This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json) Hash identifier: nITp6Ej+eJeB3TWzKHIJynEIyRHXEDHrtgD8h2+od64= Subject key identifier: 4A:90:D5:B7:A7:39:8D:59:B9:A4:7C:5B:AE:E8:24:58:F1:6A:FD:5A Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019BE714ACDA9280AC9BF5975BC1790D7578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft Manifest number: 0C92 Signing time: Thu 22 Jan 2026 19:00:50 +0000 Manifest this update: Thu 22 Jan 2026 19:00:50 +0000 Manifest next update: Fri 23 Jan 2026 19:00:50 +0000 Files and hashes: 1: 3OtLzFbkywxj4bXOGTjeuqnS8SE.roa (hash: 2jeNVVe54GmP1BBES9FaoxamDKF2feBho25yOVUyHaw=) 2: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=) 3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: soFTzomPJkQ9wtPBhHHGOZYPvlkEavpbQJwzyYZcSQg=) 4: KkqLmE0N7-8rgtoRGKAsSy0XFwA.roa (hash: 8ZgmxpOPcx1KDgg1Y8A7vaKcj1bybyszDrY+4z+o80k=) 5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=) 6: nPm-Lj_UE0rSGTvFBx4dlbMlTs8.roa (hash: x3mP5EeqVaKIolXtodkSvvchfGdilfiKxpYM+QBGVxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e7:14:ac:da:92:80:ac:9b:f5:97:5b:c1:79:0d:75:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Jan 22 19:00:50 2026 GMT Not After : Jan 23 19:00:50 2026 GMT Subject: CN=4a90d5b7a7398d59b9a47c5baee82458f16afd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:15:5a:ad:00:1d:08:59:e1:cd:72:b2:f2: ca:68:3d:0c:7e:12:57:15:15:9a:71:5a:e4:fe:8f: 16:cf:aa:1f:91:e2:8c:29:4e:d1:40:3a:67:99:5c: f1:f8:6a:03:4e:7a:fd:e2:d1:1f:4c:13:07:b7:a3: 8b:bf:20:ef:a8:f9:49:fd:30:45:58:41:6b:df:40: 79:18:74:0a:8e:bc:12:df:3a:cd:2a:e9:0a:40:e7: ab:16:ed:1b:91:51:0f:cf:3e:4b:b3:ca:ec:c6:1a: 2c:8a:f3:f7:28:4f:df:d7:7a:1f:c8:04:c4:ad:f9: db:e4:05:e0:e0:94:28:b8:b8:70:a6:21:84:1b:64: aa:bc:07:46:d1:00:be:44:d1:cb:9a:1d:59:e2:f8: 84:b1:34:67:41:72:35:f8:e0:4d:91:37:75:3f:2b: d5:b4:a8:c3:54:13:d3:97:dc:5f:15:e2:6f:d1:6a: f3:fa:ed:ad:a8:5e:7c:5b:02:f7:6b:ad:99:b5:75: 03:61:fb:54:74:9f:7d:ba:50:da:bd:bf:ea:6a:0a: 55:35:97:e2:87:38:42:a1:4b:5f:68:46:05:d9:d1: ac:b8:93:4c:9e:b5:e7:7a:1d:80:ba:6d:b2:5c:03: 6c:fc:e2:d9:7f:02:0c:cd:36:04:ce:a9:b9:a1:e4: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:D5:B7:A7:39:8D:59:B9:A4:7C:5B:AE:E8:24:58:F1:6A:FD:5A X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:78:ce:dd:f0:cd:d9:9d:99:bc:b5:53:28:85:ba:2e:a9:b5: cb:e4:b5:29:7c:79:1c:24:3a:e7:d3:03:ec:52:24:48:7c:7b: a6:8d:5d:57:5f:c2:65:59:59:f9:8f:27:1b:bd:e0:79:7a:b0: 2d:99:15:61:5f:77:0e:4e:85:10:ef:76:68:73:a6:97:36:ad: 62:2d:60:f9:12:ba:d6:b6:e2:79:64:69:1d:70:69:52:ab:59: 33:0b:c9:c3:f2:6f:7c:4e:0a:8b:bb:41:7b:08:c9:f5:39:3b: d1:10:c6:49:44:d2:eb:57:61:65:05:e2:7e:eb:38:5a:58:cd: 63:b0:ce:2d:1a:54:e5:f3:06:f1:a8:46:f2:14:56:27:8e:03: 98:a7:86:c8:7d:58:d8:1a:f8:b9:de:5a:f8:df:97:4e:13:a0: 3c:b7:a2:e2:d9:34:0c:3a:57:76:17:af:f0:eb:84:ab:3d:89: c8:e2:32:a5:45:d8:4d:b8:6c:6a:d4:25:d1:57:9e:0d:35:d6: 5a:82:17:38:3b:44:c5:5e:be:93:48:20:57:31:c8:95:cf:d4: 05:9e:3e:79:cc:32:01:9a:86:f7:86:5a:1f:75:e7:8a:8a:17: c8:98:31:bb:64:d4:d9:96:f5:ea:8d:30:5e:87:3d:8d:32:9c: c8:be:00:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvnFKzakoCsm/WXW8F5DXV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjYwMTIyMTkwMDUwWhcNMjYwMTIzMTkwMDUwWjAzMTEwLwYDVQQD Eyg0YTkwZDViN2E3Mzk4ZDU5YjlhNDdjNWJhZWU4MjQ1OGYxNmFmZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wQVWq0AHQhZ4c1ysvLKaD0MfhJX FRWacVrk/o8Wz6ofkeKMKU7RQDpnmVzx+GoDTnr94tEfTBMHt6OLvyDvqPlJ/TBF WEFr30B5GHQKjrwS3zrNKukKQOerFu0bkVEPzz5Ls8rsxhosivP3KE/f13ofyATE rfnb5AXg4JQouLhwpiGEG2SqvAdG0QC+RNHLmh1Z4viEsTRnQXI1+OBNkTd1PyvV tKjDVBPTl9xfFeJv0Wrz+u2tqF58WwL3a62ZtXUDYftUdJ99ulDavb/qagpVNZfi hzhCoUtfaEYF2dGsuJNMnrXneh2Aum2yXANs/OLZfwIMzTYEzqm5oeSjLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqQ1benOY1ZuaR8W67oJFjxav1aMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHjO3fDN 2Z2ZvLVTKIW6Lqm1y+S1KXx5HCQ659MD7FIkSHx7po1dV1/CZVlZ+Y8nG73geXqw LZkVYV93Dk6FEO92aHOmlzatYi1g+RK61rbieWRpHXBpUqtZMwvJw/JvfE4Ki7tB ewjJ9Tk70RDGSUTS61dhZQXifus4WljNY7DOLRpU5fMG8ahG8hRWJ44DmKeGyH1Y 2Br4ud5a+N+XThOgPLei4tk0DDpXdhev8OuEqz2JyOIypUXYTbhsatQl0VeeDTXW WoIXODtExV6+k0ggVzHIlc/UBZ4+ecwyAZqG94ZaH3XniooXyJgxu2TU2Zb16o0w Xoc9jTKcyL4A2w== -----END CERTIFICATE-----Generated at Fri Jan 23 00:58:27 2026 by rpki-client