This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json) Hash identifier: y+BEerS9kd4bdwzdEDERRF4wBW2wXEy3zAvL4rGRgUk= Subject key identifier: BC:42:0D:7C:96:B1:53:B1:BE:3D:CD:D1:AC:9D:2C:F0:BA:59:13:C8 Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c Certificate serial: 019B3DC81461CF798A1BB1F67C6AA1523D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:01:21 +0000 Manifest this update: Sat 20 Dec 2025 22:01:21 +0000 Manifest next update: Sun 21 Dec 2025 22:01:21 +0000 Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: DaSeTjrUCDD/TGCEU52njhQSi/XujncRr0nM18O3Oy0=) 2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:14:61:cf:79:8a:1b:b1:f6:7c:6a:a1:52:3d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c Validity Not Before: Dec 20 22:01:21 2025 GMT Not After : Dec 21 22:01:21 2025 GMT Subject: CN=bc420d7c96b153b1be3dcdd1ac9d2cf0ba5913c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:2d:12:03:36:e5:ed:aa:d1:7d:68:e2:77: 93:70:fa:a0:4c:29:0c:08:b2:11:8d:8b:2c:05:2d: ca:99:2a:a6:2e:cf:a4:ea:be:0f:a6:80:a7:d2:2e: 69:05:e9:e5:83:e8:a5:48:5f:26:d6:a2:f6:a1:cd: b6:b2:dc:a1:f6:04:01:18:9d:ad:f2:8e:b3:a5:cf: 07:5d:98:0b:65:61:7f:45:55:97:53:30:b9:43:21: 52:74:47:50:ad:4b:4d:f7:e7:73:20:b6:93:c1:c0: 93:31:62:74:ac:75:31:9c:82:b4:c1:27:e0:9e:3a: 1d:06:88:a6:62:c8:dc:bd:8f:57:33:3c:e0:74:fc: 47:79:4a:d4:ae:50:b9:89:93:95:d8:50:fb:02:df: 5b:f9:24:3d:c7:aa:ea:e8:31:b0:14:55:fb:fa:7a: 9e:85:15:80:2f:74:f0:7e:91:b6:7f:af:9f:63:c0: 6e:46:da:6f:20:9b:a2:8f:13:6b:6b:3d:25:bb:50: 2b:07:db:fd:88:a0:9d:b7:a0:46:67:d5:15:72:8e: 08:d1:ba:46:df:85:36:3b:69:b3:b1:a4:08:6c:92: 69:d6:76:c3:a3:17:e1:53:cc:13:42:b4:d0:7e:45: 20:71:9b:7e:72:ff:08:31:cd:0e:13:9e:cc:58:20: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:42:0D:7C:96:B1:53:B1:BE:3D:CD:D1:AC:9D:2C:F0:BA:59:13:C8 X509v3 Authority Key Identifier: keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3c:e5:32:c1:5a:4b:a0:08:d6:54:a2:9a:e2:18:9d:4b:1f: b4:f7:80:d6:97:5f:c8:96:87:ac:27:52:47:e7:ab:42:a1:07: 92:3b:39:bf:b0:e6:c1:5b:1c:b6:16:55:0c:1e:16:6d:6b:76: 36:87:24:b1:a3:e0:7b:27:a0:f0:c8:31:49:f4:02:de:68:21: 43:f0:6d:ac:62:79:67:a6:b1:d9:b7:2c:1a:51:a6:b6:b6:d5: 1f:e3:95:c7:e2:6c:bd:bf:36:20:e9:36:56:f8:b2:0c:96:4f: 92:4f:c1:5a:d3:e1:2d:53:3b:1d:61:1d:9f:0d:da:84:2c:be: a2:35:b9:7e:66:f8:55:82:80:1a:be:13:d6:6b:a9:d7:82:be: 11:17:0c:05:c5:5b:d4:42:8d:48:2c:83:9b:97:fa:02:73:0f: 68:cb:84:23:9e:fb:bc:ae:47:75:9b:62:9b:fb:fd:ca:5b:fb: 27:25:ee:8f:50:38:ae:12:9c:61:c4:94:c0:7f:1b:10:c1:76: 35:58:4a:19:81:a1:62:c0:47:86:16:fb:d5:bc:c6:52:a2:56: 81:7b:f1:3f:42:ae:2b:79:3e:ce:31:5d:4f:22:63:2a:f1:a8: b4:4f:7e:ae:f4:6f:bc:61:1c:4f:a7:46:83:0b:ea:95:c2:68: f7:62:9b:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBRhz3mKG7H2fGqhUj0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj MjlmM2MwHhcNMjUxMjIwMjIwMTIxWhcNMjUxMjIxMjIwMTIxWjAzMTEwLwYDVQQD EyhiYzQyMGQ3Yzk2YjE1M2IxYmUzZGNkZDFhYzlkMmNmMGJhNTkxM2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtywtEgM25e2q0X1o4neTcPqgTCkM CLIRjYssBS3KmSqmLs+k6r4PpoCn0i5pBenlg+ilSF8m1qL2oc22styh9gQBGJ2t 8o6zpc8HXZgLZWF/RVWXUzC5QyFSdEdQrUtN9+dzILaTwcCTMWJ0rHUxnIK0wSfg njodBoimYsjcvY9XMzzgdPxHeUrUrlC5iZOV2FD7At9b+SQ9x6rq6DGwFFX7+nqe hRWAL3TwfpG2f6+fY8BuRtpvIJuijxNraz0lu1ArB9v9iKCdt6BGZ9UVco4I0bpG 34U2O2mzsaQIbJJp1nbDoxfhU8wTQrTQfkUgcZt+cv8IMc0OE57MWCASkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxCDXyWsVOxvj3N0aydLPC6WRPIMB8GA1UdIwQY MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDzlMsFa S6AI1lSimuIYnUsftPeA1pdfyJaHrCdSR+erQqEHkjs5v7DmwVscthZVDB4WbWt2 NocksaPgeyeg8MgxSfQC3mghQ/BtrGJ5Z6ax2bcsGlGmtrbVH+OVx+Jsvb82IOk2 VviyDJZPkk/BWtPhLVM7HWEdnw3ahCy+ojW5fmb4VYKAGr4T1mup14K+ERcMBcVb 1EKNSCyDm5f6AnMPaMuEI577vK5HdZtim/v9ylv7JyXuj1A4rhKcYcSUwH8bEMF2 NVhKGYGhYsBHhhb71bzGUqJWgXvxP0KuK3k+zjFdTyJjKvGotE9+rvRvvGEcT6dG gwvqlcJo92Kbcg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:40:29 2025 by rpki-client