This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json) Hash identifier: j3ZbA3yLqvxnWzxymuybur+04sw/OxjUsoPUHGZ76k8= Subject key identifier: 7B:FA:AA:05:C3:01:BC:56:B1:6F:EE:AB:8D:A4:A3:60:C7:87:F0:59 Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B2E5486706029AD121AE243E940A0F27E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft Manifest number: 176E Signing time: Wed 17 Dec 2025 22:00:49 +0000 Manifest this update: Wed 17 Dec 2025 22:00:49 +0000 Manifest next update: Thu 18 Dec 2025 22:00:49 +0000 Files and hashes: 1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=) 2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=) 3: KNr8dCxZSv2tLdivt-ye5q6LflE.roa (hash: OddKT0B3adcsA3ke/HzglyeCPb/vcMLtq5FBhRNFDKs=) 4: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=) 5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: GbQyJM3n6b/oWnlPkr8FgkoxT2WXO7OkmQn9kO2kh/g=) 6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=) 7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=) 8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:86:70:60:29:ad:12:1a:e2:43:e9:40:a0:f2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Dec 17 22:00:49 2025 GMT Not After : Dec 18 22:00:49 2025 GMT Subject: CN=7bfaaa05c301bc56b16feeab8da4a360c787f059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dd:f4:40:a5:41:cb:a7:27:4b:61:21:f9:81: d9:d0:43:46:49:ef:13:bd:5f:6c:0a:f9:8b:20:04: 1a:85:42:52:3f:f0:54:08:cb:22:f6:19:b6:b3:31: 2e:e5:8b:1a:33:51:5e:0b:db:f9:75:df:6d:4d:d4: 4e:23:89:1c:16:a8:24:2e:e0:31:b4:a3:d3:11:1a: fe:52:ad:8f:7a:99:6e:38:a0:54:45:51:ea:e4:c0: 3a:24:a3:bc:39:af:b2:83:d7:07:a7:f2:d5:77:9a: 7d:e5:dd:ac:38:df:5f:b6:81:1d:c6:df:83:81:58: a5:55:8e:46:7c:c1:b4:1c:c0:ba:4b:eb:f6:ee:15: 53:c3:b1:eb:4f:d4:8d:33:c3:f7:e6:91:4f:7c:08: 31:c6:24:c7:0f:82:03:87:8e:98:06:39:51:dd:89: cf:0a:88:bc:22:eb:db:1c:98:a1:38:88:84:22:69: f3:ac:07:65:bd:6f:cd:53:4f:ae:a1:23:66:5a:53: 2a:f0:15:02:61:37:c3:6a:20:6f:60:2d:bf:30:81: 24:db:9b:f0:81:46:01:d4:13:f7:c6:aa:b1:69:4f: ff:65:e0:b2:40:0e:18:b2:57:16:c2:1a:07:0a:a0: 6a:2e:58:13:15:fc:1f:09:09:f7:7c:e1:cc:f9:6c: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FA:AA:05:C3:01:BC:56:B1:6F:EE:AB:8D:A4:A3:60:C7:87:F0:59 X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:26:6a:f7:04:cc:02:2b:a0:98:45:d7:bd:4c:01:ea:4d:10: 91:47:86:52:4b:13:ed:73:47:0b:07:c6:9a:5e:29:39:21:73: 8a:03:1c:86:1d:21:98:46:57:64:45:52:61:8f:24:5b:7e:ee: 60:ff:6a:56:70:9c:a3:d6:e2:7a:6f:d8:d6:f5:31:82:e4:0c: 72:96:be:bb:49:9c:f0:93:50:5b:ff:bf:fb:4f:e0:22:26:df: 31:9c:8f:10:5c:5c:42:ed:a3:b6:0a:62:d1:81:e5:9c:5c:49: f6:44:ea:7b:b2:be:05:f0:1a:00:b4:67:5d:a6:47:5c:6f:46: 5f:b1:2b:6e:4e:52:f8:cf:10:40:2e:7c:16:af:c2:bd:78:92: 2e:56:1c:c6:67:91:a9:c7:7e:30:7a:df:bb:bf:f5:8c:0d:d2: 96:d3:ec:6c:58:b4:9f:76:59:a2:a3:af:35:81:0d:b4:0f:a9: 51:8e:aa:3c:f2:de:65:39:32:59:99:25:d6:de:c8:76:f1:cb: bd:1f:cb:a2:1c:e5:43:75:16:0c:aa:94:54:7b:85:9c:1a:1b: 23:ec:da:7f:8f:67:b6:aa:b4:69:ec:83:39:ff:9d:97:71:b2: af:00:44:1d:61:ce:8e:ef:4b:5c:7b:a2:d4:25:00:0e:8d:04: 1c:8a:8b:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVIZwYCmtEhriQ+lAoPJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjUxMjE3MjIwMDQ5WhcNMjUxMjE4MjIwMDQ5WjAzMTEwLwYDVQQD Eyg3YmZhYWEwNWMzMDFiYzU2YjE2ZmVlYWI4ZGE0YTM2MGM3ODdmMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t30QKVBy6cnS2Eh+YHZ0ENGSe8T vV9sCvmLIAQahUJSP/BUCMsi9hm2szEu5YsaM1FeC9v5dd9tTdROI4kcFqgkLuAx tKPTERr+Uq2PepluOKBURVHq5MA6JKO8Oa+yg9cHp/LVd5p95d2sON9ftoEdxt+D gVilVY5GfMG0HMC6S+v27hVTw7HrT9SNM8P35pFPfAgxxiTHD4IDh46YBjlR3YnP Coi8IuvbHJihOIiEImnzrAdlvW/NU0+uoSNmWlMq8BUCYTfDaiBvYC2/MIEk25vw gUYB1BP3xqqxaU//ZeCyQA4YslcWwhoHCqBqLlgTFfwfCQn3fOHM+Wx+sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv6qgXDAbxWsW/uq42ko2DHh/BZMB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyZq9wTM AiugmEXXvUwB6k0QkUeGUksT7XNHCwfGml4pOSFzigMchh0hmEZXZEVSYY8kW37u YP9qVnCco9biem/Y1vUxguQMcpa+u0mc8JNQW/+/+0/gIibfMZyPEFxcQu2jtgpi 0YHlnFxJ9kTqe7K+BfAaALRnXaZHXG9GX7Erbk5S+M8QQC58Fq/CvXiSLlYcxmeR qcd+MHrfu7/1jA3SltPsbFi0n3ZZoqOvNYENtA+pUY6qPPLeZTkyWZkl1t7IdvHL vR/LohzlQ3UWDKqUVHuFnBobI+zaf49ntqq0aeyDOf+dl3GyrwBEHWHOju9LXHui 1CUADo0EHIqLIw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:42:14 2025 by rpki-client