This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File:                     CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier:          XUmNUDC/QruxV+3HU/AMzwPCQwimkSeI6rd9BSD09ls=
Subject key identifier:   5F:07:21:FD:EE:18:7F:94:80:58:3C:FC:F9:31:67:FE:2A:45:EB:33
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer:       /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial:       019AFD30E55341928FA45C9C9D24B8DD234B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number:          0C16
Signing time:             Mon 08 Dec 2025 09:00:31 +0000
Manifest this update:     Mon 08 Dec 2025 09:00:31 +0000
Manifest next update:     Tue 09 Dec 2025 09:00:31 +0000
Files and hashes:         1: 6vNiWGJsCX4DENtjblYdb8eV818.roa (hash: AnIQkshIVLoMZKKYE45/aCjoLxqi/2wWfr79R1DyCiM=)
                          2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: Mp5mE2HCbTqU6oGDZ+2tYOf2IRbKQZWuLbx7mM0qRxc=)
                          3: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=)
                          4: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=)
                          5: fCyg3nd-harMTi4pUtJhTBh_cYM.roa (hash: Kcvhuze+vwAD4la29HziGrt0+sJ8/kodFTmW8OQ5Pko=)
                          6: nL4uEaAKFQIFRb3GKKlNE2m38vs.roa (hash: +TiS4tdnmhxY4e4oL6wPlArjNO9ovGDVnYYYNy12iYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fd:30:e5:53:41:92:8f:a4:5c:9c:9d:24:b8:dd:23:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
        Validity
            Not Before: Dec  8 09:00:31 2025 GMT
            Not After : Dec  9 09:00:31 2025 GMT
        Subject: CN=5f0721fdee187f9480583cfcf93167fe2a45eb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:19:d2:af:8f:28:03:7b:22:3a:92:a6:67:
                    50:d6:3c:9e:c3:24:fc:63:54:74:42:75:7f:9d:ce:
                    11:8a:5a:9c:4a:a9:1c:39:41:75:9e:0c:0e:6d:c8:
                    b1:66:f4:01:0d:e9:d3:f6:f2:64:44:11:8c:8c:42:
                    cc:cc:f8:51:76:6a:a6:63:a2:87:2d:25:db:02:02:
                    8b:30:c1:ca:e8:5a:76:48:5b:58:63:e1:12:aa:d9:
                    b3:31:3e:c0:03:d7:f9:f2:46:86:55:5a:8e:82:5a:
                    bf:d5:96:91:56:b0:7c:ae:25:d5:37:8a:03:23:e4:
                    ec:6d:36:52:1e:48:05:7f:2a:ca:75:5f:d7:75:b1:
                    6a:b9:d9:9b:29:b7:a1:21:8f:b6:32:4c:85:67:a1:
                    4f:c8:17:2a:7d:06:e4:fb:2a:ea:43:b4:8a:ee:c1:
                    de:57:6b:20:d7:f7:8b:de:e3:80:70:48:2f:a4:33:
                    15:b7:20:09:90:98:4c:77:27:31:22:6a:24:02:69:
                    e5:ec:e9:f8:84:dc:64:f1:f6:29:2c:c7:5d:b6:ce:
                    44:2a:ea:8a:10:6c:1c:a7:d5:f1:94:81:b4:4c:fa:
                    c6:a1:fa:93:21:b3:77:97:b3:7f:7f:1c:90:97:b9:
                    d1:bf:44:87:3a:5d:94:ef:2e:df:f0:96:59:4a:72:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:21:FD:EE:18:7F:94:80:58:3C:FC:F9:31:67:FE:2A:45:EB:33
            X509v3 Authority Key Identifier:
                keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:33:9f:b8:d7:e8:22:84:a0:98:3d:51:25:eb:58:d0:4d:f7:
         30:0a:24:7a:d9:07:75:96:87:67:03:66:b2:ae:65:43:b2:32:
         e9:41:cb:72:85:4a:d0:e5:90:e0:1a:72:d2:94:7f:1e:c8:3b:
         40:5b:5c:c4:27:56:a8:73:b4:52:86:a9:f1:9b:b9:41:f5:7b:
         38:a9:b0:b1:f2:13:d1:31:82:b0:ce:10:dd:b9:28:db:2a:7e:
         38:8d:ae:02:40:aa:5d:4d:b7:8c:4f:fb:0d:c4:79:bd:d8:bf:
         b3:0e:e5:59:4e:37:94:a9:c2:ef:9b:7b:e8:35:1d:07:ee:09:
         b5:00:e3:2f:13:67:eb:ad:15:6a:6c:b6:09:e0:67:a8:62:87:
         f1:1d:f1:20:7b:8f:b5:2e:c3:e5:5c:a1:89:ee:d4:40:23:b3:
         5d:d2:00:63:df:2a:66:98:dc:7b:51:8f:0e:07:99:89:d9:d1:
         fa:6b:02:2f:47:5a:8e:a6:fd:7c:e6:ac:63:f4:c5:8a:e0:1e:
         fe:a9:36:cd:8c:46:6c:62:bc:ea:b0:3a:f7:a0:78:14:bf:6c:
         a8:0a:66:90:4c:b8:f1:4e:10:74:9e:96:3c:f1:39:7a:16:0b:
         4c:46:58:ad:44:09:8e:f8:38:d5:8f:5e:0e:79:3a:21:0e:7b:
         3a:06:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 15:59:07 2025 by rpki-client