This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json) Hash identifier: r2dOJuIBKdeRdNs2Zos3xXE23lQG00Cr/dEjatY/LGo= Subject key identifier: AA:B5:74:E9:5A:BE:12:49:7E:8A:05:5F:08:6B:A5:EE:AD:CB:E8:A2 Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36 Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36 Certificate serial: 019BF46322B86DA869D5CB9BF28D0E6D3E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft Manifest number: 020A Signing time: Sun 25 Jan 2026 09:01:36 +0000 Manifest this update: Sun 25 Jan 2026 09:01:36 +0000 Manifest next update: Mon 26 Jan 2026 09:01:36 +0000 Files and hashes: 1: B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (hash: Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=) 2: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: vv9Rb8ozo/jWXCAferJaVDeKa2mVFYBavkD6d/C37UU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:22:b8:6d:a8:69:d5:cb:9b:f2:8d:0e:6d:3e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36 Validity Not Before: Jan 25 09:01:36 2026 GMT Not After : Jan 26 09:01:36 2026 GMT Subject: CN=aab574e95abe12497e8a055f086ba5eeadcbe8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:d7:5a:37:e6:b5:64:a9:47:15:da:ce:20: c4:13:92:55:ab:a8:1b:ce:8d:97:af:02:43:d9:24: 42:a4:4d:13:26:c1:4b:df:79:50:b0:af:02:e4:aa: c4:1a:08:29:0b:41:8c:88:68:87:01:03:c5:e3:b0: 88:62:17:cc:a0:50:21:23:ff:a4:b2:98:e2:76:c7: 70:29:5d:da:dd:39:63:e1:69:3d:c2:57:28:e2:d3: e6:ef:37:5e:f6:f4:38:fc:e7:61:9f:51:4e:b3:44: 45:49:4a:43:17:de:e8:a8:3d:60:a6:03:07:d8:07: 3c:5c:39:fc:00:61:ac:a3:e6:6b:5c:8f:06:18:a7: 08:30:fd:c0:ba:9a:2a:f6:76:36:0c:73:65:1b:94: 7c:ef:60:de:0c:04:ec:f0:3c:13:f1:65:9d:f8:7d: 7d:b8:96:40:46:82:11:2f:ba:74:71:94:d1:2d:75: 94:cd:3c:9b:36:0e:1b:44:bb:21:30:e5:f8:7d:ab: b2:4b:79:91:6c:50:19:19:fe:f3:ed:e4:38:86:8a: 51:32:70:61:7f:90:63:af:87:80:e9:06:0a:d5:5f: 42:bf:3a:49:bf:cb:d8:33:cd:22:8b:fc:4f:48:11: 40:b0:82:f3:55:9d:1b:73:7c:20:56:56:8a:d6:3d: cb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B5:74:E9:5A:BE:12:49:7E:8A:05:5F:08:6B:A5:EE:AD:CB:E8:A2 X509v3 Authority Key Identifier: keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:03:f0:62:a9:0e:26:aa:d1:70:6d:10:d4:66:03:ef:22:bf: 45:fb:25:21:66:84:d8:de:a5:5d:aa:c2:3f:f5:a8:76:c4:6a: c2:24:93:54:c6:46:2a:44:d8:83:7d:1a:e4:30:59:b0:85:17: 09:c3:8d:8e:4e:a5:b2:82:17:9c:a8:02:68:93:3f:38:83:a4: 7f:a5:fd:4f:bd:42:b6:52:82:4b:6b:f9:e0:bf:82:78:07:09: b3:f4:2c:60:0b:8c:56:fc:14:9b:43:da:7d:cb:47:15:1f:d5: fc:74:1f:ac:56:02:25:bd:a9:79:d7:bb:ea:6d:62:f4:c7:06: 91:bc:c7:50:8b:68:5f:5b:5c:c0:bc:99:3d:df:b5:7a:c4:95: 5b:50:68:a0:81:07:45:c4:14:e2:86:ff:82:05:c5:9d:74:59: 5a:7e:1c:fb:c0:08:16:4a:94:0d:b4:f1:81:b7:ac:42:d2:46: b7:86:a4:a0:93:57:69:38:9f:e9:25:2e:0a:c7:48:34:bf:c1: 6c:9a:fb:77:1c:cd:ed:f7:59:e8:72:e7:b3:77:99:7f:32:82: ae:c8:73:9d:63:31:b8:bd:01:af:da:26:56:d2:40:f2:b8:89: 97:e3:19:12:7b:0a:e0:cd:50:7a:4d:9f:47:0d:7a:8c:0f:f1: 04:f2:13:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YyK4bahp1cub8o0ObT54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWZhYWIyMTYxMTE4ZGIxYjc3YzFhNzRlY2NjYjczZTc2 ODFjMzYwHhcNMjYwMTI1MDkwMTM2WhcNMjYwMTI2MDkwMTM2WjAzMTEwLwYDVQQD EyhhYWI1NzRlOTVhYmUxMjQ5N2U4YTA1NWYwODZiYTVlZWFkY2JlOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqfXWjfmtWSpRxXaziDEE5JVq6gb zo2XrwJD2SRCpE0TJsFL33lQsK8C5KrEGggpC0GMiGiHAQPF47CIYhfMoFAhI/+k spjidsdwKV3a3Tlj4Wk9wlco4tPm7zde9vQ4/Odhn1FOs0RFSUpDF97oqD1gpgMH 2Ac8XDn8AGGso+ZrXI8GGKcIMP3Aupoq9nY2DHNlG5R872DeDATs8DwT8WWd+H19 uJZARoIRL7p0cZTRLXWUzTybNg4bRLshMOX4fauyS3mRbFAZGf7z7eQ4hopRMnBh f5Bjr4eA6QYK1V9CvzpJv8vYM80ii/xPSBFAsILzVZ0bc3wgVlaK1j3LhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq1dOlavhJJfooFXwhrpe6ty+iiMB8GA1UdIwQY MBaAFAmfqrIWERjbG3fBp07My3PnaBw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84OGI2Y2MtMmI0Mi00MWUyLTk5YTkt NGUyNGIxMTljMTQ3LzEvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84OGI2Y2MtMmI0Mi00MWUyLTk5YTktNGUyNGIxMTljMTQ3 LzEvQ1otcXNoWVJHTnNiZDhHblRzekxjLWRvSERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQPwYqkO JqrRcG0Q1GYD7yK/RfslIWaE2N6lXarCP/WodsRqwiSTVMZGKkTYg30a5DBZsIUX CcONjk6lsoIXnKgCaJM/OIOkf6X9T71CtlKCS2v54L+CeAcJs/QsYAuMVvwUm0Pa fctHFR/V/HQfrFYCJb2pede76m1i9McGkbzHUItoX1tcwLyZPd+1esSVW1BooIEH RcQU4ob/ggXFnXRZWn4c+8AIFkqUDbTxgbesQtJGt4akoJNXaTif6SUuCsdINL/B bJr7dxzN7fdZ6HLns3eZfzKCrshznWMxuL0Br9omVtJA8riJl+MZEnsK4M1Qek2f Rw16jA/xBPITWA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:43 2026 by rpki-client