This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json) Hash identifier: RlRnTMNjIh2IAvL/G4urE98uj6nmODb/mvHwPHzP1SU= Subject key identifier: 38:7F:CE:D2:5A:BE:2C:B4:DE:79:19:1F:91:1B:B1:54:60:69:A1:9F Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Certificate serial: 019BF6511EA277035166FDCCC6A8CF3CFE7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft Manifest number: 0A65 Signing time: Sun 25 Jan 2026 18:01:09 +0000 Manifest this update: Sun 25 Jan 2026 18:01:09 +0000 Manifest next update: Mon 26 Jan 2026 18:01:09 +0000 Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: svGPt66vDe8TGZLgCM+2l5Zr2Kb374IIgJIef8aKqLk=) 2: hQjM_kfrNcmziZNp3dS3dVTcWQg.roa (hash: 7Img7nOCsZGXCyMuGVQnUnTQzFC5NzgthKFgO50X3go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:1e:a2:77:03:51:66:fd:cc:c6:a8:cf:3c:fe:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e Validity Not Before: Jan 25 18:01:09 2026 GMT Not After : Jan 26 18:01:09 2026 GMT Subject: CN=387fced25abe2cb4de79191f911bb1546069a19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:c1:50:16:ee:3d:c2:f6:ee:64:4f:53:01: 1e:ec:9b:a8:f3:63:cb:ad:37:b0:87:f9:a5:c3:a7: a7:f9:89:00:e3:4c:4f:67:e9:2b:7b:81:57:28:f2: 56:b5:08:f4:53:7a:d5:d9:d3:84:dc:78:72:c8:5a: d3:5b:fa:21:27:78:ab:a1:72:1c:18:c2:ac:98:61: 2d:08:72:d9:b6:5c:ba:78:62:59:f5:08:b7:9a:37: 22:0f:8c:cd:82:40:3f:18:e6:3d:19:fc:85:57:f6: 6e:34:3d:40:99:2b:d7:7f:ab:29:95:06:56:ca:74: 36:5f:8c:18:a3:7d:56:c6:60:99:03:61:a9:39:a5: 6b:2e:67:5f:b8:78:30:13:48:64:85:e3:03:fb:4a: 9a:7b:3e:b2:02:e6:1a:e4:c5:ba:2b:4d:3a:92:9b: d4:86:bc:4f:c8:e0:ac:12:94:6a:08:0b:ed:7f:6b: 1e:e2:a5:9d:cf:08:36:1c:cd:b5:ad:ff:5d:e2:45: 35:b5:80:9e:c8:6b:af:41:f2:ca:c2:fa:fa:66:2b: 8e:6c:9b:d8:b7:65:f9:68:8b:9c:55:ff:2f:32:55: e7:24:91:b6:5b:d6:d6:70:5c:2a:5d:27:37:20:dc: 79:16:c4:a8:46:ee:7f:fc:cf:59:57:c1:ee:84:fe: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7F:CE:D2:5A:BE:2C:B4:DE:79:19:1F:91:1B:B1:54:60:69:A1:9F X509v3 Authority Key Identifier: keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0c:39:20:77:5f:3c:99:7f:e7:a8:1f:0a:e2:ea:3f:cd:cf: 84:2f:e2:4c:f8:0f:88:f0:55:60:8a:e1:3c:c4:ec:22:7e:00: e7:4c:7d:c3:5b:18:8f:26:b4:9a:ee:15:12:55:19:ad:f6:29: 9d:29:8c:ed:9e:60:ef:43:f0:57:82:7a:52:9b:33:a3:0d:4c: 97:2b:1c:d6:1f:94:62:0b:9d:d0:22:79:0e:f8:59:87:af:92: 33:8a:c9:67:45:2d:03:e1:40:11:12:99:56:1a:8b:62:a6:af: 99:f9:d1:a1:2f:2e:53:8b:df:2b:45:14:b7:1b:cc:f4:3e:ff: fa:24:f3:61:80:53:66:dd:9c:96:69:0c:61:cf:71:1f:a2:f5: af:0a:3b:b3:84:cc:14:63:d4:c1:56:a4:52:c8:3f:3a:ca:3a: 58:4d:50:b6:e3:d3:23:a2:bc:56:4d:21:34:fa:8b:3b:23:50: 6c:41:ba:08:46:bf:40:7c:d0:f5:87:99:59:76:c3:7f:57:10: fe:f1:67:15:4b:bb:ec:47:1e:d4:49:3d:8e:91:82:ca:42:e9: f8:1e:9b:cc:e3:20:db:5b:91:cd:41:71:34:99:35:a7:1b:be: 4c:d0:c9:0b:e8:1b:62:e9:8a:c0:8f:9f:5f:62:c3:6e:ce:c3: 00:ef:a1:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UR6idwNRZv3MxqjPPP57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl MDdkNWUwHhcNMjYwMTI1MTgwMTA5WhcNMjYwMTI2MTgwMTA5WjAzMTEwLwYDVQQD EygzODdmY2VkMjVhYmUyY2I0ZGU3OTE5MWY5MTFiYjE1NDYwNjlhMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP7BUBbuPcL27mRPUwEe7Juo82PL rTewh/mlw6en+YkA40xPZ+kre4FXKPJWtQj0U3rV2dOE3HhyyFrTW/ohJ3iroXIc GMKsmGEtCHLZtly6eGJZ9Qi3mjciD4zNgkA/GOY9GfyFV/ZuND1AmSvXf6splQZW ynQ2X4wYo31WxmCZA2GpOaVrLmdfuHgwE0hkheMD+0qaez6yAuYa5MW6K006kpvU hrxPyOCsEpRqCAvtf2se4qWdzwg2HM21rf9d4kU1tYCeyGuvQfLKwvr6ZiuObJvY t2X5aIucVf8vMlXnJJG2W9bWcFwqXSc3INx5FsSoRu5//M9ZV8HuhP5vZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDh/ztJaviy03nkZH5EbsVRgaaGfMB8GA1UdIwQY MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgw5IHdf PJl/56gfCuLqP83PhC/iTPgPiPBVYIrhPMTsIn4A50x9w1sYjya0mu4VElUZrfYp nSmM7Z5g70PwV4J6Upszow1Mlysc1h+UYgud0CJ5DvhZh6+SM4rJZ0UtA+FAERKZ VhqLYqavmfnRoS8uU4vfK0UUtxvM9D7/+iTzYYBTZt2clmkMYc9xH6L1rwo7s4TM FGPUwVakUsg/Oso6WE1QtuPTI6K8Vk0hNPqLOyNQbEG6CEa/QHzQ9YeZWXbDf1cQ /vFnFUu77Ece1Ek9jpGCykLp+B6bzOMg21uRzUFxNJk1pxu+TNDJC+gbYumKwI+f X2LDbs7DAO+hfA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:04 2026 by rpki-client