This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json) Hash identifier: kSsAMugErQrLU/otqHdS4d08X73sSNZ3+mP+1SRrI48= Subject key identifier: B4:D0:F1:54:14:7A:E3:75:AC:5A:4D:F2:E9:F6:9F:D8:D2:1B:C5:B2 Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50 Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550 Certificate serial: 019B578839C2F4F9E78AC30DE042AD477B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 22:01:43 +0000 Manifest this update: Thu 25 Dec 2025 22:01:43 +0000 Manifest next update: Fri 26 Dec 2025 22:01:43 +0000 Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: Mx3Oxaahn8qEPxjR0TGgcNYH+UIPRRGrf8nzS1Hcx+c=) 2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:88:39:c2:f4:f9:e7:8a:c3:0d:e0:42:ad:47:7b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550 Validity Not Before: Dec 25 22:01:43 2025 GMT Not After : Dec 26 22:01:43 2025 GMT Subject: CN=b4d0f154147ae375ac5a4df2e9f69fd8d21bc5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:f2:62:44:ce:8b:0a:63:45:89:84:5a:7c: a7:32:a4:cc:ed:07:8e:8c:91:ce:fb:65:3c:a4:e5: 86:42:e7:17:2e:b6:ce:18:1f:04:0f:75:f2:1b:27: 7f:ee:fb:50:5d:07:1c:e4:35:c8:96:ec:bc:f7:23: 50:92:73:00:07:67:bc:fb:34:01:41:4f:33:da:00: b0:97:80:ca:32:6f:0a:40:c9:b3:00:ef:1d:35:2b: b2:0a:d7:1f:75:7c:a9:9b:8d:13:66:fa:fd:80:ed: 50:72:a9:af:42:a7:11:c7:b7:b8:f8:31:0e:6f:99: 66:d5:be:08:d6:ec:c6:2a:b2:26:96:cf:ef:19:8a: 26:b9:f5:b5:ee:3f:da:7d:ea:ed:9d:1a:73:6d:0d: fd:c6:a2:dc:8c:71:fa:0b:7f:34:93:34:47:cf:96: 0d:15:8d:4d:43:bf:95:09:e7:88:96:77:14:be:90: d3:a2:fb:29:c0:6a:45:19:80:61:62:3f:d3:4a:2b: 85:f1:ae:38:1c:b1:76:7f:58:d5:b1:bc:d5:71:a5: e7:15:01:cc:a9:4c:2c:33:bf:c4:f1:1c:a5:d6:ae: 20:10:20:cf:a8:12:6e:a9:29:16:ad:79:2d:a4:4c: 29:02:b3:c7:c4:ff:1b:56:6c:a7:ad:2d:c2:d5:ca: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D0:F1:54:14:7A:E3:75:AC:5A:4D:F2:E9:F6:9F:D8:D2:1B:C5:B2 X509v3 Authority Key Identifier: keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d9:37:bc:68:b5:0f:ed:39:78:1c:dc:0c:04:68:c0:fb:a1: aa:c6:71:2c:a2:d7:c1:5d:28:52:39:18:62:20:0d:7c:64:fd: 6d:03:7c:db:56:d5:85:3b:61:b5:45:a7:29:e8:a2:d3:36:9c: d3:b2:ab:e6:62:70:be:bb:8a:1e:5f:4d:d6:ce:de:df:17:9a: 14:60:70:ed:ec:1f:39:32:56:a3:5f:e5:a4:9c:7f:2b:23:a5: 4a:5e:66:9d:92:fa:d8:85:41:e3:e2:bd:b9:39:96:e6:b2:8e: a7:fd:92:34:a4:00:4f:8c:df:93:d8:c9:15:5d:81:fc:08:36: 31:34:9a:8d:28:6b:a7:61:a0:e5:cd:8e:e3:56:25:b0:3a:e3: 3b:ac:75:22:e4:39:17:4e:e0:d8:54:4e:7d:21:2a:3e:1c:c8: 4c:95:d7:35:a3:ef:d4:e6:b9:61:3d:fd:72:f2:b5:dc:ab:66: 1b:d4:d3:b1:d1:7f:e6:ef:03:df:f7:8d:ac:76:ab:93:de:4b: 08:a1:04:85:8f:d8:62:86:cf:79:03:aa:76:b2:43:f7:69:d9: b0:43:03:08:3e:ba:17:9c:9d:8f:cc:d6:ce:02:48:4b:62:ac: 38:bf:a0:68:2a:96:67:4b:ab:b1:0f:dd:f8:b3:4c:23:73:72: 62:c9:b9:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXiDnC9PnnisMN4EKtR3tFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy MTI1NTAwHhcNMjUxMjI1MjIwMTQzWhcNMjUxMjI2MjIwMTQzWjAzMTEwLwYDVQQD EyhiNGQwZjE1NDE0N2FlMzc1YWM1YTRkZjJlOWY2OWZkOGQyMWJjNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokXyYkTOiwpjRYmEWnynMqTM7QeO jJHO+2U8pOWGQucXLrbOGB8ED3XyGyd/7vtQXQcc5DXIluy89yNQknMAB2e8+zQB QU8z2gCwl4DKMm8KQMmzAO8dNSuyCtcfdXypm40TZvr9gO1QcqmvQqcRx7e4+DEO b5lm1b4I1uzGKrImls/vGYomufW17j/afertnRpzbQ39xqLcjHH6C380kzRHz5YN FY1NQ7+VCeeIlncUvpDTovspwGpFGYBhYj/TSiuF8a44HLF2f1jVsbzVcaXnFQHM qUwsM7/E8Ryl1q4gECDPqBJuqSkWrXktpEwpArPHxP8bVmynrS3C1cotvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTQ8VQUeuN1rFpN8un2n9jSG8WyMB8GA1UdIwQY MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNk3vGi1 D+05eBzcDARowPuhqsZxLKLXwV0oUjkYYiANfGT9bQN821bVhTthtUWnKeii0zac 07Kr5mJwvruKHl9N1s7e3xeaFGBw7ewfOTJWo1/lpJx/KyOlSl5mnZL62IVB4+K9 uTmW5rKOp/2SNKQAT4zfk9jJFV2B/Ag2MTSajShrp2Gg5c2O41YlsDrjO6x1IuQ5 F07g2FROfSEqPhzITJXXNaPv1Oa5YT39cvK13KtmG9TTsdF/5u8D3/eNrHark95L CKEEhY/YYobPeQOqdrJD92nZsEMDCD66F5ydj8zWzgJIS2KsOL+gaCqWZ0ursQ/d +LNMI3NyYsm5nQ== -----END CERTIFICATE-----Generated at Fri Dec 26 00:02:54 2025 by rpki-client