This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft File: czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json) Hash identifier: vvXIIEcfqLMIqXGCrQX7Da3VQUBLUhjMBgSUcRfBbUs= Subject key identifier: 26:7B:38:1F:F3:8B:89:04:8F:61:80:DA:A3:EE:8A:79:84:90:29:2A Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe Certificate serial: 019AF1D1F3DEFC6E50C11F36DD67D3BD8F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft Manifest number: 16B7 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: yJ3jkYwXEp+DjM8sITWQFZHIiJgRch4sPnfnMkftY7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f3:de:fc:6e:50:c1:1f:36:dd:67:d3:bd:8f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=267b381ff38b89048f6180daa3ee8a798490292a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:b5:d9:df:94:2c:31:2e:52:c8:cf:aa:d6: 41:31:30:95:76:8c:b7:7e:f0:2a:95:cf:0a:cc:69: b2:da:0a:d9:a9:df:a6:60:fb:42:4e:e9:68:5f:c2: 89:0f:50:0b:d6:91:41:e7:ba:81:11:d9:68:b6:96: 73:1d:04:ea:69:51:56:57:95:65:62:f7:11:67:d4: fa:ab:92:53:26:ea:55:8c:f3:6c:04:81:68:69:f1: 5e:e9:93:ff:bb:b3:73:4e:79:35:23:df:b1:46:19: ba:2d:3b:c4:fd:1b:60:a6:46:e5:6e:a2:23:98:f6: 96:0b:9f:a7:3f:15:ba:07:a9:d8:7e:34:e1:fc:cb: 84:9f:5b:9c:5a:5e:43:ae:65:bd:2e:8f:60:2f:8e: 25:e2:26:69:c1:e2:aa:f0:3f:ee:6d:a8:af:35:25: 07:f0:13:2b:1e:ed:e4:94:48:28:95:ee:46:5c:cf: 1d:05:67:11:12:6a:47:40:fb:d7:6f:ed:7a:75:9b: a5:cb:b1:22:91:6a:6c:dd:38:40:2e:eb:79:8c:b2: 7f:6c:16:79:b0:60:aa:48:c1:22:ac:fd:5c:42:08: 23:1e:5e:04:c6:b7:16:d1:f9:da:af:b9:a8:a2:08: e4:5b:b5:47:a5:62:5f:80:92:3b:c1:18:58:ff:02: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7B:38:1F:F3:8B:89:04:8F:61:80:DA:A3:EE:8A:79:84:90:29:2A X509v3 Authority Key Identifier: keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ed:9c:02:9c:a2:79:6c:f4:41:02:e3:3f:7b:d5:4e:16:71: 99:26:ec:ba:10:e3:b2:1f:80:20:04:0b:78:30:65:04:86:62: 4c:2d:5c:32:ff:6d:65:1e:13:8e:66:5b:86:30:b5:8f:8c:3f: 54:03:56:58:4a:30:cc:29:d6:ae:e5:7a:ed:7f:1e:2f:e3:b3: e7:44:1b:5b:84:07:4c:8c:17:4e:b1:e5:0d:3f:fa:56:cc:d0: 5c:60:4b:e7:79:5c:ef:1e:6c:10:8b:d0:b6:f9:f0:6f:9f:c3: 8e:85:aa:2c:1d:3b:d6:fc:6a:cb:0a:f6:d2:e0:54:6e:4a:1d: ae:73:08:80:8b:96:16:45:e1:f7:d8:5a:c2:b4:16:1e:24:9c: 83:8e:12:c9:d4:5e:ec:a2:cb:98:a8:7d:ad:64:8a:f7:32:96: 19:3c:da:e6:63:36:7b:ed:95:db:51:14:de:c2:99:e8:c4:07: f7:58:0b:e1:76:86:54:be:de:24:bd:9a:21:8a:8a:ca:93:46: b4:31:fc:19:5e:a6:39:54:9e:b3:b5:75:f6:98:31:2a:33:60: 26:94:30:08:78:9b:be:83:7b:34:8f:eb:e7:c3:4e:5f:9b:05: 10:8f:7c:43:49:fc:87:3a:e8:78:e1:91:9e:7c:06:3e:dc:4e: 86:25:c6:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fPe/G5QwR823WfTvY9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczM2MwMWZjNmJkZmViMDkwZDU3MzJjODcyZWVkYTUzY2I0 MjFhYmUwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EygyNjdiMzgxZmYzOGI4OTA0OGY2MTgwZGFhM2VlOGE3OTg0OTAyOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXy12d+ULDEuUsjPqtZBMTCVdoy3 fvAqlc8KzGmy2grZqd+mYPtCTuloX8KJD1AL1pFB57qBEdlotpZzHQTqaVFWV5Vl YvcRZ9T6q5JTJupVjPNsBIFoafFe6ZP/u7NzTnk1I9+xRhm6LTvE/RtgpkblbqIj mPaWC5+nPxW6B6nYfjTh/MuEn1ucWl5DrmW9Lo9gL44l4iZpweKq8D/ubaivNSUH 8BMrHu3klEgole5GXM8dBWcREmpHQPvXb+16dZuly7EikWps3ThALut5jLJ/bBZ5 sGCqSMEirP1cQggjHl4ExrcW0fnar7moogjkW7VHpWJfgJI7wRhY/wLV2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZ7OB/zi4kEj2GA2qPuinmEkCkqMB8GA1UdIwQY MBaAFHM8Afxr3+sJDVcyyHLu2lPLQhq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQt NWEzYWJmZjIxNWNlLzEvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQtNWEzYWJmZjIxNWNl LzEvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAku2cApyi eWz0QQLjP3vVThZxmSbsuhDjsh+AIAQLeDBlBIZiTC1cMv9tZR4TjmZbhjC1j4w/ VANWWEowzCnWruV67X8eL+Oz50QbW4QHTIwXTrHlDT/6VszQXGBL53lc7x5sEIvQ tvnwb5/DjoWqLB071vxqywr20uBUbkodrnMIgIuWFkXh99hawrQWHiScg44SydRe 7KLLmKh9rWSK9zKWGTza5mM2e+2V21EU3sKZ6MQH91gL4XaGVL7eJL2aIYqKypNG tDH8GV6mOVSes7V19pgxKjNgJpQwCHibvoN7NI/r58NOX5sFEI98Q0n8hzroeOGR nnwGPtxOhiXGHg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:25 2025 by rpki-client