This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json) Hash identifier: 1DZvifT2XylGHEyCb1JJ4Jd2CQlQKkQgzqAbFYroW4A= Subject key identifier: 7F:F3:03:FA:BB:40:5A:FA:FA:8D:94:D5:0C:60:24:D9:C9:6F:5B:38 Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60 Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60 Certificate serial: 019AF3F73F579C92B5CC3DAEE035116CCF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft Manifest number: 0C8B Signing time: Sat 06 Dec 2025 14:00:58 +0000 Manifest this update: Sat 06 Dec 2025 14:00:58 +0000 Manifest next update: Sun 07 Dec 2025 14:00:58 +0000 Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=) 2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: K6det+9P1rOudpFd7vrMF8G7EQZVA/HfcuhXbKM39Ok=) 3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:3f:57:9c:92:b5:cc:3d:ae:e0:35:11:6c:cf:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60 Validity Not Before: Dec 6 14:00:58 2025 GMT Not After : Dec 7 14:00:58 2025 GMT Subject: CN=7ff303fabb405afafa8d94d50c6024d9c96f5b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:33:83:45:d6:43:88:3c:ef:92:1e:f8:a0: e4:83:fc:f7:1c:43:9f:74:2c:35:a9:26:59:e5:49: 0b:88:7f:0f:09:c1:6a:85:d2:73:a0:b0:06:13:ae: 0d:dd:a4:cd:80:56:62:00:fa:ad:b2:33:d1:36:d4: f6:cd:64:56:72:5e:bc:73:d8:72:db:e9:e2:77:8d: 4f:43:a8:c7:a7:12:33:23:72:0f:81:f3:dd:e2:99: b1:c7:dc:9f:74:d8:29:0f:17:95:f9:43:3c:c6:e2: 49:2e:2e:71:3e:20:36:f3:a6:e2:52:6a:2b:ee:1f: d3:00:2d:ce:c4:69:56:e3:a7:f0:0b:e6:73:71:5c: eb:80:dc:0f:d5:58:ee:80:ac:53:4e:9e:14:19:88: 50:80:13:d5:5b:16:ce:62:1c:49:96:92:27:ee:de: ae:1e:6c:3d:14:55:29:39:1b:0a:a6:40:92:ea:86: 76:bd:d6:b2:a8:84:4a:2d:21:ca:17:8e:6b:86:44: 17:b8:6c:b9:e5:14:72:9d:4e:66:50:35:81:10:78: 07:6c:51:81:58:e0:25:6b:7c:e0:d1:3a:fc:0c:79: f1:e7:d0:0c:3f:8c:65:44:0e:67:4f:b0:fa:d6:26: 91:e0:14:29:d4:c5:a4:6b:9a:71:37:dd:dd:9f:2a: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F3:03:FA:BB:40:5A:FA:FA:8D:94:D5:0C:60:24:D9:C9:6F:5B:38 X509v3 Authority Key Identifier: keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4b:9e:60:59:9a:a6:46:10:11:cc:c8:af:df:5d:e7:5d:aa: 6c:62:9d:3e:61:70:4d:a6:46:44:b5:77:e8:e7:69:a4:2a:02: ad:0a:ee:a3:36:43:97:8e:e2:7e:54:53:79:2e:fa:1f:bb:98: f3:68:c9:98:51:2f:21:dd:2a:e0:a1:7d:78:ea:32:ee:55:08: 92:fd:1e:80:df:09:d1:8f:2d:91:51:78:ae:61:76:fe:43:1e: d1:f1:22:78:09:5d:e5:fa:ac:4c:47:55:77:8a:06:b7:c3:27: ba:80:6c:a0:42:73:91:50:8d:01:98:50:29:c8:35:f6:84:7f: 04:ea:1b:a8:1f:d9:98:6f:e3:3c:a9:6b:69:03:17:23:94:77: 4f:20:17:7c:6f:40:29:87:b0:ef:45:98:bc:7f:67:23:30:cb: 4c:49:2e:cb:3e:de:fa:4c:f9:c4:45:34:ee:3e:54:db:2d:84: 23:0f:8d:52:0c:bc:e8:8c:6b:ea:20:66:b1:ae:d1:a9:19:e3: 4c:63:13:51:58:4f:47:c2:99:79:bd:2e:51:3b:42:57:21:89: 3b:44:da:11:1b:50:1d:1c:cc:19:6d:a1:31:55:16:56:62:97: 73:64:11:a7:e7:25:32:ec:e3:c5:d5:8d:75:6e:9e:cd:80:e1: f9:8a:ab:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9z9XnJK1zD2u4DURbM+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNjMxOWZlNzg1OWMzNDJmN2NkOWY3MTEzMDZmNTY1OTA4 MjhkNjAwHhcNMjUxMjA2MTQwMDU4WhcNMjUxMjA3MTQwMDU4WjAzMTEwLwYDVQQD Eyg3ZmYzMDNmYWJiNDA1YWZhZmE4ZDk0ZDUwYzYwMjRkOWM5NmY1YjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Qzg0XWQ4g875Ie+KDkg/z3HEOf dCw1qSZZ5UkLiH8PCcFqhdJzoLAGE64N3aTNgFZiAPqtsjPRNtT2zWRWcl68c9hy 2+nid41PQ6jHpxIzI3IPgfPd4pmxx9yfdNgpDxeV+UM8xuJJLi5xPiA286biUmor 7h/TAC3OxGlW46fwC+ZzcVzrgNwP1VjugKxTTp4UGYhQgBPVWxbOYhxJlpIn7t6u Hmw9FFUpORsKpkCS6oZ2vdayqIRKLSHKF45rhkQXuGy55RRynU5mUDWBEHgHbFGB WOAla3zg0Tr8DHnx59AMP4xlRA5nT7D61iaR4BQp1MWka5pxN93dnyo4uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/zA/q7QFr6+o2U1QxgJNnJb1s4MB8GA1UdIwQY MBaAFExjGf54WcNC982fcRMG9WWQgo1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWIt NTU4MzBmOWVkZGU0LzEvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWItNTU4MzBmOWVkZGU0 LzEvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEueYFma pkYQEczIr99d512qbGKdPmFwTaZGRLV36OdppCoCrQruozZDl47iflRTeS76H7uY 82jJmFEvId0q4KF9eOoy7lUIkv0egN8J0Y8tkVF4rmF2/kMe0fEieAld5fqsTEdV d4oGt8MnuoBsoEJzkVCNAZhQKcg19oR/BOobqB/ZmG/jPKlraQMXI5R3TyAXfG9A KYew70WYvH9nIzDLTEkuyz7e+kz5xEU07j5U2y2EIw+NUgy86Ixr6iBmsa7RqRnj TGMTUVhPR8KZeb0uUTtCVyGJO0TaERtQHRzMGW2hMVUWVmKXc2QRp+clMuzjxdWN dW6ezYDh+Yqr2g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:16 2025 by rpki-client