This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json) Hash identifier: lhg88O/iWxYAosyxuMsVNTON0w4mV8O+dEj8It2EMQA= Subject key identifier: 0C:73:48:9C:3C:3B:E1:D8:F6:03:2B:D8:A1:39:0B:AB:1D:18:09:03 Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca Certificate serial: 019B2287BAEA975B8C21803BCFD1B7399773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 15:01:19 +0000 Manifest this update: Mon 15 Dec 2025 15:01:19 +0000 Manifest next update: Tue 16 Dec 2025 15:01:19 +0000 Files and hashes: 1: PXbhZwxgnHhuLjwlWCx5dOlGReg.roa (hash: j01BLIn3vk3ptsAnq3fQBlO6Lv4NALx1Y8dTw8r7J30=) 2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: Mw641LPgAv8ggCe2KUDyBDOQSnr/1RXc3r6xvqcHP/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:ba:ea:97:5b:8c:21:80:3b:cf:d1:b7:39:97:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca Validity Not Before: Dec 15 15:01:19 2025 GMT Not After : Dec 16 15:01:19 2025 GMT Subject: CN=0c73489c3c3be1d8f6032bd8a1390bab1d180903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:56:0d:20:3b:d2:e8:ad:e9:99:b9:4b:2e: 6c:e5:a5:80:ea:c3:1a:55:75:46:64:25:63:1e:36: 98:a7:de:a5:fc:c1:a9:f6:36:70:b3:45:80:ef:83: 19:11:49:86:24:2f:c8:18:b0:56:44:5e:62:96:86: 09:35:59:4f:95:20:4b:95:dc:f3:1b:53:03:8a:8a: 31:89:6c:9c:f8:7f:1e:ce:cf:9a:00:36:9f:15:82: ce:a9:a1:5f:fe:1b:70:3d:34:e9:14:77:27:28:46: 46:e0:b4:9c:df:99:c8:1a:0b:e5:1b:73:99:4b:98: 6a:b2:46:96:b5:ee:2d:69:28:b7:3b:63:e1:de:77: 0c:05:79:8b:46:b4:be:f8:df:3c:93:bf:b1:28:d2: d2:0f:e8:86:42:68:23:10:9b:76:d3:09:bc:94:2b: 54:5c:47:bc:32:a2:13:a5:03:cb:af:86:7c:11:b6: 25:e3:24:0d:f5:da:70:0e:3e:e5:db:48:a6:5e:23: 1d:79:a1:01:41:b3:7f:61:bc:09:ad:d1:4f:9e:61: 13:d6:26:27:76:32:8c:bb:ab:6f:f2:24:d4:5e:6c: e1:eb:60:7f:c5:35:08:3b:89:5b:b2:73:b0:6a:05: 74:95:05:5a:52:c2:5c:17:fd:b8:d2:e2:26:b1:c7: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:73:48:9C:3C:3B:E1:D8:F6:03:2B:D8:A1:39:0B:AB:1D:18:09:03 X509v3 Authority Key Identifier: keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b4:82:9d:98:0c:da:e8:a5:c0:0f:f5:2d:2b:2c:ba:e3:31: 70:1f:49:22:a4:34:67:71:60:7c:7d:33:10:cc:83:f6:62:c4: 64:6f:80:66:46:80:5f:c4:96:e7:26:42:02:47:dd:6a:b8:78: 65:9c:86:c7:99:a4:7a:c3:34:ea:df:07:86:e7:60:84:7d:85: be:7a:62:c4:29:42:44:01:35:ae:44:80:b1:4f:d1:f1:04:db: a7:9c:c0:35:94:e5:80:ef:de:a2:5a:ed:f9:f3:32:38:e9:b0: d6:4a:64:4e:12:f1:2b:20:e1:68:75:b4:78:93:6b:75:28:9d: 45:11:d2:d3:ff:d4:02:85:c9:18:3d:47:d4:46:54:70:50:40: d9:5e:6b:f6:90:63:1b:0d:54:7d:4b:29:75:a3:58:0f:ee:69: 25:a2:b8:c7:3b:13:bd:e0:72:a6:60:f1:59:24:18:71:51:0a: 7a:a6:8f:38:e4:4c:00:47:71:c6:fb:9e:2f:ef:3a:c1:6d:05: 96:35:0d:bf:96:42:b3:97:ff:9f:93:4f:92:ac:5a:6b:0d:7a: 6a:78:96:b0:2e:58:4a:19:8c:d1:20:db:60:b4:9a:2a:d3:ff: 4a:f5:c3:2f:86:f7:e9:9d:a9:c3:68:b7:ce:32:50:e8:c6:4e: e8:01:82:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih7rql1uMIYA7z9G3OZdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMzk4NzBlMTAyNjJjNjcwOWI3YjYxNjM3MTM0YjVmOWE2 Yzc4Y2EwHhcNMjUxMjE1MTUwMTE5WhcNMjUxMjE2MTUwMTE5WjAzMTEwLwYDVQQD EygwYzczNDg5YzNjM2JlMWQ4ZjYwMzJiZDhhMTM5MGJhYjFkMTgwOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwJWDSA70uit6Zm5Sy5s5aWA6sMa VXVGZCVjHjaYp96l/MGp9jZws0WA74MZEUmGJC/IGLBWRF5iloYJNVlPlSBLldzz G1MDiooxiWyc+H8ezs+aADafFYLOqaFf/htwPTTpFHcnKEZG4LSc35nIGgvlG3OZ S5hqskaWte4taSi3O2Ph3ncMBXmLRrS++N88k7+xKNLSD+iGQmgjEJt20wm8lCtU XEe8MqITpQPLr4Z8EbYl4yQN9dpwDj7l20imXiMdeaEBQbN/YbwJrdFPnmET1iYn djKMu6tv8iTUXmzh62B/xTUIO4lbsnOwagV0lQVaUsJcF/240uImscea3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxzSJw8O+HY9gMr2KE5C6sdGAkDMB8GA1UdIwQY MBaAFHM5hw4QJixnCbe2FjcTS1+abHjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80YjgzZGItZjRmZi00ZjBjLWEzZjYt MTU0NTc0ZmJiMzg5LzEvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS80YjgzZGItZjRmZi00ZjBjLWEzZjYtMTU0NTc0ZmJiMzg5 LzEvY3ptSERoQW1MR2NKdDdZV054TkxYNXBzZU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7SCnZgM 2uilwA/1LSssuuMxcB9JIqQ0Z3FgfH0zEMyD9mLEZG+AZkaAX8SW5yZCAkfdarh4 ZZyGx5mkesM06t8HhudghH2FvnpixClCRAE1rkSAsU/R8QTbp5zANZTlgO/eolrt +fMyOOmw1kpkThLxKyDhaHW0eJNrdSidRRHS0//UAoXJGD1H1EZUcFBA2V5r9pBj Gw1UfUspdaNYD+5pJaK4xzsTveBypmDxWSQYcVEKeqaPOORMAEdxxvueL+86wW0F ljUNv5ZCs5f/n5NPkqxaaw16aniWsC5YShmM0SDbYLSaKtP/SvXDL4b36Z2pw2i3 zjJQ6MZO6AGCWg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:06:07 2025 by rpki-client