This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json) Hash identifier: InBwBV9J688xTfiixgoOnoG/LiYZaIlJpScJx5jrEnc= Subject key identifier: 5C:A3:F8:C7:62:48:35:00:BD:A4:8C:46:21:AC:D1:6A:46:A4:C2:9F Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019B394679263916E7F5A442DC69AED1768B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft Manifest number: 0C37 Signing time: Sat 20 Dec 2025 01:01:18 +0000 Manifest this update: Sat 20 Dec 2025 01:01:18 +0000 Manifest next update: Sun 21 Dec 2025 01:01:18 +0000 Files and hashes: 1: A48VLfLas4GofoONy0y-iW32tS0.roa (hash: XUwjPqoCqVEzVNtm5ilLL312ff7h/TufDYbq8BzMhcE=) 2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: dzGcLB8oVnleZSDw7A9tOz+7HskLlvX5PTJ5I3wRYOM=) 3: KK4PgryL9RQ2bV0X4Zecm87C66E.roa (hash: jlHF0tT/m//s5tmxoH49xo4uUVeECgDPKLc+Pykma4M=) 4: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=) 5: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=) 6: fCyg3nd-harMTi4pUtJhTBh_cYM.roa (hash: Kcvhuze+vwAD4la29HziGrt0+sJ8/kodFTmW8OQ5Pko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:79:26:39:16:e7:f5:a4:42:dc:69:ae:d1:76:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Dec 20 01:01:18 2025 GMT Not After : Dec 21 01:01:18 2025 GMT Subject: CN=5ca3f8c762483500bda48c4621acd16a46a4c29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:5d:b7:25:b4:0a:6d:64:01:4d:f4:4b:5b: 94:71:98:e4:66:54:57:5d:2c:ee:13:90:4a:0b:a5: bf:87:8b:e7:83:e4:7a:d9:29:9e:74:76:5b:41:dd: c3:d8:96:0b:85:86:29:3b:46:cc:ed:de:b8:0b:9c: 50:f3:85:9e:fe:34:c7:1b:50:24:09:55:6f:91:ad: e8:5d:5d:8f:31:96:59:8e:84:0c:39:f2:5a:f5:24: f0:71:f3:3d:1f:d9:85:9a:41:b4:0e:59:23:95:df: 81:29:ab:24:0a:ba:a2:16:3d:9a:e5:06:82:ed:c1: d0:0c:eb:d9:3d:28:cd:e2:2e:3a:db:d6:c8:1e:25: eb:c4:20:fb:68:ae:72:17:b3:32:ba:70:45:b8:16: b2:aa:4c:f8:7f:b7:3d:7f:41:80:31:f5:4f:41:01: c7:f8:14:86:b7:f7:03:56:fd:37:85:31:8e:16:30: ee:a5:db:9f:26:2c:0d:71:f3:8c:76:1c:d8:c5:d9: f3:06:6f:3a:3a:6f:e9:fa:15:36:b6:dd:e2:63:54: 62:ad:4f:00:02:0d:e8:37:ad:e9:25:32:c4:7d:49: d6:b1:5f:3f:bc:b2:4f:bf:40:a9:46:49:6d:63:f6: f3:90:b5:75:23:98:91:ca:65:08:b9:88:38:3f:ce: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A3:F8:C7:62:48:35:00:BD:A4:8C:46:21:AC:D1:6A:46:A4:C2:9F X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e1:25:85:79:b4:c8:2d:96:ef:fd:46:bc:20:c5:d3:71:e2: 4c:94:31:9e:19:da:c7:1c:33:11:49:28:e6:be:dc:38:29:7c: 78:49:3d:1d:b1:62:8f:7c:91:71:13:ea:2a:e8:bf:26:1e:51: e9:b2:89:88:ef:e7:cc:ec:a4:db:44:45:0e:03:e5:40:7d:5d: 49:a5:b9:50:ec:1a:aa:e9:da:d7:3f:bc:6d:de:3d:98:67:21: 5e:be:5f:6f:75:35:7c:61:6a:29:06:49:ab:36:ff:90:fa:55: 8b:0f:6a:8e:26:b8:a8:2c:63:60:16:9f:ab:99:ec:23:9f:13: c5:48:4f:d4:33:e5:72:20:05:40:1f:3a:52:db:1e:33:53:7d: 0f:7a:69:c2:89:50:1e:90:a8:e7:bb:b4:c3:0e:2a:ea:8e:1a: d6:6c:b8:ab:32:ce:1c:6d:ef:2b:df:8b:27:ce:c7:15:89:9a: 06:94:b4:4a:22:6f:85:25:ed:22:03:fe:6d:e3:5a:3d:67:dd: c7:92:75:3b:05:ab:b1:51:3b:9b:ca:38:96:b8:49:d7:82:e5: df:92:53:6d:2d:16:e2:61:2c:c4:44:87:e6:de:0c:bb:bc:90: db:12:a4:2f:5f:9e:04:47:5a:60:38:35:a1:c6:c4:ae:62:07: d9:19:d4:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RnkmORbn9aRC3Gmu0XaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjUxMjIwMDEwMTE4WhcNMjUxMjIxMDEwMTE4WjAzMTEwLwYDVQQD Eyg1Y2EzZjhjNzYyNDgzNTAwYmRhNDhjNDYyMWFjZDE2YTQ2YTRjMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6VdtyW0Cm1kAU30S1uUcZjkZlRX XSzuE5BKC6W/h4vng+R62SmedHZbQd3D2JYLhYYpO0bM7d64C5xQ84We/jTHG1Ak CVVvka3oXV2PMZZZjoQMOfJa9STwcfM9H9mFmkG0Dlkjld+BKaskCrqiFj2a5QaC 7cHQDOvZPSjN4i4629bIHiXrxCD7aK5yF7MyunBFuBayqkz4f7c9f0GAMfVPQQHH +BSGt/cDVv03hTGOFjDupdufJiwNcfOMdhzYxdnzBm86Om/p+hU2tt3iY1RirU8A Ag3oN63pJTLEfUnWsV8/vLJPv0CpRkltY/bzkLV1I5iRymUIuYg4P85J5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyj+MdiSDUAvaSMRiGs0WpGpMKfMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceElhXm0 yC2W7/1GvCDF03HiTJQxnhnaxxwzEUko5r7cOCl8eEk9HbFij3yRcRPqKui/Jh5R 6bKJiO/nzOyk20RFDgPlQH1dSaW5UOwaquna1z+8bd49mGchXr5fb3U1fGFqKQZJ qzb/kPpViw9qjia4qCxjYBafq5nsI58TxUhP1DPlciAFQB86UtseM1N9D3ppwolQ HpCo57u0ww4q6o4a1my4qzLOHG3vK9+LJ87HFYmaBpS0SiJvhSXtIgP+beNaPWfd x5J1OwWrsVE7m8o4lrhJ14Ll35JTbS0W4mEsxESH5t4Mu7yQ2xKkL1+eBEdaYDg1 ocbErmIH2RnULw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:25:07 2025 by rpki-client