This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json) Hash identifier: zvRAkUyCPDCvDSNo0G/nE0uUzGe1YwXi2bSZxPJF//A= Subject key identifier: 6C:26:F7:AA:84:3E:71:8B:1B:D6:F6:BA:19:D1:46:E2:50:65:D3:A3 Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e Certificate serial: 019B2174C005D369D00B59EA9CAC119704CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft Manifest number: 13C9 Signing time: Mon 15 Dec 2025 10:00:57 +0000 Manifest this update: Mon 15 Dec 2025 10:00:57 +0000 Manifest next update: Tue 16 Dec 2025 10:00:57 +0000 Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: qEaixYS4Kka2641GV2jGfCAq2NNWsXau105rgzF/0XA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:c0:05:d3:69:d0:0b:59:ea:9c:ac:11:97:04:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e Validity Not Before: Dec 15 10:00:57 2025 GMT Not After : Dec 16 10:00:57 2025 GMT Subject: CN=6c26f7aa843e718b1bd6f6ba19d146e25065d3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:e4:bb:b5:52:1e:2e:96:58:55:00:81:4c: be:76:53:ee:45:16:5f:a8:47:b2:92:d4:f8:2a:3f: 79:ce:f9:93:65:77:c8:b4:83:aa:9b:b9:ea:bd:b0: 7f:d0:60:aa:46:47:04:04:b6:f1:67:8f:bd:11:1f: 6b:b3:92:16:77:53:00:61:a7:15:52:77:7a:a6:0e: 75:20:07:7b:bf:3e:10:c0:ef:8c:17:64:43:1d:27: 44:bf:d0:45:d2:44:96:44:f8:48:41:de:88:57:30: 52:87:d3:ff:a0:d6:db:0e:90:1b:d1:64:37:e7:05: f8:97:41:e3:13:d1:fb:26:23:d3:38:f0:3e:01:bf: 4e:79:04:45:b4:b2:25:19:b7:23:3b:15:46:3f:a6: 05:ae:14:d8:39:06:4c:d1:b6:1d:6a:10:a9:e0:fa: ce:8c:de:34:1c:d0:c1:1d:c2:bf:13:ff:71:b2:a3: 57:af:ef:3a:00:9c:6e:76:9a:b7:f6:a2:1a:c9:d7: c1:ee:41:94:1f:70:6c:85:f7:92:14:13:ce:83:94: 8f:0d:e9:3c:8f:87:7a:81:17:50:61:1b:20:aa:ad: 9f:f8:88:66:ed:6a:55:b3:93:95:93:be:8c:27:4d: 4d:01:18:f2:12:99:db:0b:fc:09:d3:1e:84:6f:e0: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:26:F7:AA:84:3E:71:8B:1B:D6:F6:BA:19:D1:46:E2:50:65:D3:A3 X509v3 Authority Key Identifier: keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:59:2e:50:dc:d2:45:90:42:23:87:21:87:32:1b:e0:c4:6e: ba:78:69:c5:5e:80:09:a1:b4:d7:a4:2a:e5:d7:75:8f:9b:38: 99:40:3f:68:dd:dc:03:d4:30:b9:7e:77:83:f0:7c:5f:a0:11: 8d:28:44:d8:df:60:2c:91:9a:d7:55:c0:38:a0:8e:48:f3:d2: 7e:dd:2f:75:4b:87:b5:4f:bb:17:4c:cd:b9:60:fc:fc:f4:cf: 8a:90:f8:1f:31:ce:02:97:e4:7e:86:66:ae:2a:ca:68:d1:21: 96:09:09:59:2b:bc:32:d3:53:0c:b7:38:04:df:99:45:94:f1: ef:0a:59:9a:ba:dd:b1:a9:40:3d:3b:7c:63:4f:a4:b8:d4:df: 2e:68:3f:8c:a3:ce:77:18:43:4d:ee:ba:71:24:77:20:d8:85: 1f:de:d7:27:9e:49:9a:ee:b8:15:35:1a:04:6f:1c:84:1a:d7: 11:e1:8c:bb:69:5f:a3:32:69:95:cd:0b:84:65:0d:71:26:84: b5:66:9d:46:f3:fb:8e:d0:d5:7e:3e:72:04:08:bf:39:26:64: 2e:97:0d:6d:63:25:77:18:ce:ec:f9:bc:5c:ae:12:da:0a:c7: c9:a2:66:a2:86:cf:2d:cf:18:4d:4f:e2:98:fc:1f:7a:40:52: 9a:8b:f8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdMAF02nQC1nqnKwRlwTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczM2RhNmE2YzRlOGIxYzRjZTNmMjA0YmI0YmZkOWQ4NmEw ZjU2MWUwHhcNMjUxMjE1MTAwMDU3WhcNMjUxMjE2MTAwMDU3WjAzMTEwLwYDVQQD Eyg2YzI2ZjdhYTg0M2U3MThiMWJkNmY2YmExOWQxNDZlMjUwNjVkM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytnku7VSHi6WWFUAgUy+dlPuRRZf qEeyktT4Kj95zvmTZXfItIOqm7nqvbB/0GCqRkcEBLbxZ4+9ER9rs5IWd1MAYacV Und6pg51IAd7vz4QwO+MF2RDHSdEv9BF0kSWRPhIQd6IVzBSh9P/oNbbDpAb0WQ3 5wX4l0HjE9H7JiPTOPA+Ab9OeQRFtLIlGbcjOxVGP6YFrhTYOQZM0bYdahCp4PrO jN40HNDBHcK/E/9xsqNXr+86AJxudpq39qIaydfB7kGUH3BshfeSFBPOg5SPDek8 j4d6gRdQYRsgqq2f+Ihm7WpVs5OVk76MJ01NARjyEpnbC/wJ0x6Eb+BJQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwm96qEPnGLG9b2uhnRRuJQZdOjMB8GA1UdIwQY MBaAFHM9pqbE6LHEzj8gS7S/2dhqD1YeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEt MDE3ZTJiMjVkODg2LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEtMDE3ZTJiMjVkODg2 LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1kuUNzS RZBCI4chhzIb4MRuunhpxV6ACaG016Qq5dd1j5s4mUA/aN3cA9QwuX53g/B8X6AR jShE2N9gLJGa11XAOKCOSPPSft0vdUuHtU+7F0zNuWD8/PTPipD4HzHOApfkfoZm rirKaNEhlgkJWSu8MtNTDLc4BN+ZRZTx7wpZmrrdsalAPTt8Y0+kuNTfLmg/jKPO dxhDTe66cSR3INiFH97XJ55Jmu64FTUaBG8chBrXEeGMu2lfozJplc0LhGUNcSaE tWadRvP7jtDVfj5yBAi/OSZkLpcNbWMldxjO7Pm8XK4S2grHyaJmoobPLc8YTU/i mPwfekBSmov4zg== -----END CERTIFICATE-----Generated at Mon Dec 15 17:06:17 2025 by rpki-client