This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json) Hash identifier: gicYcFmPj5qEOYhoccMLlrFFeifQpdmbe9QQfS8eIFM= Subject key identifier: 17:CC:18:03:3F:48:C9:9C:D7:5F:1E:11:61:C6:92:A3:DA:89:AF:BC Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a Certificate serial: 019AF12CBD1F6DF0B2BFFCA15C61C2BC4A46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft Manifest number: 0898 Signing time: Sat 06 Dec 2025 01:00:32 +0000 Manifest this update: Sat 06 Dec 2025 01:00:32 +0000 Manifest next update: Sun 07 Dec 2025 01:00:32 +0000 Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=) 2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=) 3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: F5DiqcLAwZmVlX/ToYh4xCV3SWUivskgkZUreF0aBeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bd:1f:6d:f0:b2:bf:fc:a1:5c:61:c2:bc:4a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a Validity Not Before: Dec 6 01:00:32 2025 GMT Not After : Dec 7 01:00:32 2025 GMT Subject: CN=17cc18033f48c99cd75f1e1161c692a3da89afbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:39:d3:24:63:8a:76:10:d9:13:e0:f6:b9: 6d:7b:d0:d6:7b:78:e4:18:0a:5c:b9:ae:18:8d:80: 93:e6:47:48:52:93:08:ea:ef:57:4a:ef:fc:bd:e2: cb:66:a9:2c:df:07:10:62:2e:11:27:2c:0d:34:81: c1:80:fe:27:fe:f9:49:d0:9e:33:69:7d:1f:ee:ab: 76:cd:c1:eb:90:63:96:d3:51:46:65:47:1d:6a:36: e0:31:ee:ce:3b:ee:d0:ac:b4:32:d7:f7:20:78:92: 81:b9:2d:ba:3e:91:a8:b8:d8:73:ad:f8:8b:ff:31: 52:a1:6c:5e:d2:34:66:64:af:75:93:95:66:9f:d8: b1:81:42:c6:30:87:34:16:44:22:7d:79:f4:9f:53: 7b:f8:a0:6c:37:b0:95:c1:72:56:69:1b:85:d6:07: eb:fe:57:17:91:95:42:08:cf:0e:08:82:3b:2d:e5: 16:a8:c8:98:50:91:71:96:90:cd:85:74:d8:3d:6f: 0a:91:ab:89:a9:f4:78:0e:8a:57:a2:ea:3c:c8:7e: 16:39:fa:7f:2e:de:1d:1d:07:72:3a:1f:5e:0e:3e: ba:e3:37:c0:a7:4f:40:6c:ee:fa:1c:2a:71:bf:aa: 3c:1b:78:e9:da:1d:74:72:72:dd:79:77:0c:a2:43: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CC:18:03:3F:48:C9:9C:D7:5F:1E:11:61:C6:92:A3:DA:89:AF:BC X509v3 Authority Key Identifier: keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a7:21:06:4a:1e:4e:46:2a:14:c2:aa:25:8f:85:5c:3c:98: 1e:cc:38:5a:d6:65:6f:73:e5:1b:da:c3:88:73:af:07:d1:2d: d5:22:66:43:31:00:1b:72:14:ad:4b:9e:bf:32:c1:37:59:a7: be:00:34:a5:85:ce:5a:e5:c3:2f:e7:43:ea:a0:9e:73:8a:52: 29:b5:69:50:24:b2:99:52:5e:3d:09:72:cc:24:23:25:9c:85: 35:be:71:b7:61:a5:18:b0:49:b0:64:39:50:16:79:3a:09:ef: e7:2f:66:80:85:c1:3c:82:b1:16:b9:a5:ff:7f:41:c8:c7:7d: 6a:66:f1:dd:f1:cd:c8:64:86:76:0a:c9:fb:ac:83:24:a6:ce: 94:33:e3:f5:e4:3f:f0:0e:04:40:28:64:68:aa:ad:61:eb:40: 5e:79:f7:97:d5:d3:fb:ec:21:d2:62:24:77:58:75:f4:6e:aa: 9c:c2:8e:bf:fd:a0:5e:96:f1:7c:95:ee:ac:8f:38:2b:76:d6: 26:ae:e9:c4:91:cf:0a:5d:06:64:dd:3a:a2:d4:49:90:ab:9c: d6:e2:b7:d5:fc:29:f4:a1:84:00:22:4e:5f:12:2b:68:20:13: 8a:37:5a:f0:91:d8:62:05:b0:2c:2c:14:64:50:00:38:51:98: ff:67:a3:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLL0fbfCyv/yhXGHCvEpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczM2IwNzI4YjdhMDU0MzU4NGMyY2QwYjQ4Yjc0NzhjNDE5 NGVmMGEwHhcNMjUxMjA2MDEwMDMyWhcNMjUxMjA3MDEwMDMyWjAzMTEwLwYDVQQD EygxN2NjMTgwMzNmNDhjOTljZDc1ZjFlMTE2MWM2OTJhM2RhODlhZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0g50yRjinYQ2RPg9rlte9DWe3jk GApcua4YjYCT5kdIUpMI6u9XSu/8veLLZqks3wcQYi4RJywNNIHBgP4n/vlJ0J4z aX0f7qt2zcHrkGOW01FGZUcdajbgMe7OO+7QrLQy1/cgeJKBuS26PpGouNhzrfiL /zFSoWxe0jRmZK91k5Vmn9ixgULGMIc0FkQifXn0n1N7+KBsN7CVwXJWaRuF1gfr /lcXkZVCCM8OCII7LeUWqMiYUJFxlpDNhXTYPW8KkauJqfR4DopXouo8yH4WOfp/ Lt4dHQdyOh9eDj664zfAp09AbO76HCpxv6o8G3jp2h10cnLdeXcMokMAHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfMGAM/SMmc118eEWHGkqPaia+8MB8GA1UdIwQY MBaAFHM7Byi3oFQ1hMLNC0i3R4xBlO8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgt ZGFlZTBhZWFmYjJiLzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgtZGFlZTBhZWFmYjJi LzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKchBkoe TkYqFMKqJY+FXDyYHsw4WtZlb3PlG9rDiHOvB9Et1SJmQzEAG3IUrUuevzLBN1mn vgA0pYXOWuXDL+dD6qCec4pSKbVpUCSymVJePQlyzCQjJZyFNb5xt2GlGLBJsGQ5 UBZ5Ognv5y9mgIXBPIKxFrml/39ByMd9ambx3fHNyGSGdgrJ+6yDJKbOlDPj9eQ/ 8A4EQChkaKqtYetAXnn3l9XT++wh0mIkd1h19G6qnMKOv/2gXpbxfJXurI84K3bW Jq7pxJHPCl0GZN06otRJkKuc1uK31fwp9KGEACJOXxIraCATijda8JHYYgWwLCwU ZFAAOFGY/2ejFg== -----END CERTIFICATE-----Generated at Sat Dec 6 02:46:56 2025 by rpki-client