This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json) Hash identifier: amia5l+NOM++7lXWzF3/9+lLsAbnzj+aG5XJCp3ErkY= Subject key identifier: C2:EE:C8:83:B2:7B:B2:8C:95:45:98:0B:B7:11:8D:C6:B8:28:BC:B4 Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Certificate serial: 019B3C7EC0EFFF4C68F726FF9645779B8FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:38 +0000 Manifest this update: Sat 20 Dec 2025 16:01:38 +0000 Manifest next update: Sun 21 Dec 2025 16:01:38 +0000 Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 3yooh7u0wtC4CbB3wgIMJtORp4NUMcWuWTtRjdPTxqY=) 2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c0:ef:ff:4c:68:f7:26:ff:96:45:77:9b:8f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Validity Not Before: Dec 20 16:01:38 2025 GMT Not After : Dec 21 16:01:38 2025 GMT Subject: CN=c2eec883b27bb28c9545980bb7118dc6b828bcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:35:ff:a5:6b:7d:ae:ad:6e:33:d9:3d:72: 1b:d7:be:3f:d1:35:0b:b4:6f:93:76:6f:4a:27:57: 7f:cd:19:87:d0:70:fe:51:dd:69:52:6b:88:6c:52: d0:6b:37:09:7d:46:26:eb:d2:a0:71:c5:3a:87:bb: 3e:6a:f3:bb:5f:7a:ee:ca:df:0d:55:5a:51:7c:7a: 94:1f:28:58:b0:72:d4:c5:5f:54:46:58:de:92:3c: 51:b8:ee:a4:06:d6:da:e8:b4:41:07:3c:59:f6:c2: a9:4c:d3:67:71:aa:48:a5:a5:89:ec:56:f2:37:4c: 4b:14:b9:84:2b:ff:d0:e6:b4:cf:13:50:80:3c:d3: 73:4f:78:b8:3d:b0:2f:9c:a9:0d:a9:fc:5a:64:43: b5:c4:bc:96:7d:89:37:3b:e3:7b:55:f7:c7:ca:ac: b6:10:83:17:e4:5c:23:f8:5e:28:4e:8e:76:0b:58: 15:47:e8:03:40:7d:16:cf:f2:3d:0a:9c:35:be:d4: c8:55:db:52:a1:38:f5:25:9c:6b:df:47:0b:47:74: 73:e6:20:b8:c8:df:cf:33:85:cf:a2:af:dc:7b:38: 77:29:97:07:61:47:f9:df:3b:05:b6:81:2d:29:b8: be:22:1b:cd:d1:75:f9:b3:7a:23:8f:65:b0:c2:91: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EE:C8:83:B2:7B:B2:8C:95:45:98:0B:B7:11:8D:C6:B8:28:BC:B4 X509v3 Authority Key Identifier: keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b5:be:4b:8c:f7:47:3f:ae:6e:4a:09:b8:0f:c0:cc:df:6e: 36:7f:f5:b1:cc:d4:a0:f5:84:78:39:4c:1b:e1:f8:47:d9:ea: 1d:32:7b:c8:da:75:f3:70:d4:bc:8c:96:ce:13:39:dc:15:bd: 2d:b9:0c:35:af:33:55:1a:3e:17:53:d1:77:b7:d0:7a:b7:71: 40:9d:12:ab:f8:23:6e:19:04:d4:a0:bc:6d:30:29:78:ea:e1: b7:45:4e:28:20:58:df:7c:de:e0:dd:5e:c8:9d:d0:84:02:10: 6a:6f:40:32:68:75:6a:3d:e7:c4:83:38:7e:be:75:16:76:ec: e7:ae:b5:67:0c:ef:6a:8f:ce:f0:cb:c1:8b:7a:89:f9:c8:85: 23:f0:af:99:bb:1c:a1:bc:d7:26:72:c2:b3:f1:5a:e1:90:88: 50:19:d2:97:84:ff:df:a3:de:ef:62:a1:28:1e:e5:fe:60:66: 7e:6f:6d:75:d9:71:03:dd:73:75:02:81:8f:75:d8:0c:77:de: fc:3b:4b:d9:1a:e8:b3:b9:a6:ea:95:33:56:8a:84:12:47:10: 5d:d1:99:8c:4b:8d:da:14:a9:84:64:9b:d9:d1:78:a9:5a:48: 06:18:a5:f2:ca:ce:6a:d1:d5:39:0f:c2:41:78:ef:d8:38:26: 2b:9d:96:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsDv/0xo9yb/lkV3m4+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi MWE5OGEwHhcNMjUxMjIwMTYwMTM4WhcNMjUxMjIxMTYwMTM4WjAzMTEwLwYDVQQD EyhjMmVlYzg4M2IyN2JiMjhjOTU0NTk4MGJiNzExOGRjNmI4MjhiY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qs1/6Vrfa6tbjPZPXIb174/0TUL tG+Tdm9KJ1d/zRmH0HD+Ud1pUmuIbFLQazcJfUYm69KgccU6h7s+avO7X3ruyt8N VVpRfHqUHyhYsHLUxV9URljekjxRuO6kBtba6LRBBzxZ9sKpTNNncapIpaWJ7Fby N0xLFLmEK//Q5rTPE1CAPNNzT3i4PbAvnKkNqfxaZEO1xLyWfYk3O+N7VffHyqy2 EIMX5Fwj+F4oTo52C1gVR+gDQH0Wz/I9Cpw1vtTIVdtSoTj1JZxr30cLR3Rz5iC4 yN/PM4XPoq/cezh3KZcHYUf53zsFtoEtKbi+IhvN0XX5s3ojj2WwwpHTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLuyIOye7KMlUWYC7cRjca4KLy0MB8GA1UdIwQY MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLW+S4z3 Rz+ubkoJuA/AzN9uNn/1sczUoPWEeDlMG+H4R9nqHTJ7yNp183DUvIyWzhM53BW9 LbkMNa8zVRo+F1PRd7fQerdxQJ0Sq/gjbhkE1KC8bTApeOrht0VOKCBY33ze4N1e yJ3QhAIQam9AMmh1aj3nxIM4fr51Fnbs5661Zwzvao/O8MvBi3qJ+ciFI/Cvmbsc obzXJnLCs/Fa4ZCIUBnSl4T/36Pe72KhKB7l/mBmfm9tddlxA91zdQKBj3XYDHfe /DtL2Rros7mm6pUzVoqEEkcQXdGZjEuN2hSphGSb2dF4qVpIBhil8srOatHVOQ/C QXjv2DgmK52WZg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:22:49 2025 by rpki-client