This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft File: CYP5KGpYFwzb724OSNDfcxONx2c.mft (raw, json) Hash identifier: id8xF1z3UUAcZv3x1/UfvigNHUPXKll8+BI/oOuIg6g= Subject key identifier: C2:00:F7:20:DB:8C:8A:C2:32:D7:C4:B6:74:1A:13:16:68:C0:19:A1 Authority key identifier: 09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 Certificate issuer: /CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Certificate serial: 019B2175BB923FE0B88A2214ADF36EAF6B81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft Manifest number: 0267 Signing time: Mon 15 Dec 2025 10:02:02 +0000 Manifest this update: Mon 15 Dec 2025 10:02:02 +0000 Manifest next update: Tue 16 Dec 2025 10:02:02 +0000 Files and hashes: 1: CYP5KGpYFwzb724OSNDfcxONx2c.crl (hash: 5loygsgUlmtXvZMdJSkSHrI4MeGiErJRrcVeyvF9LrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:bb:92:3f:e0:b8:8a:22:14:ad:f3:6e:af:6b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0983f9286a58170cdbef6e0e48d0df73138dc767 Validity Not Before: Dec 15 10:02:02 2025 GMT Not After : Dec 16 10:02:02 2025 GMT Subject: CN=c200f720db8c8ac232d7c4b6741a131668c019a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:dc:9a:02:01:b8:4e:9c:b7:99:06:fa:e4: 28:01:49:28:9f:7f:f5:71:6c:e3:7e:16:ef:a9:e4: 87:f0:5c:94:10:bb:2a:89:4f:f7:26:5e:18:04:e3: e7:ae:2d:34:7f:95:bb:e8:99:b6:e9:d1:a7:6f:52: 6a:d2:14:ca:bf:67:8b:92:b3:f4:c2:ba:a3:7d:78: 2a:54:60:19:5e:a4:d0:ae:ab:fb:21:24:b1:43:3b: 05:a8:f8:e0:a4:9a:9f:2b:55:ac:f8:43:6a:fc:08: 48:c6:1a:22:a8:da:fa:b8:1b:5f:e7:21:0a:45:00: 75:7b:d9:a2:ba:c3:38:bc:f0:44:4c:dd:8b:11:fb: 3d:92:49:f9:b6:e0:fe:8b:0d:9d:b2:a0:4d:e0:19: 69:ec:4b:45:49:cc:4b:5a:d3:db:29:85:8b:62:33: 01:18:2b:15:ae:81:d0:15:ed:a1:6c:b1:b7:34:5e: 9b:f6:c1:b4:bd:88:25:7a:77:29:cf:ad:4c:95:fb: bc:e9:b6:1e:49:02:48:9b:fe:82:14:81:96:9a:9b: d0:7e:b0:43:80:9b:c2:ec:b3:67:06:98:7a:8c:b1: ca:ad:86:4b:0d:dd:97:0d:c1:74:7b:bf:c4:ce:e8: 5d:ea:c4:f3:37:65:99:7e:2a:a9:94:19:0d:ac:ac: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:F7:20:DB:8C:8A:C2:32:D7:C4:B6:74:1A:13:16:68:C0:19:A1 X509v3 Authority Key Identifier: keyid:09:83:F9:28:6A:58:17:0C:DB:EF:6E:0E:48:D0:DF:73:13:8D:C7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYP5KGpYFwzb724OSNDfcxONx2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1eb89e-36c1-4ba1-b344-aff8b9ed99c9/1/CYP5KGpYFwzb724OSNDfcxONx2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:2e:84:4d:0d:f3:b4:72:94:f5:8e:13:6a:6c:03:fe:ff: 