This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json) Hash identifier: 2rGrqYvImGon83/ZGMA8vj6qsVO81t2HgYSRieylOug= Subject key identifier: 47:9D:3E:2E:10:A6:48:4E:F5:4B:C3:CA:E0:65:31:BF:71:E7:24:B7 Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa Certificate serial: 019B465D375291FBF69BC73690B86973E508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft Manifest number: 04CB Signing time: Mon 22 Dec 2025 14:01:12 +0000 Manifest this update: Mon 22 Dec 2025 14:01:12 +0000 Manifest next update: Tue 23 Dec 2025 14:01:12 +0000 Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: /UJlg6XJqeBcVZRvXBkDgNjVOue3QlD6Y1Hj2L/EQQk=) 2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:37:52:91:fb:f6:9b:c7:36:90:b8:69:73:e5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa Validity Not Before: Dec 22 14:01:12 2025 GMT Not After : Dec 23 14:01:12 2025 GMT Subject: CN=479d3e2e10a6484ef54bc3cae06531bf71e724b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:60:b4:ef:54:09:ae:c6:5a:10:f9:84:17:11: 27:1f:c3:76:f5:26:fb:50:fe:f4:2d:bb:00:00:b1: 2a:81:9f:1f:ac:06:95:7c:f6:6f:fa:f6:e4:a5:f8: 39:a9:71:91:19:7b:9e:a1:c1:0e:cd:b8:2b:99:57: d1:97:47:11:30:72:55:00:e7:30:74:82:20:63:c0: 8b:44:20:45:91:fa:36:1a:fe:cb:c0:8b:8a:60:96: 65:2b:2f:c2:35:26:67:ef:8c:cb:7b:13:55:ab:6f: 24:45:6e:e9:b9:09:4b:ee:c7:54:a6:55:0d:68:80: 3f:0b:4b:56:59:3b:e1:a7:92:7a:df:3b:4a:61:54: 31:cd:30:7c:64:6e:57:43:af:33:45:7a:17:64:34: 80:c0:a6:48:43:21:fd:7f:b6:9b:5d:dc:70:df:2c: 67:90:f1:90:c4:7b:18:d0:d9:ba:18:c2:89:5e:b2: 90:23:2b:81:80:26:73:68:19:e2:9e:ca:ba:93:8f: 57:32:06:f0:2d:62:df:37:02:1a:75:ad:3c:6f:7e: fa:61:87:9a:64:30:a4:b2:1c:aa:96:d6:8e:96:61: 8c:04:4d:31:b8:5f:57:c8:65:d0:ef:92:cc:40:3b: 4d:47:9f:d6:92:89:ea:47:a5:10:c1:6a:44:83:32: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9D:3E:2E:10:A6:48:4E:F5:4B:C3:CA:E0:65:31:BF:71:E7:24:B7 X509v3 Authority Key Identifier: keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:72:a2:b2:ed:a0:a8:97:d4:98:6e:ca:d0:d0:b8:95:6e:5e: e9:44:55:12:1a:97:0c:5a:9c:f1:2e:d7:a6:4d:92:7b:58:db: 11:ce:d2:6f:6c:b0:e4:2a:f7:a7:18:5f:d9:ba:de:b8:39:df: 84:17:16:af:89:79:1f:84:8a:4c:f7:cf:af:79:92:ed:7b:68: f6:85:78:56:51:b5:ac:24:b1:b6:17:97:27:f9:70:98:1b:a9: e3:59:8b:ab:4f:66:ce:87:c1:14:12:bb:0f:4c:0d:75:71:9a: 4d:6d:f5:80:79:37:cf:9e:b8:c9:fa:64:57:a5:2a:a8:cf:b2: 9e:66:1c:df:82:f1:5d:07:b9:bb:d0:de:4b:6d:18:94:e4:7e: 24:03:ec:09:35:b6:a5:cd:9d:e3:cf:06:47:68:39:09:bc:08: 76:ed:98:3f:19:82:46:90:bf:72:a2:c9:71:10:66:ca:94:c3: 64:4f:5f:34:06:ef:ad:8d:aa:52:e4:80:ff:68:ba:1f:61:11: 89:3e:be:bd:a0:b0:4c:d4:29:0a:5d:81:ce:c9:ea:50:9d:a2: 54:6f:2e:1d:0a:ee:45:b7:91:76:bc:7e:a4:00:b8:3e:e1:7e: ed:b3:0e:f4:24:d2:4e:b9:9a:7c:0c:73:c0:94:7e:9a:90:d5: b5:ba:23:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXTdSkfv2m8c2kLhpc+UIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTRmOTJhZGJkMWJiNDVkNjNmOWY5NDcwMTdhMjE2NGU5 ZDBlZmEwHhcNMjUxMjIyMTQwMTEyWhcNMjUxMjIzMTQwMTEyWjAzMTEwLwYDVQQD Eyg0NzlkM2UyZTEwYTY0ODRlZjU0YmMzY2FlMDY1MzFiZjcxZTcyNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GC071QJrsZaEPmEFxEnH8N29Sb7 UP70LbsAALEqgZ8frAaVfPZv+vbkpfg5qXGRGXueocEOzbgrmVfRl0cRMHJVAOcw dIIgY8CLRCBFkfo2Gv7LwIuKYJZlKy/CNSZn74zLexNVq28kRW7puQlL7sdUplUN aIA/C0tWWTvhp5J63ztKYVQxzTB8ZG5XQ68zRXoXZDSAwKZIQyH9f7abXdxw3yxn kPGQxHsY0Nm6GMKJXrKQIyuBgCZzaBninsq6k49XMgbwLWLfNwIada08b376YYea ZDCkshyqltaOlmGMBE0xuF9XyGXQ75LMQDtNR5/WkonqR6UQwWpEgzLSRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEedPi4QpkhO9UvDyuBlMb9x5yS3MB8GA1UdIwQY MBaAFE2U+Srb0btF1j+flHAXohZOnQ76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MzliOTgtMTUwOC00NzQwLThkYmYt MjQxMDllZGY2NDUwLzEvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MzliOTgtMTUwOC00NzQwLThkYmYtMjQxMDllZGY2NDUw LzEvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXKisu2g qJfUmG7K0NC4lW5e6URVEhqXDFqc8S7Xpk2Se1jbEc7Sb2yw5Cr3pxhf2breuDnf hBcWr4l5H4SKTPfPr3mS7Xto9oV4VlG1rCSxtheXJ/lwmBup41mLq09mzofBFBK7 D0wNdXGaTW31gHk3z564yfpkV6UqqM+ynmYc34LxXQe5u9DeS20YlOR+JAPsCTW2 pc2d488GR2g5CbwIdu2YPxmCRpC/cqLJcRBmypTDZE9fNAbvrY2qUuSA/2i6H2ER iT6+vaCwTNQpCl2BzsnqUJ2iVG8uHQruRbeRdrx+pAC4PuF+7bMO9CTSTrmafAxz wJR+mpDVtboj6Q== -----END CERTIFICATE-----Generated at Mon Dec 22 19:35:51 2025 by rpki-client