This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json) Hash identifier: AH1rys0Bft83O22BTJqNufhQVCZvhL4KKku7WGotZBI= Subject key identifier: 70:7B:E5:A7:F2:92:17:49:75:2B:99:7A:E2:5D:E8:DB:D9:6D:9D:D1 Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Certificate serial: 019B3A8F5DFB8840A502E67235278C4A1F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 07:00:32 +0000 Manifest this update: Sat 20 Dec 2025 07:00:32 +0000 Manifest next update: Sun 21 Dec 2025 07:00:32 +0000 Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=) 2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=) 3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: T4dr2VY2DcBZdQoFynpH3Pg8wVISgsk/TuzZ5g5g3G0=) 4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:5d:fb:88:40:a5:02:e6:72:35:27:8c:4a:1f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Validity Not Before: Dec 20 07:00:32 2025 GMT Not After : Dec 21 07:00:32 2025 GMT Subject: CN=707be5a7f2921749752b997ae25de8dbd96d9dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:3e:d1:27:17:e8:38:f0:89:9d:09:5b:6c: 15:68:c8:2d:bf:49:80:15:32:d4:0b:fb:af:34:0e: 9a:02:23:62:f4:22:be:59:c2:03:e6:39:17:07:c2: 16:c8:75:9d:ab:5e:97:58:ab:db:ec:45:96:cd:5a: 42:60:fd:7a:99:02:db:24:5a:ef:b1:4b:78:c6:d9: bd:3d:32:7f:ec:b2:1d:23:f3:7c:54:6a:55:a8:88: 63:5d:5c:e9:de:ac:4f:2f:ee:a4:55:cf:8c:b0:37: b8:87:7a:eb:60:14:11:6c:37:e7:85:ee:04:3e:05: e7:fd:17:08:4c:19:c7:35:e2:46:db:04:4a:25:0d: b5:79:54:66:fa:99:f2:68:50:e1:a5:8b:29:56:08: d8:18:7d:9c:1f:c9:2b:19:b8:79:93:c6:6b:fa:19: 73:8a:31:cb:4a:47:ce:77:f3:a7:b5:05:e0:e6:5c: 73:8f:75:79:b7:c7:25:84:75:e8:ef:65:29:27:0b: ab:6c:f6:be:57:09:f2:78:75:f7:36:f3:0e:72:f2: 35:ac:f3:ec:46:b3:ae:ad:1e:b5:cd:d0:d5:ff:50: 77:53:b9:46:16:12:cf:90:da:97:4c:00:fa:23:b7: 7d:08:e5:af:7b:2d:51:c1:fe:45:77:f3:cd:10:68: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7B:E5:A7:F2:92:17:49:75:2B:99:7A:E2:5D:E8:DB:D9:6D:9D:D1 X509v3 Authority Key Identifier: keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b1:99:29:c1:f3:2e:6b:f2:87:ef:6a:de:ea:68:62:27:38: 1b:44:e3:cb:81:bc:dc:c4:43:83:d6:29:48:fb:9f:46:5c:e3: fd:6c:43:7f:dd:ec:6a:f1:12:85:d5:c6:58:15:35:a6:82:3a: 59:83:45:1c:61:a2:5b:53:20:4a:27:53:a1:98:37:be:b5:11: 9a:7e:c9:ad:d0:b8:f9:af:df:52:1f:de:72:12:a9:b4:cc:d0: 82:17:6a:c9:b6:17:10:13:7a:d3:8c:c0:4e:3a:46:c8:28:54: 67:5d:db:5c:a8:5b:45:a4:3d:d2:97:22:65:06:be:49:06:72: 60:9d:a5:fb:ee:c1:55:ff:fc:1f:ac:d7:cf:08:81:37:58:ae: 78:1e:c5:c6:af:00:c5:74:f5:3f:20:bb:1f:53:72:62:71:c9: 96:f4:45:86:3c:39:0f:06:e8:23:18:77:cc:bf:4c:ad:c8:6f: aa:6c:a7:06:26:89:71:f1:29:9a:6e:dd:b2:01:3a:56:f6:4d: b5:58:d8:81:de:29:cc:8d:71:59:1b:69:8d:6c:7e:a0:6c:83: ab:78:e8:0c:82:40:00:a1:cb:90:4d:f3:e6:7e:eb:8c:56:c3: 36:9b:5e:1f:5e:3a:df:13:fd:58:79:45:f2:77:47:ed:4d:03: 8d:0b:ea:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j137iEClAuZyNSeMSh8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4 ZDM1ZmMwHhcNMjUxMjIwMDcwMDMyWhcNMjUxMjIxMDcwMDMyWjAzMTEwLwYDVQQD Eyg3MDdiZTVhN2YyOTIxNzQ5NzUyYjk5N2FlMjVkZThkYmQ5NmQ5ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoss+0ScX6DjwiZ0JW2wVaMgtv0mA FTLUC/uvNA6aAiNi9CK+WcID5jkXB8IWyHWdq16XWKvb7EWWzVpCYP16mQLbJFrv sUt4xtm9PTJ/7LIdI/N8VGpVqIhjXVzp3qxPL+6kVc+MsDe4h3rrYBQRbDfnhe4E PgXn/RcITBnHNeJG2wRKJQ21eVRm+pnyaFDhpYspVgjYGH2cH8krGbh5k8Zr+hlz ijHLSkfOd/OntQXg5lxzj3V5t8clhHXo72UpJwurbPa+VwnyeHX3NvMOcvI1rPPs RrOurR61zdDV/1B3U7lGFhLPkNqXTAD6I7d9COWvey1Rwf5Fd/PNEGjWEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHB75afykhdJdSuZeuJd6NvZbZ3RMB8GA1UdIwQY MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7GZKcHz Lmvyh+9q3upoYic4G0Tjy4G83MRDg9YpSPufRlzj/WxDf93savEShdXGWBU1poI6 WYNFHGGiW1MgSidToZg3vrURmn7JrdC4+a/fUh/echKptMzQghdqybYXEBN604zA TjpGyChUZ13bXKhbRaQ90pciZQa+SQZyYJ2l++7BVf/8H6zXzwiBN1iueB7Fxq8A xXT1PyC7H1NyYnHJlvRFhjw5DwboIxh3zL9MrchvqmynBiaJcfEpmm7dsgE6VvZN tVjYgd4pzI1xWRtpjWx+oGyDq3joDIJAAKHLkE3z5n7rjFbDNpteH1463xP9WHlF 8ndH7U0DjQvqoQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:25 2025 by rpki-client