This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json) Hash identifier: lQAVKF4+XUlThoDG5O7slOCVb4kqTikesgkzKEalrcQ= Subject key identifier: 1F:22:A7:26:FA:A4:88:6C:36:BD:D6:20:25:83:AD:41:F9:9A:60:40 Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13 Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13 Certificate serial: 019AF0BF2567AF0983B0018E74B3B3F5E39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft Manifest number: FF Signing time: Fri 05 Dec 2025 23:00:50 +0000 Manifest this update: Fri 05 Dec 2025 23:00:50 +0000 Manifest next update: Sat 06 Dec 2025 23:00:50 +0000 Files and hashes: 1: 5rGgrqdPoueZL9n49lewJLQalrU.roa (hash: TQRxGNLMYQGT2NG1xMafNXAuCm7U0yoBgbBdMTpn79I=) 2: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: /6CywpIZUMZLrXUyKLe/+hGHEx3XcmqIr+5ntisKhsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:25:67:af:09:83:b0:01:8e:74:b3:b3:f5:e3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13 Validity Not Before: Dec 5 23:00:50 2025 GMT Not After : Dec 6 23:00:50 2025 GMT Subject: CN=1f22a726faa4886c36bdd6202583ad41f99a6040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9a:1e:93:a9:32:b7:2a:18:bf:5a:7e:e6:de: a2:88:66:ec:fc:bc:e4:b5:42:53:8d:ed:bc:6b:b5: a0:f0:8f:49:0c:32:65:ae:65:d2:8b:9d:db:29:cc: 68:19:8d:b2:8e:f5:ec:fb:70:09:bd:ff:43:ed:c4: f3:ba:4c:e8:eb:cb:8a:ea:29:a5:a0:02:2d:02:7b: 37:bc:3c:20:c9:4a:23:f9:dc:17:e9:79:8f:d6:5b: 23:bb:ed:7b:8f:d3:29:2a:4b:50:7e:20:4e:a0:d2: 62:34:5f:72:da:4c:d0:67:bb:d9:72:84:ca:f6:5c: 45:d0:df:c8:28:35:e1:c5:56:c4:48:3c:a0:a5:39: 48:cd:cd:64:83:93:d0:b3:87:89:66:d3:ae:ad:61: cd:3c:35:5a:3b:d7:da:f1:19:eb:32:e8:4a:b5:5e: 6d:aa:5e:b1:f0:28:d3:9f:45:ad:0b:ac:3e:ad:8f: 68:5f:97:35:6a:9c:a7:fd:ed:36:07:7d:fc:19:86: a8:05:4c:83:45:77:bc:b8:0a:d8:7a:49:29:e6:52: 26:04:76:83:cb:d5:36:c7:1d:ea:6e:6d:0b:51:d5: 66:95:78:22:07:7a:5d:4f:50:d9:7c:88:87:c8:1a: ce:62:3b:81:8c:fc:7c:86:7b:23:cb:35:3f:43:ce: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:22:A7:26:FA:A4:88:6C:36:BD:D6:20:25:83:AD:41:F9:9A:60:40 X509v3 Authority Key Identifier: keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f0:f2:96:37:5d:73:ff:fd:1b:98:3f:b9:a0:30:8a:12:4f: ae:99:8f:61:3b:d7:ad:a4:82:23:a4:3d:c3:3c:0e:6f:8f:67: 04:9b:e5:c0:b2:2d:be:3f:cf:46:4d:7f:3f:b2:3c:62:78:57: 93:ad:4f:b9:ee:50:76:5d:d3:a1:98:1b:71:24:05:6d:8f:87: b7:a4:ec:65:31:38:98:51:14:e2:1a:f1:be:22:35:75:29:72: 7e:31:cd:e2:31:3e:94:5e:ea:1b:38:c5:86:35:5f:2e:52:f4: c8:e2:e5:24:0a:4d:8e:46:c2:a2:41:6f:6e:df:f2:96:ef:fc: 90:50:27:3c:23:8a:63:83:37:32:e4:ef:b2:5c:55:4a:d3:70: c4:41:14:bb:3a:dc:8b:b8:f5:34:43:bd:33:f8:03:98:06:b5: 79:2e:b6:52:d1:03:e3:96:8d:b2:1a:fe:24:38:8e:56:ed:ac: 05:3a:9a:31:9d:8f:d1:16:fa:e6:66:c1:da:e0:c3:ba:a0:8a: 2f:76:3a:17:cc:f0:3d:18:47:26:80:3d:03:80:59:9f:b9:e7: 4b:17:94:78:ae:35:6d:53:fc:47:f0:50:5b:ec:b8:cf:26:f9: 89:03:fc:6a:2e:44:40:74:2c:bc:8c:35:cd:3e:9a:2f:eb:2c: 05:c4:95:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyVnrwmDsAGOdLOz9eOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzAwNTc4MTdlZDJmZDk1OTU4NDYzMjBmZGI4MTRjOWZj NDRhMTMwHhcNMjUxMjA1MjMwMDUwWhcNMjUxMjA2MjMwMDUwWjAzMTEwLwYDVQQD EygxZjIyYTcyNmZhYTQ4ODZjMzZiZGQ2MjAyNTgzYWQ0MWY5OWE2MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8poek6kytyoYv1p+5t6iiGbs/Lzk tUJTje28a7Wg8I9JDDJlrmXSi53bKcxoGY2yjvXs+3AJvf9D7cTzukzo68uK6iml oAItAns3vDwgyUoj+dwX6XmP1lsju+17j9MpKktQfiBOoNJiNF9y2kzQZ7vZcoTK 9lxF0N/IKDXhxVbESDygpTlIzc1kg5PQs4eJZtOurWHNPDVaO9fa8RnrMuhKtV5t ql6x8CjTn0WtC6w+rY9oX5c1apyn/e02B338GYaoBUyDRXe8uArYekkp5lImBHaD y9U2xx3qbm0LUdVmlXgiB3pdT1DZfIiHyBrOYjuBjPx8hnsjyzU/Q86gPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8ipyb6pIhsNr3WICWDrUH5mmBAMB8GA1UdIwQY MBaAFAswBXgX7S/ZWVhGMg/bgUyfxEoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZjA4N2ItNzI1My00NjFlLTkwMjEt OWE5MTIxOWYwNmUxLzEvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wZjA4N2ItNzI1My00NjFlLTkwMjEtOWE5MTIxOWYwNmUx LzEvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePDyljdd c//9G5g/uaAwihJPrpmPYTvXraSCI6Q9wzwOb49nBJvlwLItvj/PRk1/P7I8YnhX k61Pue5Qdl3ToZgbcSQFbY+Ht6TsZTE4mFEU4hrxviI1dSlyfjHN4jE+lF7qGzjF hjVfLlL0yOLlJApNjkbCokFvbt/ylu/8kFAnPCOKY4M3MuTvslxVStNwxEEUuzrc i7j1NEO9M/gDmAa1eS62UtED45aNshr+JDiOVu2sBTqaMZ2P0Rb65mbB2uDDuqCK L3Y6F8zwPRhHJoA9A4BZn7nnSxeUeK41bVP8R/BQW+y4zyb5iQP8ai5EQHQsvIw1 zT6aL+ssBcSVpw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:09 2025 by rpki-client