This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft File: tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json) Hash identifier: JJNylBKAniVQAfOR9g+17qFu7jM9pwyhtSHHWM6RXFk= Subject key identifier: C6:C6:E0:F1:52:02:0E:C9:EE:35:56:32:93:DB:91:96:50:80:A4:27 Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 Certificate issuer: /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Certificate serial: 019AF2ADB376F97E8D862EBD417BA558AF08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft Manifest number: 11AD Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: XSeQzzLzaRiIssAEaH8bFHtmW3c.roa (hash: 5lhi1fFGQ5t288ymZ18SpahB86WMGs7YGo9rolcKH9c=) 2: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: UgCaHEpYXc27kj26G1TqtwaaRcG8rFx5eBuH9DDRFGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b3:76:f9:7e:8d:86:2e:bd:41:7b:a5:58:af:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=c6c6e0f152020ec9ee35563293db91965080a427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:92:0b:f3:53:14:fe:41:d8:c8:e4:d9:1c:53: 42:92:e5:69:8b:ae:10:08:32:b4:22:8b:2c:78:8d: 84:a7:71:4e:73:b8:ad:45:71:d6:0c:40:3c:19:54: 5d:2a:ce:f1:3b:8a:c0:0f:82:c2:56:bc:78:c5:bc: 46:ae:f2:4b:34:38:70:b9:4c:1e:c0:18:b5:44:07: 5a:1c:4a:d2:d1:a6:69:da:bf:79:5a:10:9b:3c:d5: bf:9e:cc:b9:73:79:f8:6e:53:5e:c9:56:4a:94:aa: 2e:b4:a3:30:1d:46:fb:5c:26:b3:ee:6e:13:45:99: 8b:6f:71:7a:03:b0:50:44:ba:f8:e5:dc:0f:a4:70: 29:33:53:6a:88:ce:69:f6:a0:c7:e2:ef:16:74:13: 5b:77:83:7b:af:d9:cd:9a:bf:79:4e:72:49:1d:9a: fb:dd:78:78:02:9d:12:89:4a:67:2d:f2:d5:13:bc: cd:38:6a:fc:07:9b:32:fe:47:0a:0e:76:57:97:0f: b1:fa:52:f6:9e:2c:b3:fe:a8:68:cd:4e:4c:a2:1d: f5:d4:f3:36:17:b8:16:71:1f:91:b9:51:79:11:73: aa:8a:a5:ea:42:27:03:cb:f5:de:31:b6:bc:45:9a: 2e:bb:ce:25:d6:5a:d4:86:db:af:72:b9:27:a6:6c: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C6:E0:F1:52:02:0E:C9:EE:35:56:32:93:DB:91:96:50:80:A4:27 X509v3 Authority Key Identifier: keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:43:17:35:58:8c:61:60:0a:50:32:1f:c2:dd:3c:1b:d7:5e: 09:bb:00:32:47:3c:21:5d:86:d8:62:c3:95:5d:c2:aa:a5:16: c4:6e:39:c3:93:b0:6d:78:36:20:b5:d4:c4:01:2a:c9:59:5c: 87:2d:1c:78:2d:14:d7:0d:8e:de:dc:06:a3:01:e6:31:d1:c6: 12:69:f4:cf:de:f1:15:09:cb:e2:3d:1d:2a:46:0a:11:f1:fa: c6:8f:c6:cc:5d:f1:58:03:67:55:92:90:72:12:db:87:11:d6: 61:12:35:3f:40:bd:ea:c9:f5:ad:46:da:90:ed:bf:5f:86:08: e1:23:67:f8:3f:4d:22:43:07:b5:36:35:86:ab:55:5e:7d:4b: 80:f9:93:bd:dc:f1:0f:0f:31:99:47:b0:b7:4e:4e:64:34:8e: 0e:bb:7f:9b:e5:90:e7:a6:81:c3:5a:82:ef:f2:a6:4a:62:45: f6:80:63:e1:51:21:54:67:52:4e:9a:c4:1f:8e:8e:5d:5b:d2: b4:9c:88:0d:c3:f9:9d:47:12:43:28:d0:8b:4a:20:68:3c:94: ff:2e:ab:4a:a6:eb:bb:21:20:36:70:7b:b6:ce:94:f6:a5:c4: 72:97:91:96:3d:dc:57:85:4f:ca:96:d5:81:86:99:21:19:ef: 2b:c9:e3:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbN2+X6Nhi69QXulWK8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzljNGUzZmU4NjlkOTc4M2JhMmRhZGY2NjBkY2NkMGZh NTM3MDcwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD EyhjNmM2ZTBmMTUyMDIwZWM5ZWUzNTU2MzI5M2RiOTE5NjUwODBhNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JIL81MU/kHYyOTZHFNCkuVpi64Q CDK0IosseI2Ep3FOc7itRXHWDEA8GVRdKs7xO4rAD4LCVrx4xbxGrvJLNDhwuUwe wBi1RAdaHErS0aZp2r95WhCbPNW/nsy5c3n4blNeyVZKlKoutKMwHUb7XCaz7m4T RZmLb3F6A7BQRLr45dwPpHApM1NqiM5p9qDH4u8WdBNbd4N7r9nNmr95TnJJHZr7 3Xh4Ap0SiUpnLfLVE7zNOGr8B5sy/kcKDnZXlw+x+lL2niyz/qhozU5Moh311PM2 F7gWcR+RuVF5EXOqiqXqQicDy/XeMba8RZouu84l1lrUhtuvcrknpmwuWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbG4PFSAg7J7jVWMpPbkZZQgKQnMB8GA1UdIwQY MBaAFLc5xOP+hp2Xg7otrfZg3M0PpTcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQt MDcyMjYyZTMwZmM1LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMWI1NTgtN2U4OS00MWEyLTgyNWQtMDcyMjYyZTMwZmM1 LzEvdHpuRTRfNkduWmVEdWkydDltRGN6US1sTndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEMXNViM YWAKUDIfwt08G9deCbsAMkc8IV2G2GLDlV3CqqUWxG45w5OwbXg2ILXUxAEqyVlc hy0ceC0U1w2O3twGowHmMdHGEmn0z97xFQnL4j0dKkYKEfH6xo/GzF3xWANnVZKQ chLbhxHWYRI1P0C96sn1rUbakO2/X4YI4SNn+D9NIkMHtTY1hqtVXn1LgPmTvdzx Dw8xmUewt05OZDSODrt/m+WQ56aBw1qC7/KmSmJF9oBj4VEhVGdSTprEH46OXVvS tJyIDcP5nUcSQyjQi0ogaDyU/y6rSqbruyEgNnB7ts6U9qXEcpeRlj3cV4VPypbV gYaZIRnvK8njkw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:32 2025 by rpki-client