3a:62:4a:0a:25:ef:63:d5:79:40:f8:cb:3d:21:12:a6:42:be: 05:bf:28:3b:e7:11:23:74:be:0c:98:03:1f:d0:22:b7:7d:fb: 7b:ea:53:4b:2e:2e:54:84:64:42:b3:cf:66:7a:e8:7d:c6:e4: f1:7d:38:6b:d8:d2:23:bb:e3:ab:38:a3:ff:3d:b3:16:9e:42: b5:70:9a:e8:79:b3:97:d7:32:c0:b3:15:9a:9e:bd:c7:d5:cc: 5e:a0:ad:d3:11:23:18:4c:f7:68:f4:a7:b8:06:eb:1c:cb:77: b6:5c:12:80:6e:4e:37:85:ec:79:c2:a5:9e:03:45:df:14:77: 0c:e0:79:72:3b:18:27:e4:60:04:03:f7:b0:bd:98:12:cd:9e: c3:ef:03:82:c4:f0:e8:ba:26:af:bb:60:0a:28:66:fc:60:aa: 28:76:aa:d1:43:9c:2a:d8:30:2d:7c:57:37:c6:8d:d8:68:7b: 28:ad:d5:16:a4:53:23:63:cd:cb:28:42:6a:b2:0c:94:f3:ee: 23:3c:75:4c:a0:52:1b:d7:d1:0e:df:65:1b:8b:63:b3:1f:6d: 80:74:bc:40:de:93:72:14:b3:ae:ef:40:a1:86:14:fb:ed:43: 17:b3:65:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdbuSP+C4iiIUrfNur2uBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODNmOTI4NmE1ODE3MGNkYmVmNmUwZTQ4ZDBkZjczMTM4 ZGM3NjcwHhcNMjUxMjE1MTAwMjAyWhcNMjUxMjE2MTAwMjAyWjAzMTEwLwYDVQQD EyhjMjAwZjcyMGRiOGM4YWMyMzJkN2M0YjY3NDFhMTMxNjY4YzAxOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunXcmgIBuE6ct5kG+uQoAUkon3/1 cWzjfhbvqeSH8FyUELsqiU/3Jl4YBOPnri00f5W76Jm26dGnb1Jq0hTKv2eLkrP0 wrqjfXgqVGAZXqTQrqv7ISSxQzsFqPjgpJqfK1Ws+ENq/AhIxhoiqNr6uBtf5yEK RQB1e9miusM4vPBETN2LEfs9kkn5tuD+iw2dsqBN4Blp7EtFScxLWtPbKYWLYjMB GCsVroHQFe2hbLG3NF6b9sG0vYglencpz61Mlfu86bYeSQJIm/6CFIGWmpvQfrBD gJvC7LNnBph6jLHKrYZLDd2XDcF0e7/Ezuhd6sTzN2WZfiqplBkNrKybPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIA9yDbjIrCMtfEtnQaExZowBmhMB8GA1UdIwQY MBaAFAmD+ShqWBcM2+9uDkjQ33MTjcdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQt YWZmOGI5ZWQ5OWM5LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWI4OWUtMzZjMS00YmExLWIzNDQtYWZmOGI5ZWQ5OWM5 LzEvQ1lQNUtHcFlGd3piNzI0T1NORGZjeE9OeDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwEuhE0N 87RylPWOE2psA/7/OmJKCiXvY9V5QPjLPSESpkK+Bb8oO+cRI3S+DJgDH9Ait337 e+pTSy4uVIRkQrPPZnrofcbk8X04a9jSI7vjqzij/z2zFp5CtXCa6Hmzl9cywLMV mp69x9XMXqCt0xEjGEz3aPSnuAbrHMt3tlwSgG5ON4XsecKlngNF3xR3DOB5cjsY J+RgBAP3sL2YEs2ew+8DgsTw6Lomr7tgCihm/GCqKHaq0UOcKtgwLXxXN8aN2Gh7 KK3VFqRTI2PNyyhCarIMlPPuIzx1TKBSG9fRDt9lG4tjsx9tgHS8QN6TchSzru9A oYYU++1DF7Nlqw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:11:20 2025 by rpki-client