This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json) Hash identifier: 2QcyAoaWIJNCfROy5PiIK74S3zVZe288CVMulRz5NDo= Subject key identifier: 2A:4F:40:B5:A6:2B:E3:EA:5F:5E:8C:CC:1C:1C:B9:33:B9:04:EE:65 Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa Certificate serial: 019B34C49AA83D71695747B756416EAC616B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 04:00:58 +0000 Manifest this update: Fri 19 Dec 2025 04:00:58 +0000 Manifest next update: Sat 20 Dec 2025 04:00:58 +0000 Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: mAWFPC5njaM8hoWPcnhaweniWoeHctmWgy1Kkid5hbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:9a:a8:3d:71:69:57:47:b7:56:41:6e:ac:61:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa Validity Not Before: Dec 19 04:00:58 2025 GMT Not After : Dec 20 04:00:58 2025 GMT Subject: CN=2a4f40b5a62be3ea5f5e8ccc1c1cb933b904ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:f2:95:4f:8c:38:a2:bb:68:5b:6f:16:03: 81:f5:28:22:ed:d6:e3:54:e9:af:5f:c7:fe:31:8e: cd:a6:8a:5f:2a:ca:7f:b7:d5:86:ff:1c:27:76:71: 55:3d:e1:74:b2:c9:30:23:ad:65:8d:55:7c:ea:85: 94:30:3a:db:d3:a7:c2:0b:f0:23:6d:12:3b:b7:21: 20:60:8e:4a:43:fa:eb:33:c2:65:8c:71:a0:1c:f4: 30:48:b0:22:5f:58:b1:48:47:b2:99:09:32:16:2c: a3:1d:4c:7e:51:07:60:4f:d1:96:ca:d8:d7:2f:b0: d5:02:4a:21:e2:7f:98:ee:c1:c8:2c:14:77:ed:25: a7:a1:cd:17:98:97:9b:d9:a7:58:30:e5:0d:25:ff: 29:36:68:22:d3:50:e8:3d:2a:90:a0:db:39:51:73: b1:e8:57:de:ce:46:d7:cd:80:97:e0:8e:d2:c9:61: f1:e5:de:a7:21:d5:73:84:3a:69:8d:28:09:5d:5c: 33:40:18:79:07:10:78:5b:5e:14:19:1f:3f:84:f0: b9:8a:52:d0:d3:8d:6b:a2:5e:d0:ce:32:b1:4c:c9: 3d:ec:64:81:6d:5d:7f:b5:d0:e7:eb:4d:20:5e:1d: 7f:66:33:25:ce:39:3e:4c:b9:9c:7e:d8:d8:eb:9b: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:40:B5:A6:2B:E3:EA:5F:5E:8C:CC:1C:1C:B9:33:B9:04:EE:65 X509v3 Authority Key Identifier: keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4d:37:26:b3:c7:a1:a7:fd:47:49:78:0b:1d:1c:a1:97:74: 70:af:2e:8d:c8:14:89:d8:82:2c:20:78:36:c9:d1:df:2b:8b: 06:a1:c8:f1:88:81:68:93:ea:80:8e:59:a7:8e:dc:14:fe:5e: 7a:61:fd:16:cf:7e:43:7b:c0:d0:14:e7:f2:4a:a0:69:ae:89: 4b:3e:8a:14:ee:f8:26:55:fe:4e:f0:45:34:81:42:4a:6b:01: 3e:a6:cc:96:28:3a:c0:72:47:64:37:e2:3a:e7:dc:f2:43:18: 1d:14:96:94:19:20:24:02:b5:81:8b:f9:25:c0:84:90:30:d9: 32:76:c8:39:c6:5c:ae:1d:53:0b:0e:9c:ce:81:9a:75:0f:1c: dc:c8:9d:f2:e5:e4:24:28:78:d4:75:d6:18:9e:42:2f:bf:48: 25:b2:f4:b9:10:b9:94:c3:39:a5:e7:87:db:ab:91:b1:55:09: 68:a1:e2:c9:bc:c2:7b:0b:5f:a2:c5:ff:35:b6:dc:de:02:c5: 99:dc:66:75:a0:ca:fb:e5:29:f7:5e:c5:ab:2c:6c:3d:68:7b: 0e:17:3c:e9:c4:ff:4b:52:fc:b0:68:20:17:d7:27:fc:2d:e9: a8:e8:de:e6:46:ec:cc:d4:a6:b9:5e:00:33:33:a8:72:d2:16: e2:0c:cb:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xJqoPXFpV0e3VkFurGFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3M2Q4OGQ3NDY4YWY2MDFhZjE0YzVlMWVkOTAzYzRmMzZj YWY1ZmEwHhcNMjUxMjE5MDQwMDU4WhcNMjUxMjIwMDQwMDU4WjAzMTEwLwYDVQQD EygyYTRmNDBiNWE2MmJlM2VhNWY1ZThjY2MxYzFjYjkzM2I5MDRlZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmDylU+MOKK7aFtvFgOB9Sgi7dbj VOmvX8f+MY7NpopfKsp/t9WG/xwndnFVPeF0sskwI61ljVV86oWUMDrb06fCC/Aj bRI7tyEgYI5KQ/rrM8JljHGgHPQwSLAiX1ixSEeymQkyFiyjHUx+UQdgT9GWytjX L7DVAkoh4n+Y7sHILBR37SWnoc0XmJeb2adYMOUNJf8pNmgi01DoPSqQoNs5UXOx 6FfezkbXzYCX4I7SyWHx5d6nIdVzhDppjSgJXVwzQBh5BxB4W14UGR8/hPC5ilLQ 041rol7QzjKxTMk97GSBbV1/tdDn600gXh1/ZjMlzjk+TLmcftjY65s+mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpPQLWmK+PqX16MzBwcuTO5BO5lMB8GA1UdIwQY MBaAFLc9iNdGivYBrxTF4e2QPE82yvX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xOWM5M2ItYzlhMS00OTRiLTliYzAt MGYyYjU0MGVjYTA4LzEvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xOWM5M2ItYzlhMS00OTRiLTliYzAtMGYyYjU0MGVjYTA4 LzEvdHoySTEwYUs5Z0d2Rk1YaDdaQThUemJLOWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU03JrPH oaf9R0l4Cx0coZd0cK8ujcgUidiCLCB4NsnR3yuLBqHI8YiBaJPqgI5Zp47cFP5e emH9Fs9+Q3vA0BTn8kqgaa6JSz6KFO74JlX+TvBFNIFCSmsBPqbMlig6wHJHZDfi Oufc8kMYHRSWlBkgJAK1gYv5JcCEkDDZMnbIOcZcrh1TCw6czoGadQ8c3Mid8uXk JCh41HXWGJ5CL79IJbL0uRC5lMM5peeH26uRsVUJaKHiybzCewtfosX/Nbbc3gLF mdxmdaDK++Up917FqyxsPWh7Dhc86cT/S1L8sGggF9cn/C3pqOje5kbszNSmuV4A MzOoctIW4gzLFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:58 2025 by rpki-client