This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json) Hash identifier: GfOHr9oGoM9j8QAdXTOj8RiuCtMEptVYLhimP6FvIB0= Subject key identifier: 4B:6E:6E:FC:91:9F:75:09:4D:30:05:B5:8C:0A:9F:BE:84:7B:1A:AE Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Certificate serial: 019AF12E0B0FF96FF6DCDD342FC68C6E9B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft Manifest number: 09DD Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: XzdmUh9UZi0ojgm3qNcvZEMuebVZuTmR+DRSS8T5Ex0=) 2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0b:0f:f9:6f:f6:dc:dd:34:2f:c6:8c:6e:9b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=4b6e6efc919f75094d3005b58c0a9fbe847b1aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:9f:eb:12:d4:3c:63:b1:30:53:92:ab:c2: 21:74:3e:e4:b5:c8:71:41:cd:89:fe:37:6c:33:51: 87:0c:bc:8e:0f:24:98:4d:d9:d1:66:93:3f:c4:fd: 17:be:58:14:88:2b:46:3e:98:e1:16:78:ea:e6:b8: b7:dc:70:db:1d:d3:44:94:6f:fc:b1:b4:32:a4:65: db:6d:13:9e:77:1c:d4:0d:f7:2b:2d:76:17:51:d6: db:37:eb:85:a4:4d:2e:8f:71:72:bd:b2:b0:52:ad: 7b:fe:f1:ee:48:de:26:31:f6:3c:6e:9d:e9:b4:44: da:e5:73:ae:86:ef:58:03:a7:92:d4:2c:40:43:d7: f8:10:03:a2:eb:08:23:ae:e4:ca:46:44:05:30:32: 2f:20:20:20:de:98:95:6f:23:d5:77:d8:37:bb:77: d9:e5:9b:b5:e4:48:21:16:92:60:bd:a6:a5:8c:ee: 20:1f:5f:0a:ba:69:2c:c2:67:0b:ae:15:02:82:7d: ff:7e:4d:9c:87:58:f5:c8:8c:84:5a:07:0b:fc:c6: 75:07:fd:21:c9:de:c6:dc:a7:42:65:46:62:95:b4: 98:ed:e2:eb:86:89:89:2d:e0:18:ec:62:67:02:49: a7:a2:86:13:2f:75:a0:9d:1f:24:25:d1:ce:30:8c: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6E:6E:FC:91:9F:75:09:4D:30:05:B5:8C:0A:9F:BE:84:7B:1A:AE X509v3 Authority Key Identifier: keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:86:c7:c4:3f:f6:1e:91:c8:39:22:91:d0:79:9a:b6:dd:8f: a6:cb:88:e4:67:2c:32:ae:07:23:f3:65:69:31:9e:e2:9c:11: 45:07:9e:ea:26:ec:c7:4a:13:0d:d9:07:aa:e6:e0:c5:c7:57: c5:cb:a5:f1:98:f7:2a:bc:20:d6:ee:7e:0b:6f:9a:db:0e:80: 7b:02:65:91:12:88:2d:c0:3f:e5:91:99:f6:d0:81:1b:32:7b: 23:8b:9a:c4:51:6d:5c:64:93:b1:5b:d7:6f:ee:2a:e1:c2:b4: e5:96:34:bf:11:20:d9:27:14:5a:08:bb:77:88:6f:04:fc:ea: 89:06:d4:ae:19:0f:f0:e2:dc:af:59:df:f3:55:ba:21:6a:91: f5:cf:7b:67:2e:fe:4a:f0:0c:df:46:9d:2b:18:bd:42:22:55: 5f:52:b8:c4:39:e6:a7:16:20:96:f6:c4:34:f1:05:a7:77:dc: 4f:b0:29:c1:bd:b4:f3:1c:72:72:1e:f2:24:ab:91:ba:79:b8: 16:75:f9:b1:10:64:44:e6:41:5e:43:93:89:4a:6f:0a:86:45: 04:bb:8f:81:5c:b2:4e:d6:4f:29:e1:27:fd:e3:d7:35:6f:62: 55:76:91:02:06:67:b9:28:cc:8a:c7:73:ff:67:8d:fd:62:16: aa:35:e7:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgsP+W/23N00L8aMbpt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl MDdkNWUwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD Eyg0YjZlNmVmYzkxOWY3NTA5NGQzMDA1YjU4YzBhOWZiZTg0N2IxYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z2f6xLUPGOxMFOSq8IhdD7ktchx Qc2J/jdsM1GHDLyODySYTdnRZpM/xP0XvlgUiCtGPpjhFnjq5ri33HDbHdNElG/8 sbQypGXbbROedxzUDfcrLXYXUdbbN+uFpE0uj3FyvbKwUq17/vHuSN4mMfY8bp3p tETa5XOuhu9YA6eS1CxAQ9f4EAOi6wgjruTKRkQFMDIvICAg3piVbyPVd9g3u3fZ 5Zu15EghFpJgvaaljO4gH18KumkswmcLrhUCgn3/fk2ch1j1yIyEWgcL/MZ1B/0h yd7G3KdCZUZilbSY7eLrhomJLeAY7GJnAkmnooYTL3WgnR8kJdHOMIx/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtubvyRn3UJTTAFtYwKn76EexquMB8GA1UdIwQY MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIbHxD/2 HpHIOSKR0Hmatt2PpsuI5GcsMq4HI/NlaTGe4pwRRQee6ibsx0oTDdkHqubgxcdX xcul8Zj3Krwg1u5+C2+a2w6AewJlkRKILcA/5ZGZ9tCBGzJ7I4uaxFFtXGSTsVvX b+4q4cK05ZY0vxEg2ScUWgi7d4hvBPzqiQbUrhkP8OLcr1nf81W6IWqR9c97Zy7+ SvAM30adKxi9QiJVX1K4xDnmpxYglvbENPEFp3fcT7Apwb208xxych7yJKuRunm4 FnX5sRBkROZBXkOTiUpvCoZFBLuPgVyyTtZPKeEn/ePXNW9iVXaRAgZnuSjMisdz /2eN/WIWqjXn+w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:44 2025 by rpki-client