This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json) Hash identifier: 0TgP7dyNmIoTFzFCnd85DQlA61bHWdnEGkklrUwjYAc= Subject key identifier: 95:E5:89:E9:96:BB:E4:B5:53:59:F9:02:1B:3F:CE:4E:E0:CB:70:89 Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Certificate serial: 019B32D5C863FC00737848737F6467E7DDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:00:29 +0000 Manifest this update: Thu 18 Dec 2025 19:00:29 +0000 Manifest next update: Fri 19 Dec 2025 19:00:29 +0000 Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: FEi5179zg+PX6cY3VC0yJOo15LBaLmFcJM9q+j2M7qA=) 2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:c8:63:fc:00:73:78:48:73:7f:64:67:e7:dd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Validity Not Before: Dec 18 19:00:29 2025 GMT Not After : Dec 19 19:00:29 2025 GMT Subject: CN=95e589e996bbe4b55359f9021b3fce4ee0cb7089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:b9:54:7c:e7:ee:e4:45:2c:32:5a:ac:78: cb:e6:92:8c:bb:67:ab:f3:ed:d5:7b:d4:15:4d:ae: 1f:4b:a6:ca:7b:38:f1:60:d0:65:81:8c:5a:88:fe: 19:ec:9f:e9:98:d5:c5:80:7d:fd:96:21:15:bd:b1: 27:a0:e3:90:61:52:e9:4a:09:06:bc:bc:50:b6:ac: e4:31:60:1a:eb:05:96:7b:16:c6:17:f2:a6:a6:d0: d0:db:d9:28:35:2d:92:84:70:b6:a4:b6:b8:63:6b: d1:ed:9b:a9:81:d5:e7:9d:f8:72:63:f8:0b:a3:49: 8d:c8:59:8e:d2:87:1f:f7:2c:67:cf:8d:75:f5:db: dd:d0:7b:c3:3f:f9:5b:db:9a:ca:5c:63:60:d9:f6: dd:74:57:1d:b4:e3:b9:ec:5d:9b:c6:e6:ff:fc:81: 44:6f:15:20:6e:a5:96:3f:64:50:c6:8c:bf:82:70: 8a:ac:4f:ab:59:1e:9a:dc:03:09:44:db:ee:61:57: 49:58:60:10:d8:3a:34:32:5e:24:a4:45:05:f1:17: dc:b0:c7:4c:95:7c:ef:ba:3b:d8:62:e3:b7:2f:6c: 17:02:a7:9a:d2:70:8b:8e:d6:04:b8:48:31:4f:fc: e1:02:58:10:e7:b2:00:4c:67:74:f0:59:2b:8f:6a: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E5:89:E9:96:BB:E4:B5:53:59:F9:02:1B:3F:CE:4E:E0:CB:70:89 X509v3 Authority Key Identifier: keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f5:7b:e8:47:f4:f7:e1:1f:02:d1:75:35:e6:0c:70:62:2d: 8d:98:52:84:a8:47:b1:2d:7f:2b:d3:39:3c:20:92:b1:2f:a4: 82:ba:1a:2c:08:da:bb:de:63:e6:b3:38:68:24:ed:69:59:2d: a0:0a:76:13:30:57:82:5b:eb:85:b2:a0:01:4c:b8:30:2a:d7: 11:b3:bd:d1:c7:54:55:6f:63:86:1a:38:84:e2:c1:ad:cf:a0: 34:5e:c6:66:71:8f:62:a9:4a:b6:b1:7c:b5:ea:f2:aa:ef:d9: 4c:74:6c:15:58:f9:d4:0a:20:49:c4:5a:6e:e5:f8:0f:1e:58: 69:bf:66:4d:67:47:c0:72:92:f7:2a:17:1b:2e:42:58:29:4a: 96:0c:cc:d9:5e:44:e2:a7:cc:59:22:3a:fe:a8:06:9c:08:a6: de:25:5c:11:21:70:6a:fa:6a:6c:35:a5:6f:27:a4:7f:06:a7: c7:2a:fb:08:e0:6c:cf:3d:7b:da:b5:01:f6:7e:ca:96:0d:f4: fd:de:fd:20:9f:2d:1a:09:e4:93:83:c5:8e:1f:98:65:b9:0e: 40:54:ad:8c:d3:61:b5:a7:a7:c5:4a:69:ae:88:bb:0d:8e:27: 27:2c:6d:01:02:b6:29:5f:47:66:37:dc:56:6a:d8:12:62:0b: 2c:fe:44:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1chj/ABzeEhzf2Rn592mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi MWE5OGEwHhcNMjUxMjE4MTkwMDI5WhcNMjUxMjE5MTkwMDI5WjAzMTEwLwYDVQQD Eyg5NWU1ODllOTk2YmJlNGI1NTM1OWY5MDIxYjNmY2U0ZWUwY2I3MDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRm5VHzn7uRFLDJarHjL5pKMu2er 8+3Ve9QVTa4fS6bKezjxYNBlgYxaiP4Z7J/pmNXFgH39liEVvbEnoOOQYVLpSgkG vLxQtqzkMWAa6wWWexbGF/KmptDQ29koNS2ShHC2pLa4Y2vR7ZupgdXnnfhyY/gL o0mNyFmO0ocf9yxnz4119dvd0HvDP/lb25rKXGNg2fbddFcdtOO57F2bxub//IFE bxUgbqWWP2RQxoy/gnCKrE+rWR6a3AMJRNvuYVdJWGAQ2Do0Ml4kpEUF8RfcsMdM lXzvujvYYuO3L2wXAqea0nCLjtYEuEgxT/zhAlgQ57IATGd08Fkrj2pARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXliemWu+S1U1n5Ahs/zk7gy3CJMB8GA1UdIwQY MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/V76Ef0 9+EfAtF1NeYMcGItjZhShKhHsS1/K9M5PCCSsS+kgroaLAjau95j5rM4aCTtaVkt oAp2EzBXglvrhbKgAUy4MCrXEbO90cdUVW9jhho4hOLBrc+gNF7GZnGPYqlKtrF8 teryqu/ZTHRsFVj51AogScRabuX4Dx5Yab9mTWdHwHKS9yoXGy5CWClKlgzM2V5E 4qfMWSI6/qgGnAim3iVcESFwavpqbDWlbyekfwanxyr7COBszz172rUB9n7Klg30 /d79IJ8tGgnkk4PFjh+YZbkOQFStjNNhtaenxUpproi7DY4nJyxtAQK2KV9HZjfc VmrYEmILLP5Ewg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:51:31 2025 by rpki-client