This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json) Hash identifier: ueJdrFM/oP3BPkz8UkK+Bx4dn8In0p0Cs85VdNW0LpQ= Subject key identifier: FB:57:A0:33:25:D9:92:65:75:56:DE:DD:2C:20:16:04:C6:80:01:89 Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21 Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621 Certificate serial: 019B2B1CE95223167266C2AEC287C33A6216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 07:01:13 +0000 Manifest this update: Wed 17 Dec 2025 07:01:13 +0000 Manifest next update: Thu 18 Dec 2025 07:01:13 +0000 Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: +38SKagx979x342b+TQxXRg9AcTD1VDoP9bXyQhokqM=) 2: azMfriENBDiIJYosRP-8DXKTAfY.roa (hash: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=) 3: ibvrneMp14yx1aeNF9L_aPTpyR8.roa (hash: VZVseX73bEIVKUE/+ZPW5JNub6b1T9krDYglkTTQtpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:e9:52:23:16:72:66:c2:ae:c2:87:c3:3a:62:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621 Validity Not Before: Dec 17 07:01:13 2025 GMT Not After : Dec 18 07:01:13 2025 GMT Subject: CN=fb57a03325d992657556dedd2c201604c6800189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:ff:a6:05:0b:56:0b:fe:ec:12:21:de:a3: 66:80:b0:55:38:0d:5f:63:69:b9:8a:ae:85:50:5c: 60:0e:38:5a:e0:69:69:91:e0:cf:6b:9f:ab:34:f1: bc:3a:83:17:40:24:1b:e1:2b:a1:43:4d:87:8a:42: 7f:56:e1:58:de:29:1f:39:17:19:ac:a2:d4:75:a2: e8:d4:f4:39:bd:18:5c:62:7e:c8:50:57:a2:26:9e: 87:78:c6:ca:60:28:8e:b1:09:7f:ee:ff:7d:ab:ba: 18:1d:b3:63:cd:23:7c:0c:07:00:b7:90:64:33:71: f5:ca:76:f1:13:0e:aa:80:a7:63:55:9b:be:ac:d8: 02:4b:b7:7d:9e:ef:ee:4f:97:50:d4:47:d1:d4:89: aa:9a:e6:20:13:6d:7d:57:24:e0:6b:be:23:d4:d6: f3:6a:48:49:4b:a1:e6:6d:95:2c:34:e8:a1:c8:2d: f1:7d:75:85:fb:1c:82:6e:3c:ac:8a:e4:0f:37:1f: 2d:a2:03:33:5e:12:d6:7b:db:ce:b5:e0:32:98:67: 83:c7:4e:9a:ef:60:66:be:ee:b2:51:14:01:a8:36: 34:94:e7:f2:fb:f2:e3:9f:66:44:46:65:3e:da:92: 5e:fe:9b:78:ec:81:bd:ce:c8:26:29:a7:5e:35:d9: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:A0:33:25:D9:92:65:75:56:DE:DD:2C:20:16:04:C6:80:01:89 X509v3 Authority Key Identifier: keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4f:bb:e9:62:f9:66:e4:fa:32:a6:e9:c5:11:99:05:ac:e9: 0a:3f:a5:eb:b9:2e:31:c8:e2:c2:0c:25:c3:69:ed:a3:c8:de: 8d:f3:93:71:21:7e:1a:9c:61:43:5e:55:bd:38:be:1c:44:bd: 7c:69:2c:ca:df:9e:1e:8b:72:9d:3b:b9:e7:01:71:46:75:28: a2:6d:ac:5c:6d:ed:b8:fb:95:7b:81:c6:d4:74:22:82:e5:f7: a6:73:a3:05:b9:3b:f4:e2:13:21:57:f3:bc:72:37:a9:e0:fd: 99:76:ce:b8:9b:4e:fc:57:72:f2:22:77:1e:1f:99:23:c8:43: 9d:c6:b0:8b:16:61:4b:05:9b:ee:fd:31:07:3d:5e:12:f1:50: eb:27:4a:77:81:cf:8f:ee:f2:05:1b:97:4c:cf:8b:1e:36:91: 55:e0:0d:54:a4:e0:8a:5b:ee:5d:d7:d0:28:f4:91:09:64:3b: fb:75:33:59:68:1f:18:59:ad:9a:e0:43:89:31:ee:d0:48:fc: 8a:29:4a:00:5b:c6:e2:da:78:f1:2e:ef:ba:07:e8:d8:9c:a4: 86:a5:f1:6f:dc:d4:f1:0f:49:6d:e1:74:44:f0:ca:79:87:3b: e4:3d:30:b6:b6:44:5f:6c:df:3f:28:10:6d:44:46:6d:39:69: 71:a1:e5:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHOlSIxZyZsKuwofDOmIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGIxYzc5YmZhZTEyYTViODdmMzVjOTk4YmI2MGIzZmE0 ZTY2MjEwHhcNMjUxMjE3MDcwMTEzWhcNMjUxMjE4MDcwMTEzWjAzMTEwLwYDVQQD EyhmYjU3YTAzMzI1ZDk5MjY1NzU1NmRlZGQyYzIwMTYwNGM2ODAwMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqD/pgULVgv+7BIh3qNmgLBVOA1f Y2m5iq6FUFxgDjha4GlpkeDPa5+rNPG8OoMXQCQb4SuhQ02HikJ/VuFY3ikfORcZ rKLUdaLo1PQ5vRhcYn7IUFeiJp6HeMbKYCiOsQl/7v99q7oYHbNjzSN8DAcAt5Bk M3H1ynbxEw6qgKdjVZu+rNgCS7d9nu/uT5dQ1EfR1ImqmuYgE219VyTga74j1Nbz akhJS6HmbZUsNOihyC3xfXWF+xyCbjysiuQPNx8togMzXhLWe9vOteAymGeDx06a 72Bmvu6yURQBqDY0lOfy+/Ljn2ZERmU+2pJe/pt47IG9zsgmKadeNdnrWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtXoDMl2ZJldVbe3SwgFgTGgAGJMB8GA1UdIwQY MBaAFAmLHHm/rhKluH81yZi7YLP6TmYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWIt OWI3YzQ0ZGMxOTNiLzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWItOWI3YzQ0ZGMxOTNi LzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME+76WL5 ZuT6MqbpxRGZBazpCj+l67kuMcjiwgwlw2nto8jejfOTcSF+GpxhQ15VvTi+HES9 fGksyt+eHotynTu55wFxRnUoom2sXG3tuPuVe4HG1HQiguX3pnOjBbk79OITIVfz vHI3qeD9mXbOuJtO/Fdy8iJ3Hh+ZI8hDncawixZhSwWb7v0xBz1eEvFQ6ydKd4HP j+7yBRuXTM+LHjaRVeANVKTgilvuXdfQKPSRCWQ7+3UzWWgfGFmtmuBDiTHu0Ej8 iilKAFvG4tp48S7vugfo2JykhqXxb9zU8Q9JbeF0RPDKeYc75D0wtrZEX2zfPygQ bURGbTlpcaHlmQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:09:33 2025 by rpki-client