This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json) Hash identifier: 8RWJP3Dq/IuuM0k6xNwdta7+vlPDFVGPVP+Wsbf2T4A= Subject key identifier: 2D:79:9F:86:8B:18:0B:A7:56:7D:24:3C:E9:02:CB:1E:87:9C:96:1D Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e Certificate serial: 019AF6F8B7A6925BEFC01DD44C95E1CADAB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft Manifest number: 13B3 Signing time: Sun 07 Dec 2025 04:01:26 +0000 Manifest this update: Sun 07 Dec 2025 04:01:26 +0000 Manifest next update: Mon 08 Dec 2025 04:01:26 +0000 Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: pk2r2JX2e0UY92fo/yuulBphCg3Nfccp0gNwPNLAoEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:b7:a6:92:5b:ef:c0:1d:d4:4c:95:e1:ca:da:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e Validity Not Before: Dec 7 04:01:26 2025 GMT Not After : Dec 8 04:01:26 2025 GMT Subject: CN=2d799f868b180ba7567d243ce902cb1e879c961d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:bd:5f:dc:6d:46:f8:0c:7c:fe:5b:a6:e7: 54:4e:ae:e6:c2:a9:22:97:7c:cc:fd:56:1b:fa:34: 54:68:e0:79:d4:42:41:a7:53:d4:b5:03:f3:14:8c: 1d:9c:ea:df:56:9a:e5:f0:39:22:d3:10:53:a9:7e: 26:83:fe:15:8c:9d:68:a7:9c:52:cc:ee:ab:8c:16: cf:be:ba:f1:65:fc:d2:65:9a:ab:f2:21:1a:2d:00: 47:00:7a:14:77:ed:18:54:24:7d:56:c3:35:28:43: a4:c1:b9:3f:88:af:39:64:0f:15:98:40:16:c6:07: 82:23:0f:a0:9b:63:00:3d:9a:c8:b5:53:9b:de:d1: b7:98:10:ad:e5:b2:a0:15:8e:04:0d:34:6f:ef:6c: 99:12:2f:7e:cb:4e:06:14:1a:51:06:7e:70:dc:7d: 1d:c0:a5:b8:91:e7:f3:84:65:3a:a0:88:01:7a:d7: 5c:12:73:35:cb:ef:9c:c7:a1:74:23:d8:04:1e:e7: 86:77:66:66:50:6b:ec:3b:a4:e6:cb:c5:29:6c:75: f4:dd:e5:38:d8:f4:84:b4:b2:ca:12:ca:c4:42:44: 55:9e:b3:dc:9e:0a:51:bf:5a:27:f2:c7:75:78:76: 65:6e:30:67:e6:51:5a:4d:a4:97:7d:d8:0b:61:ee: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:79:9F:86:8B:18:0B:A7:56:7D:24:3C:E9:02:CB:1E:87:9C:96:1D X509v3 Authority Key Identifier: keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:75:8d:22:d5:08:6c:35:0c:35:aa:ce:f9:13:3f:94:27:70: cf:93:14:50:8b:86:27:16:56:25:bd:91:d4:f2:ad:7e:a4:13: ef:c7:53:2a:83:b7:b8:b1:50:3d:2b:81:b4:cd:39:a2:3d:98: 0b:34:9b:dd:6c:69:6b:44:3a:d8:8c:82:19:0d:7f:6d:90:cb: 86:8e:29:05:24:8b:d0:8d:0f:6e:90:2e:32:0e:4b:89:7b:40: 8d:70:74:e6:3b:22:f8:c5:d9:7d:05:71:c4:45:2a:49:11:66: 8a:96:cf:2f:30:b2:dc:8d:74:77:90:e5:a4:98:60:d4:33:fc: 20:56:12:f1:5a:f9:eb:91:c8:fc:e0:57:a2:62:61:7b:ae:d9: 5f:4f:d4:90:cb:88:6a:a8:d8:24:62:97:5d:de:4f:c2:84:e1: ab:80:29:a5:ee:61:da:91:0d:26:88:90:51:b8:cd:30:ae:19: 73:ac:12:6a:83:5b:ec:a5:94:10:1d:61:97:d1:7a:6e:e0:d3: 72:5e:56:64:b9:2b:47:68:8c:c0:f5:57:13:3c:71:96:25:5d: d5:e9:58:82:fd:03:dd:55:7e:06:70:4d:a5:3f:d7:18:ac:e5: e9:a7:5e:83:39:a9:37:ea:b0:81:b1:fa:a7:c7:1c:c3:08:a1: 28:60:d2:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+LemklvvwB3UTJXhytqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczM2RhNmE2YzRlOGIxYzRjZTNmMjA0YmI0YmZkOWQ4NmEw ZjU2MWUwHhcNMjUxMjA3MDQwMTI2WhcNMjUxMjA4MDQwMTI2WjAzMTEwLwYDVQQD EygyZDc5OWY4NjhiMTgwYmE3NTY3ZDI0M2NlOTAyY2IxZTg3OWM5NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqly9X9xtRvgMfP5bpudUTq7mwqki l3zM/VYb+jRUaOB51EJBp1PUtQPzFIwdnOrfVprl8Dki0xBTqX4mg/4VjJ1op5xS zO6rjBbPvrrxZfzSZZqr8iEaLQBHAHoUd+0YVCR9VsM1KEOkwbk/iK85ZA8VmEAW xgeCIw+gm2MAPZrItVOb3tG3mBCt5bKgFY4EDTRv72yZEi9+y04GFBpRBn5w3H0d wKW4kefzhGU6oIgBetdcEnM1y++cx6F0I9gEHueGd2ZmUGvsO6Tmy8UpbHX03eU4 2PSEtLLKEsrEQkRVnrPcngpRv1on8sd1eHZlbjBn5lFaTaSXfdgLYe41OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC15n4aLGAunVn0kPOkCyx6HnJYdMB8GA1UdIwQY MBaAFHM9pqbE6LHEzj8gS7S/2dhqD1YeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEt MDE3ZTJiMjVkODg2LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEtMDE3ZTJiMjVkODg2 LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3WNItUI bDUMNarO+RM/lCdwz5MUUIuGJxZWJb2R1PKtfqQT78dTKoO3uLFQPSuBtM05oj2Y CzSb3Wxpa0Q62IyCGQ1/bZDLho4pBSSL0I0PbpAuMg5LiXtAjXB05jsi+MXZfQVx xEUqSRFmipbPLzCy3I10d5DlpJhg1DP8IFYS8Vr565HI/OBXomJhe67ZX0/UkMuI aqjYJGKXXd5PwoThq4Appe5h2pENJoiQUbjNMK4Zc6wSaoNb7KWUEB1hl9F6buDT cl5WZLkrR2iMwPVXEzxxliVd1elYgv0D3VV+BnBNpT/XGKzl6adegzmpN+qwgbH6 p8ccwwihKGDSLg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:22:02 2025 by rpki-client