This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft File: cylEqFODVbKux2ZF_ZSUSIrnAuc.mft (raw, json) Hash identifier: cUGTRHAngytszn+gEAPkDtvKBxpD851/ZOfOJre9hmE= Subject key identifier: 9E:C2:7C:03:1F:39:C3:0B:37:D0:0E:58:B1:3A:81:BE:49:14:2A:AA Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7 Certificate serial: 019B499498659FD6860A086F5657CD424299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft Manifest number: 0BCF Signing time: Tue 23 Dec 2025 05:00:33 +0000 Manifest this update: Tue 23 Dec 2025 05:00:33 +0000 Manifest next update: Wed 24 Dec 2025 05:00:33 +0000 Files and hashes: 1: 6mH1yDlUh6pG9RleZb3EGXu59Zg.roa (hash: etKxea+yPAs2ZwU2gpdjs53mOsUOx8jQ/xZdi5xgXfI=) 2: cylEqFODVbKux2ZF_ZSUSIrnAuc.crl (hash: E7ZaLnV9BvGhqytoTeQyjalr24c9KrY0C487ZwhXPms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:98:65:9f:d6:86:0a:08:6f:56:57:cd:42:42:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7 Validity Not Before: Dec 23 05:00:33 2025 GMT Not After : Dec 24 05:00:33 2025 GMT Subject: CN=9ec27c031f39c30b37d00e58b13a81be49142aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:eb:de:b2:6a:43:fd:31:7d:6a:9d:b2:5a:7a: fc:0d:22:0a:cb:f0:48:7f:7e:cd:01:89:cd:c0:78: 14:de:e1:5d:5d:a1:f7:89:6a:f8:c2:c8:8f:bb:a4: f5:bd:93:34:b9:1b:bb:57:ec:1e:42:84:3c:dc:e9: d6:11:06:96:7a:ee:d8:b7:85:69:1a:71:de:4a:e2: 10:19:24:f8:a4:c2:75:b3:bb:d2:fd:62:b1:fa:e5: 28:86:df:77:a1:0b:81:79:77:b9:f5:9d:e8:ac:e7: 5b:40:a8:bc:30:f2:b7:d2:89:7c:c8:b7:85:82:61: 3e:b5:4e:ae:7c:1b:26:a1:6b:93:90:8c:24:ce:e6: 15:ab:30:61:6c:73:7b:98:46:8a:1f:e9:55:ba:ec: 05:fc:7b:28:ed:b8:e4:08:e4:e5:41:83:e2:28:ac: 27:8e:7c:a2:b3:4a:98:12:78:6e:50:69:bf:3b:f0: 27:6f:de:31:8c:5f:4a:04:07:2c:43:b7:15:e6:8d: 61:36:e2:7b:10:cf:26:3c:25:84:fd:66:38:9d:45: fa:66:00:e0:d2:73:b3:46:35:27:4c:a5:32:05:25: 20:86:d4:22:87:e7:b7:70:cf:52:19:ab:c7:a4:b2: e9:4b:6d:77:38:84:c1:77:cf:21:ea:7f:7f:7f:a7: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C2:7C:03:1F:39:C3:0B:37:D0:0E:58:B1:3A:81:BE:49:14:2A:AA X509v3 Authority Key Identifier: keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1f:e6:53:ff:19:6c:9a:34:b4:39:aa:e4:42:ee:ea:15:1e: fa:d3:58:19:46:67:97:92:a3:86:8d:45:20:8f:f9:34:26:51: a5:3d:4e:d3:d1:24:dd:3b:13:0f:7b:79:c9:dc:96:47:dc:30: 0c:10:41:6b:a4:e0:78:23:7c:1c:c0:4c:bf:0a:fc:d4:90:b6: f3:45:72:9f:30:bb:75:aa:da:2b:a2:1a:48:0c:73:ca:36:a4: 6d:0b:b6:7d:9c:8e:67:9e:f6:77:f1:21:f1:e9:4d:22:34:9c: e5:51:15:2d:fd:70:92:a1:9f:0f:5e:4d:e8:01:7f:57:f3:40: 26:09:c8:82:2f:a4:ad:68:52:53:a6:d5:7e:40:16:ef:65:87: aa:b4:28:87:97:d0:46:c7:e3:89:7e:9d:b3:f8:9d:9f:00:70: 5b:7f:03:70:39:58:31:15:b1:56:0c:b2:14:1c:58:0e:d6:6e: 2d:f8:6f:52:d2:df:bb:7c:ba:db:c3:67:0c:91:42:71:3a:50: 41:21:4e:38:90:4e:50:5c:05:8b:91:46:3b:3c:8d:0d:5e:73: 1e:d2:b8:1d:4d:b2:cb:70:0c:d6:ae:1b:33:1b:b8:5e:20:44: d3:fd:5d:6f:8b:83:aa:9c:74:57:43:84:96:04:1a:8e:93:1c: e6:52:cc:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlJhln9aGCghvVlfNQkKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMjk0NGE4NTM4MzU1YjJhZWM3NjY0NWZkOTQ5NDQ4OGFl NzAyZTcwHhcNMjUxMjIzMDUwMDMzWhcNMjUxMjI0MDUwMDMzWjAzMTEwLwYDVQQD Eyg5ZWMyN2MwMzFmMzljMzBiMzdkMDBlNThiMTNhODFiZTQ5MTQyYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OvesmpD/TF9ap2yWnr8DSIKy/BI f37NAYnNwHgU3uFdXaH3iWr4wsiPu6T1vZM0uRu7V+weQoQ83OnWEQaWeu7Yt4Vp GnHeSuIQGST4pMJ1s7vS/WKx+uUoht93oQuBeXe59Z3orOdbQKi8MPK30ol8yLeF gmE+tU6ufBsmoWuTkIwkzuYVqzBhbHN7mEaKH+lVuuwF/Hso7bjkCOTlQYPiKKwn jnyis0qYEnhuUGm/O/Anb94xjF9KBAcsQ7cV5o1hNuJ7EM8mPCWE/WY4nUX6ZgDg 0nOzRjUnTKUyBSUghtQih+e3cM9SGavHpLLpS213OITBd88h6n9/f6dkcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7CfAMfOcMLN9AOWLE6gb5JFCqqMB8GA1UdIwQY MBaAFHMpRKhTg1WyrsdmRf2UlEiK5wLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMt YzJjZjQ1M2MzZTJlLzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMtYzJjZjQ1M2MzZTJl LzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYx/mU/8Z bJo0tDmq5ELu6hUe+tNYGUZnl5Kjho1FII/5NCZRpT1O09Ek3TsTD3t5ydyWR9ww DBBBa6TgeCN8HMBMvwr81JC280VynzC7daraK6IaSAxzyjakbQu2fZyOZ572d/Eh 8elNIjSc5VEVLf1wkqGfD15N6AF/V/NAJgnIgi+krWhSU6bVfkAW72WHqrQoh5fQ RsfjiX6ds/idnwBwW38DcDlYMRWxVgyyFBxYDtZuLfhvUtLfu3y628NnDJFCcTpQ QSFOOJBOUFwFi5FGOzyNDV5zHtK4HU2yy3AM1q4bMxu4XiBE0/1db4uDqpx0V0OE lgQajpMc5lLMPA== -----END CERTIFICATE-----Generated at Tue Dec 23 14:39:58 2025 by rpki-client