This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft File: S_TZ-mawCKCMO47YLDgmfh0hJVA.mft (raw, json) Hash identifier: NPelT5PsrKHo4DwG6BW5DtAh51jDFAwf96VFeBG5r+o= Subject key identifier: 24:04:17:16:DE:BF:CB:9E:26:1E:47:28:43:D5:45:87:49:95:E2:4F Authority key identifier: 4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50 Certificate issuer: /CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550 Certificate serial: 019AF31DA5FB0EC52EE934377DDBFD227A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:03:17 +0000 Manifest this update: Sat 06 Dec 2025 10:03:17 +0000 Manifest next update: Sun 07 Dec 2025 10:03:17 +0000 Files and hashes: 1: S_TZ-mawCKCMO47YLDgmfh0hJVA.crl (hash: oz+IFeYFWCW5kQ21vuzq4eTAYy+hnG9rigLTkHGfDBg=) 2: VHi9vxpSG4tYfENJTcecEKHCVRo.roa (hash: ZPBYgaWs41C7d8q4Zb2hDOx2GjzVI3YJSGRCZKGJpWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:a5:fb:0e:c5:2e:e9:34:37:7d:db:fd:22:7a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf4d9fa66b008a08c3b8ed82c38267e1d212550 Validity Not Before: Dec 6 10:03:17 2025 GMT Not After : Dec 7 10:03:17 2025 GMT Subject: CN=24041716debfcb9e261e472843d545874995e24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:a8:6a:c1:b1:49:e2:e2:07:13:19:97:d4: f9:28:0a:b6:10:52:0e:eb:a4:ea:30:0b:8f:8e:20: 25:fe:73:eb:c6:47:3b:66:f9:40:ef:7e:35:8e:2a: 1a:33:8f:80:74:50:f2:f5:9e:f5:f4:bb:53:2f:bf: 9e:c5:fc:09:cb:cb:1b:35:7d:1b:cd:be:96:47:ea: 0c:b3:c0:75:a2:db:8f:17:5c:e2:e4:0c:f5:1d:44: d1:7f:39:34:c4:55:a1:76:3b:10:1d:00:c7:33:b9: 72:90:34:40:7c:d3:a0:a7:53:d5:45:26:0d:07:74: 9a:3b:02:79:5c:9e:1d:df:ca:60:30:59:d0:ba:cf: b0:63:f7:05:d0:7f:c0:d0:13:3b:89:62:3a:d0:09: c3:e6:62:27:97:c9:89:50:84:ba:68:f1:7d:8e:92: 4a:bd:23:93:18:19:26:03:de:e0:b6:95:88:f9:5f: 60:2f:4f:fb:0c:d2:1a:bb:5f:44:a3:89:24:53:92: 30:e0:3c:b0:b8:6c:48:cc:03:71:c7:98:12:2b:9e: 43:b8:7f:a3:c4:f2:11:26:03:4d:6e:88:16:c8:69: f4:e3:8a:50:25:c4:5d:ec:94:14:42:d1:e2:a1:e8: 25:3f:03:c9:81:a7:a6:ce:2b:76:64:01:58:b1:00: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:04:17:16:DE:BF:CB:9E:26:1E:47:28:43:D5:45:87:49:95:E2:4F X509v3 Authority Key Identifier: keyid:4B:F4:D9:FA:66:B0:08:A0:8C:3B:8E:D8:2C:38:26:7E:1D:21:25:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_TZ-mawCKCMO47YLDgmfh0hJVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e810cd-6497-4d8a-91a5-bf57387662a0/1/S_TZ-mawCKCMO47YLDgmfh0hJVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6c:f3:9c:2e:f0:b5:6e:f2:af:90:24:1d:92:05:4d:4d:e0: 