This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json) Hash identifier: LWbJKJlHO6BjW0wo+mVcTDBUlffGTQI5h7j4B0xPygY= Subject key identifier: 07:7A:16:81:20:AF:E7:C8:01:DE:90:CF:5C:46:56:96:D7:22:4E:81 Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b Certificate serial: 019AF465532797AF1ECA8ECA9A8E8F8023D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 16:01:12 +0000 Manifest this update: Sat 06 Dec 2025 16:01:12 +0000 Manifest next update: Sun 07 Dec 2025 16:01:12 +0000 Files and hashes: 1: 3wNNo-iI2pc3szTShzwRJQcPQ9g.roa (hash: UlE7Git4bpx6FDGabnpMDUtAooHhFae2TZHIhuwKgXk=) 2: MqT4HJJOzTQVMwOVUIPQ89Vg7oc.roa (hash: afWnYJW6s1CaDObkwTU5kA7v+0oYXDgnGB/f5yofQ5k=) 3: P7UI9wbXQO7767Ee_OeO-FbHpEk.roa (hash: 3nnbFB8QPYfC95SG+310oNK9akUzhHQ/muxTMob6BTg=) 4: U39msWOqgwaliq8DKMspRhKQ3Kg.roa (hash: Z6S+9hFUTMzmzmKnTFgFfim8JmWqS4uAPgj1Z/Z4oQ8=) 5: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=) 6: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: fCCCpTB3uTOAnyvHDUaLT/kBbdCc7QOhvpNtiv4jqG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:53:27:97:af:1e:ca:8e:ca:9a:8e:8f:80:23:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b Validity Not Before: Dec 6 16:01:12 2025 GMT Not After : Dec 7 16:01:12 2025 GMT Subject: CN=077a168120afe7c801de90cf5c465696d7224e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:a0:4e:78:b0:16:70:d7:39:31:bc:70:c4: ce:3f:18:62:0f:cb:a3:29:2f:99:8b:bc:d5:64:ba: a4:8c:11:92:dc:1a:3c:0c:59:d5:7e:98:50:4e:20: 01:01:6b:c2:aa:a7:7e:d2:7d:e2:5e:b7:7f:6c:f3: ff:0b:f7:27:1b:73:bd:f5:75:3b:63:c3:06:48:b7: 7a:1b:16:3d:93:b0:ec:b0:c9:48:09:13:59:b5:0e: 83:15:98:33:de:68:bd:8e:98:1b:c9:d3:73:06:d0: 67:58:7f:06:12:90:a0:80:a4:44:53:34:b2:54:f7: b0:e8:bc:cf:18:80:dc:bd:af:ab:6a:b9:79:df:32: 3c:8c:3c:d3:4f:83:c7:e2:b2:14:27:4e:2a:15:ab: 7a:47:6e:40:c9:da:52:ca:b5:6a:2e:a7:1b:35:8a: d9:af:87:a6:6f:7a:55:c8:d5:d2:fa:c5:f9:72:e6: 9d:28:62:d4:5e:0e:a2:d9:8c:c2:64:f1:3a:b8:51: 6f:ce:15:3d:f3:5c:24:d9:b7:e1:89:40:ea:04:74: b8:21:74:55:64:eb:08:bd:45:bd:a4:2a:81:48:ee: 7d:5c:16:aa:6d:c5:48:c0:0d:0b:38:0a:cf:00:bd: 2a:7e:77:a6:d1:c2:91:03:09:0a:25:ea:26:fa:80: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7A:16:81:20:AF:E7:C8:01:DE:90:CF:5C:46:56:96:D7:22:4E:81 X509v3 Authority Key Identifier: keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:30:5f:d3:f3:64:6e:96:b1:c9:75:4b:88:cc:e2:05:99:61: 05:3c:24:bc:45:ea:a6:fd:f3:68:bd:b3:16:18:06:36:82:74: 5c:25:a8:cf:32:10:16:1f:1f:b0:98:e2:87:81:a4:ce:ce:8a: b0:2b:ac:e5:27:37:95:a1:46:a7:ae:8e:47:c1:e2:7f:f5:8b: f1:c7:af:5f:da:6a:44:17:ee:71:26:02:71:d3:16:81:98:1e: e7:fb:28:b9:74:44:54:95:8c:cc:17:10:e8:c8:94:be:f3:54: 70:b1:8c:85:c9:bb:47:4c:3e:0c:a0:19:6d:c2:ce:54:6b:a5: cc:26:b6:be:a4:e2:1d:93:7b:4c:ff:73:a2:10:3f:10:86:ae: f7:55:b2:09:7b:a9:fd:8d:2e:c6:8d:b4:6e:a0:bf:3a:d7:7f: c3:75:97:84:fc:2d:b6:f8:d8:a1:53:96:f1:46:1f:52:55:89: b1:c2:41:39:35:93:31:47:41:19:d8:db:d4:3e:2d:0e:53:68: 53:f3:00:05:f3:ef:d1:7a:b0:d0:bf:e7:ff:d7:85:2e:68:30: 0d:2a:6e:41:e2:31:9e:27:24:3f:7c:6b:54:38:9b:43:3a:20: 58:73:a2:5f:ab:58:88:f7:d7:1c:f1:03:33:a2:40:8d:22:15: 82:dd:9b:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVMnl68eyo7Kmo6PgCPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2 OTY4MWIwHhcNMjUxMjA2MTYwMTEyWhcNMjUxMjA3MTYwMTEyWjAzMTEwLwYDVQQD EygwNzdhMTY4MTIwYWZlN2M4MDFkZTkwY2Y1YzQ2NTY5NmQ3MjI0ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJugTniwFnDXOTG8cMTOPxhiD8uj KS+Zi7zVZLqkjBGS3Bo8DFnVfphQTiABAWvCqqd+0n3iXrd/bPP/C/cnG3O99XU7 Y8MGSLd6GxY9k7DssMlICRNZtQ6DFZgz3mi9jpgbydNzBtBnWH8GEpCggKREUzSy VPew6LzPGIDcva+rarl53zI8jDzTT4PH4rIUJ04qFat6R25AydpSyrVqLqcbNYrZ r4emb3pVyNXS+sX5cuadKGLUXg6i2YzCZPE6uFFvzhU981wk2bfhiUDqBHS4IXRV ZOsIvUW9pCqBSO59XBaqbcVIwA0LOArPAL0qfnem0cKRAwkKJeom+oDDIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd6FoEgr+fIAd6Qz1xGVpbXIk6BMB8GA1UdIwQY MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct NjNiNTJhYTdmOGRhLzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjBf0/Nk bpaxyXVLiMziBZlhBTwkvEXqpv3zaL2zFhgGNoJ0XCWozzIQFh8fsJjih4Gkzs6K sCus5Sc3laFGp66OR8Hif/WL8cevX9pqRBfucSYCcdMWgZge5/souXREVJWMzBcQ 6MiUvvNUcLGMhcm7R0w+DKAZbcLOVGulzCa2vqTiHZN7TP9zohA/EIau91WyCXup /Y0uxo20bqC/Otd/w3WXhPwttvjYoVOW8UYfUlWJscJBOTWTMUdBGdjb1D4tDlNo U/MABfPv0Xqw0L/n/9eFLmgwDSpuQeIxnickP3xrVDibQzogWHOiX6tYiPfXHPED M6JAjSIVgt2bYw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:12 2025 by rpki-client