This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json) Hash identifier: HHNDc5OLI/Nr/1Z7tZ1sNR5qRS1PlVomAQZAaKa8oG0= Subject key identifier: 1F:F3:10:AD:A4:CA:16:3D:95:C2:16:B0:22:E5:36:7F:A3:44:A3:DC Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54 Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754 Certificate serial: 019B19BC45DCD9D6022D87EB610892AA9971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft Manifest number: 1772 Signing time: Sat 13 Dec 2025 22:02:07 +0000 Manifest this update: Sat 13 Dec 2025 22:02:07 +0000 Manifest next update: Sun 14 Dec 2025 22:02:07 +0000 Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: Uk0cJ1kPbrxu7CZf2HC7pwvYObrtRbwPVtMIIyM1ntQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:45:dc:d9:d6:02:2d:87:eb:61:08:92:aa:99:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754 Validity Not Before: Dec 13 22:02:07 2025 GMT Not After : Dec 14 22:02:07 2025 GMT Subject: CN=1ff310ada4ca163d95c216b022e5367fa344a3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d0:ca:39:4f:79:58:1e:44:33:3c:4a:23:b7: 5b:23:a5:7f:e3:5b:42:73:61:34:e5:18:37:28:23: d1:4b:d2:fb:f3:52:f4:32:87:a1:0f:6c:87:34:d8: 93:a7:b2:8e:d0:52:d1:f6:aa:37:ac:56:6f:61:3f: 3c:dc:fd:8c:48:3e:ca:02:c5:fc:60:4b:0e:0a:5c: 86:11:59:a7:72:46:97:57:af:2e:10:fe:65:9a:3f: 94:af:d9:72:94:9c:27:b9:91:ad:82:5a:d6:d4:2a: 32:88:8f:bc:c0:2a:71:66:91:4c:c1:f3:ec:88:3b: 57:2b:e0:8e:55:d0:7f:0a:8a:8a:b1:57:5a:7a:43: 96:23:d9:3c:aa:86:cc:4f:08:2d:bd:95:1e:62:4a: 46:c6:a0:8a:4b:aa:b2:cc:b3:1b:a3:6a:a7:e8:b3: 1a:c7:2f:38:ec:cb:4c:e6:21:a9:72:0b:3b:1d:23: 30:92:e2:9b:7c:4f:af:8f:79:66:55:73:ea:ca:ef: 1d:eb:82:36:7f:3d:7b:d0:7b:2e:b1:6b:f9:f5:14: f8:e9:53:d8:53:53:0c:2c:59:ca:35:0b:58:b6:a4: e8:7e:be:2f:83:f4:06:2b:31:d4:d7:15:d3:ec:cb: bc:e1:7d:6d:81:f6:2d:89:b9:b3:4a:fe:de:90:55: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F3:10:AD:A4:CA:16:3D:95:C2:16:B0:22:E5:36:7F:A3:44:A3:DC X509v3 Authority Key Identifier: keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:78:78:32:29:1d:db:04:0a:58:53:87:cb:4e:bb:ac:b7:ae: c3:82:72:a3:b5:bf:31:be:fa:22:a6:f8:7c:e7:44:5f:99:85: a5:81:f1:bf:13:a2:1d:ee:12:88:9f:e5:ce:dd:c4:c2:d0:fc: 42:23:af:09:c6:3a:63:ee:c7:9a:ac:7a:6d:4a:4f:34:6a:c5: 2a:1f:42:8a:72:f9:c2:a4:c6:cc:0c:0e:55:64:1c:22:a5:a7: 4a:90:9c:59:ab:a9:c2:bf:1d:b5:86:2d:1a:60:7b:3b:43:65: 62:e5:1d:65:1d:5d:29:bc:4d:90:6a:b6:a8:11:5f:08:35:28: 24:04:2a:f5:8a:60:49:47:17:9c:dc:ee:7e:6a:d7:da:02:a0: a2:37:d8:d9:fd:d4:9d:d5:9c:02:b1:73:ac:96:52:7e:d0:79: e0:9f:9f:52:c3:fb:24:47:83:22:86:27:31:fb:b4:75:28:15: cb:61:b0:cb:2b:06:a3:51:2e:05:c8:83:b5:83:66:bd:a4:b4: ce:1d:a4:cd:3a:24:4d:aa:0c:57:a4:ed:93:50:10:4d:29:02: e5:a4:c6:39:b1:81:96:ef:7f:de:1c:a9:13:fb:ac:57:b3:d0: 84:b6:03:7d:70:4c:cb:2c:49:f9:29:58:15:8f:01:40:45:05: 54:11:5d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvEXc2dYCLYfrYQiSqplxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1 ZTQ3NTQwHhcNMjUxMjEzMjIwMjA3WhcNMjUxMjE0MjIwMjA3WjAzMTEwLwYDVQQD EygxZmYzMTBhZGE0Y2ExNjNkOTVjMjE2YjAyMmU1MzY3ZmEzNDRhM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNDKOU95WB5EMzxKI7dbI6V/41tC c2E05Rg3KCPRS9L781L0MoehD2yHNNiTp7KO0FLR9qo3rFZvYT883P2MSD7KAsX8 YEsOClyGEVmnckaXV68uEP5lmj+Ur9lylJwnuZGtglrW1CoyiI+8wCpxZpFMwfPs iDtXK+COVdB/CoqKsVdaekOWI9k8qobMTwgtvZUeYkpGxqCKS6qyzLMbo2qn6LMa xy847MtM5iGpcgs7HSMwkuKbfE+vj3lmVXPqyu8d64I2fz170HsusWv59RT46VPY U1MMLFnKNQtYtqTofr4vg/QGKzHU1xXT7Mu84X1tgfYtibmzSv7ekFUerQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/zEK2kyhY9lcIWsCLlNn+jRKPcMB8GA1UdIwQY MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXh4Mikd 2wQKWFOHy067rLeuw4Jyo7W/Mb76Iqb4fOdEX5mFpYHxvxOiHe4SiJ/lzt3EwtD8 QiOvCcY6Y+7Hmqx6bUpPNGrFKh9CinL5wqTGzAwOVWQcIqWnSpCcWaupwr8dtYYt GmB7O0NlYuUdZR1dKbxNkGq2qBFfCDUoJAQq9YpgSUcXnNzufmrX2gKgojfY2f3U ndWcArFzrJZSftB54J+fUsP7JEeDIoYnMfu0dSgVy2GwyysGo1EuBciDtYNmvaS0 zh2kzTokTaoMV6Ttk1AQTSkC5aTGObGBlu9/3hypE/usV7PQhLYDfXBMyyxJ+SlY FY8BQEUFVBFdPw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:07:39 2025 by rpki-client