This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json) Hash identifier: YfbcWJrPw49zuUsOfZ/F4fQyA0CuG7gf1IHXBWWPHYo= Subject key identifier: 3E:56:FE:74:1E:8D:12:6A:7A:18:8E:F5:EC:48:AA:67:25:C3:52:0A Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36 Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36 Certificate serial: 019AF208E268A04EBD5E6C9AD76339DDF836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft Manifest number: 0184 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: rNLrQ2DQOIkl7H7DTM8HXVhXi2JqtNzJEPwJccywJXc=) 2: cOJF3c93EdtdcnQUgbiiqTgw_1M.roa (hash: zobvfeY7LZCgjAH4tIKeBPeHEqZ12dFg210JqNHCaCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:68:a0:4e:bd:5e:6c:9a:d7:63:39:dd:f8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=3e56fe741e8d126a7a188ef5ec48aa6725c3520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:0f:ea:45:72:eb:fb:53:d9:21:6a:93:bc: 28:0e:be:a3:a7:ee:25:fe:2b:d6:57:7f:e1:e9:cf: d0:3a:bb:ff:18:63:e6:c2:89:e3:e8:6c:84:18:9e: b3:9a:74:38:7e:34:be:2a:cf:ff:aa:ff:a8:4a:92: 7b:19:24:b5:c3:78:5c:8c:9e:c3:7d:62:bb:0d:13: de:97:6d:d0:ad:e7:76:f7:6d:47:1d:df:5e:d7:e9: cf:27:5f:7f:7b:19:fb:79:4c:3a:e8:99:81:4e:c6: 57:0d:bf:a3:42:58:51:0e:a7:b8:33:29:ab:c0:34: e6:89:99:a3:ff:5d:9a:75:82:39:16:1b:f9:8f:f0: 31:42:1f:8f:b8:ae:8f:e0:62:34:0c:67:5e:98:36: 79:bc:ab:08:bb:b8:9d:5c:22:f3:83:01:c5:fc:52: 32:6d:5d:04:66:6c:62:98:a1:b0:d0:b4:bd:59:ff: 83:73:ae:77:9c:b8:31:db:e6:d1:a4:05:61:b5:17: 21:ad:62:ad:58:49:44:22:bb:dd:fc:e6:33:18:dc: f1:c3:8c:7b:4b:12:6b:28:f1:52:4b:bd:be:c2:d7: 5d:5d:24:55:28:d9:90:b4:f0:27:16:89:74:ff:29: 77:77:40:36:eb:59:c7:8d:7b:17:9f:32:a0:46:72: f6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:56:FE:74:1E:8D:12:6A:7A:18:8E:F5:EC:48:AA:67:25:C3:52:0A X509v3 Authority Key Identifier: keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:90:c6:04:af:7d:f9:09:14:9d:33:bd:37:48:27:1f:df:62: 08:c7:fa:0b:c6:11:30:11:44:c5:de:22:cd:93:54:cd:93:a3: dc:8c:ce:44:35:37:5e:ca:28:8c:71:6d:c0:56:b3:15:7c:76: 28:1b:1e:98:28:3e:5f:69:34:0c:16:ab:34:6a:fb:83:3b:52: e7:66:3d:fe:5b:42:86:c5:12:88:13:61:6f:b7:e2:da:ad:df: 61:6b:a2:b5:73:25:6d:86:88:01:b4:0a:66:a7:3a:55:ac:84: b2:f5:58:87:c4:e4:be:8b:1b:e5:45:5e:25:63:82:b3:6f:69: 70:54:c6:fc:73:e9:7f:4a:68:75:87:8b:6d:14:c5:34:57:fc: 39:6e:dc:14:af:cd:f9:5d:00:c1:0f:fd:7e:4b:b3:07:20:bd: 7b:63:51:a3:c1:f6:f7:e5:55:32:31:6d:38:f8:73:dd:a1:fa: b3:84:c1:52:c6:be:5c:6a:cb:af:ff:c5:79:00:41:2c:e8:f1: 9e:b7:97:19:21:9c:41:50:7e:be:ff:b3:c0:c2:39:2c:ec:7f: 1b:19:3c:cd:a7:5c:f2:ef:0a:07:a2:0d:2f:b7:7b:01:73:cf: 9e:c7:c9:e6:66:88:14:56:24:9a:44:0b:14:91:9e:d6:ca:2c: 2c:d6:6d:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOJooE69Xmya12M53fg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWZhYWIyMTYxMTE4ZGIxYjc3YzFhNzRlY2NjYjczZTc2 ODFjMzYwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygzZTU2ZmU3NDFlOGQxMjZhN2ExODhlZjVlYzQ4YWE2NzI1YzM1MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA390P6kVy6/tT2SFqk7woDr6jp+4l /ivWV3/h6c/QOrv/GGPmwonj6GyEGJ6zmnQ4fjS+Ks//qv+oSpJ7GSS1w3hcjJ7D fWK7DRPel23Qred2921HHd9e1+nPJ19/exn7eUw66JmBTsZXDb+jQlhRDqe4Mymr wDTmiZmj/12adYI5Fhv5j/AxQh+PuK6P4GI0DGdemDZ5vKsIu7idXCLzgwHF/FIy bV0EZmximKGw0LS9Wf+Dc653nLgx2+bRpAVhtRchrWKtWElEIrvd/OYzGNzxw4x7 SxJrKPFSS72+wtddXSRVKNmQtPAnFol0/yl3d0A261nHjXsXnzKgRnL2PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5W/nQejRJqehiO9exIqmclw1IKMB8GA1UdIwQY MBaAFAmfqrIWERjbG3fBp07My3PnaBw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84OGI2Y2MtMmI0Mi00MWUyLTk5YTkt NGUyNGIxMTljMTQ3LzEvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84OGI2Y2MtMmI0Mi00MWUyLTk5YTktNGUyNGIxMTljMTQ3 LzEvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJDGBK99 +QkUnTO9N0gnH99iCMf6C8YRMBFExd4izZNUzZOj3IzORDU3XsoojHFtwFazFXx2 KBsemCg+X2k0DBarNGr7gztS52Y9/ltChsUSiBNhb7fi2q3fYWuitXMlbYaIAbQK Zqc6VayEsvVYh8Tkvosb5UVeJWOCs29pcFTG/HPpf0podYeLbRTFNFf8OW7cFK/N +V0AwQ/9fkuzByC9e2NRo8H29+VVMjFtOPhz3aH6s4TBUsa+XGrLr//FeQBBLOjx nreXGSGcQVB+vv+zwMI5LOx/Gxk8zadc8u8KB6INL7d7AXPPnsfJ5maIFFYkmkQL FJGe1sosLNZtHA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:19 2025 by rpki-client