This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json) Hash identifier: pMx/UVIOfbXLt5KfPDXiu5uK7BGnlbQIouGGwACqeGQ= Subject key identifier: 9A:9F:3E:69:E3:BA:33:86:4C:6E:DB:EA:E1:0F:2C:F7:7C:81:0C:DA Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B20CF99FC698B2A72DE123EBDF5E7FF78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft Manifest number: 1767 Signing time: Mon 15 Dec 2025 07:00:34 +0000 Manifest this update: Mon 15 Dec 2025 07:00:34 +0000 Manifest next update: Tue 16 Dec 2025 07:00:34 +0000 Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=) 2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=) 3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=) 4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=) 5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: S3HGNfBQLJs8bRS48iuPsch2pSBS7EQYLCY3PlJdwyE=) 6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=) 7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=) 8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:99:fc:69:8b:2a:72:de:12:3e:bd:f5:e7:ff:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Dec 15 07:00:34 2025 GMT Not After : Dec 16 07:00:34 2025 GMT Subject: CN=9a9f3e69e3ba33864c6edbeae10f2cf77c810cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:24:62:55:c4:49:d6:f2:d8:f3:33:85:67: c9:e0:af:d4:09:6f:3e:97:f9:a1:a3:6b:6c:4c:ec: e8:70:d7:85:a3:5a:19:88:c1:ef:89:3e:44:55:8d: da:d1:c0:82:02:65:74:f8:24:b2:3d:9d:92:05:84: e1:3d:47:d2:f8:a8:c3:f9:04:2b:f1:32:6d:c0:7b: 14:27:e3:6a:0a:6c:09:24:a9:f5:57:ae:f5:4b:8d: 40:3b:8d:6b:17:15:fe:27:db:3c:9c:28:18:29:53: 73:71:89:c0:b5:92:42:c0:44:2b:2d:07:33:92:ee: 12:6f:2f:59:f9:b3:cb:17:c0:08:09:db:5f:d2:0c: 61:61:eb:d4:34:a2:ef:9b:eb:6a:e4:04:90:63:ed: fb:4d:fa:a1:81:2a:90:f5:8c:c8:b0:73:e9:6b:2d: 1f:c2:f6:a2:6b:cc:f3:56:d2:de:ae:87:f6:00:2c: b0:eb:64:d2:28:e6:ab:19:38:15:b5:8a:88:5e:68: d2:27:eb:47:b9:69:bf:41:a4:32:e6:7d:c7:73:32: 96:09:ed:51:d9:57:75:25:92:bb:7d:b6:b9:e0:db: eb:00:12:d5:27:27:fc:55:e8:af:f4:66:54:ba:68: 1c:3a:bc:5f:9d:ff:94:ef:73:53:ae:c4:c8:4a:2f: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:3E:69:E3:BA:33:86:4C:6E:DB:EA:E1:0F:2C:F7:7C:81:0C:DA X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:92:6d:cf:9a:76:af:b9:56:89:a7:d2:ea:c9:c2:4a:0e:54: 41:b3:57:21:d8:e6:70:e2:d5:07:6d:2a:ce:49:1f:bc:17:08: 87:61:43:03:07:71:2f:2c:a9:d5:c5:99:3b:38:43:a4:3e:79: 0e:a3:70:62:3b:5a:bf:3d:b0:99:76:b9:29:f4:c9:d5:d8:1c: 73:f4:43:98:32:ca:ae:03:e6:7d:9e:19:b5:2a:aa:ae:cb:30: 52:f8:60:4a:70:66:e6:c7:74:10:a3:e2:fb:7c:7a:b4:a7:5f: 78:e6:78:5c:b4:1b:d8:b8:e8:85:2f:2a:44:75:90:7b:37:c3: 15:cc:bb:73:37:5b:89:d2:80:36:3b:e7:38:6b:25:a3:d4:1d: a3:07:4b:6e:ab:aa:bf:5b:c7:bb:c4:7e:5d:cb:0e:59:31:03: ac:10:c6:9a:f7:b9:62:02:78:77:ed:0f:52:0d:4a:c7:77:c4: 2e:b9:b7:65:df:99:92:a3:f0:33:9a:14:17:43:dd:48:42:74: 9b:e8:7a:04:25:e1:a0:a7:68:3e:d8:05:86:bf:6c:65:32:21: bd:9e:13:af:54:cc:da:3b:c6:45:d6:b9:7a:43:6f:c2:70:4d: 5a:b1:6a:85:36:78:fb:7e:09:01:ca:89:e7:3c:89:c4:1a:56: 85:89:0c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz5n8aYsqct4SPr315/94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjUxMjE1MDcwMDM0WhcNMjUxMjE2MDcwMDM0WjAzMTEwLwYDVQQD Eyg5YTlmM2U2OWUzYmEzMzg2NGM2ZWRiZWFlMTBmMmNmNzdjODEwY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt08kYlXESdby2PMzhWfJ4K/UCW8+ l/mho2tsTOzocNeFo1oZiMHviT5EVY3a0cCCAmV0+CSyPZ2SBYThPUfS+KjD+QQr 8TJtwHsUJ+NqCmwJJKn1V671S41AO41rFxX+J9s8nCgYKVNzcYnAtZJCwEQrLQcz ku4Sby9Z+bPLF8AICdtf0gxhYevUNKLvm+tq5ASQY+37TfqhgSqQ9YzIsHPpay0f wvaia8zzVtLerof2ACyw62TSKOarGTgVtYqIXmjSJ+tHuWm/QaQy5n3HczKWCe1R 2Vd1JZK7fba54NvrABLVJyf8Veiv9GZUumgcOrxfnf+U73NTrsTISi81uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqfPmnjujOGTG7b6uEPLPd8gQzaMB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJJtz5p2 r7lWiafS6snCSg5UQbNXIdjmcOLVB20qzkkfvBcIh2FDAwdxLyyp1cWZOzhDpD55 DqNwYjtavz2wmXa5KfTJ1dgcc/RDmDLKrgPmfZ4ZtSqqrsswUvhgSnBm5sd0EKPi +3x6tKdfeOZ4XLQb2LjohS8qRHWQezfDFcy7czdbidKANjvnOGslo9QdowdLbquq v1vHu8R+XcsOWTEDrBDGmve5YgJ4d+0PUg1Kx3fELrm3Zd+ZkqPwM5oUF0PdSEJ0 m+h6BCXhoKdoPtgFhr9sZTIhvZ4Tr1TM2jvGRda5ekNvwnBNWrFqhTZ4+34JAcqJ 5zyJxBpWhYkMFA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:11:33 2025 by rpki-client