This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json) Hash identifier: GExMuPY4uVInDTJz5AV4ACT/iRwhL6k2O0oVanJ5FiI= Subject key identifier: 37:25:65:92:15:33:DB:3A:D2:4F:E1:F7:03:8B:F1:A9:C5:0D:29:1E Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Certificate serial: 019B3CEC5BFB77D8523A6B5E3ADF2AE86522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft Manifest number: 1615 Signing time: Sat 20 Dec 2025 18:01:21 +0000 Manifest this update: Sat 20 Dec 2025 18:01:21 +0000 Manifest next update: Sun 21 Dec 2025 18:01:21 +0000 Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=) 2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: XbmnyEjtL6iNvmadkQeRps13a63WlCy3z1LJ62QBZwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:5b:fb:77:d8:52:3a:6b:5e:3a:df:2a:e8:65:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Validity Not Before: Dec 20 18:01:21 2025 GMT Not After : Dec 21 18:01:21 2025 GMT Subject: CN=372565921533db3ad24fe1f7038bf1a9c50d291e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:2b:b5:5b:a7:e7:3c:92:aa:77:00:b6:0b: 34:f6:2b:ae:83:1a:5a:39:fc:d3:fc:49:db:d6:52: 9f:63:1d:8f:6c:20:f0:d7:51:fa:77:8e:af:29:60: 3b:93:5a:39:38:a7:61:fb:33:db:87:f7:26:9d:44: 01:56:21:dc:ea:0e:d5:31:5e:b9:82:09:31:88:b4: c1:80:5b:1a:62:61:40:c4:b5:a4:92:85:18:8c:63: 52:d7:0e:b0:f3:ec:75:bb:7c:21:ac:51:86:60:0d: d7:a1:b7:25:68:8e:59:d7:4c:8d:c1:2e:9e:6c:6b: db:06:9d:ff:d0:18:5a:8f:9d:29:8c:9d:45:79:1c: de:71:b2:0c:c9:1f:fe:8e:4f:90:16:70:79:e4:57: 1c:c8:7d:01:e3:e9:41:91:5d:b1:0c:b6:2d:fa:86: f9:af:44:20:f7:a7:32:a9:ee:e8:84:c2:81:8b:e3: c8:20:02:b4:96:a5:77:9d:e0:77:89:70:1f:9e:e3: aa:fe:fc:6b:f7:71:0f:25:d0:cf:67:0c:7f:62:26: 4f:ee:cd:f4:b1:86:15:b6:48:c5:12:43:f9:88:a5: c9:ed:19:ed:17:b9:02:52:a2:ec:61:f8:a7:96:23: cb:f9:de:f3:ac:ad:f7:3d:71:b4:e9:71:d5:cd:cf: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:25:65:92:15:33:DB:3A:D2:4F:E1:F7:03:8B:F1:A9:C5:0D:29:1E X509v3 Authority Key Identifier: keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:be:7a:b2:4a:c5:98:63:6d:82:41:cf:dd:4f:96:ac:06:9b: 09:37:0d:a6:d2:17:71:e7:9c:0e:37:6d:80:b0:d6:24:7d:d9: 2e:f4:b6:e8:00:29:91:35:a9:21:57:23:41:a8:72:b5:14:27: ca:3d:d0:43:19:2c:97:b9:cd:13:dc:c0:22:3a:1c:4e:b2:a2: f8:bd:55:a4:43:ff:b2:7e:00:a0:90:c6:59:b2:8f:0f:81:d8: 2e:a3:9b:a7:b7:7e:82:a5:87:80:a8:51:7d:45:27:60:a8:59: 03:2f:ae:f7:72:34:98:37:74:ae:77:1d:65:a9:bc:3c:ca:80: 70:0b:ac:95:69:5f:3b:bb:11:ad:a6:08:9c:5b:bc:5f:ee:31: 57:98:f0:18:d0:0a:12:08:90:82:70:c0:40:d2:ac:72:3f:ab: f8:a6:64:20:e4:6c:14:a7:2b:01:c1:c4:4f:89:ef:f6:6b:93: 10:08:fe:d9:92:29:e2:24:8e:a0:cc:e1:03:38:c9:16:ec:c3: 75:34:04:a4:de:c2:e3:9c:ac:87:5a:59:89:98:c9:ff:5f:71: 39:52:85:01:9a:e9:e3:cf:5b:60:11:ac:02:23:36:80:13:50: 70:9d:9a:54:73:af:a2:80:52:61:a3:fe:ff:80:e8:12:dd:71: 51:49:1d:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Fv7d9hSOmteOt8q6GUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh MDI2NzgwHhcNMjUxMjIwMTgwMTIxWhcNMjUxMjIxMTgwMTIxWjAzMTEwLwYDVQQD EygzNzI1NjU5MjE1MzNkYjNhZDI0ZmUxZjcwMzhiZjFhOWM1MGQyOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1YrtVun5zySqncAtgs09iuugxpa OfzT/Enb1lKfYx2PbCDw11H6d46vKWA7k1o5OKdh+zPbh/cmnUQBViHc6g7VMV65 ggkxiLTBgFsaYmFAxLWkkoUYjGNS1w6w8+x1u3whrFGGYA3XobclaI5Z10yNwS6e bGvbBp3/0Bhaj50pjJ1FeRzecbIMyR/+jk+QFnB55FccyH0B4+lBkV2xDLYt+ob5 r0Qg96cyqe7ohMKBi+PIIAK0lqV3neB3iXAfnuOq/vxr93EPJdDPZwx/YiZP7s30 sYYVtkjFEkP5iKXJ7RntF7kCUqLsYfinliPL+d7zrK33PXG06XHVzc/YIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDclZZIVM9s60k/h9wOL8anFDSkeMB8GA1UdIwQY MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr56skrF mGNtgkHP3U+WrAabCTcNptIXceecDjdtgLDWJH3ZLvS26AApkTWpIVcjQahytRQn yj3QQxksl7nNE9zAIjocTrKi+L1VpEP/sn4AoJDGWbKPD4HYLqObp7d+gqWHgKhR fUUnYKhZAy+u93I0mDd0rncdZam8PMqAcAuslWlfO7sRraYInFu8X+4xV5jwGNAK EgiQgnDAQNKscj+r+KZkIORsFKcrAcHET4nv9muTEAj+2ZIp4iSOoMzhAzjJFuzD dTQEpN7C45ysh1pZiZjJ/19xOVKFAZrp489bYBGsAiM2gBNQcJ2aVHOvooBSYaP+ /4DoEt1xUUkd2g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:22:41 2025 by rpki-client