This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft File: RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft (raw, json) Hash identifier: t5/O93iurq5Du2i/KLqu8K96h0NtaeLWEEwTSYUbp1s= Subject key identifier: 1F:C8:11:FD:73:1D:8C:28:82:65:98:BE:AB:57:FD:07:CE:D7:0C:8E Authority key identifier: 44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3 Certificate issuer: /CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3 Certificate serial: 019B5976515D6205546858B759B810028C27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:01:24 +0000 Manifest this update: Fri 26 Dec 2025 07:01:24 +0000 Manifest next update: Sat 27 Dec 2025 07:01:24 +0000 Files and hashes: 1: RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl (hash: xllr/CI9eFAafmalA3BkQ9J9SLGmWDd9eXCrVMrTFUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:51:5d:62:05:54:68:58:b7:59:b8:10:02:8c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=442c8fd6c776b78566bb7c304e25fb7d2a2932c3 Validity Not Before: Dec 26 07:01:24 2025 GMT Not After : Dec 27 07:01:24 2025 GMT Subject: CN=1fc811fd731d8c28826598beab57fd07ced70c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:8a:57:3b:a9:aa:92:6a:3f:80:a1:f3:dd: ae:e6:1b:cd:2e:eb:9d:3d:ce:3d:b9:fa:a6:bb:7b: e8:ee:83:c5:1f:3d:ac:91:74:03:52:a0:44:8f:46: 7d:30:ee:38:b4:cd:b5:cf:48:67:49:b9:54:77:c4: 04:f9:13:9f:c4:8e:1f:01:f1:ec:94:11:1e:68:7f: d6:51:21:5e:d0:ac:62:45:ad:a2:92:15:8a:cf:32: 06:6a:46:a4:0e:cd:a8:59:b5:ad:2f:2d:63:24:44: 6b:1d:73:17:d8:3c:6e:f4:aa:26:d5:73:c9:3d:ca: 15:02:7f:df:dc:08:cc:b3:89:01:fc:ce:21:95:6d: ce:ff:d2:29:b8:27:95:55:78:2e:ea:53:6b:1a:01: 20:8c:a4:6c:e8:b4:e1:f3:01:8e:53:34:03:84:93: 59:31:f2:d5:90:f9:29:b3:4c:fc:d5:52:14:4a:0e: 79:a2:14:a8:b0:11:90:e9:a1:aa:8e:d5:8a:98:e1: 31:90:72:aa:f0:ab:f5:44:ff:48:04:c8:49:79:60: 10:3f:dc:81:91:59:e8:75:d6:e4:e0:b2:8b:8b:57: 6c:c8:9b:c9:4f:35:7b:42:b1:2f:96:30:f3:4c:b9: 7d:5a:56:d2:43:f9:c7:d9:e4:ed:3f:f6:de:72:52: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C8:11:FD:73:1D:8C:28:82:65:98:BE:AB:57:FD:07:CE:D7:0C:8E X509v3 Authority Key Identifier: keyid:44:2C:8F:D6:C7:76:B7:85:66:BB:7C:30:4E:25:FB:7D:2A:29:32:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCyP1sd2t4Vmu3wwTiX7fSopMsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c9321c-a0a2-49c1-a974-804d89e2a001/1/RCyP1sd2t4Vmu3wwTiX7fSopMsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:11:84:f9:90:01:f0:86:cf:05:f2:03:2f:e1:7a:87:15:74: 4e:8f:50:8b:11:fd:a0:65:4f:0c:f5:9d:0e:b2:0f:98:04:6f: 37:49:15:c9:bd:2c:91:64:c2:65:a5:41:5d:4a:4c:e8:d2:16: 9b:af:8d:21:84:a7:5f:32:11:44:cb:92:b8:6d:95:84:00:b1: 8c:fa:b9:64:df:4e:0b:0e:e3:c0:17:06:6a:83:f8:fc:47:07: c6:cf:62:9d:a4:96:9f:9d:06:9e:52:fe:fb:9a:6c:e3:13:72: ed:42:cb:b3:a5:9e:ac:e8:b4:bc:4f:82:03:00:3d:91:35:34: b9:93:70:d3:28:f4:07:e6:0a:b7:10:c1:f7:a8:7b:4a:b1:8b: 61:68:64:7e:51:6c:d7:f5:b2:02:fa:f9:20:7c:af:9a:8a:93: 0a:28:ca:b8:4f:a6:2d:04:7b:2e:50:a0:ad:df:f9:e8:47:87: ca:a8:20:db:00:74:bb:76:e1:b5:0a:36:d5:14:8f:4f:4d:d0: f7:80:b1:86:77:ab:91:47:04:38:84:4e:1d:26:7f:d3:9c:9f: 71:e8:a3:25:25:86:ed:27:2e:78:de:47:6a:c1:45:89:b5:20: 14:3a:37:74:fa:e4:bf:14:db:51:ae:b8:36:95:e6:c5:35:be: 13:30:00:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdlFdYgVUaFi3WbgQAownMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MmM4ZmQ2Yzc3NmI3ODU2NmJiN2MzMDRlMjVmYjdkMmEy OTMyYzMwHhcNMjUxMjI2MDcwMTI0WhcNMjUxMjI3MDcwMTI0WjAzMTEwLwYDVQQD EygxZmM4MTFmZDczMWQ4YzI4ODI2NTk4YmVhYjU3ZmQwN2NlZDcwYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BuKVzupqpJqP4Ch892u5hvNLuud Pc49ufqmu3vo7oPFHz2skXQDUqBEj0Z9MO44tM21z0hnSblUd8QE+ROfxI4fAfHs lBEeaH/WUSFe0KxiRa2ikhWKzzIGakakDs2oWbWtLy1jJERrHXMX2Dxu9Kom1XPJ PcoVAn/f3AjMs4kB/M4hlW3O/9IpuCeVVXgu6lNrGgEgjKRs6LTh8wGOUzQDhJNZ MfLVkPkps0z81VIUSg55ohSosBGQ6aGqjtWKmOExkHKq8Kv1RP9IBMhJeWAQP9yB kVnoddbk4LKLi1dsyJvJTzV7QrEvljDzTLl9WlbSQ/nH2eTtP/beclIOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/IEf1zHYwogmWYvqtX/QfO1wyOMB8GA1UdIwQY MBaAFEQsj9bHdreFZrt8ME4l+30qKTLDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOTMyMWMtYTBhMi00OWMxLWE5NzQt ODA0ZDg5ZTJhMDAxLzEvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jOTMyMWMtYTBhMi00OWMxLWE5NzQtODA0ZDg5ZTJhMDAx LzEvUkN5UDFzZDJ0NFZtdTN3d1RpWDdmU29wTXNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBGE+ZAB 8IbPBfIDL+F6hxV0To9QixH9oGVPDPWdDrIPmARvN0kVyb0skWTCZaVBXUpM6NIW m6+NIYSnXzIRRMuSuG2VhACxjPq5ZN9OCw7jwBcGaoP4/EcHxs9inaSWn50GnlL+ +5ps4xNy7ULLs6WerOi0vE+CAwA9kTU0uZNw0yj0B+YKtxDB96h7SrGLYWhkflFs 1/WyAvr5IHyvmoqTCijKuE+mLQR7LlCgrd/56EeHyqgg2wB0u3bhtQo21RSPT03Q 94CxhnerkUcEOIROHSZ/05yfceijJSWG7ScueN5HasFFibUgFDo3dPrkvxTbUa64 NpXmxTW+EzAA6g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client