This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json) Hash identifier: 19kuk1s1MDCamFG7P7O1KPYioNt4EXsRnQ7/081O+6o= Subject key identifier: C8:F3:20:22:E5:D4:BE:62:5E:06:3E:81:C7:C5:9B:B0:E6:D4:E4:FD Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a Certificate serial: 019B2EF917B79653E0F9BF05539BCCDE4202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft Manifest number: 08B8 Signing time: Thu 18 Dec 2025 01:00:34 +0000 Manifest this update: Thu 18 Dec 2025 01:00:34 +0000 Manifest next update: Fri 19 Dec 2025 01:00:34 +0000 Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=) 2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=) 3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: 2VUfUSs4Ad0GjamMxpHSIsgApSZuNru3nFY3J9VXfFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:17:b7:96:53:e0:f9:bf:05:53:9b:cc:de:42:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a Validity Not Before: Dec 18 01:00:34 2025 GMT Not After : Dec 19 01:00:34 2025 GMT Subject: CN=c8f32022e5d4be625e063e81c7c59bb0e6d4e4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:f4:75:ea:fe:cc:1a:f5:38:3d:03:03:27: ee:67:3c:56:ba:f7:b7:43:35:a7:34:5d:05:85:9c: 20:b0:a2:2e:fb:89:90:3b:2b:2f:df:fc:f7:06:a9: 3a:21:af:b7:41:68:9e:d4:db:77:f1:e2:cf:31:32: 3d:3a:95:03:74:a6:8f:26:b7:08:ea:03:9c:03:26: 19:70:79:48:72:17:9b:c6:9a:29:1a:13:a9:26:6a: bd:b8:85:82:ef:d9:a0:8b:d0:37:ad:a9:4d:96:44: 33:35:b9:0b:f2:a6:ea:2f:ea:45:07:2d:d9:80:3d: 51:35:1c:d9:5a:8d:f6:85:47:19:db:56:d9:b6:8a: 08:d4:56:bf:9f:f9:16:59:c5:92:59:0a:6f:15:42: b4:6a:33:87:d1:1b:b5:e4:48:88:17:38:e3:2a:56: 38:ad:6a:15:c8:57:c4:d5:ca:37:12:28:b1:38:c7: 7a:8f:8f:5a:5c:7c:a8:0f:e5:21:a6:0c:c1:37:11: 4d:de:58:d7:bf:49:f3:ac:81:a6:1c:b2:d0:d5:75: 42:43:16:26:6a:75:60:54:0f:c3:4d:22:aa:81:9b: 69:35:53:a8:5a:24:31:b1:43:dc:4e:f5:a4:6d:03: 7f:e7:ee:5c:e8:82:8d:36:9f:64:73:95:f0:2c:68: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F3:20:22:E5:D4:BE:62:5E:06:3E:81:C7:C5:9B:B0:E6:D4:E4:FD X509v3 Authority Key Identifier: keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9e:83:74:52:d9:1b:b4:5e:18:5a:d3:22:52:5a:6c:04:f4: b7:e0:51:38:63:10:69:48:42:9e:bf:d3:f3:6c:40:c3:22:24: e3:03:3d:ad:d4:3f:8d:a1:22:08:ed:86:ba:8b:91:d2:b0:af: 0b:ea:9a:ae:e2:e3:f1:63:ee:4a:b5:43:56:17:b2:52:de:8e: 14:80:48:8d:c5:d8:2a:15:c8:1c:cc:e2:ee:ba:24:fd:d5:73: 77:eb:92:5b:23:e5:50:07:27:cd:a0:43:5a:bc:91:83:1e:22: da:97:42:63:a5:f7:58:55:26:1c:73:08:30:e8:5f:b0:1d:10: 88:e9:9a:18:7f:54:45:4b:18:02:3a:df:33:ee:e8:4d:da:cd: 2b:71:b3:25:24:e9:fb:11:27:af:10:2c:c5:86:f7:4e:cb:97: 85:f7:96:5e:3a:97:31:2c:de:eb:59:fc:a0:18:ee:d3:8f:39: 91:91:a6:22:88:2e:02:8e:90:24:e2:0e:fb:bc:0c:d1:49:bd: d3:64:04:f1:1a:5c:e5:36:3d:ae:7c:04:da:f8:ad:54:b1:a4: 1a:af:10:2e:03:11:b7:a9:c2:40:30:35:e4:9c:6e:fe:c9:39: e7:88:1a:85:ad:52:73:e2:1b:9a:fc:cc:7c:1a:1a:ba:a8:58: 1c:a3:8e:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Re3llPg+b8FU5vM3kICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczM2IwNzI4YjdhMDU0MzU4NGMyY2QwYjQ4Yjc0NzhjNDE5 NGVmMGEwHhcNMjUxMjE4MDEwMDM0WhcNMjUxMjE5MDEwMDM0WjAzMTEwLwYDVQQD EyhjOGYzMjAyMmU1ZDRiZTYyNWUwNjNlODFjN2M1OWJiMGU2ZDRlNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkf0der+zBr1OD0DAyfuZzxWuve3 QzWnNF0FhZwgsKIu+4mQOysv3/z3Bqk6Ia+3QWie1Nt38eLPMTI9OpUDdKaPJrcI 6gOcAyYZcHlIchebxpopGhOpJmq9uIWC79mgi9A3ralNlkQzNbkL8qbqL+pFBy3Z gD1RNRzZWo32hUcZ21bZtooI1Fa/n/kWWcWSWQpvFUK0ajOH0Ru15EiIFzjjKlY4 rWoVyFfE1co3EiixOMd6j49aXHyoD+UhpgzBNxFN3ljXv0nzrIGmHLLQ1XVCQxYm anVgVA/DTSKqgZtpNVOoWiQxsUPcTvWkbQN/5+5c6IKNNp9kc5XwLGghwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjzICLl1L5iXgY+gcfFm7Dm1OT9MB8GA1UdIwQY MBaAFHM7Byi3oFQ1hMLNC0i3R4xBlO8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgt ZGFlZTBhZWFmYjJiLzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgtZGFlZTBhZWFmYjJi LzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ6DdFLZ G7ReGFrTIlJabAT0t+BROGMQaUhCnr/T82xAwyIk4wM9rdQ/jaEiCO2GuouR0rCv C+qaruLj8WPuSrVDVheyUt6OFIBIjcXYKhXIHMzi7rok/dVzd+uSWyPlUAcnzaBD WryRgx4i2pdCY6X3WFUmHHMIMOhfsB0QiOmaGH9URUsYAjrfM+7oTdrNK3GzJSTp +xEnrxAsxYb3TsuXhfeWXjqXMSze61n8oBju0485kZGmIoguAo6QJOIO+7wM0Um9 02QE8Rpc5TY9rnwE2vitVLGkGq8QLgMRt6nCQDA15Jxu/sk554gaha1Sc+IbmvzM fBoauqhYHKOOFQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:24 2025 by rpki-client