This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json) Hash identifier: iCoHeiybU4qL95JKxVgKOu8i3yV23r1yiDDoWsVWMDs= Subject key identifier: DC:02:95:F6:45:36:81:8D:70:59:4E:12:E9:33:15:01:FB:AF:42:AA Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34 Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34 Certificate serial: 019AF12DC48E810EF2C0CFD472199A042276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft Manifest number: 13A6 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: 1VNg1Q5CgydMlZtkT2gUiwyQsB8.roa (hash: hFOtYhVCGxVTmNvasMZGAdD1D7TMmY398V7CPu+M+nU=) 2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: 098bouYOJuGaRwamgpQT7WDDsOWYxEsUGtq5GUIjo9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c4:8e:81:0e:f2:c0:cf:d4:72:19:9a:04:22:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=dc0295f64536818d70594e12e9331501fbaf42aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:d5:ae:8e:ec:4f:2b:78:15:72:a8:32:e8: fb:cd:f7:c2:87:ca:fa:e6:c0:c7:45:d2:14:92:29: d1:7b:16:64:50:b1:d9:57:a1:7a:b6:10:9c:5c:09: 7e:d4:a9:0d:32:6c:62:94:ab:cc:30:46:12:30:9b: 7a:29:7e:09:cc:d5:c0:34:27:a2:49:dd:5e:ae:39: a5:93:20:2a:35:56:fa:37:c2:30:90:9f:61:0c:b4: d0:45:4d:98:60:be:66:7b:84:a0:48:b3:06:0b:58: 87:eb:27:40:67:55:24:e7:a6:0a:c9:0b:a6:df:68: 16:9f:64:69:33:f4:ab:db:f9:1e:f5:7b:82:47:3b: ee:36:a5:80:7e:0e:d8:bf:d3:1b:c4:a7:9c:77:fd: 8c:c3:4d:8a:19:4a:70:b8:99:da:4a:92:29:f6:88: 6b:60:57:95:6b:84:fe:a0:08:b6:a0:66:af:15:92: 0d:41:ae:4a:03:80:a1:64:6a:ae:35:eb:d1:3b:fe: 6f:fe:90:08:ce:f4:fb:08:c4:1b:22:2d:57:6c:78: e9:fc:6f:f8:d4:d7:e3:a1:5f:d7:1e:dc:1f:3f:38: f6:e1:c7:9a:4d:31:f2:25:87:19:ff:2f:29:ad:49: f9:7a:07:ba:bf:37:e0:ab:4a:b0:f7:0b:33:d7:0e: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:02:95:F6:45:36:81:8D:70:59:4E:12:E9:33:15:01:FB:AF:42:AA X509v3 Authority Key Identifier: keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:62:39:f3:a6:d1:3b:c9:ed:43:57:85:4d:a5:00:56:56:e5: 0a:b5:66:f0:62:a1:19:23:62:7a:de:88:f4:49:aa:c4:d2:5b: 3b:25:e9:12:94:8b:9d:91:a1:dd:1d:4a:8b:16:49:00:7f:b7: 28:b7:d8:7c:2b:00:6c:e4:15:4a:37:5b:14:9c:7b:7c:df:5f: 52:e7:fb:b6:dc:c2:bd:fa:03:d5:bc:53:93:3b:46:b7:0e:25: 6f:04:ca:d1:eb:de:7b:ff:20:8a:50:af:09:1d:45:9d:9d:2a: 43:dc:bb:99:35:aa:bc:4b:47:0e:68:8f:5b:99:db:54:b4:f2: e8:4c:82:b3:14:c6:df:14:fd:66:6b:80:8a:3e:eb:dd:07:03: 67:2d:be:37:41:fe:9f:ce:ad:1c:14:99:27:b6:57:ec:98:42: 5c:de:4f:c1:42:8b:2b:aa:a9:30:ea:9b:b4:6c:db:48:55:7b: 49:9a:df:de:c7:c8:e3:d3:7d:2b:1a:35:e8:dd:0a:c1:8f:1f: c9:d4:ca:dc:63:5c:4c:d0:3b:28:23:ee:ed:1b:b0:a5:8b:a9: 1e:fe:a9:25:c0:eb:72:e9:10:48:c1:fa:c3:a1:65:81:35:18: aa:1d:cf:28:27:ac:92:ef:6b:32:ff:c5:01:1a:18:e6:10:90: 5f:a7:a5:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcSOgQ7ywM/UchmaBCJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMzY4M2NiODU2ZDZkOWZmNThlMjg3ZThhOTA1ZDI5MmRj YTZiMzQwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EyhkYzAyOTVmNjQ1MzY4MThkNzA1OTRlMTJlOTMzMTUwMWZiYWY0MmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5TVro7sTyt4FXKoMuj7zffCh8r6 5sDHRdIUkinRexZkULHZV6F6thCcXAl+1KkNMmxilKvMMEYSMJt6KX4JzNXANCei Sd1erjmlkyAqNVb6N8IwkJ9hDLTQRU2YYL5me4SgSLMGC1iH6ydAZ1Uk56YKyQum 32gWn2RpM/Sr2/ke9XuCRzvuNqWAfg7Yv9MbxKecd/2Mw02KGUpwuJnaSpIp9ohr YFeVa4T+oAi2oGavFZINQa5KA4ChZGquNevRO/5v/pAIzvT7CMQbIi1XbHjp/G/4 1NfjoV/XHtwfPzj24ceaTTHyJYcZ/y8prUn5ege6vzfgq0qw9wsz1w4KuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwClfZFNoGNcFlOEukzFQH7r0KqMB8GA1UdIwQY MBaAFHM2g8uFbW2f9Y4ofoqQXSktyms0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS84NDQ3NjktY2IzZS00NWNkLTkxNjUt Njg3YWU2ZmJhM2FkLzEvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS84NDQ3NjktY2IzZS00NWNkLTkxNjUtNjg3YWU2ZmJhM2Fk LzEvY3phRHk0VnRiWl8xamloLWlwQmRLUzNLYXpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWI586bR O8ntQ1eFTaUAVlblCrVm8GKhGSNiet6I9EmqxNJbOyXpEpSLnZGh3R1KixZJAH+3 KLfYfCsAbOQVSjdbFJx7fN9fUuf7ttzCvfoD1bxTkztGtw4lbwTK0evee/8gilCv CR1FnZ0qQ9y7mTWqvEtHDmiPW5nbVLTy6EyCsxTG3xT9ZmuAij7r3QcDZy2+N0H+ n86tHBSZJ7ZX7JhCXN5PwUKLK6qpMOqbtGzbSFV7SZrf3sfI49N9Kxo16N0KwY8f ydTK3GNcTNA7KCPu7RuwpYupHv6pJcDrcukQSMH6w6FlgTUYqh3PKCesku9rMv/F ARoY5hCQX6el+A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:26 2025 by rpki-client