This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json) Hash identifier: i2FYM1g3jWZ7z0pk4cZgZB2WX1aSHs3gON1J0DqS4Y4= Subject key identifier: 71:E8:E5:25:41:63:44:D9:74:76:64:C8:CB:8A:BB:93:F1:CB:E0:C7 Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Certificate serial: 019B3C7DB4257D13FA5BCB6FAC6E9E7B9E77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:00:29 +0000 Manifest this update: Sat 20 Dec 2025 16:00:29 +0000 Manifest next update: Sun 21 Dec 2025 16:00:29 +0000 Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=) 2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=) 3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: Bl7JY8xMGt6PVcgBoKKD0J4rMeSP+B0qPdtzQY8kLwo=) 4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:b4:25:7d:13:fa:5b:cb:6f:ac:6e:9e:7b:9e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Validity Not Before: Dec 20 16:00:29 2025 GMT Not After : Dec 21 16:00:29 2025 GMT Subject: CN=71e8e525416344d9747664c8cb8abb93f1cbe0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:05:21:7f:20:88:70:02:17:70:d6:6f:f1: 07:4f:0a:f7:d0:2e:34:76:89:38:ce:41:aa:42:c6: 0e:b8:b9:91:e5:21:77:3d:94:ef:05:85:df:5e:8f: 9f:a2:12:f3:20:8e:54:1a:d1:52:3f:6c:d2:b8:16: 48:03:23:19:b2:6c:06:2f:48:69:09:d3:f5:7d:b2: 3a:bd:90:88:b0:8c:67:ac:85:17:e6:61:fc:e3:5f: 93:e3:30:ba:2f:7d:a7:cf:5e:e3:07:58:03:6b:f3: 8c:04:39:b2:af:8e:bf:76:f3:02:f6:e2:c1:cc:8a: 03:6d:ac:0d:36:8f:ed:47:f2:58:bf:c7:51:74:6a: ee:ac:f1:48:27:6e:b6:34:7d:92:82:93:09:d7:c6: 7d:f1:f0:39:22:60:48:fc:04:1f:fc:ef:dc:23:12: 99:ea:f5:d5:d0:6f:2d:0d:27:84:af:7a:37:27:69: fc:d9:90:c4:8c:2f:ac:50:34:30:2a:42:f8:e4:b8: 82:40:06:04:6d:eb:ac:74:59:d1:1d:2e:16:6b:9c: 67:22:49:f3:07:8f:69:9c:c1:4f:68:66:49:91:6e: 2f:28:52:b0:ca:e5:3b:d1:79:b6:81:0a:c3:28:ca: 15:1f:40:61:b4:cc:9d:4d:d9:b6:3c:bb:2c:54:d6: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E8:E5:25:41:63:44:D9:74:76:64:C8:CB:8A:BB:93:F1:CB:E0:C7 X509v3 Authority Key Identifier: keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f6:8d:60:76:a0:b3:a2:58:68:86:0c:8a:4e:81:7b:5f:91: 01:ac:1c:2b:12:ac:60:d7:5b:d1:eb:d2:ea:8b:54:3c:09:9c: 13:71:17:44:e3:8a:48:85:8b:3f:f6:80:b6:16:2a:5f:fc:5f: 90:30:69:70:06:76:e7:2e:c4:4f:2b:a8:68:78:64:7b:4c:05: bf:71:6d:3a:c7:95:93:74:13:ab:9a:91:cb:9e:fe:db:b9:c4: 4b:44:35:00:0a:8a:1d:1f:1c:3f:e6:9b:55:e3:2f:7c:31:c3: 31:a4:04:be:26:5b:0f:11:7a:cd:33:a8:a4:52:e1:17:8d:cb: 97:f6:53:aa:02:5f:a6:7b:2e:10:3a:b1:51:a6:43:24:3b:db: 31:dd:f6:76:4d:ce:20:a3:97:ba:90:11:d6:f0:c8:83:d8:ce: de:df:67:47:43:1c:0c:c1:44:f1:08:e0:98:89:0d:87:6f:c7: dc:dc:73:b6:82:ed:e2:fc:f8:93:53:c1:3d:a3:51:c2:6b:29: f4:34:9d:82:0d:ae:06:a6:49:ab:8e:41:36:13:1c:a2:b9:60: 50:98:4d:85:de:94:9f:e4:be:af:3d:aa:e8:e4:08:f8:c3:53: c7:43:80:0f:d3:ee:a0:a7:31:89:db:2f:07:4a:e4:6f:7c:d4: 88:5f:69:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fbQlfRP6W8tvrG6ee553MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4 ZDM1ZmMwHhcNMjUxMjIwMTYwMDI5WhcNMjUxMjIxMTYwMDI5WjAzMTEwLwYDVQQD Eyg3MWU4ZTUyNTQxNjM0NGQ5NzQ3NjY0YzhjYjhhYmI5M2YxY2JlMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPAFIX8giHACF3DWb/EHTwr30C40 dok4zkGqQsYOuLmR5SF3PZTvBYXfXo+fohLzII5UGtFSP2zSuBZIAyMZsmwGL0hp CdP1fbI6vZCIsIxnrIUX5mH841+T4zC6L32nz17jB1gDa/OMBDmyr46/dvMC9uLB zIoDbawNNo/tR/JYv8dRdGrurPFIJ262NH2SgpMJ18Z98fA5ImBI/AQf/O/cIxKZ 6vXV0G8tDSeEr3o3J2n82ZDEjC+sUDQwKkL45LiCQAYEbeusdFnRHS4Wa5xnIknz B49pnMFPaGZJkW4vKFKwyuU70Xm2gQrDKMoVH0BhtMydTdm2PLssVNYQqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHo5SVBY0TZdHZkyMuKu5Pxy+DHMB8GA1UdIwQY MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivaNYHag s6JYaIYMik6Be1+RAawcKxKsYNdb0evS6otUPAmcE3EXROOKSIWLP/aAthYqX/xf kDBpcAZ25y7ETyuoaHhke0wFv3FtOseVk3QTq5qRy57+27nES0Q1AAqKHR8cP+ab VeMvfDHDMaQEviZbDxF6zTOopFLhF43Ll/ZTqgJfpnsuEDqxUaZDJDvbMd32dk3O IKOXupAR1vDIg9jO3t9nR0McDMFE8QjgmIkNh2/H3NxztoLt4vz4k1PBPaNRwmsp 9DSdgg2uBqZJq45BNhMcorlgUJhNhd6Un+S+rz2q6OQI+MNTx0OAD9PuoKcxidsv B0rkb3zUiF9pvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:58 2025 by rpki-client