This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json) Hash identifier: s85iKx3ba4KbKBHTrpxUraiK/VaL3GZBv7lhTZShaig= Subject key identifier: 52:5A:FF:FC:83:F3:E7:A9:01:BD:0B:22:48:3B:9D:7B:87:A8:8E:5C Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Certificate serial: 019B36B32225FE8B12ADFC7CA88BC809511B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft Manifest number: 0A01 Signing time: Fri 19 Dec 2025 13:01:07 +0000 Manifest this update: Fri 19 Dec 2025 13:01:07 +0000 Manifest next update: Sat 20 Dec 2025 13:01:07 +0000 Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: mZ0lMZmgdF6RnDa3DfUSivkbW7SsxSTC0DGZDScVPDk=) 2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:22:25:fe:8b:12:ad:fc:7c:a8:8b:c8:09:51:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Validity Not Before: Dec 19 13:01:07 2025 GMT Not After : Dec 20 13:01:07 2025 GMT Subject: CN=525afffc83f3e7a901bd0b22483b9d7b87a88e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:b2:61:0e:ed:a1:24:44:61:28:12:41:7c: af:b6:55:c4:ab:d7:ed:19:3f:c5:35:06:23:a1:32: 63:e2:66:79:58:41:b4:62:61:a1:c1:66:c8:7f:d2: 33:46:0a:bc:ff:62:7d:74:ba:90:7b:a6:10:82:93: c5:48:46:3c:50:3f:89:b5:85:19:14:e8:a9:e7:36: b7:27:f3:fa:c8:42:3e:6c:db:c0:91:4c:2d:49:5d: ae:9c:e9:ff:c4:17:4f:6b:bc:8d:82:df:c9:ac:ca: 6b:04:3a:3d:fe:a2:be:fb:80:12:e9:fa:82:84:b9: 28:b1:05:7f:1e:61:c8:a7:a4:8d:0b:0f:35:c9:3e: ca:cd:4d:1c:6a:09:17:c8:87:8e:65:f9:df:99:ba: aa:bc:37:31:65:d7:ef:23:ab:44:20:50:44:4b:ac: 62:80:f5:c8:01:cd:94:e9:98:43:fd:c8:8e:35:ff: a8:62:f2:16:a2:d5:6b:ce:8e:56:44:75:dd:15:25: 74:40:65:4b:17:c8:c3:ca:bf:38:38:1e:95:5d:7e: a2:4e:b5:02:19:7d:28:f3:de:9a:0a:c2:05:ec:4e: a7:bf:f1:b0:7f:9f:e8:2d:7f:32:48:c0:34:77:52: 13:8b:0b:85:74:12:87:f7:b4:fe:85:9c:91:61:9c: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5A:FF:FC:83:F3:E7:A9:01:BD:0B:22:48:3B:9D:7B:87:A8:8E:5C X509v3 Authority Key Identifier: keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:68:86:b6:36:4f:c6:f1:1a:3d:ee:ef:4a:6b:22:ba:8c:95: 7d:05:44:11:2f:7f:d3:e8:41:ee:96:8d:2f:06:e8:f2:43:b7: 47:41:4d:6a:54:8b:1c:a0:04:30:3d:97:58:f8:e9:87:4d:36: d7:51:7e:f7:55:84:78:d0:8b:3e:dc:20:77:bc:dc:98:ae:25: b2:6f:f9:0e:4f:64:03:e1:e5:27:bc:2b:5d:a4:aa:e2:6d:b2: c0:0e:b5:b3:5a:25:fc:17:44:92:35:9d:10:1a:7b:fd:56:ec: 59:6c:65:43:20:4c:12:c8:19:fb:ae:3d:92:f5:61:68:1d:0e: 62:5a:d1:03:da:f5:4d:d3:88:0e:c9:61:43:7d:39:db:4f:5c: 4b:df:63:97:71:14:c0:65:5f:f5:2f:14:80:7b:f5:fb:e8:4e: ae:ac:de:6f:fd:46:cc:7d:08:fe:59:05:4f:a7:50:90:4a:52: 6c:b0:df:74:f3:45:db:76:99:36:e7:4f:35:52:94:41:fb:61: 8f:4d:76:b8:3a:46:8a:7f:db:3b:a4:0e:4e:2d:06:83:ca:a2: b2:85:33:e6:bb:13:9a:dd:f9:dc:31:b3:09:8c:ac:fb:34:3b: 5d:ae:11:db:3b:6d:8a:fa:42:82:1f:0d:95:a3:0c:ca:a7:10: ec:d9:18:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2syIl/osSrfx8qIvICVEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl MDdkNWUwHhcNMjUxMjE5MTMwMTA3WhcNMjUxMjIwMTMwMTA3WjAzMTEwLwYDVQQD Eyg1MjVhZmZmYzgzZjNlN2E5MDFiZDBiMjI0ODNiOWQ3Yjg3YTg4ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eSyYQ7toSREYSgSQXyvtlXEq9ft GT/FNQYjoTJj4mZ5WEG0YmGhwWbIf9IzRgq8/2J9dLqQe6YQgpPFSEY8UD+JtYUZ FOip5za3J/P6yEI+bNvAkUwtSV2unOn/xBdPa7yNgt/JrMprBDo9/qK++4AS6fqC hLkosQV/HmHIp6SNCw81yT7KzU0cagkXyIeOZfnfmbqqvDcxZdfvI6tEIFBES6xi gPXIAc2U6ZhD/ciONf+oYvIWotVrzo5WRHXdFSV0QGVLF8jDyr84OB6VXX6iTrUC GX0o896aCsIF7E6nv/Gwf5/oLX8ySMA0d1ITiwuFdBKH97T+hZyRYZyG9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJa//yD8+epAb0LIkg7nXuHqI5cMB8GA1UdIwQY MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWiGtjZP xvEaPe7vSmsiuoyVfQVEES9/0+hB7paNLwbo8kO3R0FNalSLHKAEMD2XWPjph002 11F+91WEeNCLPtwgd7zcmK4lsm/5Dk9kA+HlJ7wrXaSq4m2ywA61s1ol/BdEkjWd EBp7/VbsWWxlQyBMEsgZ+649kvVhaB0OYlrRA9r1TdOIDslhQ305209cS99jl3EU wGVf9S8UgHv1++hOrqzeb/1GzH0I/lkFT6dQkEpSbLDfdPNF23aZNudPNVKUQfth j012uDpGin/bO6QOTi0Gg8qisoUz5rsTmt353DGzCYys+zQ7Xa4R2zttivpCgh8N laMMyqcQ7NkYvg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:51:03 2025 by rpki-client