This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft File: CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json) Hash identifier: AOfWtXFs6NcXUajeh53RI3GphogqKXqV5TOpzPs8ne0= Subject key identifier: 9A:6E:2E:F0:4B:8A:16:EC:EA:CE:41:76:52:D1:B6:5A:3E:F5:E0:93 Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93 Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493 Certificate serial: 019AF31BDF5DD0A0D386CFE43BC2FF3BEDDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:21 +0000 Manifest this update: Sat 06 Dec 2025 10:01:21 +0000 Manifest next update: Sun 07 Dec 2025 10:01:21 +0000 Files and hashes: 1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: r2f9epXiInrIy8/ok3ByvDAVhKy90tHoxwhOHJxrUuA=) 2: ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa (hash: HD/5KvR+lV05wvXD394776vmYH6dBYVti0mPyMnQTNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:df:5d:d0:a0:d3:86:cf:e4:3b:c2:ff:3b:ed:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493 Validity Not Before: Dec 6 10:01:21 2025 GMT Not After : Dec 7 10:01:21 2025 GMT Subject: CN=9a6e2ef04b8a16eceace417652d1b65a3ef5e093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:1f:29:df:05:5d:da:6e:96:1e:55:54:17: ea:68:bf:20:2b:28:4a:c7:95:0c:1c:d3:e9:1f:64: 73:88:53:aa:54:ca:94:d5:5a:1d:ff:01:e8:d6:0e: 24:0f:8a:3c:63:ee:3a:9a:f0:90:ce:83:a9:bf:08: 3a:3f:ad:cc:71:cb:52:a4:13:7a:03:4c:1a:b0:c7: f7:2b:a0:e5:17:32:c0:95:00:f9:76:87:a1:bc:29: 49:46:fc:d3:05:ec:f4:56:e9:2d:c1:90:e5:df:fc: f4:8e:a8:66:42:47:f1:dc:58:c8:7d:80:df:12:5c: ca:d3:a2:bb:8a:c9:3f:98:df:c1:25:23:af:1b:1d: a3:93:49:9e:10:a7:94:ed:9d:f9:4f:a4:fa:b3:38: a5:d4:89:da:60:99:36:ef:28:72:4f:c1:d4:d9:c2: 8d:10:6f:ca:cc:d2:46:1b:f9:8a:e9:24:a0:d9:81: 06:19:43:7d:3a:e0:4c:58:4c:d2:8d:fd:a6:24:d6: a9:1d:0b:a3:92:f4:5a:c8:9e:27:cb:d2:b9:01:2f: d1:d2:ce:b8:a2:3c:1b:f4:a9:5e:ff:15:a9:51:39: cb:a8:c2:bb:a2:06:cb:e8:e6:e4:88:df:19:a3:43: 64:19:1a:6a:dc:9a:53:80:55:32:4a:aa:ab:a3:f3: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:2E:F0:4B:8A:16:EC:EA:CE:41:76:52:D1:B6:5A:3E:F5:E0:93 X509v3 Authority Key Identifier: keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:4b:66:c0:6c:04:7d:d6:3c:89:c5:44:ef:bb:72:db:92:a2: a6:c0:ee:4a:dc:31:5c:2d:d4:8c:1f:e5:a3:26:43:c3:2e:9d: 08:51:5b:15:ba:0d:73:bf:e7:07:af:10:90:7a:b5:7a:da:00: d9:f6:ac:86:1a:90:19:91:4e:c0:95:09:eb:55:50:df:db:7a: 84:09:7a:f8:52:27:48:26:d4:cb:7b:76:3b:98:25:a9:58:77: 0c:cd:81:96:91:03:15:2f:f1:17:3f:12:19:4a:8a:80:92:bf: 6f:b9:13:c5:27:fc:40:83:d7:35:c2:0d:9f:3b:31:05:6a:19: 77:0a:0f:d8:80:c5:9b:4e:f6:c4:c6:dd:40:2d:99:c1:4f:a7: 4c:fc:e6:80:a7:ca:a3:9a:4e:4f:7c:d6:b9:e0:85:21:f0:b1: fb:a9:16:5e:60:4f:e5:88:92:66:ca:d8:de:f9:4f:84:4e:a4: 7a:d9:bc:72:f4:e8:dd:34:3d:21:7b:89:e5:85:6e:ea:15:82: 8e:b6:5a:56:35:c4:67:09:af:1a:ce:0b:7d:76:6a:e1:3e:f6: 4c:2b:3e:3e:9a:73:0a:3c:c5:4e:1c:d1:fc:52:e9:34:e3:9a: 07:3f:15:14:54:e3:a3:61:52:0b:5d:cb:ca:99:44:b6:a2:25: 82:31:e1:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG99d0KDThs/kO8L/O+3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzVhY2JmMzA1NTk2NjhlYTE4ZWEzZjEwYjI5N2VlNjRj OGU0OTMwHhcNMjUxMjA2MTAwMTIxWhcNMjUxMjA3MTAwMTIxWjAzMTEwLwYDVQQD Eyg5YTZlMmVmMDRiOGExNmVjZWFjZTQxNzY1MmQxYjY1YTNlZjVlMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNcfKd8FXdpulh5VVBfqaL8gKyhK x5UMHNPpH2RziFOqVMqU1Vod/wHo1g4kD4o8Y+46mvCQzoOpvwg6P63McctSpBN6 A0wasMf3K6DlFzLAlQD5doehvClJRvzTBez0VuktwZDl3/z0jqhmQkfx3FjIfYDf ElzK06K7isk/mN/BJSOvGx2jk0meEKeU7Z35T6T6szil1InaYJk27yhyT8HU2cKN EG/KzNJGG/mK6SSg2YEGGUN9OuBMWEzSjf2mJNapHQujkvRayJ4ny9K5AS/R0s64 ojwb9Kle/xWpUTnLqMK7ogbL6ObkiN8Zo0NkGRpq3JpTgFUySqqro/M/OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpuLvBLihbs6s5BdlLRtlo+9eCTMB8GA1UdIwQY MBaAFAs1rL8wVZZo6hjqPxCyl+5kyOSTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83MmZiNDUtMzBjNy00YTUzLWEyZGIt YjRjOWUyYjBkMTU2LzEvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83MmZiNDUtMzBjNy00YTUzLWEyZGItYjRjOWUyYjBkMTU2 LzEvQ3pXc3Z6QlZsbWpxR09vX0VMS1g3bVRJNUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0tmwGwE fdY8icVE77ty25KipsDuStwxXC3UjB/loyZDwy6dCFFbFboNc7/nB68QkHq1etoA 2fashhqQGZFOwJUJ61VQ39t6hAl6+FInSCbUy3t2O5glqVh3DM2BlpEDFS/xFz8S GUqKgJK/b7kTxSf8QIPXNcINnzsxBWoZdwoP2IDFm072xMbdQC2ZwU+nTPzmgKfK o5pOT3zWueCFIfCx+6kWXmBP5YiSZsrY3vlPhE6ketm8cvTo3TQ9IXuJ5YVu6hWC jrZaVjXEZwmvGs4LfXZq4T72TCs+PppzCjzFThzR/FLpNOOaBz8VFFTjo2FSC13L yplEtqIlgjHhfg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:09:04 2025 by rpki-client