This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json) Hash identifier: Ard0GCFDPwBmCJGhnKf9D1nxF2SFNDgn2HZPg0Ie5Zc= Subject key identifier: 51:86:CF:7D:B7:A6:D9:1D:BE:4A:17:D3:B5:B8:80:65:6F:FE:89:66 Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Certificate serial: 019B34C57751C42F4C636ED5C041FA25AF34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft Manifest number: 0C9A Signing time: Fri 19 Dec 2025 04:01:54 +0000 Manifest this update: Fri 19 Dec 2025 04:01:54 +0000 Manifest next update: Sat 20 Dec 2025 04:01:54 +0000 Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: nCO14QDRmTRDBhxLDt0qHJ1MM+tIf54+cetjtxXeGw0=) 2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:77:51:c4:2f:4c:63:6e:d5:c0:41:fa:25:af:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Validity Not Before: Dec 19 04:01:54 2025 GMT Not After : Dec 20 04:01:54 2025 GMT Subject: CN=5186cf7db7a6d91dbe4a17d3b5b880656ffe8966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:62:57:5f:16:5f:4a:43:c6:ad:dc:3d:f3: e1:f6:7b:fc:3c:80:5d:01:70:fe:16:d8:72:d2:9b: 34:b5:e9:92:86:b1:ab:4a:9d:fb:03:be:da:61:b5: 58:f3:ce:15:0a:f4:fe:9d:0c:ab:b5:e1:91:13:88: 92:f9:09:c0:82:29:89:fe:4b:06:08:da:c6:64:fd: 50:ea:c0:f7:f6:3a:f2:25:d5:53:c4:63:ee:d0:df: 60:5f:18:1f:2a:d8:59:31:18:92:13:4a:e2:1e:e5: 15:aa:91:2f:65:0b:f9:f1:35:a0:6e:39:b2:31:3f: 3f:02:dd:a3:4c:07:8e:c1:9f:51:26:68:80:15:b9: 73:86:78:ac:29:d7:be:19:a5:1a:03:d5:87:ed:1b: f0:5e:92:85:32:6c:f2:2a:c5:58:1c:85:e7:63:10: f5:28:b2:be:d8:e9:bf:2c:46:00:8d:93:0c:9a:ec: 72:83:52:5f:24:ef:35:3c:ae:1e:b6:3c:cc:03:1d: 66:aa:86:ad:ef:bf:a2:4e:61:e1:0b:44:5e:bd:bd: 09:de:81:07:2b:80:f2:38:84:f0:3f:70:40:16:5b: 8c:12:f7:e1:b6:94:f4:4a:02:9e:6f:99:d7:3a:ba: d8:cc:04:4c:07:bc:37:10:f1:b1:9e:40:0a:87:5d: 53:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:86:CF:7D:B7:A6:D9:1D:BE:4A:17:D3:B5:B8:80:65:6F:FE:89:66 X509v3 Authority Key Identifier: keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c0:cb:3c:54:b7:5d:3a:ec:f5:da:fb:22:50:95:62:f9:0d: f7:19:f3:e7:c2:27:93:8e:b4:fa:1f:70:d7:0a:cf:12:2f:52: ee:4e:31:79:e5:d7:5a:bb:68:50:4d:e2:bc:62:aa:83:cb:c9: a1:bb:28:9e:40:59:65:fd:af:8a:1c:4b:f3:dc:4e:93:22:c8: 9c:11:b3:78:eb:f6:63:2c:4d:62:3a:4d:24:86:c2:70:ca:9d: bb:c5:e6:b7:06:24:85:5d:f6:a9:61:bc:2c:b5:27:92:f5:98: 57:ab:c8:d5:7a:5d:e9:ec:f5:a4:ef:b7:20:03:9d:41:cc:55: 5d:7e:89:03:66:56:56:fa:37:ac:07:d2:28:7d:b9:25:30:25: 67:a7:ff:5f:77:8d:4e:02:11:cd:71:9b:ad:90:43:e1:2b:0a: 11:6f:69:e1:c3:54:31:f2:39:fe:98:6f:8c:81:ba:29:e8:12: be:3b:6f:56:6c:71:ca:c7:93:c1:88:41:d4:65:a6:9d:8d:4d: 02:fc:e7:9a:91:18:dd:9b:fd:8e:6d:99:02:b3:5b:6a:eb:b5: ab:99:09:26:b7:fa:11:76:ea:cd:7c:cb:0d:9e:db:39:69:85: 3e:76:67:d2:20:28:83:fb:30:dd:08:ce:4e:98:d7:0e:3f:78: c9:0d:86:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xXdRxC9MY27VwEH6Ja80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy MDQyYjIwHhcNMjUxMjE5MDQwMTU0WhcNMjUxMjIwMDQwMTU0WjAzMTEwLwYDVQQD Eyg1MTg2Y2Y3ZGI3YTZkOTFkYmU0YTE3ZDNiNWI4ODA2NTZmZmU4OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp21iV18WX0pDxq3cPfPh9nv8PIBd AXD+Fthy0ps0temShrGrSp37A77aYbVY884VCvT+nQyrteGRE4iS+QnAgimJ/ksG CNrGZP1Q6sD39jryJdVTxGPu0N9gXxgfKthZMRiSE0riHuUVqpEvZQv58TWgbjmy MT8/At2jTAeOwZ9RJmiAFblzhnisKde+GaUaA9WH7RvwXpKFMmzyKsVYHIXnYxD1 KLK+2Om/LEYAjZMMmuxyg1JfJO81PK4etjzMAx1mqoat77+iTmHhC0Revb0J3oEH K4DyOITwP3BAFluMEvfhtpT0SgKeb5nXOrrYzARMB7w3EPGxnkAKh11TiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGGz323ptkdvkoX07W4gGVv/olmMB8GA1UdIwQY MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3 LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisDLPFS3 XTrs9dr7IlCVYvkN9xnz58Ink460+h9w1wrPEi9S7k4xeeXXWrtoUE3ivGKqg8vJ obsonkBZZf2vihxL89xOkyLInBGzeOv2YyxNYjpNJIbCcMqdu8XmtwYkhV32qWG8 LLUnkvWYV6vI1Xpd6ez1pO+3IAOdQcxVXX6JA2ZWVvo3rAfSKH25JTAlZ6f/X3eN TgIRzXGbrZBD4SsKEW9p4cNUMfI5/phvjIG6KegSvjtvVmxxyseTwYhB1GWmnY1N AvznmpEY3Zv9jm2ZArNbauu1q5kJJrf6EXbqzXzLDZ7bOWmFPnZn0iAog/sw3QjO TpjXDj94yQ2GSQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:15:37 2025 by rpki-client