This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json) Hash identifier: aweeFwcsPpx1OuAYxesMSU7Ndx5QN0yGiKsVUkCcEdo= Subject key identifier: BF:50:10:34:53:AC:DB:79:DF:4E:F7:EA:2E:11:84:43:F7:FF:F0:D2 Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Certificate serial: 019AF12DE33BA2509E9BE12C05BCF9345A44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft Manifest number: 0C77 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: Acx+0jPZioc+dJyjfPoZtJiCviVtD8BpGmRL+GuRYY8=) 2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e3:3b:a2:50:9e:9b:e1:2c:05:bc:f9:34:5a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=bf50103453acdb79df4ef7ea2e118443f7fff0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:9a:bf:39:3e:83:1b:1d:0d:2b:d9:f4:98: dd:c4:76:79:e2:7b:05:55:a7:c0:8a:00:07:7a:5e: 8c:0a:e4:f7:8f:ac:9e:68:7b:ed:da:70:d1:92:98: 8e:a0:bb:78:da:60:ed:70:da:6e:c0:b6:57:40:8c: 69:a0:d7:08:44:38:27:f9:f1:a1:2b:cf:03:6c:99: bf:3b:3e:b3:01:b4:c4:fd:cf:0b:30:ce:c3:1d:4a: e8:0f:33:3d:39:e7:a5:b7:74:4a:b5:70:79:b3:a5: 26:11:7d:e4:94:97:6f:1c:35:1a:b7:c5:ea:3f:9f: 90:97:f5:98:50:54:3d:04:63:21:68:a2:d7:cd:83: f3:09:ac:8b:fa:c8:3e:c1:87:5e:03:34:e2:c5:7f: fd:86:99:0b:87:6e:35:ca:58:f4:ea:c5:6a:1a:91: 29:00:3d:67:43:6a:ab:1d:0b:95:23:9d:37:d6:28: b6:69:e4:ae:7f:09:d9:99:f8:79:2f:3f:76:79:b3: 63:db:12:02:ea:f1:3c:d9:44:47:14:7b:26:6f:43: aa:cc:eb:db:8e:3e:81:10:2c:03:58:43:b4:bc:5d: 16:51:44:f4:b0:56:a2:91:f8:7d:e5:cc:24:b1:d2: 12:dd:55:5a:12:7d:ef:d3:46:30:da:88:4a:15:ee: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:50:10:34:53:AC:DB:79:DF:4E:F7:EA:2E:11:84:43:F7:FF:F0:D2 X509v3 Authority Key Identifier: keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5b:62:55:08:5a:27:e9:f9:94:f0:68:e8:53:47:e1:8d:d4: 6a:75:57:d7:08:dc:d3:63:71:09:d0:e1:94:ab:15:f1:54:58: 6f:19:87:49:c9:5c:9a:ba:b5:4a:a1:1a:45:74:80:38:29:84: a3:d5:90:b1:e5:94:70:7a:49:ff:74:77:3a:4e:66:69:7c:f6: a3:66:8e:02:62:dd:d1:00:e3:a2:f5:34:d6:c1:da:ed:79:48: 7d:8e:5a:f8:fa:66:fe:a4:36:92:d1:b1:e8:09:aa:7e:49:8f: fd:29:51:9d:40:ed:2c:01:29:a2:43:61:5b:18:5f:95:c3:c9: f0:98:a8:61:e6:65:77:c3:f0:34:5f:3d:5c:fc:08:cb:ff:b5: d8:28:b6:26:e4:41:ae:d4:24:47:60:ea:37:df:a3:3e:f5:f3: b8:f6:9c:a4:05:c4:ad:12:84:17:73:e9:dc:59:68:42:db:5f: e3:5d:24:f2:c7:5f:6d:07:f9:ca:66:d1:da:43:c1:8d:97:d2: 62:7e:2b:c5:a4:5f:f0:c9:97:d1:76:1b:97:6f:8c:5d:66:5b: 59:90:1b:52:b0:f5:98:4b:a8:9b:66:2f:93:f5:3e:d3:a6:45: 5c:63:15:90:a1:1d:b6:1d:a6:89:ab:80:15:d0:e4:76:5d:76: e5:f6:e9:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeM7olCem+EsBbz5NFpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzU3M2NkN2Q1NjFjZDM3ZTBmMzMxZjZjYTM4ZGU5MjAy MDQyYjIwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EyhiZjUwMTAzNDUzYWNkYjc5ZGY0ZWY3ZWEyZTExODQ0M2Y3ZmZmMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqOavzk+gxsdDSvZ9JjdxHZ54nsF VafAigAHel6MCuT3j6yeaHvt2nDRkpiOoLt42mDtcNpuwLZXQIxpoNcIRDgn+fGh K88DbJm/Oz6zAbTE/c8LMM7DHUroDzM9Oeelt3RKtXB5s6UmEX3klJdvHDUat8Xq P5+Ql/WYUFQ9BGMhaKLXzYPzCayL+sg+wYdeAzTixX/9hpkLh241ylj06sVqGpEp AD1nQ2qrHQuVI5031ii2aeSufwnZmfh5Lz92ebNj2xIC6vE82URHFHsmb0OqzOvb jj6BECwDWEO0vF0WUUT0sFaikfh95cwksdIS3VVaEn3v00Yw2ohKFe6ceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9QEDRTrNt530736i4RhEP3//DSMB8GA1UdIwQY MBaAFE81c819VhzTfg8zH2yjjekgIEKyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzkt OGE1ZjE2OWE1YWU3LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jY2YzYTUtMDMwZC00YjU0LTgwNzktOGE1ZjE2OWE1YWU3 LzEvVHpWenpYMVdITk4tRHpNZmJLT042U0FnUXJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhltiVQha J+n5lPBo6FNH4Y3UanVX1wjc02NxCdDhlKsV8VRYbxmHSclcmrq1SqEaRXSAOCmE o9WQseWUcHpJ/3R3Ok5maXz2o2aOAmLd0QDjovU01sHa7XlIfY5a+Ppm/qQ2ktGx 6AmqfkmP/SlRnUDtLAEpokNhWxhflcPJ8JioYeZld8PwNF89XPwIy/+12Ci2JuRB rtQkR2DqN9+jPvXzuPacpAXErRKEF3Pp3FloQttf410k8sdfbQf5ymbR2kPBjZfS Yn4rxaRf8MmX0XYbl2+MXWZbWZAbUrD1mEuom2Yvk/U+06ZFXGMVkKEdth2miauA FdDkdl125fbp+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:11 2025 by rpki-client