This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json) Hash identifier: 0JoD7JlOfSaCrxLE52v3XBNOFi9y0MvCd0avZ6gYL6Q= Subject key identifier: 09:60:B3:85:D6:12:97:23:94:1D:56:EE:81:01:6E:9F:DF:40:47:39 Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c Certificate serial: 019AF088B4E8EBBC634CBB6562D6D8429B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 22:01:22 +0000 Manifest this update: Fri 05 Dec 2025 22:01:22 +0000 Manifest next update: Sat 06 Dec 2025 22:01:22 +0000 Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: +oRQWWhqy/Ekgxc3+GoYwVq6ER2iykkxepVSkcVd74g=) 2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b4:e8:eb:bc:63:4c:bb:65:62:d6:d8:42:9b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c Validity Not Before: Dec 5 22:01:22 2025 GMT Not After : Dec 6 22:01:22 2025 GMT Subject: CN=0960b385d6129723941d56ee81016e9fdf404739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:87:b3:9f:be:73:ec:ef:1e:90:73:fa:f3: ea:1f:3f:ea:f0:16:d3:c2:34:7c:00:a3:8e:9d:14: 82:65:a9:61:8d:ac:cd:99:ab:be:69:68:77:35:f0: 7b:77:11:38:d3:e8:b5:0e:7e:ad:1e:06:36:ca:f4: 5c:01:a6:57:a2:30:4e:6a:b3:d8:b4:21:b8:97:5f: 17:a0:c6:be:e8:74:07:4d:fc:12:9d:a5:e8:ef:ad: f2:67:ce:54:49:b8:fc:9e:a8:04:d4:14:f7:75:49: 3b:57:b6:05:32:16:d4:46:d9:d9:63:fe:ae:60:b7: 88:22:2e:0a:b6:ae:66:79:b7:22:40:96:e2:36:f5: 87:ad:27:28:19:3d:11:67:f7:72:dd:66:b9:ea:1e: ca:62:f1:ad:65:8a:41:02:d0:ca:b7:e9:45:3d:95: 7f:6a:4d:a4:c6:5d:7c:40:aa:0a:03:3e:eb:b3:9f: 44:eb:98:fd:76:61:eb:81:ac:65:f0:06:93:c0:fc: 27:99:fb:b2:65:d2:fc:0d:d8:40:10:68:ac:08:3e: e7:2d:4e:fb:d0:4a:f6:6f:12:f7:64:eb:50:74:4f: 80:21:d9:21:3d:ac:04:bf:6c:62:b5:2c:a9:7e:1e: 75:7e:55:66:f5:0a:c0:cf:58:37:a4:c3:73:ad:22: 0c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:B3:85:D6:12:97:23:94:1D:56:EE:81:01:6E:9F:DF:40:47:39 X509v3 Authority Key Identifier: keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:63:f4:6b:ef:01:0b:3e:43:5f:39:cc:84:32:18:aa:82:c0: e7:60:43:55:18:48:8f:1f:86:23:82:b6:a2:19:13:86:41:d0: 84:78:04:f2:29:2e:94:ee:2f:11:bb:1c:e3:61:97:43:0a:5d: 57:7a:b3:f8:c6:a6:06:4f:f7:5e:e5:6c:95:9f:70:8f:b4:4d: 7a:f4:25:b4:3a:15:19:98:dc:a5:9e:c4:d7:f0:ab:80:db:cf: ca:d9:0f:3c:17:25:28:af:d7:2b:51:4d:2c:df:77:95:a2:90: 2c:b3:44:38:b3:31:32:0c:9c:59:e6:0b:3f:a0:1c:30:68:aa: 83:ba:39:b8:21:55:e7:82:78:dc:d9:07:f8:a7:24:cd:d9:c7: f3:a4:68:f6:d2:d3:8c:61:91:b0:34:eb:ec:87:4e:a5:a7:35: 0a:b1:5f:66:18:d6:66:60:3a:ff:1f:b1:9a:55:dd:b6:c4:6e: 7e:e8:9a:b2:d1:c2:4a:78:65:5a:fe:39:85:c9:3f:ae:0a:3c: 57:96:f1:37:99:4c:f1:e5:c9:22:af:6e:13:b8:fe:67:9c:b4: 0a:83:73:b0:5e:9a:34:13:4c:d9:7e:59:45:fb:f4:6c:b0:e4: 59:bf:f0:f0:b6:3e:ca:8b:26:fd:b7:4f:68:44:3c:be:eb:a5: 48:3c:a1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLTo67xjTLtlYtbYQptkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj MjlmM2MwHhcNMjUxMjA1MjIwMTIyWhcNMjUxMjA2MjIwMTIyWjAzMTEwLwYDVQQD EygwOTYwYjM4NWQ2MTI5NzIzOTQxZDU2ZWU4MTAxNmU5ZmRmNDA0NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0luHs5++c+zvHpBz+vPqHz/q8BbT wjR8AKOOnRSCZalhjazNmau+aWh3NfB7dxE40+i1Dn6tHgY2yvRcAaZXojBOarPY tCG4l18XoMa+6HQHTfwSnaXo763yZ85USbj8nqgE1BT3dUk7V7YFMhbURtnZY/6u YLeIIi4Ktq5mebciQJbiNvWHrScoGT0RZ/dy3Wa56h7KYvGtZYpBAtDKt+lFPZV/ ak2kxl18QKoKAz7rs59E65j9dmHrgaxl8AaTwPwnmfuyZdL8DdhAEGisCD7nLU77 0Er2bxL3ZOtQdE+AIdkhPawEv2xitSypfh51flVm9QrAz1g3pMNzrSIMQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlgs4XWEpcjlB1W7oEBbp/fQEc5MB8GA1UdIwQY MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWP0a+8B Cz5DXznMhDIYqoLA52BDVRhIjx+GI4K2ohkThkHQhHgE8ikulO4vEbsc42GXQwpd V3qz+MamBk/3XuVslZ9wj7RNevQltDoVGZjcpZ7E1/CrgNvPytkPPBclKK/XK1FN LN93laKQLLNEOLMxMgycWeYLP6AcMGiqg7o5uCFV54J43NkH+KckzdnH86Ro9tLT jGGRsDTr7IdOpac1CrFfZhjWZmA6/x+xmlXdtsRufuiastHCSnhlWv45hck/rgo8 V5bxN5lM8eXJIq9uE7j+Z5y0CoNzsF6aNBNM2X5ZRfv0bLDkWb/w8LY+yosm/bdP aEQ8vuulSDyh6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:05 2025 by rpki-client