This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json) Hash identifier: XtyxkRb8+wcpAIHYcqq/u83DwFuw2LhQ3op0F/cMN70= Subject key identifier: A6:F3:32:54:7F:33:38:B9:BE:65:44:B6:08:A6:47:25:38:FC:B6:D7 Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c Certificate serial: 019B07B53E10D599590392B507070F1AA88C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 10:01:16 +0000 Manifest this update: Wed 10 Dec 2025 10:01:16 +0000 Manifest next update: Thu 11 Dec 2025 10:01:16 +0000 Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: bCzb0ciZGzPH79W3pM3UfDHK5qo2Vb17rMPqVEoCkHU=) 2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:3e:10:d5:99:59:03:92:b5:07:07:0f:1a:a8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c Validity Not Before: Dec 10 10:01:16 2025 GMT Not After : Dec 11 10:01:16 2025 GMT Subject: CN=a6f332547f3338b9be6544b608a6472538fcb6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:79:f5:b1:ca:2a:5a:c1:97:4c:13:15:8f: ac:94:c2:8a:8c:f7:92:00:b1:c3:1d:9c:f6:fc:dd: ee:42:a7:1a:ac:75:38:44:b9:6a:c0:66:b6:21:ef: 1b:e5:a2:98:26:1c:08:bd:24:9e:56:e2:67:05:a3: c8:b0:d7:fc:ee:94:e4:2f:ad:8c:45:4b:11:bd:ed: b8:0d:bb:bc:e5:ff:b2:46:b5:32:3e:38:e7:0a:f3: 3e:0b:aa:a3:96:9e:bf:83:d9:cd:d1:f9:5b:aa:9f: 73:d0:80:67:ec:86:d3:81:9e:40:45:5a:4f:99:ba: 4a:9b:d0:03:a8:6c:65:43:f9:73:b8:6a:e9:3d:bc: 44:bb:f2:c7:e1:aa:47:ae:05:d9:16:94:ec:31:52: 94:2e:20:e1:13:e5:ec:fd:ac:76:65:1b:d2:49:d3: 0e:09:88:a9:30:c9:b6:89:a1:7e:6f:5d:69:cf:34: cf:16:f4:c0:81:91:a5:5a:95:09:28:eb:ea:35:58: db:b0:20:c9:99:6d:90:4c:2c:88:e4:c5:ba:be:4a: b4:06:d2:8c:5a:4e:0c:18:3a:fd:75:a8:bd:63:89: 6a:56:be:51:bc:04:e3:37:e3:37:df:fa:23:bc:3c: 84:69:5a:2e:b7:18:b9:0d:8d:10:36:be:6a:4b:ab: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F3:32:54:7F:33:38:B9:BE:65:44:B6:08:A6:47:25:38:FC:B6:D7 X509v3 Authority Key Identifier: keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:28:67:36:95:32:52:68:87:57:b3:92:4d:0d:16:1c:eb:76: d3:b4:c0:93:4a:de:6f:c3:04:dc:c2:d3:31:8c:0f:7c:10:3f: b1:ff:67:44:1e:26:46:13:ee:14:47:88:8a:51:6f:39:55:29: d5:38:cc:77:29:e4:7b:68:84:7e:2e:e3:5c:4b:3f:ca:e8:9a: 4e:25:0b:a6:6e:c8:2c:6b:2c:46:31:62:37:e3:01:89:51:48: 3a:2b:d0:8d:a9:35:e7:1f:81:90:a0:69:ce:07:0c:c3:70:6a: b4:44:9b:d9:b6:00:7e:91:04:91:b8:5b:b9:6b:c2:cf:00:46: e8:f3:69:0e:4f:6e:f1:96:39:2d:c0:be:f5:f8:8f:4a:52:93: 0c:05:c2:06:a4:62:09:12:d7:8f:7b:b6:2f:61:92:8c:d9:33: d7:d3:2a:78:b5:36:18:15:5c:a1:2e:c3:2f:91:ee:b2:8b:2e: 93:94:ad:3c:f7:7d:08:80:ea:da:2f:8f:64:69:66:aa:1c:e3: b8:29:0e:1a:80:8f:d8:10:56:fa:00:06:60:f0:81:5c:80:3b: 90:c7:b3:d1:61:6c:dc:40:57:3f:8b:1c:a6:24:61:8d:e7:45: 9a:34:ee:ba:58:b4:53:5a:d9:c2:e2:cb:85:d5:7d:a9:c8:80: de:c7:9d:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtT4Q1ZlZA5K1BwcPGqiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj MjlmM2MwHhcNMjUxMjEwMTAwMTE2WhcNMjUxMjExMTAwMTE2WjAzMTEwLwYDVQQD EyhhNmYzMzI1NDdmMzMzOGI5YmU2NTQ0YjYwOGE2NDcyNTM4ZmNiNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss159bHKKlrBl0wTFY+slMKKjPeS ALHDHZz2/N3uQqcarHU4RLlqwGa2Ie8b5aKYJhwIvSSeVuJnBaPIsNf87pTkL62M RUsRve24Dbu85f+yRrUyPjjnCvM+C6qjlp6/g9nN0flbqp9z0IBn7IbTgZ5ARVpP mbpKm9ADqGxlQ/lzuGrpPbxEu/LH4apHrgXZFpTsMVKULiDhE+Xs/ax2ZRvSSdMO CYipMMm2iaF+b11pzzTPFvTAgZGlWpUJKOvqNVjbsCDJmW2QTCyI5MW6vkq0BtKM Wk4MGDr9dai9Y4lqVr5RvATjN+M33/ojvDyEaVoutxi5DY0QNr5qS6u97QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbzMlR/Mzi5vmVEtgimRyU4/LbXMB8GA1UdIwQY MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGChnNpUy UmiHV7OSTQ0WHOt207TAk0reb8ME3MLTMYwPfBA/sf9nRB4mRhPuFEeIilFvOVUp 1TjMdynke2iEfi7jXEs/yuiaTiULpm7ILGssRjFiN+MBiVFIOivQjak15x+BkKBp zgcMw3BqtESb2bYAfpEEkbhbuWvCzwBG6PNpDk9u8ZY5LcC+9fiPSlKTDAXCBqRi CRLXj3u2L2GSjNkz19MqeLU2GBVcoS7DL5Husosuk5StPPd9CIDq2i+PZGlmqhzj uCkOGoCP2BBW+gAGYPCBXIA7kMez0WFs3EBXP4scpiRhjedFmjTuuli0U1rZwuLL hdV9qciA3sed0Q== -----END CERTIFICATE-----Generated at Wed Dec 10 18:40:20 2025 by rpki-client