This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json) Hash identifier: uuKBYhTFhNcmit70zja8zcTynjaSOIIZmzkOSGRjCmE= Subject key identifier: 46:64:B1:57:24:48:1F:36:44:82:E7:26:22:A4:81:9E:09:97:58:F6 Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50 Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550 Certificate serial: 019B3A9075C75D913AD1E2BE90C899963D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:01:44 +0000 Manifest this update: Sat 20 Dec 2025 07:01:44 +0000 Manifest next update: Sun 21 Dec 2025 07:01:44 +0000 Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: r7APCRBs8+gqn2tbz1ypUcqKOuST9FiYe/rBNxoHahE=) 2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:75:c7:5d:91:3a:d1:e2:be:90:c8:99:96:3d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550 Validity Not Before: Dec 20 07:01:44 2025 GMT Not After : Dec 21 07:01:44 2025 GMT Subject: CN=4664b15724481f364482e72622a4819e099758f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:4f:3d:c1:b3:fe:2a:3d:5c:3e:c8:6c:4f: f2:1a:eb:0f:ff:63:4b:2f:ff:f3:6f:9e:dc:7d:8b: 7d:a8:17:d7:d7:51:cf:e8:d9:9f:bd:6d:fb:dd:36: 9e:65:55:9d:a6:be:60:ff:68:5f:a6:c0:82:ad:b5: c4:e5:24:67:f0:58:d2:e2:76:6a:f3:61:d3:4a:1f: 71:ce:34:79:cd:3d:cf:15:aa:d0:b3:7e:67:90:f9: fe:81:c7:4b:84:6e:4f:9e:ef:4d:e0:c8:d5:8c:64: 37:fe:46:6c:1d:0e:5b:0b:ef:b9:b3:15:01:47:06: 71:f1:0a:25:6a:67:b6:e9:d2:b1:1a:e5:98:a1:85: 15:22:81:32:08:53:d8:2a:12:0d:e1:49:1b:e4:a7: ef:97:6a:a6:f9:b8:15:e9:f2:7f:83:28:d9:d2:52: 37:53:39:55:e3:23:bb:ee:ef:52:06:c1:ce:ba:20: 71:e9:94:66:c7:57:74:a9:8b:76:89:3d:ff:26:ea: ba:49:24:3c:b5:91:f3:f4:f4:cd:53:7e:13:b1:03: 0a:27:43:f0:66:3b:e2:83:03:14:c0:18:24:53:e3: e7:f8:14:be:28:8c:a2:33:5f:64:c5:0b:33:15:99: d1:21:ea:de:e4:80:96:12:97:db:ce:7d:5e:7f:1b: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:B1:57:24:48:1F:36:44:82:E7:26:22:A4:81:9E:09:97:58:F6 X509v3 Authority Key Identifier: keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bb:94:51:ff:f9:b1:31:35:1f:93:a6:e7:59:3a:a8:a6:b7: a4:ee:51:37:00:f7:61:02:51:d7:81:22:36:30:7d:1b:2a:a8: d8:d6:da:c2:11:91:04:92:63:23:1c:75:50:78:c0:3f:0c:4e: 62:c2:b5:d9:8f:df:59:7f:ee:4c:26:4d:05:ac:bb:09:df:dc: 2d:3c:56:2a:ef:e7:59:4a:fa:6a:83:a7:3a:4b:91:62:a5:b9: ee:99:cd:24:42:0c:28:b5:e5:67:7d:6c:88:5d:88:d3:db:e3: 14:68:e7:dc:da:70:f5:e6:ea:ff:f7:2d:40:b2:5b:95:88:56: 2a:09:fb:28:54:83:98:12:9e:40:3f:34:b3:52:6d:c7:2d:c8: 3e:ef:8a:71:73:b6:c2:85:3e:19:13:1f:76:cf:7c:32:c2:6e: 95:3c:05:ae:09:0d:aa:2b:20:3b:13:b4:30:a0:3d:57:0b:1f: e2:32:1e:f3:f9:51:b5:fa:83:bd:b7:44:af:e5:2b:ef:3a:2f: 2b:6e:44:4f:dd:ca:f1:1b:2d:0e:24:8c:ec:35:8e:cb:66:b1: 51:1c:f5:a9:0a:96:80:a3:a6:9e:d6:f2:84:30:2d:c5:19:0f: e8:95:81:17:cb:28:74:be:d5:ac:59:5f:70:07:b6:60:ed:1e: 82:28:50:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kHXHXZE60eK+kMiZlj1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy MTI1NTAwHhcNMjUxMjIwMDcwMTQ0WhcNMjUxMjIxMDcwMTQ0WjAzMTEwLwYDVQQD Eyg0NjY0YjE1NzI0NDgxZjM2NDQ4MmU3MjYyMmE0ODE5ZTA5OTc1OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8NPPcGz/io9XD7IbE/yGusP/2NL L//zb57cfYt9qBfX11HP6NmfvW373TaeZVWdpr5g/2hfpsCCrbXE5SRn8FjS4nZq 82HTSh9xzjR5zT3PFarQs35nkPn+gcdLhG5Pnu9N4MjVjGQ3/kZsHQ5bC++5sxUB RwZx8Qolame26dKxGuWYoYUVIoEyCFPYKhIN4Ukb5Kfvl2qm+bgV6fJ/gyjZ0lI3 UzlV4yO77u9SBsHOuiBx6ZRmx1d0qYt2iT3/Juq6SSQ8tZHz9PTNU34TsQMKJ0Pw ZjvigwMUwBgkU+Pn+BS+KIyiM19kxQszFZnRIere5ICWEpfbzn1efxsAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZksVckSB82RILnJiKkgZ4Jl1j2MB8GA1UdIwQY MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdruUUf/5 sTE1H5Om51k6qKa3pO5RNwD3YQJR14EiNjB9Gyqo2NbawhGRBJJjIxx1UHjAPwxO YsK12Y/fWX/uTCZNBay7Cd/cLTxWKu/nWUr6aoOnOkuRYqW57pnNJEIMKLXlZ31s iF2I09vjFGjn3Npw9ebq//ctQLJblYhWKgn7KFSDmBKeQD80s1Jtxy3IPu+KcXO2 woU+GRMfds98MsJulTwFrgkNqisgOxO0MKA9Vwsf4jIe8/lRtfqDvbdEr+Ur7zov K25ET93K8RstDiSM7DWOy2axURz1qQqWgKOmntbyhDAtxRkP6JWBF8sodL7VrFlf cAe2YO0egihQLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:54 2025 by rpki-client