This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json) Hash identifier: AZVgrkJ66Z2z9r/jgtIf0swhiRdnOCE30P2RWlKVMOQ= Subject key identifier: 7A:A3:1D:14:1B:A0:05:75:04:97:E4:D0:60:99:FA:00:4E:21:81:A3 Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B41A46696709A3E3CAE39D48BE6321E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft Manifest number: 1778 Signing time: Sun 21 Dec 2025 16:00:51 +0000 Manifest this update: Sun 21 Dec 2025 16:00:51 +0000 Manifest next update: Mon 22 Dec 2025 16:00:51 +0000 Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=) 2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=) 3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=) 4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=) 5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: YTc9yLHCMP3oAcnv+LuXYsP5w6OJE2iO2x5UyFj4Y0U=) 6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=) 7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=) 8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:66:96:70:9a:3e:3c:ae:39:d4:8b:e6:32:1e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Dec 21 16:00:51 2025 GMT Not After : Dec 22 16:00:51 2025 GMT Subject: CN=7aa31d141ba005750497e4d06099fa004e2181a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:cd:d9:2a:d5:1c:2a:c5:23:5e:94:c6:65: 35:55:fc:e4:4e:f3:f9:ce:4d:26:1c:a0:37:3a:40: ce:eb:7f:44:b2:14:ce:9d:0a:f8:3d:d5:3b:ba:94: dc:b1:d9:8f:f5:2d:5f:8d:96:d1:79:ae:b0:3a:29: 4b:58:51:eb:38:1a:be:88:e1:25:7a:c5:7d:c7:c4: ad:6b:6e:22:8c:18:ed:a3:20:3b:b4:c9:35:a8:14: 2e:fb:9d:f5:b7:e3:6f:0e:f1:8e:dd:4a:b6:49:2a: d1:5c:72:89:86:0f:c7:73:4f:7f:bd:56:9e:78:4b: e7:8b:2b:48:19:78:0b:b5:c6:be:a3:cb:77:ad:22: 62:8b:eb:bd:05:33:d3:1a:51:bd:80:df:be:65:2a: fc:28:70:dd:ee:dd:86:e5:d4:35:d9:13:b7:38:63: 6e:d3:2b:f5:98:60:64:29:76:ad:48:26:5a:2d:90: 68:cc:ca:de:1c:7f:1c:a8:7f:37:78:e0:e2:30:be: ad:c4:93:0d:d5:0f:56:c5:6e:38:22:23:58:81:a2: e8:2a:ce:2e:bc:22:21:01:93:3f:7f:ac:bd:fc:d3: f2:10:ba:2f:00:bd:92:78:9d:cb:9f:47:77:ef:d7: 97:0a:50:fd:36:65:f0:74:8e:42:56:b8:2c:23:a4: 31:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A3:1D:14:1B:A0:05:75:04:97:E4:D0:60:99:FA:00:4E:21:81:A3 X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1a:8a:4c:ba:f7:cd:fe:41:aa:ca:9a:41:1c:7d:11:68:5e: 91:76:22:25:e2:d5:05:1f:17:f5:6d:d4:72:bb:2c:40:95:59: b7:a3:3b:9c:bd:5f:1f:bf:92:b8:3b:2e:42:76:8a:a9:cf:bd: d4:57:57:93:32:60:a5:b8:9e:39:8c:ec:a9:35:83:2c:2d:17: b0:a3:26:7b:ac:84:63:71:97:e2:51:e4:59:4a:ea:3e:2e:4f: b6:40:22:9e:67:0f:54:69:4c:6a:28:1f:c4:20:9f:24:6c:7f: e6:08:a0:46:a8:bd:bc:3b:c7:98:f6:8b:35:b0:4e:45:e1:df: 28:bf:43:6e:a6:06:34:db:92:95:62:58:52:42:ee:5d:6e:c1: bd:a0:4e:7c:65:68:aa:0b:e5:84:cf:94:2f:17:80:48:56:46: 50:d7:a6:b9:08:0f:b8:e0:29:75:91:b0:84:e7:ce:da:31:b6: ad:12:57:ca:81:ee:2a:55:fb:61:e4:32:ad:3e:de:ca:e9:f4: 4a:5e:df:e4:cb:45:f0:3a:a9:12:ea:54:04:21:e2:5a:c8:58: 5a:4e:77:14:3f:a7:b6:a1:28:e4:5c:90:8b:7b:e5:c5:c9:fd: 22:83:b9:a0:0d:89:5e:13:85:1f:1c:4c:bd:db:78:f1:83:94: 55:f7:37:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpGaWcJo+PK451IvmMh5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjUxMjIxMTYwMDUxWhcNMjUxMjIyMTYwMDUxWjAzMTEwLwYDVQQD Eyg3YWEzMWQxNDFiYTAwNTc1MDQ5N2U0ZDA2MDk5ZmEwMDRlMjE4MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1fN2SrVHCrFI16UxmU1VfzkTvP5 zk0mHKA3OkDO639EshTOnQr4PdU7upTcsdmP9S1fjZbRea6wOilLWFHrOBq+iOEl esV9x8Sta24ijBjtoyA7tMk1qBQu+531t+NvDvGO3Uq2SSrRXHKJhg/Hc09/vVae eEvniytIGXgLtca+o8t3rSJii+u9BTPTGlG9gN++ZSr8KHDd7t2G5dQ12RO3OGNu 0yv1mGBkKXatSCZaLZBozMreHH8cqH83eODiML6txJMN1Q9WxW44IiNYgaLoKs4u vCIhAZM/f6y9/NPyELovAL2SeJ3Ln0d379eXClD9NmXwdI5CVrgsI6QxGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqjHRQboAV1BJfk0GCZ+gBOIYGjMB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBqKTLr3 zf5BqsqaQRx9EWhekXYiJeLVBR8X9W3UcrssQJVZt6M7nL1fH7+SuDsuQnaKqc+9 1FdXkzJgpbieOYzsqTWDLC0XsKMme6yEY3GX4lHkWUrqPi5PtkAinmcPVGlMaigf xCCfJGx/5gigRqi9vDvHmPaLNbBOReHfKL9DbqYGNNuSlWJYUkLuXW7BvaBOfGVo qgvlhM+ULxeASFZGUNemuQgPuOApdZGwhOfO2jG2rRJXyoHuKlX7YeQyrT7eyun0 Sl7f5MtF8DqpEupUBCHiWshYWk53FD+ntqEo5FyQi3vlxcn9IoO5oA2JXhOFHxxM vdt48YOUVfc38A== -----END CERTIFICATE-----Generated at Sun Dec 21 23:10:35 2025 by rpki-client