This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft File: czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json) Hash identifier: KejFRrTGgSwwsZ6MNCF4dRC/xQJM7aV7NER2+yAnC0E= Subject key identifier: 31:7B:17:2D:75:CD:2B:71:A1:AF:6D:80:BC:15:32:AB:CE:F2:1B:70 Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe Certificate serial: 019B4C959CDF1E92DCDBE40887214B1880ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft Manifest number: 16E6 Signing time: Tue 23 Dec 2025 19:00:31 +0000 Manifest this update: Tue 23 Dec 2025 19:00:31 +0000 Manifest next update: Wed 24 Dec 2025 19:00:31 +0000 Files and hashes: 1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: 1cb1RbPtsv+SPIkq94afY33fskP6xmmPEejY58pCE38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:9c:df:1e:92:dc:db:e4:08:87:21:4b:18:80:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe Validity Not Before: Dec 23 19:00:31 2025 GMT Not After : Dec 24 19:00:31 2025 GMT Subject: CN=317b172d75cd2b71a1af6d80bc1532abcef21b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:d4:29:88:8b:7d:f9:0c:eb:de:52:81:f4: fc:7a:e9:3f:10:f5:47:05:2c:6c:6d:0f:b7:a7:46: 70:69:5e:f5:6d:09:ce:52:d4:33:0f:d3:42:e2:6f: f1:8e:ce:2a:0d:9c:f3:88:3f:56:11:11:69:c1:6a: 72:8d:40:17:f6:4d:74:6b:39:f9:66:eb:c8:a9:8b: d1:16:4e:2a:9b:cb:96:00:bd:35:c3:13:ea:ab:ee: d6:63:b2:08:73:31:22:44:67:f7:3a:d4:72:72:62: 56:e0:36:25:b8:84:ea:08:0b:fe:8a:db:2c:b6:29: cf:22:a1:c8:b1:2d:5c:76:f6:ef:97:7e:34:7d:a9: be:9f:85:19:09:23:2f:21:cc:29:dc:e8:ad:b2:26: f4:6b:35:c3:20:81:df:c1:5a:c3:74:13:4b:33:66: a8:21:a2:ef:6f:80:bb:42:87:23:6f:ec:db:9e:36: c0:ab:cd:4e:eb:11:21:23:e2:b7:7e:c7:77:53:80: 84:dd:cb:5f:c0:c0:30:a6:3f:5a:a8:12:cd:a0:f0: 97:2c:77:0e:87:b5:0a:36:2d:24:37:3a:90:4e:d0: 93:91:20:6e:fb:bb:86:c5:0d:64:2f:31:5a:e4:2e: 5e:54:21:98:52:68:6a:d1:a7:25:5a:4d:cc:ba:cf: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7B:17:2D:75:CD:2B:71:A1:AF:6D:80:BC:15:32:AB:CE:F2:1B:70 X509v3 Authority Key Identifier: keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ee:f8:b2:76:fa:3d:cd:07:56:a9:30:eb:b8:23:cd:94:cc: ad:c3:fc:6b:4c:20:5e:fe:cf:9b:11:b6:ff:d2:94:73:b8:bc: a6:ed:ec:bb:f8:80:e9:34:1a:ac:12:84:26:4e:16:49:25:29: 58:83:10:ff:96:a0:51:74:ea:80:32:fe:15:76:3b:37:d9:9d: 93:da:0a:dd:ac:a7:95:92:c5:95:53:e8:bc:4a:55:a5:66:cd: d2:70:ab:f5:2c:33:02:8d:b3:b2:28:f2:41:60:1a:75:bf:5e: 85:47:37:62:26:87:bb:3b:ae:68:42:e4:6d:23:75:2a:5f:89: 14:9b:8c:95:7f:b1:74:f9:c0:0e:bd:a8:da:b5:fb:c2:4d:fa: 71:6d:b1:53:e5:9e:89:41:34:58:7d:5a:2e:1d:f5:da:47:4a: 7a:5b:d8:a0:ab:f8:70:e0:9a:ff:81:a5:6c:2f:f2:ef:c9:b5: 9b:d0:4e:2f:04:4c:9d:b2:35:e5:0a:c6:25:51:43:bb:e2:44: a2:28:1e:3f:52:2c:ef:e7:2b:9d:c5:04:17:dc:8d:18:da:3a: 68:ce:c9:24:ba:b5:d9:b6:72:97:df:9b:e7:02:19:49:52:8e: ae:f4:a2:36:b5:31:b3:ff:43:cc:67:6f:41:0b:2b:2d:48:e0: 94:7f:e2:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlZzfHpLc2+QIhyFLGIDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczM2MwMWZjNmJkZmViMDkwZDU3MzJjODcyZWVkYTUzY2I0 MjFhYmUwHhcNMjUxMjIzMTkwMDMxWhcNMjUxMjI0MTkwMDMxWjAzMTEwLwYDVQQD EygzMTdiMTcyZDc1Y2QyYjcxYTFhZjZkODBiYzE1MzJhYmNlZjIxYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvazUKYiLffkM695SgfT8euk/EPVH BSxsbQ+3p0ZwaV71bQnOUtQzD9NC4m/xjs4qDZzziD9WERFpwWpyjUAX9k10azn5 ZuvIqYvRFk4qm8uWAL01wxPqq+7WY7IIczEiRGf3OtRycmJW4DYluITqCAv+itss tinPIqHIsS1cdvbvl340fam+n4UZCSMvIcwp3Oitsib0azXDIIHfwVrDdBNLM2ao IaLvb4C7Qocjb+zbnjbAq81O6xEhI+K3fsd3U4CE3ctfwMAwpj9aqBLNoPCXLHcO h7UKNi0kNzqQTtCTkSBu+7uGxQ1kLzFa5C5eVCGYUmhq0aclWk3Mus/wVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF7Fy11zStxoa9tgLwVMqvO8htwMB8GA1UdIwQY MBaAFHM8Afxr3+sJDVcyyHLu2lPLQhq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQt NWEzYWJmZjIxNWNlLzEvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQtNWEzYWJmZjIxNWNl LzEvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu74snb6 Pc0HVqkw67gjzZTMrcP8a0wgXv7PmxG2/9KUc7i8pu3su/iA6TQarBKEJk4WSSUp WIMQ/5agUXTqgDL+FXY7N9mdk9oK3aynlZLFlVPovEpVpWbN0nCr9SwzAo2zsijy QWAadb9ehUc3YiaHuzuuaELkbSN1Kl+JFJuMlX+xdPnADr2o2rX7wk36cW2xU+We iUE0WH1aLh312kdKelvYoKv4cOCa/4GlbC/y78m1m9BOLwRMnbI15QrGJVFDu+JE oigeP1Is7+crncUEF9yNGNo6aM7JJLq12bZyl9+b5wIZSVKOrvSiNrUxs/9DzGdv QQsrLUjglH/iGA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:44:58 2025 by rpki-client