This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json) Hash identifier: 8vhyDIu2jm9aEUkzoinV0aAdSCEwrPZKdbsGY+OcO+8= Subject key identifier: D4:40:95:BF:41:6E:6C:49:C4:28:8D:27:E1:BC:31:57:C9:D9:25:06 Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Certificate serial: 019B10815480889B0B7DE99655A81ACF1E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft Manifest number: 15FE Signing time: Fri 12 Dec 2025 03:01:09 +0000 Manifest this update: Fri 12 Dec 2025 03:01:09 +0000 Manifest next update: Sat 13 Dec 2025 03:01:09 +0000 Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=) 2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: NLhK8vckd/7YjRBxTDsE+oafFPtSPFArb/FcKYX3kcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:54:80:88:9b:0b:7d:e9:96:55:a8:1a:cf:1e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Validity Not Before: Dec 12 03:01:09 2025 GMT Not After : Dec 13 03:01:09 2025 GMT Subject: CN=d44095bf416e6c49c4288d27e1bc3157c9d92506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:65:c2:6f:c4:8b:45:c6:e1:0f:c5:e6:42: a4:9c:87:d8:fe:df:91:f0:ba:7e:b4:0d:f3:b0:d4: b2:ec:83:d1:99:e1:fb:cf:b1:5a:c4:75:b5:1a:5f: 0a:3c:f2:20:b9:5c:11:7f:55:77:6a:85:5b:0b:c2: d2:3b:d4:ca:98:2b:e7:4a:ba:1d:04:4e:ae:fc:46: 2e:87:d3:12:3e:be:cc:2b:9f:98:7e:c3:cc:7e:3c: f6:be:fa:65:58:a2:88:1e:51:87:65:82:5d:94:c2: 6b:12:05:df:00:a8:36:c5:c0:f2:59:68:c6:1d:d5: 4a:42:12:ab:7f:7e:75:d2:f5:a1:c0:68:4c:c3:86: 6a:a2:64:bd:59:5b:17:c1:8a:ec:1b:8e:f5:9e:57: 0b:76:20:b4:34:a5:7a:0b:ff:e1:2f:2e:d8:e1:5c: 00:67:17:a9:5f:66:87:40:9b:15:bf:3e:ad:20:11: e1:10:3d:11:b0:b4:0b:02:ff:93:cd:43:59:65:f0: c9:2c:39:90:1f:c0:a6:42:51:fb:90:92:ae:af:78: 71:c3:e6:77:b0:2b:10:1f:85:53:db:e1:ac:55:53: 2f:bf:bf:6f:5a:47:de:36:10:af:4b:57:5d:42:0f: c3:10:04:fe:bd:4d:db:bd:f7:1e:4e:39:57:b4:b0: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:95:BF:41:6E:6C:49:C4:28:8D:27:E1:BC:31:57:C9:D9:25:06 X509v3 Authority Key Identifier: keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:a4:d9:f4:64:ce:8e:97:88:4b:12:25:28:5a:e8:c5:36: 49:d7:0a:78:a8:b0:53:0f:91:86:da:e2:b1:0c:35:94:37:77: f7:46:71:6c:3a:67:1f:fa:09:7a:b1:c7:a7:7b:95:e4:51:72: 7e:82:66:ee:31:d4:3c:75:dc:45:ef:66:34:dc:5d:c7:d2:61: 77:e0:af:81:81:da:04:ea:33:88:e3:22:ae:4b:36:31:74:1d: af:6f:d7:ab:d4:64:79:9e:17:15:08:56:33:a1:8f:e8:32:23: d9:30:de:cd:ce:77:67:11:7d:a4:43:68:a6:b4:64:2c:d4:f5: e4:44:98:c9:1c:10:c2:aa:16:e7:11:2e:29:73:64:e6:f2:dd: 03:a1:87:04:1c:db:68:be:91:96:e6:6b:97:7d:4d:bd:c9:a3: 59:41:d5:e9:f6:b2:91:43:e7:3c:72:68:c2:5e:d6:40:0b:6e: 41:3d:9a:1e:49:d3:a0:55:69:6c:e4:30:2b:d7:0d:a1:4b:a9: 15:53:8c:af:e4:c4:27:3c:a6:cb:d6:6f:a5:cd:51:e7:ce:47: 6a:a6:48:2c:dd:27:7f:a4:b0:33:bd:44:b6:a7:04:4b:3d:55: d3:3d:90:49:1f:d3:7f:af:01:00:4a:9f:d3:13:59:af:0b:e3: 56:4c:55:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgVSAiJsLfemWVagazx5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh MDI2NzgwHhcNMjUxMjEyMDMwMTA5WhcNMjUxMjEzMDMwMTA5WjAzMTEwLwYDVQQD EyhkNDQwOTViZjQxNmU2YzQ5YzQyODhkMjdlMWJjMzE1N2M5ZDkyNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0xlwm/Ei0XG4Q/F5kKknIfY/t+R 8Lp+tA3zsNSy7IPRmeH7z7FaxHW1Gl8KPPIguVwRf1V3aoVbC8LSO9TKmCvnSrod BE6u/EYuh9MSPr7MK5+YfsPMfjz2vvplWKKIHlGHZYJdlMJrEgXfAKg2xcDyWWjG HdVKQhKrf3510vWhwGhMw4ZqomS9WVsXwYrsG471nlcLdiC0NKV6C//hLy7Y4VwA ZxepX2aHQJsVvz6tIBHhED0RsLQLAv+TzUNZZfDJLDmQH8CmQlH7kJKur3hxw+Z3 sCsQH4VT2+GsVVMvv79vWkfeNhCvS1ddQg/DEAT+vU3bvfceTjlXtLA6TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRAlb9BbmxJxCiNJ+G8MVfJ2SUGMB8GA1UdIwQY MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW6k2fRk zo6XiEsSJSha6MU2SdcKeKiwUw+RhtrisQw1lDd390ZxbDpnH/oJerHHp3uV5FFy foJm7jHUPHXcRe9mNNxdx9Jhd+CvgYHaBOoziOMirks2MXQdr2/Xq9RkeZ4XFQhW M6GP6DIj2TDezc53ZxF9pENoprRkLNT15ESYyRwQwqoW5xEuKXNk5vLdA6GHBBzb aL6RluZrl31NvcmjWUHV6faykUPnPHJowl7WQAtuQT2aHknToFVpbOQwK9cNoUup FVOMr+TEJzymy9Zvpc1R585HaqZILN0nf6SwM71EtqcESz1V0z2QSR/Tf68BAEqf 0xNZrwvjVkxVyw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:28:48 2025 by rpki-client