This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json) Hash identifier: exkbueU8KV6QpJ5E7oz1cnyUDGvAPfTLM4WQOnJ/HFQ= Subject key identifier: 47:4F:5E:13:76:87:2A:37:A5:AF:4B:1D:5A:8A:36:8C:B5:DC:EC:10 Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Certificate serial: 019AF19ABFFCE614E747D775C843A914D8A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft Manifest number: 15EE Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=) 2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: bY+sip2W7BNZKxxkcRAj9vs3ZtOBt1uk2iWAFTa0QAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bf:fc:e6:14:e7:47:d7:75:c8:43:a9:14:d8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=474f5e1376872a37a5af4b1d5a8a368cb5dcec10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:0a:9b:fd:26:f9:e1:ed:06:f8:0f:e6:e0: 36:a6:e0:66:21:ef:a6:c8:58:14:ba:f4:f6:21:75: 00:7a:5a:5f:fb:53:d2:f7:c6:2b:23:48:72:27:6a: 0b:52:e3:53:99:78:ab:68:2e:4d:3b:d6:00:f4:68: 1e:9d:01:19:a7:4b:62:76:6b:f2:c8:0c:5e:55:91: 26:c9:1d:f8:2e:85:dc:d2:cd:e7:48:3e:6a:1e:54: 00:bb:ca:55:31:37:b5:cc:06:d5:71:4d:d1:f7:6c: 00:2e:30:23:bc:bd:c5:55:71:16:14:a3:ed:d7:bf: 2c:4b:6e:78:5d:7a:c1:96:b2:ec:fe:60:57:1f:00: 81:46:4b:4b:01:9d:6c:bd:3b:3f:5e:8d:99:e4:ab: 41:43:c3:68:20:5e:64:de:ae:1d:36:56:2b:28:c2: 43:09:0d:e7:a5:a8:a2:4b:c6:f0:06:77:e1:69:4c: 0c:10:4b:6b:d6:09:e6:a8:19:6d:4b:0f:6d:c8:a3: 2e:16:3b:79:ea:fa:64:a8:c8:ce:69:e1:54:6c:e4: 12:83:6d:e8:2f:04:5e:02:3f:48:4d:d3:61:6e:6f: 12:53:11:43:2d:c2:86:8c:a1:5b:6f:8c:59:94:ed: 5b:a3:c0:b3:0a:ca:84:8b:ff:65:12:81:fa:e1:f2: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:5E:13:76:87:2A:37:A5:AF:4B:1D:5A:8A:36:8C:B5:DC:EC:10 X509v3 Authority Key Identifier: keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5c:3e:2f:67:c9:2c:6e:46:c8:7c:5b:4e:49:74:2c:a0:fb: 65:69:d6:6e:ca:97:2e:bd:04:32:95:82:05:c4:2a:9e:40:37: aa:ed:ab:56:cb:75:5d:55:4a:d3:ea:17:33:14:8e:b1:3d:f9: 73:b9:3f:86:f1:1a:ad:b1:90:ac:85:77:e2:34:1e:82:ee:5a: 98:24:1b:fc:ab:b6:c3:97:21:fe:e2:7d:91:e5:44:4e:77:fc: 85:73:e7:48:51:14:2c:b0:ea:15:63:c6:e6:b7:24:42:59:e5: 2b:b1:c9:8e:15:18:57:63:63:87:3d:55:9e:58:16:b3:49:46: 78:96:fe:7b:72:51:74:23:ca:90:84:43:bd:ac:5e:23:0f:38: 0b:6b:ab:2d:f3:c0:77:65:d2:8f:da:52:5d:ff:9f:ca:79:8b: eb:09:b4:56:5f:f0:ea:44:7e:cc:cf:5f:e2:f7:6e:75:e3:5e: 8a:14:d9:99:f3:28:d8:88:25:2e:d3:f6:5c:ad:9d:35:ba:be: 81:8e:dc:49:b1:ec:37:4a:01:9f:a6:3d:1e:e3:63:50:6d:a6: 81:87:b9:bf:15:f0:87:7b:98:81:46:57:29:2a:75:bb:3f:a3: 6f:2c:9c:c7:26:fc:b7:04:f4:f8:70:c4:9a:03:87:69:b8:a1: f3:d2:fd:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr/85hTnR9d1yEOpFNihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh MDI2NzgwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD Eyg0NzRmNWUxMzc2ODcyYTM3YTVhZjRiMWQ1YThhMzY4Y2I1ZGNlYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBcKm/0m+eHtBvgP5uA2puBmIe+m yFgUuvT2IXUAelpf+1PS98YrI0hyJ2oLUuNTmXiraC5NO9YA9GgenQEZp0tidmvy yAxeVZEmyR34LoXc0s3nSD5qHlQAu8pVMTe1zAbVcU3R92wALjAjvL3FVXEWFKPt 178sS254XXrBlrLs/mBXHwCBRktLAZ1svTs/Xo2Z5KtBQ8NoIF5k3q4dNlYrKMJD CQ3npaiiS8bwBnfhaUwMEEtr1gnmqBltSw9tyKMuFjt56vpkqMjOaeFUbOQSg23o LwReAj9ITdNhbm8SUxFDLcKGjKFbb4xZlO1bo8CzCsqEi/9lEoH64fKQLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdPXhN2hyo3pa9LHVqKNoy13OwQMB8GA1UdIwQY MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1w+L2fJ LG5GyHxbTkl0LKD7ZWnWbsqXLr0EMpWCBcQqnkA3qu2rVst1XVVK0+oXMxSOsT35 c7k/hvEarbGQrIV34jQegu5amCQb/Ku2w5ch/uJ9keVETnf8hXPnSFEULLDqFWPG 5rckQlnlK7HJjhUYV2Njhz1VnlgWs0lGeJb+e3JRdCPKkIRDvaxeIw84C2urLfPA d2XSj9pSXf+fynmL6wm0Vl/w6kR+zM9f4vdudeNeihTZmfMo2IglLtP2XK2dNbq+ gY7cSbHsN0oBn6Y9HuNjUG2mgYe5vxXwh3uYgUZXKSp1uz+jbyycxyb8twT0+HDE mgOHabih89L9rA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:27:27 2025 by rpki-client