This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json) Hash identifier: 9mjprBAHvmckNjGYahMlAVojSFVOfdibz6DADHtsdHI= Subject key identifier: 3F:23:7C:4E:7B:18:0C:B5:53:64:C3:A6:62:9C:D7:E8:D5:F3:09:3B Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa Certificate serial: 019AF540E4D734507534EDB42B92ED38D766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft Manifest number: 04A1 Signing time: Sat 06 Dec 2025 20:01:02 +0000 Manifest this update: Sat 06 Dec 2025 20:01:02 +0000 Manifest next update: Sun 07 Dec 2025 20:01:02 +0000 Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: uLcm5eL8UVcdtSTNqduskfNGd9kMG4YRJIBrLeTMoy0=) 2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:e4:d7:34:50:75:34:ed:b4:2b:92:ed:38:d7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa Validity Not Before: Dec 6 20:01:02 2025 GMT Not After : Dec 7 20:01:02 2025 GMT Subject: CN=3f237c4e7b180cb55364c3a6629cd7e8d5f3093b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:37:94:98:72:51:f5:37:6b:40:e6:3c:37: 88:9a:71:25:17:41:a5:ce:29:55:8d:bf:7c:2b:11: 59:4f:5a:3c:38:db:19:fd:ea:b0:e4:a9:a0:e4:ad: 4a:9d:c8:fa:0c:a2:8e:cb:3e:22:53:55:aa:9c:f7: c4:67:46:bd:18:7f:40:06:73:b4:af:e5:78:cc:31: d5:a7:18:e2:da:18:4a:07:c3:cf:8e:0c:7e:64:03: 45:c8:36:6d:32:b6:3d:eb:0e:02:b2:d4:b3:37:e9: bf:29:b7:23:0d:19:a8:ff:ed:95:c1:02:31:fd:03: 51:c9:38:b4:5a:a3:90:a1:90:a2:48:04:15:1d:65: 3c:2f:e8:15:bb:e1:ca:d6:39:e4:f7:0b:2c:f7:02: df:f0:76:3e:49:a3:3a:ff:68:d3:ab:31:bd:b5:e8: 6d:a4:ca:d4:28:11:47:94:a4:93:c5:73:3e:a9:fe: 5f:d6:59:09:eb:1a:8b:08:3b:66:95:e5:82:10:55: 91:2a:32:0e:a4:5e:bb:84:27:ae:62:f4:1f:8c:df: 28:0c:99:52:0d:a9:51:b6:ad:cc:bc:be:a7:d6:73: 2c:a0:99:f8:de:30:89:a6:83:fd:07:a5:94:22:4f: 73:3b:ea:17:28:4e:ed:e5:23:9a:d1:4f:83:bf:08: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:23:7C:4E:7B:18:0C:B5:53:64:C3:A6:62:9C:D7:E8:D5:F3:09:3B X509v3 Authority Key Identifier: keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c0:f4:52:d2:6a:e2:91:47:5d:4e:bd:45:57:c5:05:47:cb: de:f6:c0:a8:dc:fb:a1:9e:f2:00:91:4f:cd:9a:c9:24:a5:ac: 8c:d0:13:ca:27:36:81:44:3d:ad:26:0d:38:e2:2f:d1:32:0f: 6e:54:5f:03:a3:77:d0:cb:d6:52:53:d5:8a:03:df:8a:c7:96: 10:20:a2:19:f8:39:0b:b1:1e:47:0c:bc:bc:cb:18:ac:a5:6f: e8:41:5a:f1:44:ad:41:ff:f1:cb:97:f5:1c:26:90:5c:85:e0: c8:3f:8c:80:6a:24:3e:9a:29:a5:80:7a:03:9d:e7:8a:7f:1d: 83:27:40:fb:df:90:29:b6:be:e8:79:57:2f:3d:6f:5d:34:a2: 8b:f9:5e:5a:b5:ca:07:e4:cd:c1:a6:c9:56:d4:fa:a3:be:ec: f2:f7:27:27:2b:42:7f:bc:3f:a1:b5:f4:db:ab:76:8c:98:9c: fd:c7:ed:98:58:9c:20:85:bd:7c:7e:bd:de:99:7e:db:fd:95: 94:a9:0e:ee:b7:16:d1:4a:7e:ee:0d:9a:89:99:f5:ed:1d:1a: 26:62:17:3c:ea:65:be:d5:1b:e3:54:b6:f7:e8:79:a7:df:99: 66:20:ec:af:03:74:c2:80:1d:3b:12:88:98:e4:a8:ad:2a:00: 75:3f:c3:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QOTXNFB1NO20K5LtONdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTRmOTJhZGJkMWJiNDVkNjNmOWY5NDcwMTdhMjE2NGU5 ZDBlZmEwHhcNMjUxMjA2MjAwMTAyWhcNMjUxMjA3MjAwMTAyWjAzMTEwLwYDVQQD EygzZjIzN2M0ZTdiMTgwY2I1NTM2NGMzYTY2MjljZDdlOGQ1ZjMwOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdA3lJhyUfU3a0DmPDeImnElF0Gl zilVjb98KxFZT1o8ONsZ/eqw5Kmg5K1Kncj6DKKOyz4iU1WqnPfEZ0a9GH9ABnO0 r+V4zDHVpxji2hhKB8PPjgx+ZANFyDZtMrY96w4CstSzN+m/KbcjDRmo/+2VwQIx /QNRyTi0WqOQoZCiSAQVHWU8L+gVu+HK1jnk9wss9wLf8HY+SaM6/2jTqzG9teht pMrUKBFHlKSTxXM+qf5f1lkJ6xqLCDtmleWCEFWRKjIOpF67hCeuYvQfjN8oDJlS DalRtq3MvL6n1nMsoJn43jCJpoP9B6WUIk9zO+oXKE7t5SOa0U+DvwhVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8jfE57GAy1U2TDpmKc1+jV8wk7MB8GA1UdIwQY MBaAFE2U+Srb0btF1j+flHAXohZOnQ76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MzliOTgtMTUwOC00NzQwLThkYmYt MjQxMDllZGY2NDUwLzEvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MzliOTgtMTUwOC00NzQwLThkYmYtMjQxMDllZGY2NDUw LzEvVFpUNUt0dlJ1MFhXUDUtVWNCZWlGazZkRHZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMD0UtJq 4pFHXU69RVfFBUfL3vbAqNz7oZ7yAJFPzZrJJKWsjNATyic2gUQ9rSYNOOIv0TIP blRfA6N30MvWUlPVigPfiseWECCiGfg5C7EeRwy8vMsYrKVv6EFa8UStQf/xy5f1 HCaQXIXgyD+MgGokPpoppYB6A53nin8dgydA+9+QKba+6HlXLz1vXTSii/leWrXK B+TNwabJVtT6o77s8vcnJytCf7w/obX026t2jJic/cftmFicIIW9fH693pl+2/2V lKkO7rcW0Up+7g2aiZn17R0aJmIXPOplvtUb41S29+h5p9+ZZiDsrwN0woAdOxKI mOSorSoAdT/DgA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:43:59 2025 by rpki-client