This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft File: TKZvPA8ld05pbSpGcjJ365YRKMM.mft (raw, json) Hash identifier: T/2gzFCecGZpYqprt75gw0WzVqBOMea35O5k76plCTE= Subject key identifier: 02:78:9B:DE:88:A9:B8:F1:7B:9C:3F:15:C2:EC:57:DE:BF:81:E9:94 Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019AF19AB983106650EB2384689397D51C09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft Manifest number: 177D Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: 15pjcL48pkWZSvyXnDWjH3srMzQ.roa (hash: dmd97hcLtSzZy7Qz5O/ccY1dtF/UXlYHWlHQGTz9cV0=) 2: 3m24X-EciRhk0jIJsdLBkFHw4Vc.roa (hash: 4191ER+HI71G/WcSYBdVlGxJt+on8LpGReotMNSci7U=) 3: OW3nOicLkrmXZdp3r5orx47eGJQ.roa (hash: 5EmIochVR6v8ogsSzgwpakcQSlqncNbG0N7JC4GvEpY=) 4: TKZvPA8ld05pbSpGcjJ365YRKMM.crl (hash: bLheV3KPB4jzfkATG60GdgoTkM1VItjehxHcsGpSgrw=) 5: XRjqskDJfCb5PURI6gE2z-7afCI.roa (hash: lC6CdL71ZqZQFEg499ebGpokdZd/v2A2IJbWINe+nqc=) 6: aVSDFG9S0qVagyGCDyRaZCcj4uM.roa (hash: 10vd3ei8CEhJdvfMHANX2v90tno0+7P3mxjOYtPwbi4=) 7: yCdRlY1dy91_yoXt5TFoEdJrw-o.roa (hash: KareyGqAsZ0sDsSq6dTpkWiy0kkcW1Zx+0QaG17jqGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b9:83:10:66:50:eb:23:84:68:93:97:d5:1c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=02789bde88a9b8f17b9c3f15c2ec57debf81e994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:76:93:69:4e:96:18:04:71:16:50:82:5f: 93:ce:46:11:d4:10:96:e1:1b:fb:1c:5e:07:aa:24: 10:98:ac:d3:e6:25:d1:48:ce:44:29:73:35:ea:ce: 65:e5:c8:1d:fd:90:c6:8b:bf:58:eb:ec:d8:d7:f5: 41:f5:d9:05:b8:29:ea:61:9f:e0:a1:5a:e1:b6:58: 18:26:90:fa:09:24:0a:63:d3:ae:18:8f:b4:7a:7f: 0f:9e:9d:8d:bd:f9:48:55:63:42:d7:2a:fb:8a:00: e3:fb:5e:4c:68:b5:0c:4b:3f:49:e5:40:a3:56:a8: e7:45:42:c5:80:b1:32:34:ae:6b:4f:97:78:1b:7e: ea:fa:62:92:84:1e:ca:1a:17:26:64:7c:d0:91:ca: e4:71:06:b0:2c:34:33:94:4d:a9:d5:7d:c5:3d:9d: c5:f6:16:98:61:36:ed:a7:c5:e6:41:cf:44:b4:38: 15:16:ad:4e:4a:88:25:04:e0:f1:8b:3a:c9:a4:c6: 8e:30:37:88:e0:2c:d2:00:91:3d:93:9b:a6:d3:ab: b8:2c:2c:d8:a9:9e:5e:6c:c3:9c:c0:46:21:05:a5: 43:5c:65:df:ae:da:81:51:42:dd:f6:4b:76:f0:51: 3e:2e:7f:f7:ca:2c:15:9e:3b:fd:e1:44:3f:ef:cc: 29:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:78:9B:DE:88:A9:B8:F1:7B:9C:3F:15:C2:EC:57:DE:BF:81:E9:94 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9c:d7:39:47:5a:d3:1a:d0:b5:a1:31:6f:61:38:ac:c1:5a: f7:f0:07:b7:e4:b8:8d:2d:aa:bf:94:0d:0d:f9:a0:76:e6:56: 8a:93:e1:d0:a1:96:a6:3e:5a:69:f0:5a:de:10:fc:e5:9b:f8: 21:5f:64:9a:19:fc:b4:ec:8d:2e:ab:40:2b:28:b7:c0:4d:87: 04:b8:eb:d2:dd:22:88:7a:74:28:ba:f5:eb:ba:11:23:0f:21: 8d:10:25:8c:45:38:30:43:db:60:72:23:4c:25:c9:0b:1a:86: 21:c8:4e:f8:0e:88:02:85:80:29:b2:3c:60:23:e2:4e:d2:b4: 5c:89:ba:1b:9c:17:b9:47:8a:2e:c3:dd:c1:81:f7:d2:a8:f6: e0:47:8e:56:c8:db:2e:26:50:62:ad:7f:f2:ee:09:be:58:b2: 54:e5:3c:66:9f:22:a0:af:91:83:77:65:e8:4c:e6:8f:86:12: 69:9d:3c:6b:2a:bf:b4:04:36:65:37:d1:69:10:b9:ff:dc:b6: 0c:48:46:19:90:96:74:88:b0:17:71:60:87:a1:45:79:73:a2: a9:fd:3f:fc:7c:f5:9e:e6:9a:80:61:10:dd:45:3d:ec:bd:51: 32:40:40:4b:be:a7:54:9e:72:f8:22:f7:4e:50:1e:8a:92:68: 96:90:f1:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrmDEGZQ6yOEaJOX1RwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EygwMjc4OWJkZTg4YTliOGYxN2I5YzNmMTVjMmVjNTdkZWJmODFlOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaB2k2lOlhgEcRZQgl+TzkYR1BCW 4Rv7HF4HqiQQmKzT5iXRSM5EKXM16s5l5cgd/ZDGi79Y6+zY1/VB9dkFuCnqYZ/g oVrhtlgYJpD6CSQKY9OuGI+0en8Pnp2NvflIVWNC1yr7igDj+15MaLUMSz9J5UCj VqjnRULFgLEyNK5rT5d4G37q+mKShB7KGhcmZHzQkcrkcQawLDQzlE2p1X3FPZ3F 9haYYTbtp8XmQc9EtDgVFq1OSoglBODxizrJpMaOMDeI4CzSAJE9k5um06u4LCzY qZ5ebMOcwEYhBaVDXGXfrtqBUULd9kt28FE+Ln/3yiwVnjv94UQ/78wpFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ4m96Iqbjxe5w/FcLsV96/gemUMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5zXOUda 0xrQtaExb2E4rMFa9/AHt+S4jS2qv5QNDfmgduZWipPh0KGWpj5aafBa3hD85Zv4 IV9kmhn8tOyNLqtAKyi3wE2HBLjr0t0iiHp0KLr167oRIw8hjRAljEU4MEPbYHIj TCXJCxqGIchO+A6IAoWAKbI8YCPiTtK0XIm6G5wXuUeKLsPdwYH30qj24EeOVsjb LiZQYq1/8u4JvliyVOU8Zp8ioK+Rg3dl6Ezmj4YSaZ08ayq/tAQ2ZTfRaRC5/9y2 DEhGGZCWdIiwF3Fgh6FFeXOiqf0//Hz1nuaagGEQ3UU97L1RMkBAS76nVJ5y+CL3 TlAeipJolpDx0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:28 2025 by rpki-client