54:A2:89:7F:A6:64:82:E3:B8:92:04:AE:85:B0 X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:49:92:02:52:b4:25:bd:c7:e2:c7:f8:2d:c3:3e:77:44:2c: 8c:aa:b6:a0:71:4d:48:78:6c:fb:78:9d:b6:8c:3c:e2:e1:22: ec:1a:1b:0c:42:3e:ab:59:ec:8a:1f:aa:56:1c:28:de:0b:97: 08:03:4a:e3:40:3e:de:35:f7:3b:71:98:c0:ab:88:99:81:0b: d1:0f:f2:57:6b:c1:fe:cf:06:aa:cb:7a:d5:13:15:34:66:99: e4:41:0e:49:c8:8f:64:f9:fe:cd:23:44:e1:fd:5c:e3:d9:d2: 53:60:cd:09:8f:78:bb:a2:97:9a:41:4f:18:d9:1b:f3:e8:73: 69:bb:5b:95:1b:c1:6d:48:42:e4:7e:6a:c9:75:f9:fa:d7:c4: e0:3d:b6:69:74:41:3c:e5:25:01:e2:68:86:98:10:97:af:ec: 6d:de:47:3f:dd:e0:dd:f9:68:d1:b5:8f:f4:2f:38:3e:a0:eb: 7e:3f:da:c7:0e:af:81:80:68:0f:ee:dc:9d:b3:6f:d1:14:68: 70:20:6f:e7:e1:ce:d1:ea:81:8c:86:d9:0d:b4:83:d2:b2:f8: e8:99:7d:ff:a2:bd:04:2e:73:39:63:0e:56:9b:6b:b0:b6:a2: cc:96:32:4e:70:aa:8a:57:26:c9:25:b8:8f:e1:6c:a4:cf:d8: 40:38:c8:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAB1G2T+jYLfr+ZyYzgoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjUxMjIxMTMwMTI1WhcNMjUxMjIyMTMwMTI1WjAzMTEwLwYDVQQD EyhkZDgzMjQ2NWZmYTY1NGEyODk3ZmE2NjQ4MmUzYjg5MjA0YWU4NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZdt+XOqqWIKj0jNVrTf7eNeU0V5 IpdFe2ZNFhjJKPCzit+3EeyeNcUYlrOb0AK8UPU3lHFicyRvo6yyilxoY70eUr+5 NJdyQfR9+GHLlmGXLK4P1++BUzAf32vZ7XARmpKzrj+gH89xhxtd86qmwn9OaDfD td/OhAbk/Cd3q3nhn9IPyQeeMsyjZNs3wZfB1jiq9ccU/29TWUax14Z7dj8c13/H kWK77m4myQ/uYnEocBHsW142lmpJ2FQAvICnfjI25RKFj1DNS9HIqAZ6bcuJQ+6r ccTzosUGy4+omHKSdZ8Y8f+RGE9imRl0/SLdwF8nmo3VHE9GrJ9OB59wMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2DJGX/plSiiX+mZILjuJIEroWwMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0mSAlK0 Jb3H4sf4LcM+d0QsjKq2oHFNSHhs+3idtow84uEi7BobDEI+q1nsih+qVhwo3guX CANK40A+3jX3O3GYwKuImYEL0Q/yV2vB/s8Gqst61RMVNGaZ5EEOSciPZPn+zSNE 4f1c49nSU2DNCY94u6KXmkFPGNkb8+hzabtblRvBbUhC5H5qyXX5+tfE4D22aXRB POUlAeJohpgQl6/sbd5HP93g3flo0bWP9C84PqDrfj/axw6vgYBoD+7cnbNv0RRo cCBv5+HO0eqBjIbZDbSD0rL46Jl9/6K9BC5zOWMOVptrsLaizJYyTnCqilcmySW4 j+FspM/YQDjIBA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:11:23 2025 by rpki-client