79:aa:08:62:d6:50:21:67:ba:b8:cd:b8:7c:0f:61:46:3f:4f: 46:07:ef:d3:17:87:81:dd:db:af:74:8b:11:3a:16:a9:f8:73: 38:13:a7:8f:37:14:6c:71:05:df:d4:a7:1b:65:40:ea:9d:b4: 41:91:b7:29:76:f8:f1:bf:92:81:a0:9f:4b:10:1a:50:4f:89: 06:99:c6:d6:de:a0:6e:46:d2:b4:f1:43:73:1c:79:08:c6:6f: 7f:84:c4:6d:5e:fd:88:99:6f:be:fa:d4:83:ec:d3:3e:20:76: 90:f6:17:6b:5b:e2:4b:20:10:bf:91:2e:a1:30:dd:83:24:c6: c2:d1:55:56:03:d1:cc:df:3f:c1:c6:37:de:57:98:b1:81:43: 4e:5d:0f:34:9d:49:0f:0e:16:a1:38:a9:75:ff:5f:c3:77:ea: 5a:58:7c:59:8e:6d:92:10:77:23:75:4c:57:e5:d4:aa:75:8c: 5b:e0:21:13:a9:34:a3:ee:2a:60:f9:e5:09:1a:14:0f:6b:b8: 40:50:7d:6a:04:8d:4c:b6:0d:15:7f:d4:02:84:00:22:de:7d: 07:15:38:be:e3:f5:f7:96:0f:ff:88:c4:25:d5:86:85:ce:8a: c2:e3:1f:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHaX7DsUu6TQ3fdv9Ino5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZjRkOWZhNjZiMDA4YTA4YzNiOGVkODJjMzgyNjdlMWQy MTI1NTAwHhcNMjUxMjA2MTAwMzE3WhcNMjUxMjA3MTAwMzE3WjAzMTEwLwYDVQQD EygyNDA0MTcxNmRlYmZjYjllMjYxZTQ3Mjg0M2Q1NDU4NzQ5OTVlMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms+oasGxSeLiBxMZl9T5KAq2EFIO 66TqMAuPjiAl/nPrxkc7ZvlA7341jioaM4+AdFDy9Z719LtTL7+exfwJy8sbNX0b zb6WR+oMs8B1otuPF1zi5Az1HUTRfzk0xFWhdjsQHQDHM7lykDRAfNOgp1PVRSYN B3SaOwJ5XJ4d38pgMFnQus+wY/cF0H/A0BM7iWI60AnD5mInl8mJUIS6aPF9jpJK vSOTGBkmA97gtpWI+V9gL0/7DNIau19Eo4kkU5Iw4DywuGxIzANxx5gSK55DuH+j xPIRJgNNbogWyGn044pQJcRd7JQUQtHioeglPwPJgaemzit2ZAFYsQD3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQEFxbev8ueJh5HKEPVRYdJleJPMB8GA1UdIwQY MBaAFEv02fpmsAigjDuO2Cw4Jn4dISVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUt YmY1NzM4NzY2MmEwLzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lODEwY2QtNjQ5Ny00ZDhhLTkxYTUtYmY1NzM4NzY2MmEw LzEvU19UWi1tYXdDS0NNTzQ3WUxEZ21maDBoSlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2zznC7w tW7yr5AkHZIFTU3geaoIYtZQIWe6uM24fA9hRj9PRgfv0xeHgd3br3SLEToWqfhz OBOnjzcUbHEF39SnG2VA6p20QZG3KXb48b+SgaCfSxAaUE+JBpnG1t6gbkbStPFD cxx5CMZvf4TEbV79iJlvvvrUg+zTPiB2kPYXa1viSyAQv5EuoTDdgyTGwtFVVgPR zN8/wcY33leYsYFDTl0PNJ1JDw4WoTipdf9fw3fqWlh8WY5tkhB3I3VMV+XUqnWM W+AhE6k0o+4qYPnlCRoUD2u4QFB9agSNTLYNFX/UAoQAIt59BxU4vuP195YP/4jE JdWGhc6KwuMfWA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:47 2025 by rpki-client