This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json) Hash identifier: Zaxs//5YDyY/9FB3CyiF6cwTMw5qjGqddDXzKSWScPY= Subject key identifier: 9D:57:ED:74:2E:1D:24:47:48:E9:B1:B3:1E:FF:8C:64:44:A6:3C:DA Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b Certificate serial: 019B405B1B0E142144E3D089234C00AB2364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft Manifest number: 1555 Signing time: Sun 21 Dec 2025 10:01:10 +0000 Manifest this update: Sun 21 Dec 2025 10:01:10 +0000 Manifest next update: Mon 22 Dec 2025 10:01:10 +0000 Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: j2i0xJzl2jTUfEIaPf1TO3Zus9Sl1PQMYgv3LqDA+Kw=) 2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:1b:0e:14:21:44:e3:d0:89:23:4c:00:ab:23:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b Validity Not Before: Dec 21 10:01:10 2025 GMT Not After : Dec 22 10:01:10 2025 GMT Subject: CN=9d57ed742e1d244748e9b1b31eff8c6444a63cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:b7:b1:fd:2c:d5:05:b7:73:53:b5:96:05: d1:53:26:43:03:74:fc:38:cf:79:7c:3c:09:14:93: 5e:98:0b:bf:40:11:ce:b9:fa:3b:69:12:c7:ac:da: 3e:3f:db:fe:2f:cc:de:55:f9:e1:d7:92:8e:e0:8a: ba:9b:c1:8c:7c:fc:cb:6c:05:c6:0e:9b:29:70:d8: 57:90:70:73:6d:62:18:75:31:11:f1:e6:75:bb:e3: aa:34:01:78:e0:c0:1e:fe:66:bb:30:bd:3b:6d:27: c1:47:2d:d2:73:27:c3:d6:69:e2:76:54:e3:69:77: 63:b9:95:b4:dd:bd:aa:5c:83:19:f8:f0:d2:82:3d: 71:8e:02:49:b0:e5:d6:8d:68:97:70:51:47:f0:98: c5:26:ab:83:67:c0:5a:ff:b0:be:87:df:93:e4:1d: e0:14:da:51:4b:39:83:09:40:e2:e2:35:d1:1b:c6: 3f:e2:c0:2f:0a:80:4d:0e:18:89:cd:38:c0:bc:53: 43:e9:c8:5a:c6:a5:50:2b:2a:a7:c7:58:13:66:39: a8:0b:b5:a0:e0:85:38:d5:e3:fe:11:6c:15:a3:ac: 04:19:3c:40:d1:26:4c:c9:b8:74:73:79:e3:46:f3: ba:b9:01:68:71:03:69:3b:1a:4d:ab:92:1c:2f:bf: 30:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:57:ED:74:2E:1D:24:47:48:E9:B1:B3:1E:FF:8C:64:44:A6:3C:DA X509v3 Authority Key Identifier: keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4e:38:8d:af:23:ee:68:9c:20:92:7c:6b:63:34:95:79:b2: 87:c2:13:77:57:af:45:44:e9:dc:82:1d:e9:00:42:fa:5b:03: a6:88:92:a9:fd:8d:64:6d:4f:d7:4f:8b:2b:04:35:88:f1:2a: 1e:3c:fc:a5:c4:be:b5:6d:04:58:b1:ae:84:1c:0f:e8:b7:38: c7:44:2b:e5:77:bd:2c:97:b2:80:ab:f8:1b:30:4b:43:8e:69: 82:d5:ec:7b:5a:cc:ad:20:95:c7:5e:75:cb:b0:9d:68:7f:76: 85:46:c1:fd:9e:f3:91:ac:ff:39:68:8b:32:68:46:7b:94:3f: b1:e2:97:4d:db:4e:0d:48:70:b7:2a:de:60:65:a3:78:48:08: 5b:6e:ed:86:81:85:1d:25:21:49:6a:c3:21:15:17:fe:f4:d8: 54:68:4b:34:fc:e2:e6:c9:c1:37:82:82:b3:b8:4c:5e:3c:64: 67:8b:c0:0b:70:5a:51:de:72:8b:72:06:f1:82:f6:93:f0:c5: 46:33:e9:fc:b0:f8:08:67:77:67:45:13:e1:7d:00:fb:1c:2f: 0a:ec:21:d8:9d:5d:9a:51:42:57:ec:7a:60:1c:c1:c4:cc:12: 46:45:5b:22:e1:32:86:ca:66:bf:32:79:ce:b5:54:af:0c:0e: da:29:b3:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxsOFCFE49CJI0wAqyNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4 NjM4NWIwHhcNMjUxMjIxMTAwMTEwWhcNMjUxMjIyMTAwMTEwWjAzMTEwLwYDVQQD Eyg5ZDU3ZWQ3NDJlMWQyNDQ3NDhlOWIxYjMxZWZmOGM2NDQ0YTYzY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwu3sf0s1QW3c1O1lgXRUyZDA3T8 OM95fDwJFJNemAu/QBHOufo7aRLHrNo+P9v+L8zeVfnh15KO4Iq6m8GMfPzLbAXG DpspcNhXkHBzbWIYdTER8eZ1u+OqNAF44MAe/ma7ML07bSfBRy3ScyfD1mnidlTj aXdjuZW03b2qXIMZ+PDSgj1xjgJJsOXWjWiXcFFH8JjFJquDZ8Ba/7C+h9+T5B3g FNpRSzmDCUDi4jXRG8Y/4sAvCoBNDhiJzTjAvFND6chaxqVQKyqnx1gTZjmoC7Wg 4IU41eP+EWwVo6wEGTxA0SZMybh0c3njRvO6uQFocQNpOxpNq5IcL78wGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1X7XQuHSRHSOmxsx7/jGREpjzaMB8GA1UdIwQY MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4 LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU44ja8j 7micIJJ8a2M0lXmyh8ITd1evRUTp3IId6QBC+lsDpoiSqf2NZG1P10+LKwQ1iPEq Hjz8pcS+tW0EWLGuhBwP6Lc4x0Qr5Xe9LJeygKv4GzBLQ45pgtXse1rMrSCVx151 y7CdaH92hUbB/Z7zkaz/OWiLMmhGe5Q/seKXTdtODUhwtyreYGWjeEgIW27thoGF HSUhSWrDIRUX/vTYVGhLNPzi5snBN4KCs7hMXjxkZ4vAC3BaUd5yi3IG8YL2k/DF RjPp/LD4CGd3Z0UT4X0A+xwvCuwh2J1dmlFCV+x6YBzBxMwSRkVbIuEyhspmvzJ5 zrVUrwwO2imzrg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:34 2025 by rpki-client