This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json) Hash identifier: GyLu0aCdhpmXE+8uQBBcDA3CadLXOy6V/joZSAQb2L8= Subject key identifier: EA:D6:A4:B1:BE:F5:11:BF:99:F7:B2:B7:A2:7E:E6:32:E4:F2:09:0A Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Certificate serial: 019B4814C40ACC8D1C68631D045090790B1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 22:01:18 +0000 Manifest this update: Mon 22 Dec 2025 22:01:18 +0000 Manifest next update: Tue 23 Dec 2025 22:01:18 +0000 Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 5dXx95h4aZYgLjnRd+SJdW0+bZIK+hKKafT4q+Y1u6w=) 2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:c4:0a:cc:8d:1c:68:63:1d:04:50:90:79:0b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Validity Not Before: Dec 22 22:01:18 2025 GMT Not After : Dec 23 22:01:18 2025 GMT Subject: CN=ead6a4b1bef511bf99f7b2b7a27ee632e4f2090a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:12:3c:3e:3b:7d:64:52:9d:4e:79:89:e1: fb:62:40:9c:9d:64:8c:78:d4:6f:72:a6:da:e1:49: 3c:34:86:3a:04:5c:00:ec:d9:d7:ea:4a:7f:e8:f1: a6:5e:80:bd:cc:b8:e1:95:ee:21:c1:a8:30:3f:5e: 5b:b2:8e:8c:98:e8:15:54:fb:b0:49:84:9b:fa:e2: 78:18:33:94:e3:02:4b:18:09:88:cb:54:94:d6:ec: ca:66:30:ac:e5:ee:54:d2:bf:00:70:96:a9:91:7b: ab:d3:06:6a:85:57:e3:3a:f3:2e:5d:ad:31:1d:f3: 74:b8:54:98:f7:77:aa:20:95:2f:c4:6b:85:72:cf: 6e:7c:66:74:cc:4e:1d:8f:ba:7a:67:bd:bd:7e:d0: bc:a8:b9:18:a2:8c:18:0d:f3:af:e4:7d:48:ca:02: 15:af:04:7f:9c:bb:43:69:67:ed:41:68:9f:76:b5: ad:77:2b:f9:af:b0:12:d8:4d:ee:0c:43:12:f1:c2: b5:d8:00:27:f2:37:97:71:55:6d:79:36:64:53:40: 6c:46:35:67:49:37:c7:8b:7b:4e:c5:4e:9b:e8:69: 5f:b9:e3:5a:7c:9d:74:71:09:7d:46:83:2b:37:7f: d2:50:ae:ef:82:fa:17:56:8c:5d:54:de:d1:e6:cf: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:A4:B1:BE:F5:11:BF:99:F7:B2:B7:A2:7E:E6:32:E4:F2:09:0A X509v3 Authority Key Identifier: keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:09:61:8c:20:44:57:af:a6:2f:4f:d3:f2:51:a4:e5:93:a6: d7:02:7a:56:d8:49:80:a7:73:cb:b8:37:82:f9:1b:8e:45:29: c5:8a:f4:11:43:70:04:9a:f9:f9:8a:70:a6:53:50:ef:dd:89: 9b:30:01:74:77:3b:df:e2:90:66:07:b2:5a:7e:0b:9e:e0:35: 51:9e:26:82:0a:bd:5a:03:38:0d:e0:15:4e:78:3d:6c:25:f0: b8:48:7e:b0:3a:94:06:1d:50:ce:a9:78:fc:07:6e:cc:de:02: 1c:71:be:3d:d4:b1:46:20:20:b1:b7:03:62:4a:d2:b7:cb:73: a8:8b:d6:40:f9:02:c4:c6:ef:48:f3:83:db:84:78:9c:11:08: 7c:c5:b0:7b:31:4a:92:30:18:3e:df:fc:40:b3:ef:8f:d3:3d: 5f:31:73:c2:a1:5e:32:6f:b1:0f:24:62:a5:4b:a6:b1:ae:a5: 66:dd:57:f0:fd:e1:63:0b:3d:bf:06:b3:9b:93:ac:21:05:73: 7b:54:08:eb:63:5f:da:bc:1f:b4:5c:60:b1:53:d3:0d:3e:a9: 83:ee:45:27:5c:cb:bf:0a:51:90:22:d1:60:d3:55:e7:f4:64: 57:3b:5a:4a:f8:c8:2f:71:94:89:52:78:51:c0:f9:85:77:03: 5d:03:a2:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFMQKzI0caGMdBFCQeQsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi MWE5OGEwHhcNMjUxMjIyMjIwMTE4WhcNMjUxMjIzMjIwMTE4WjAzMTEwLwYDVQQD EyhlYWQ2YTRiMWJlZjUxMWJmOTlmN2IyYjdhMjdlZTYzMmU0ZjIwOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBMSPD47fWRSnU55ieH7YkCcnWSM eNRvcqba4Uk8NIY6BFwA7NnX6kp/6PGmXoC9zLjhle4hwagwP15bso6MmOgVVPuw SYSb+uJ4GDOU4wJLGAmIy1SU1uzKZjCs5e5U0r8AcJapkXur0wZqhVfjOvMuXa0x HfN0uFSY93eqIJUvxGuFcs9ufGZ0zE4dj7p6Z729ftC8qLkYoowYDfOv5H1IygIV rwR/nLtDaWftQWifdrWtdyv5r7AS2E3uDEMS8cK12AAn8jeXcVVteTZkU0BsRjVn STfHi3tOxU6b6GlfueNafJ10cQl9RoMrN3/SUK7vgvoXVoxdVN7R5s9VYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrWpLG+9RG/mfeyt6J+5jLk8gkKMB8GA1UdIwQY MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAlhjCBE V6+mL0/T8lGk5ZOm1wJ6VthJgKdzy7g3gvkbjkUpxYr0EUNwBJr5+YpwplNQ792J mzABdHc73+KQZgeyWn4LnuA1UZ4mggq9WgM4DeAVTng9bCXwuEh+sDqUBh1Qzql4 /AduzN4CHHG+PdSxRiAgsbcDYkrSt8tzqIvWQPkCxMbvSPOD24R4nBEIfMWwezFK kjAYPt/8QLPvj9M9XzFzwqFeMm+xDyRipUumsa6lZt1X8P3hYws9vwazm5OsIQVz e1QI62Nf2rwftFxgsVPTDT6pg+5FJ1zLvwpRkCLRYNNV5/RkVztaSvjIL3GUiVJ4 UcD5hXcDXQOicQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:59:27 2025 by rpki-client