This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json) Hash identifier: qiHgXgat21VzYp+virrt1PWwWwvzJyHAzlp95hjWnjU= Subject key identifier: CE:8B:B5:90:57:A2:92:CB:C0:92:1C:C2:08:D7:89:D0:E4:05:04:42 Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c Certificate serial: 019AF12CE4526F51A7B91F4EC486EAF7BE16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: o5ARvEzYXsYRLLCU5JtzZYmpOgTwRgfD6c9mEsmEip8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e4:52:6f:51:a7:b9:1f:4e:c4:86:ea:f7:be:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=ce8bb59057a292cbc0921cc208d789d0e4050442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4f:7a:0a:e6:81:af:5e:7f:5f:c7:3e:d9:00: 36:ee:e7:9a:df:ce:29:2c:67:57:4c:5c:f0:27:e3: 9e:f0:39:77:aa:2c:07:aa:6e:2e:96:d1:d3:32:3b: 45:32:2a:3e:01:af:e9:3b:5d:79:e0:57:21:a5:7d: 40:dd:48:3e:60:85:70:e0:ba:f7:51:16:72:14:be: 7a:51:5a:8e:e9:86:d0:55:6d:37:23:8d:34:2d:9d: 21:3b:66:77:3d:fa:20:8c:c5:ac:11:c0:54:fb:b5: 05:39:d3:e7:ad:14:2f:e1:68:80:e9:c3:04:ba:2a: 60:48:68:72:b4:c0:66:2b:fa:21:bc:e3:80:46:5c: 1a:a9:77:fd:ef:97:70:2a:ce:c6:f1:29:c5:93:e7: 48:da:66:aa:2f:00:85:fa:4c:21:21:c9:28:31:f1: 57:65:f4:0d:8f:b1:b8:d5:9b:b6:5b:6a:ed:c7:ad: 87:1c:e8:53:b4:c4:ed:53:26:a7:56:f1:d7:fb:f2: 45:4a:64:3a:d0:50:6a:3b:a5:98:a4:e0:81:5c:af: ae:3a:27:a5:5f:d2:9c:67:d4:3e:fb:14:da:32:13: 92:38:ac:03:82:43:bc:91:0b:4d:70:e5:8b:8f:e7: d9:6a:da:19:ba:a0:14:5a:f7:fc:08:50:42:2e:8a: d4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8B:B5:90:57:A2:92:CB:C0:92:1C:C2:08:D7:89:D0:E4:05:04:42 X509v3 Authority Key Identifier: keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3b:91:a1:a3:9f:90:7b:5d:df:bb:64:61:43:e9:f8:40:af: 46:9d:7f:37:6c:61:e1:ca:c7:a5:7e:bc:8c:81:92:6e:00:15: 5d:4d:9f:d2:10:a9:9c:49:60:62:74:5c:4d:15:6b:67:bc:9f: 43:cb:f0:5c:f5:ed:59:80:7f:14:f9:29:11:fa:26:7a:f8:84: 52:5d:ac:a4:7f:90:d1:ba:2e:28:c2:c9:7c:55:b0:20:1e:a1: d8:99:b7:2e:ca:f0:ef:9e:09:1a:5d:63:df:1e:33:ec:34:90: 54:2a:ba:49:f2:cb:f4:ec:ab:3d:4d:bf:8f:db:15:ff:b3:ad: 98:9d:5b:06:9f:6c:9a:84:38:2c:e8:b8:5f:37:2a:de:3e:c7: 7a:74:e3:75:26:98:c6:2f:3c:45:dd:7d:e1:40:32:fc:f3:eb: 9c:6b:6f:b4:32:bd:2b:4f:a1:3d:42:b4:86:96:6d:42:b7:8b: 0a:7e:f6:02:e4:35:0f:d7:22:ff:bd:72:01:dd:bf:f4:a7:62: ac:24:96:70:ba:a7:24:2a:db:07:09:f5:b1:41:7c:29:73:95: d7:47:b4:40:70:90:86:c2:8d:85:fd:ec:8d:1b:82:22:c2:77: e2:b6:f3:6a:46:b6:48:96:d1:12:22:e0:e0:88:03:ed:e5:41: ab:3b:fd:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLORSb1GnuR9OxIbq974WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZTMxOWQzZjRlYzlhNzYwZGY3NzRmMDFjZmI3MTU0N2Ux NjNmM2MwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD EyhjZThiYjU5MDU3YTI5MmNiYzA5MjFjYzIwOGQ3ODlkMGU0MDUwNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8U96CuaBr15/X8c+2QA27uea384p LGdXTFzwJ+Oe8Dl3qiwHqm4ultHTMjtFMio+Aa/pO1154FchpX1A3Ug+YIVw4Lr3 URZyFL56UVqO6YbQVW03I400LZ0hO2Z3PfogjMWsEcBU+7UFOdPnrRQv4WiA6cME uipgSGhytMBmK/ohvOOARlwaqXf975dwKs7G8SnFk+dI2maqLwCF+kwhIckoMfFX ZfQNj7G41Zu2W2rtx62HHOhTtMTtUyanVvHX+/JFSmQ60FBqO6WYpOCBXK+uOiel X9KcZ9Q++xTaMhOSOKwDgkO8kQtNcOWLj+fZatoZuqAUWvf8CFBCLorU4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6LtZBXopLLwJIcwgjXidDkBQRCMB8GA1UdIwQY MBaAFE/jGdP07Jp2Dfd08Bz7cVR+Fj88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yMTU1OGItNjY2OS00ZmQ3LTg0N2Ut MjZkOTJjNDI4YmEyLzEvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yMTU1OGItNjY2OS00ZmQ3LTg0N2UtMjZkOTJjNDI4YmEy LzEvVC1NWjBfVHNtbllOOTNUd0hQdHhWSDRXUHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTuRoaOf kHtd37tkYUPp+ECvRp1/N2xh4crHpX68jIGSbgAVXU2f0hCpnElgYnRcTRVrZ7yf Q8vwXPXtWYB/FPkpEfomeviEUl2spH+Q0bouKMLJfFWwIB6h2Jm3Lsrw754JGl1j 3x4z7DSQVCq6SfLL9OyrPU2/j9sV/7OtmJ1bBp9smoQ4LOi4Xzcq3j7HenTjdSaY xi88Rd194UAy/PPrnGtvtDK9K0+hPUK0hpZtQreLCn72AuQ1D9ci/71yAd2/9Kdi rCSWcLqnJCrbBwn1sUF8KXOV10e0QHCQhsKNhf3sjRuCIsJ34rbzaka2SJbREiLg 4IgD7eVBqzv9pw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:24 2025 by rpki-client