This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json) Hash identifier: n0Jy8y28wiENYx9WoD//LBdnE0ceQcVYJ+uqwz3++58= Subject key identifier: 9C:2D:1A:06:C0:89:E3:7E:38:19:97:5B:69:29:8C:1D:1E:71:C6:6E Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa Certificate serial: 019B59AD0E47A20435AD8EDDF11A1A49E7FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft Manifest number: 04D5 Signing time: Fri 26 Dec 2025 08:01:12 +0000 Manifest this update: Fri 26 Dec 2025 08:01:12 +0000 Manifest next update: Sat 27 Dec 2025 08:01:12 +0000 Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: NJorSPDyyDkhUIup6S/N3O5uVqs8x7tSVfCcSikWS90=) 2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:0e:47:a2:04:35:ad:8e:dd:f1:1a:1a:49:e7:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa Validity Not Before: Dec 26 08:01:12 2025 GMT Not After : Dec 27 08:01:12 2025 GMT Subject: CN=9c2d1a06c089e37e3819975b69298c1d1e71c66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:52:05:b0:7d:ba:8c:15:5a:1e:87:4d:22: cb:97:00:ab:95:be:75:5e:5a:25:4d:f7:14:d3:55: 57:d1:66:d5:85:96:9d:5a:ee:f7:82:fd:f8:6b:90: f0:35:e6:35:8d:89:63:46:89:63:de:f4:c4:b1:93: 50:85:36:10:8f:78:5e:d4:90:bd:b0:e3:f1:2a:eb: 83:a5:29:b1:a6:c4:3a:5f:4f:26:3a:a0:38:b5:18: 28:ec:15:d8:c0:85:49:8f:e1:d7:87:f0:d8:af:65: 11:b6:f4:3f:50:6f:55:06:16:62:35:4d:49:14:66: c7:3a:af:33:98:d3:5e:76:5a:3c:a3:5d:be:e5:bc: 27:db:be:41:22:7c:cb:69:1d:09:a5:ab:e1:3e:b7: 54:24:aa:92:a8:69:f9:9a:17:86:2f:a4:ce:10:75: 81:c2:a7:bd:5e:52:d3:60:26:70:b3:2c:75:e1:22: ef:7e:af:96:c0:55:9c:e3:b8:6a:f3:fe:6a:24:02: 97:23:cd:08:32:a5:dc:d6:59:80:4b:49:0d:12:9a: 4e:29:f0:42:12:3d:de:c6:e5:52:06:a6:7a:38:8f: f0:3a:09:98:af:7b:62:52:64:d4:94:02:df:57:81: a8:f5:f3:10:a5:c8:c3:20:33:e7:77:7b:74:70:e1: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2D:1A:06:C0:89:E3:7E:38:19:97:5B:69:29:8C:1D:1E:71:C6:6E X509v3 Authority Key Identifier: keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:54:8d:c2:bd:b3:43:4d:9c:66:ca:90:f0:5f:0f:c4:c2:bd: 3c:8f:b8:fc:72:83:0c:ab:53:d4:f2:1a:eb:48:7b:ae:d0:e7: 4a:36:52:17:54:1e:49:a9:90:86:f1:52:2c:51:4a:f2:81:52: d7:f4:58:7c:af:e7:da:76:89:48:33:77:97:96:9b:3e:e9:80: 9a:95:a5:21:01:49:00:01:18:a6:c9:61:35:e5:b7:93:98:ec: 6e:a9:79:5e:48:85:e9:60:13:05:b4:76:6e:5a:61:a2:11:c0: e7:3e:1d:3a:3e:c3:59:dc:8b:a0:f5:63:74:5f:b9:14:cb:8b: e1:78:21:5a:0b:14:14:d4:a7:6c:86:58:aa:5e:6e:3f:ff:7e: 57:8b:39:66:39:f6:03:dd:15:aa:31:fa:23:99:07:c8:f8:f5: 70:9f:52:5c:f4:1d:48:76:ad:d1:1b:d1:da:ef:48:fd:f8:2a: da:24:9a:6e:cc:30:bc:70:48:da:29:f9:05:c8:5a:2f:7d:89: 1e:d4:54:e6:08:12:0f:87:93:8d:b4:99:7a:5d:e0:c5:4d:db: bf:ee:5c:33:91:16:aa:a1:93:61:cc:a2:a6:9c:a0:b2:1a:ae: 39:08:62:23:37:95:f4:18:bd:21:82:17:04:e5:c3:fc:90:0e: 7d:76:07:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrQ5HogQ1rY7d8RoaSef6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTRmOTJhZGJkMWJiNDVkNjNmOWY5NDcwMTdhMjE2NGU5 ZDBlZmEwHhcNMjUxMjI2MDgwMTEyWhcNMjUxMjI3MDgwMTEyWjAzMTEwLwYDVQQD Eyg5YzJkMWEwNmMwODllMzdlMzgxOTk3NWI2OTI5OGMxZDFlNzFjNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscJSBbB9uowVWh6HTSLLlwCrlb51 XlolTfcU01VX0WbVhZadWu73gv34a5DwNeY1jYljRolj3vTEsZNQhTYQj3he1JC9 sOPxKuuDpSmxpsQ6X08mOqA4tRgo7BXYwIVJj+HXh/DYr2URtvQ/UG9VBhZiNU1J FGbHOq8zmNNedlo8o12+5bwn275BInzLaR0JpavhPrdUJKqSqGn5mheGL6TOEHWB wqe9XlLTYCZwsyx14SLvfq+WwFWc47hq8/5qJAKXI80IMqXc1lmAS0kNEppOKfBC Ej3exuVSBqZ6OI/wOgmYr3tiUmTUlALfV4Go9fMQpcjDIDPnd3t0cOExWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwtGgbAieN+OBmXW2kpjB0eccZuMB8GA1UdIwQY MBaAFE2U+Srb0btF1j+flHAXohZOnQ76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MzliOTgtMTUwOC00NzQwLThkYmYt MjQxMDllZGY2NDUwLzEvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MzliOTgtMTUwOC00NzQwLThkYmYtMjQxMDllZGY2NDUw LzEvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1SNwr2z Q02cZsqQ8F8PxMK9PI+4/HKDDKtT1PIa60h7rtDnSjZSF1QeSamQhvFSLFFK8oFS 1/RYfK/n2naJSDN3l5abPumAmpWlIQFJAAEYpslhNeW3k5jsbql5XkiF6WATBbR2 blphohHA5z4dOj7DWdyLoPVjdF+5FMuL4XghWgsUFNSnbIZYql5uP/9+V4s5Zjn2 A90VqjH6I5kHyPj1cJ9SXPQdSHat0RvR2u9I/fgq2iSabswwvHBI2in5BchaL32J HtRU5ggSD4eTjbSZel3gxU3bv+5cM5EWqqGTYcyippygshquOQhiIzeV9Bi9IYIX BOXD/JAOfXYHkg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:08 2025 by rpki-client