This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json) Hash identifier: jIWH1BYuXO1hajdHThsh7ID9XlXg9RbWe0la2NaGQi8= Subject key identifier: CC:1C:36:C3:46:02:2F:35:E9:89:2B:99:89:5D:E1:B7:7F:16:93:62 Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36 Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636 Certificate serial: 019B729246C1909DAD615F07DCC2872CA975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft Manifest number: 1105 Signing time: Wed 31 Dec 2025 04:02:27 +0000 Manifest this update: Wed 31 Dec 2025 04:02:27 +0000 Manifest next update: Thu 01 Jan 2026 04:02:27 +0000 Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: lQhhQ4cEfhkmnpsLuznAB2wEBcpJdSC/AUSc3t9SVzs=) 2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 04:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:46:c1:90:9d:ad:61:5f:07:dc:c2:87:2c:a9:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636 Validity Not Before: Dec 31 04:02:27 2025 GMT Not After : Jan 1 04:02:27 2026 GMT Subject: CN=cc1c36c346022f35e9892b99895de1b77f169362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:14:5f:b2:d9:a2:cc:aa:17:fa:f6:d3:1c: 5e:21:55:b6:8f:99:3d:96:3f:7f:39:e4:01:4f:9e: 27:96:53:e3:97:69:c0:64:55:8f:47:26:c4:53:7f: d0:c6:fb:33:e0:f4:44:31:23:8e:37:5e:aa:4f:a3: 09:40:b6:81:5b:9e:1f:0f:a6:3d:37:29:39:af:f0: 66:e3:30:59:77:7d:2b:8a:60:4f:5c:05:88:e2:1d: 0c:84:3b:0c:83:89:7c:38:24:52:39:ce:eb:a6:3b: 54:2a:65:1a:5c:39:0f:24:08:28:e6:30:cf:5c:63: bb:6a:d9:04:99:40:7a:b0:f6:3a:74:d6:00:62:fb: 8a:ef:af:03:09:1f:0e:1d:05:d8:f8:26:5d:68:69: 67:48:c7:d7:ef:7b:31:ce:ea:a4:41:01:01:a8:67: 69:2e:71:b5:a6:5f:39:23:69:0f:d4:44:23:4a:4f: ef:62:a9:cc:f9:fc:db:5f:58:65:c1:35:0d:7f:83: 2c:dd:4d:92:dd:35:0c:77:8f:67:a4:a3:c3:2f:c7: 4f:e3:fa:fe:e9:f0:71:d9:22:f0:57:a7:b3:89:93: 92:e6:ee:1f:19:9a:c3:51:14:2c:9e:df:83:8f:e5: dc:aa:1c:68:f7:b3:01:b3:d8:ff:77:4b:1d:ed:4e: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1C:36:C3:46:02:2F:35:E9:89:2B:99:89:5D:E1:B7:7F:16:93:62 X509v3 Authority Key Identifier: keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:43:c7:6c:8c:c7:c1:2e:5b:18:eb:16:06:cd:14:bc:9b:8b: 75:37:9d:01:4e:35:9b:b8:bd:67:f6:a5:48:f1:e3:9f:f0:31: e9:f6:a0:56:02:50:25:fb:19:c3:f1:5f:0e:1d:06:ce:4a:ea: 55:5d:77:c4:98:60:d8:f6:88:29:97:8b:be:60:be:cf:22:ac: d1:7f:39:b3:59:e2:6e:68:17:aa:c0:bc:b5:07:d5:60:0b:83: 3f:5d:ba:6c:85:19:a4:70:6f:fa:f4:2d:62:ae:61:0c:08:cb: a3:eb:1d:20:4c:b4:48:9a:d8:88:25:82:07:10:6d:fa:39:4d: 49:b5:a6:ce:42:58:90:5e:fe:f7:04:bc:1d:be:f2:7e:82:90: 95:7a:e5:63:d9:8d:be:0e:4d:ee:5e:55:c7:9b:76:9d:41:30: b5:42:f6:e1:3d:6b:95:39:02:8d:1b:21:21:4b:50:78:6a:55: 1f:d0:d7:ad:d7:43:6e:88:3c:13:08:60:d6:37:fa:82:1d:e0: 21:e6:fb:0b:03:c8:51:f3:9b:44:52:4f:56:47:ec:47:ef:93: fa:02:cb:15:67:a2:37:d6:d5:ec:52:24:fe:5e:79:a8:84:0c: 3c:c9:33:24:f9:aa:31:ca:76:1a:82:d6:68:ec:13:54:82:bc: 36:a6:d6:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykkbBkJ2tYV8H3MKHLKl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTJiZTAyNTA5NjQzYmM3YTJmODYyODcxNjM5ZDA4ZTI3 NmM2MzYwHhcNMjUxMjMxMDQwMjI3WhcNMjYwMTAxMDQwMjI3WjAzMTEwLwYDVQQD EyhjYzFjMzZjMzQ2MDIyZjM1ZTk4OTJiOTk4OTVkZTFiNzdmMTY5MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNYUX7LZosyqF/r20xxeIVW2j5k9 lj9/OeQBT54nllPjl2nAZFWPRybEU3/Qxvsz4PREMSOON16qT6MJQLaBW54fD6Y9 Nyk5r/Bm4zBZd30rimBPXAWI4h0MhDsMg4l8OCRSOc7rpjtUKmUaXDkPJAgo5jDP XGO7atkEmUB6sPY6dNYAYvuK768DCR8OHQXY+CZdaGlnSMfX73sxzuqkQQEBqGdp LnG1pl85I2kP1EQjSk/vYqnM+fzbX1hlwTUNf4Ms3U2S3TUMd49npKPDL8dP4/r+ 6fBx2SLwV6eziZOS5u4fGZrDURQsnt+Dj+Xcqhxo97MBs9j/d0sd7U78LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwcNsNGAi816YkrmYld4bd/FpNiMB8GA1UdIwQY MBaAFE2SvgJQlkO8ei+GKHFjnQjidsY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2Mt YjczMTJhYjIwMjczLzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2MtYjczMTJhYjIwMjcz LzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkPHbIzH wS5bGOsWBs0UvJuLdTedAU41m7i9Z/alSPHjn/Ax6fagVgJQJfsZw/FfDh0Gzkrq VV13xJhg2PaIKZeLvmC+zyKs0X85s1nibmgXqsC8tQfVYAuDP126bIUZpHBv+vQt Yq5hDAjLo+sdIEy0SJrYiCWCBxBt+jlNSbWmzkJYkF7+9wS8Hb7yfoKQlXrlY9mN vg5N7l5Vx5t2nUEwtUL24T1rlTkCjRshIUtQeGpVH9DXrddDbog8Ewhg1jf6gh3g Ieb7CwPIUfObRFJPVkfsR++T+gLLFWeiN9bV7FIk/l55qIQMPMkzJPmqMcp2GoLW aOwTVIK8NqbWTw== -----END CERTIFICATE-----Generated at Wed Dec 31 13:28:21 2025 by rpki-client