This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json) Hash identifier: 5eBo1VzCcFz7BQQf8Nn/t9gQhUWViMkzb/CqvpEtolM= Subject key identifier: 69:BD:43:58:C9:00:8E:1C:6B:97:E7:2F:ED:1F:95:C1:34:7C:0C:C5 Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Certificate serial: 019B7222DA592E1388D89340D58FEFC60339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft Manifest number: 11EF Signing time: Wed 31 Dec 2025 02:00:45 +0000 Manifest this update: Wed 31 Dec 2025 02:00:45 +0000 Manifest next update: Thu 01 Jan 2026 02:00:45 +0000 Files and hashes: 1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=) 2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: 4PHHEXDAoVl5UKORLxNxg12oEPM1pLcs8jM7EGteThk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:da:59:2e:13:88:d8:93:40:d5:8f:ef:c6:03:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Validity Not Before: Dec 31 02:00:45 2025 GMT Not After : Jan 1 02:00:45 2026 GMT Subject: CN=69bd4358c9008e1c6b97e72fed1f95c1347c0cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:56:3f:e5:5d:9c:96:c4:87:d8:53:e2:e1: 7f:28:47:8c:cf:22:30:e5:ad:0e:39:8b:89:fb:f5: 3f:56:cc:d2:6a:f5:fc:90:8f:bf:e2:6c:dc:f1:8c: af:2f:83:f6:90:b0:25:4b:29:12:80:5f:fa:30:68: 22:87:3d:03:86:7b:3a:86:f0:74:02:92:4b:1b:7b: f1:3c:0a:ed:a1:3a:85:43:d6:92:a2:50:44:83:b6: c8:5f:cf:0e:4e:e0:10:21:c4:04:c4:4d:af:66:bc: da:fb:6c:a5:63:46:ba:20:33:da:69:ff:fa:ca:65: d8:1c:7a:b6:a3:9c:0f:9f:e0:e4:a3:7e:3e:f4:0e: 7d:29:fa:f7:58:05:75:29:bd:08:f6:6d:ec:28:72: c0:43:61:70:bd:04:d3:aa:f6:a4:9e:ca:43:d4:24: 87:1a:13:e4:0f:92:39:14:05:4f:36:b2:1c:b0:89: 4d:52:88:f2:91:0f:6a:df:43:7b:12:61:d7:17:81: a0:2d:a9:5f:0a:8b:d4:4b:8c:fd:23:29:e2:2a:07: b8:54:ed:dc:4c:62:4f:67:95:86:30:68:38:8e:86: 53:b0:8a:b0:d9:81:f6:92:b2:d2:1c:7f:a4:f5:b6: 78:3f:1b:1c:00:3c:ce:02:aa:4a:15:48:03:fe:c9: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BD:43:58:C9:00:8E:1C:6B:97:E7:2F:ED:1F:95:C1:34:7C:0C:C5 X509v3 Authority Key Identifier: keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3f:f8:65:b1:7f:de:da:01:a8:48:1d:2f:09:f9:04:2f:14: 88:b2:4b:aa:46:52:95:4b:4c:d5:f3:c9:b3:f2:7c:76:55:e9: be:45:d6:c5:de:5e:aa:af:2f:d0:ec:d9:4d:fd:79:4c:67:a1: f9:91:e1:58:d3:4c:f0:56:59:bb:f7:3c:fa:92:49:28:db:a6: b8:a0:05:66:8d:47:6e:a9:61:db:d1:dc:f2:b8:c5:92:75:6b: 4f:d4:9e:ba:e8:fa:36:a0:85:83:24:85:bc:ad:98:e0:a8:e4: d4:de:73:d5:3b:ce:9d:e6:8e:46:32:dc:40:fb:33:5b:c3:5e: e9:21:84:63:ee:d7:96:b5:f2:e5:85:ac:72:a7:8c:ea:af:35: d5:5f:48:b9:9e:26:36:a9:28:02:2b:9c:ed:aa:8d:94:d5:eb: 96:45:04:26:41:af:40:96:ec:e1:dd:35:94:7e:7c:9c:1e:82: 05:33:c8:cc:45:f9:b1:cf:65:e5:09:fc:58:ed:fe:48:7b:27: 87:f9:e0:22:cb:82:95:5c:c7:e1:fa:68:b6:93:3d:ce:01:0a: 43:5b:0f:09:c9:a4:21:fc:53:42:25:8d:7d:12:14:cc:38:aa: 93:8b:9d:a1:22:b9:a2:cb:82:b9:fe:41:3e:f2:d7:56:fb:aa: 4b:a9:6e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyItpZLhOI2JNA1Y/vxgM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzljNGUzZmU4NjlkOTc4M2JhMmRhZGY2NjBkY2NkMGZh NTM3MDcwHhcNMjUxMjMxMDIwMDQ1WhcNMjYwMTAxMDIwMDQ1WjAzMTEwLwYDVQQD Eyg2OWJkNDM1OGM5MDA4ZTFjNmI5N2U3MmZlZDFmOTVjMTM0N2MwY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF9WP+VdnJbEh9hT4uF/KEeMzyIw 5a0OOYuJ+/U/VszSavX8kI+/4mzc8YyvL4P2kLAlSykSgF/6MGgihz0Dhns6hvB0 ApJLG3vxPArtoTqFQ9aSolBEg7bIX88OTuAQIcQExE2vZrza+2ylY0a6IDPaaf/6 ymXYHHq2o5wPn+Dko34+9A59Kfr3WAV1Kb0I9m3sKHLAQ2FwvQTTqvaknspD1CSH GhPkD5I5FAVPNrIcsIlNUojykQ9q30N7EmHXF4GgLalfCovUS4z9IyniKge4VO3c TGJPZ5WGMGg4joZTsIqw2YH2krLSHH+k9bZ4PxscADzOAqpKFUgD/slZCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm9Q1jJAI4ca5fnL+0flcE0fAzFMB8GA1UdIwQY MBaAFLc5xOP+hp2Xg7otrfZg3M0PpTcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQt MDcyMjYyZTMwZmM1LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQtMDcyMjYyZTMwZmM1 LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGT/4ZbF/ 3toBqEgdLwn5BC8UiLJLqkZSlUtM1fPJs/J8dlXpvkXWxd5eqq8v0OzZTf15TGeh +ZHhWNNM8FZZu/c8+pJJKNumuKAFZo1Hbqlh29Hc8rjFknVrT9Seuuj6NqCFgySF vK2Y4Kjk1N5z1TvOneaORjLcQPszW8Ne6SGEY+7XlrXy5YWscqeM6q811V9IuZ4m NqkoAiuc7aqNlNXrlkUEJkGvQJbs4d01lH58nB6CBTPIzEX5sc9l5Qn8WO3+SHsn h/ngIsuClVzH4fpotpM9zgEKQ1sPCcmkIfxTQiWNfRIUzDiqk4udoSK5osuCuf5B PvLXVvuqS6lu3Q== -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:32 2025 by rpki-client