This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json) Hash identifier: BtiD7NCdzGyq88CINqkyWUnXHcqKvffvUbVrdjbW4rI= Subject key identifier: 2E:A4:F8:E4:04:6B:C5:4F:5E:1A:19:3E:EA:31:EA:4B:0E:58:D6:AF Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66 Certificate serial: 019B4A399B48568F76C8361CEE7D418E0CE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft Manifest number: 10F1 Signing time: Tue 23 Dec 2025 08:00:47 +0000 Manifest this update: Tue 23 Dec 2025 08:00:47 +0000 Manifest next update: Wed 24 Dec 2025 08:00:47 +0000 Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=) 2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: 7akvaCOA6yBC8ZQaSa+NVInGzqURVpD7Vsc7aWsaGrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:9b:48:56:8f:76:c8:36:1c:ee:7d:41:8e:0c:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66 Validity Not Before: Dec 23 08:00:47 2025 GMT Not After : Dec 24 08:00:47 2025 GMT Subject: CN=2ea4f8e4046bc54f5e1a193eea31ea4b0e58d6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:90:a0:65:dc:af:7e:2c:2a:4a:df:18:d5: 59:98:88:8e:74:da:1e:8d:cd:1b:c2:3f:0a:a1:a3: 77:50:23:93:5a:93:51:fe:1e:1d:85:5f:55:3d:e2: 93:2f:b0:8a:4c:06:72:d6:a2:99:03:21:8b:e2:c3: 4d:3c:ee:5a:6c:5f:28:1c:b3:1e:18:db:d9:6c:03: f4:7b:34:98:1f:7b:9c:8c:f0:be:d4:e6:2a:74:bf: 97:cb:f1:71:da:b2:45:8b:34:dd:a0:f4:86:20:b3: e3:30:ab:a8:a9:6d:2d:1f:84:2a:09:df:df:0f:e4: 23:75:f4:cd:ae:f3:51:9e:dd:9c:fc:89:54:b6:ed: df:9d:5e:72:b7:91:bc:a0:fc:16:15:78:2a:8b:c1: 0f:5c:9a:66:22:aa:f7:d1:84:98:66:2d:ac:46:85: 1d:85:c7:81:9a:fc:cc:6d:db:d2:63:55:c5:8c:ce: 9b:57:67:48:42:3f:1c:c8:b6:87:f4:d5:18:88:d0: 68:ad:51:2b:3f:8d:60:62:79:57:c3:c7:70:44:b8: c4:69:98:68:3c:2b:95:1e:24:91:4c:60:67:3e:3c: 47:4f:82:37:d1:0e:31:b9:38:4d:0e:7a:da:2b:ea: 46:df:d3:86:dd:19:90:7d:46:c4:0c:5b:13:31:44: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A4:F8:E4:04:6B:C5:4F:5E:1A:19:3E:EA:31:EA:4B:0E:58:D6:AF X509v3 Authority Key Identifier: keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d5:ce:13:23:3f:00:6f:86:01:5c:85:59:82:8c:af:28:f5: b3:46:0d:48:3d:aa:fb:ae:2d:36:c2:4a:e3:7c:d6:ae:fe:a7: d6:d4:42:f1:f8:55:92:98:7b:5e:33:d8:c4:a2:eb:10:a8:24: 18:24:89:cf:c5:ff:3e:c3:e3:8a:88:cf:f9:b4:91:d0:ec:eb: 5c:8c:32:4f:de:a2:72:b6:9f:43:51:9a:70:bb:18:bb:b5:97: 29:c4:fd:65:41:7b:06:25:26:e1:7c:1d:7a:c7:51:3c:e0:30: 2f:e8:1b:63:b9:ee:26:36:e8:5f:09:ec:d7:c5:70:89:a8:6d: e6:d9:d8:25:75:5b:1f:68:e6:ff:7b:a0:df:31:d8:c0:e1:77: ed:37:e2:30:75:88:8e:a2:40:25:1c:61:a1:1a:76:07:5c:b1: 6f:ed:13:9e:13:90:cb:50:28:fe:54:a9:0e:53:ae:b4:74:87: 0b:b4:1d:f4:19:72:af:9e:5c:a3:87:65:40:d8:01:4f:75:9d: ea:9a:64:8d:71:ae:3a:5f:01:f5:c4:bc:f7:f2:f3:5e:f4:65: 26:fa:7b:4e:6e:c3:d6:ae:00:de:03:d4:79:05:a3:48:fd:ce: bc:e4:4e:af:c6:59:dc:07:81:27:d7:9c:05:12:c6:55:55:ce: 91:a1:b2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOZtIVo92yDYc7n1BjgzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTQ2ZjRkZjIyMzc0OTFhNjhkZmE0MDdiZTQxZmFlODRi YmRhNjYwHhcNMjUxMjIzMDgwMDQ3WhcNMjUxMjI0MDgwMDQ3WjAzMTEwLwYDVQQD EygyZWE0ZjhlNDA0NmJjNTRmNWUxYTE5M2VlYTMxZWE0YjBlNThkNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmQoGXcr34sKkrfGNVZmIiOdNoe jc0bwj8KoaN3UCOTWpNR/h4dhV9VPeKTL7CKTAZy1qKZAyGL4sNNPO5abF8oHLMe GNvZbAP0ezSYH3ucjPC+1OYqdL+Xy/Fx2rJFizTdoPSGILPjMKuoqW0tH4QqCd/f D+QjdfTNrvNRnt2c/IlUtu3fnV5yt5G8oPwWFXgqi8EPXJpmIqr30YSYZi2sRoUd hceBmvzMbdvSY1XFjM6bV2dIQj8cyLaH9NUYiNBorVErP41gYnlXw8dwRLjEaZho PCuVHiSRTGBnPjxHT4I30Q4xuThNDnraK+pG39OG3RmQfUbEDFsTMURlewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6k+OQEa8VPXhoZPuox6ksOWNavMB8GA1UdIwQY MBaAFE2Ub03yI3SRpo36QHvkH66Eu9pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAt YzI0ZWUwNDk0NTQxLzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAtYzI0ZWUwNDk0NTQx LzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNXOEyM/ AG+GAVyFWYKMryj1s0YNSD2q+64tNsJK43zWrv6n1tRC8fhVkph7XjPYxKLrEKgk GCSJz8X/PsPjiojP+bSR0OzrXIwyT96icrafQ1GacLsYu7WXKcT9ZUF7BiUm4Xwd esdRPOAwL+gbY7nuJjboXwns18Vwiaht5tnYJXVbH2jm/3ug3zHYwOF37TfiMHWI jqJAJRxhoRp2B1yxb+0TnhOQy1Ao/lSpDlOutHSHC7Qd9Blyr55co4dlQNgBT3Wd 6ppkjXGuOl8B9cS89/LzXvRlJvp7Tm7D1q4A3gPUeQWjSP3OvOROr8ZZ3AeBJ9ec BRLGVVXOkaGyow== -----END CERTIFICATE-----Generated at Tue Dec 23 12:38:52 2025 by rpki-client