This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft File: TZRvTfIjdJGmjfpAe-QfroS72mY.mft (raw, json) Hash identifier: FZoMtHIUUDyInjNTyKFDZPZG8eMtSjR9M1UFCDAr2GE= Subject key identifier: B5:54:02:4F:85:5D:2B:37:39:73:51:72:0D:9E:E6:E2:F9:19:52:D7 Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66 Certificate serial: 019B59ACAB3A62081D581FF8E87D0A7F90D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft Manifest number: 10F9 Signing time: Fri 26 Dec 2025 08:00:46 +0000 Manifest this update: Fri 26 Dec 2025 08:00:46 +0000 Manifest next update: Sat 27 Dec 2025 08:00:46 +0000 Files and hashes: 1: C8PR4XXWsjpP8PHYuoN78zoE9nY.roa (hash: uu2Jn3Slz9u+yGZ22j4LqOkp9lCOWyyfMINckydLJ3E=) 2: TZRvTfIjdJGmjfpAe-QfroS72mY.crl (hash: FNtvtJlx2R1BwNL8VLsYq09p/RtdBYImng7V8YWBxUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ab:3a:62:08:1d:58:1f:f8:e8:7d:0a:7f:90:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66 Validity Not Before: Dec 26 08:00:46 2025 GMT Not After : Dec 27 08:00:46 2025 GMT Subject: CN=b554024f855d2b37397351720d9ee6e2f91952d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:54:f1:d0:69:bf:c8:05:ba:c8:f9:c0:ef: c4:8a:20:dc:14:ca:48:40:41:d2:42:d2:45:37:b0: 22:ff:21:10:a6:d6:cc:80:46:27:e0:40:e9:86:bf: 08:ff:c4:84:f9:12:76:4f:1d:e9:de:93:2e:21:4c: 0b:93:ba:d3:29:f3:7e:c4:59:d0:55:50:47:37:ae: b1:38:d4:13:67:5b:00:20:17:f7:08:d7:ba:f1:89: 9d:2a:e0:e8:1e:d1:21:b4:b2:16:2a:42:e1:7b:0d: fe:2a:be:d9:26:87:38:c4:c4:23:31:a9:2c:7f:00: 45:7b:71:8c:15:9e:12:2d:02:7e:cb:71:d4:c5:9f: e9:2a:1a:aa:e9:19:4e:3a:a7:f7:28:ec:dd:eb:54: b0:6a:ec:7d:64:51:6d:c8:11:34:df:c3:37:9c:a6: c6:0e:41:0e:4b:63:84:fc:a3:a6:93:0f:47:a3:51: a6:f4:02:af:e6:67:54:b0:8a:89:eb:7b:b7:15:3a: 1b:df:95:88:e9:37:1f:fe:5b:e8:cd:25:33:b0:67: 64:54:07:1c:55:bc:5f:f7:24:5a:28:c1:4c:c6:8a: 80:d3:14:91:7e:5d:0e:86:c4:24:b2:d5:41:36:7d: 41:13:39:9a:30:84:59:2f:6c:e9:53:1e:d3:c3:ae: 1c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:54:02:4F:85:5D:2B:37:39:73:51:72:0D:9E:E6:E2:F9:19:52:D7 X509v3 Authority Key Identifier: keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d8:16:a4:9e:56:b4:d2:85:80:ee:11:27:fa:53:72:88:4a: 68:4e:69:b7:98:df:49:53:3d:ef:63:fc:68:da:11:bc:55:c1: fb:4f:d5:d7:5f:9a:f2:14:f3:5d:c4:e4:87:73:1b:f5:a5:81: bc:97:a3:92:2d:64:9a:62:50:d5:6b:1e:1c:96:fa:45:51:f8: b5:cc:21:2d:1b:44:74:3c:b8:92:8d:8d:d5:e0:e7:8f:62:4f: 44:8d:5b:0f:30:6a:8e:02:2b:79:cb:99:73:64:00:44:a5:a4: 82:9d:8b:ba:57:4d:0f:df:c2:a5:a8:18:65:b7:e7:63:6d:4a: 13:9f:e7:46:4c:b1:9d:27:8a:7e:9b:7e:0a:2d:9d:49:31:d3: 14:67:66:28:0f:d0:2b:0a:32:79:70:76:b8:43:f4:3e:5f:5b: fe:d6:5a:8d:bb:be:e1:6d:13:b5:a7:42:9f:0a:b5:78:0f:84: 5d:ff:d4:8f:77:0d:fa:25:3a:68:59:6f:12:cb:dc:37:7b:d8: db:47:96:d2:a1:e1:74:2f:63:d5:17:e8:3a:5c:9b:42:1c:fe: 50:d9:c8:1f:b9:63:97:e3:4d:68:52:2c:5f:73:56:c4:31:da: 43:1f:94:1b:f8:6a:24:c9:7f:07:1a:e5:69:c1:fa:bf:01:54: 3f:4b:70:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKs6YggdWB/46H0Kf5DRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTQ2ZjRkZjIyMzc0OTFhNjhkZmE0MDdiZTQxZmFlODRi YmRhNjYwHhcNMjUxMjI2MDgwMDQ2WhcNMjUxMjI3MDgwMDQ2WjAzMTEwLwYDVQQD EyhiNTU0MDI0Zjg1NWQyYjM3Mzk3MzUxNzIwZDllZTZlMmY5MTk1MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvRU8dBpv8gFusj5wO/EiiDcFMpI QEHSQtJFN7Ai/yEQptbMgEYn4EDphr8I/8SE+RJ2Tx3p3pMuIUwLk7rTKfN+xFnQ VVBHN66xONQTZ1sAIBf3CNe68YmdKuDoHtEhtLIWKkLhew3+Kr7ZJoc4xMQjMaks fwBFe3GMFZ4SLQJ+y3HUxZ/pKhqq6RlOOqf3KOzd61Swaux9ZFFtyBE038M3nKbG DkEOS2OE/KOmkw9Ho1Gm9AKv5mdUsIqJ63u3FTob35WI6Tcf/lvozSUzsGdkVAcc Vbxf9yRaKMFMxoqA0xSRfl0OhsQkstVBNn1BEzmaMIRZL2zpUx7Tw64cQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVUAk+FXSs3OXNRcg2e5uL5GVLXMB8GA1UdIwQY MBaAFE2Ub03yI3SRpo36QHvkH66Eu9pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAt YzI0ZWUwNDk0NTQxLzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jYmZkMWUtMTIwMi00MGMxLWJkZjAtYzI0ZWUwNDk0NTQx LzEvVFpSdlRmSWpkSkdtamZwQWUtUWZyb1M3Mm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9gWpJ5W tNKFgO4RJ/pTcohKaE5pt5jfSVM972P8aNoRvFXB+0/V11+a8hTzXcTkh3Mb9aWB vJejki1kmmJQ1WseHJb6RVH4tcwhLRtEdDy4ko2N1eDnj2JPRI1bDzBqjgIrecuZ c2QARKWkgp2LuldND9/CpagYZbfnY21KE5/nRkyxnSeKfpt+Ci2dSTHTFGdmKA/Q KwoyeXB2uEP0Pl9b/tZajbu+4W0TtadCnwq1eA+EXf/Uj3cN+iU6aFlvEsvcN3vY 20eW0qHhdC9j1RfoOlybQhz+UNnIH7ljl+NNaFIsX3NWxDHaQx+UG/hqJMl/Bxrl acH6vwFUP0twkA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:22 2025 by rpki-client