This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json) Hash identifier: jTxSsX6shUC1QlX90gBtq8zyfx0CoWH0Rfr9uiqEoXg= Subject key identifier: 96:11:DD:46:6B:BB:8C:7A:A6:36:33:BE:81:A0:F9:E4:D4:06:85:60 Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36 Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636 Certificate serial: 019AF31C931D366EABE56A02191D9768727E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft Manifest number: 10C3 Signing time: Sat 06 Dec 2025 10:02:07 +0000 Manifest this update: Sat 06 Dec 2025 10:02:07 +0000 Manifest next update: Sun 07 Dec 2025 10:02:07 +0000 Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: kchCpeVOIf70SkdGIN1ZMOHsw3/2juZoKNH4fmpy/3Y=) 2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:93:1d:36:6e:ab:e5:6a:02:19:1d:97:68:72:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636 Validity Not Before: Dec 6 10:02:07 2025 GMT Not After : Dec 7 10:02:07 2025 GMT Subject: CN=9611dd466bbb8c7aa63633be81a0f9e4d4068560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:f0:38:a3:45:27:f2:47:a8:22:9f:49:1a: 21:fe:57:f9:2b:89:f3:0a:19:12:57:84:02:19:c7: 58:10:a8:14:f7:5b:cc:36:ae:8c:84:43:d4:ca:a5: 87:bf:bf:ef:e1:b1:d7:db:91:6b:98:5e:bd:0e:ce: 39:53:01:69:20:f7:9e:db:f6:59:22:ab:c0:63:1a: 9d:95:68:e9:d3:49:a5:13:bd:9d:ab:73:77:c5:18: 4d:c8:12:03:87:ef:81:3c:6f:eb:2a:df:c1:2f:86: 82:a3:72:62:74:e5:6a:34:1e:6a:e4:21:af:99:e3: 78:bf:70:69:ba:6d:bc:39:4d:dd:50:ef:4b:7e:41: 40:6d:77:61:92:2c:1f:0b:da:7f:6d:b0:a2:fa:ab: b8:32:bf:cb:98:10:a2:99:12:00:48:6d:9e:48:53: 6b:f4:ed:51:cf:77:26:70:3e:7c:88:53:90:ea:41: 3e:29:ea:2f:ef:bb:11:fc:e7:84:3f:8a:8a:14:a6: 4a:b3:5f:1f:b2:b8:a1:b6:6b:55:de:a8:71:10:11: d4:55:69:0d:56:a9:5a:ad:a5:1b:54:d8:f8:5b:8c: 15:29:48:24:e7:2f:23:f6:0c:68:f3:5a:3a:d9:51: 54:48:ae:39:f2:cd:14:73:ba:fd:fa:80:f7:46:73: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:DD:46:6B:BB:8C:7A:A6:36:33:BE:81:A0:F9:E4:D4:06:85:60 X509v3 Authority Key Identifier: keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d2:55:0d:7f:d5:b6:4b:8e:25:bf:10:3b:65:0d:4d:eb:53: bb:3e:12:85:bf:5d:88:9a:06:93:43:6c:1b:b2:e8:7a:7f:55: 1b:54:b9:87:76:9f:a5:0e:73:8e:9c:25:7d:af:aa:cd:48:88: f7:1f:53:0e:4b:55:dd:36:ae:46:ed:29:8c:03:95:d8:79:05: 4b:52:34:92:8e:01:80:39:52:6c:59:eb:6d:68:75:c9:1f:2d: a2:78:8f:38:84:40:29:b9:72:c3:9a:a9:5c:e1:ee:56:69:29: a1:f9:b4:d5:e7:cb:97:ff:75:86:1d:87:20:71:94:76:29:e0: f3:27:27:9c:ee:b5:a9:57:58:d0:c5:5a:70:a5:ef:c0:64:bf: 16:13:27:a5:9c:9c:7c:27:f7:56:27:ab:9b:59:f1:75:df:54: 66:fe:66:8c:59:9a:09:5a:9d:60:14:5e:97:03:dc:78:54:24: f3:e3:db:16:3b:3c:04:f6:4e:66:d0:4c:2c:3a:05:f3:4e:6a: ee:40:92:1f:20:49:13:31:da:61:a3:6d:94:a0:3a:08:00:a9: 4c:a2:f2:e0:40:d9:68:50:41:7a:c2:74:44:21:6a:de:1d:6f: 50:86:55:6f:91:05:1e:ac:75:49:b4:78:97:0d:73:f8:ca:73: 0c:3a:02:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJMdNm6r5WoCGR2XaHJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOTJiZTAyNTA5NjQzYmM3YTJmODYyODcxNjM5ZDA4ZTI3 NmM2MzYwHhcNMjUxMjA2MTAwMjA3WhcNMjUxMjA3MTAwMjA3WjAzMTEwLwYDVQQD Eyg5NjExZGQ0NjZiYmI4YzdhYTYzNjMzYmU4MWEwZjllNGQ0MDY4NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/LwOKNFJ/JHqCKfSRoh/lf5K4nz ChkSV4QCGcdYEKgU91vMNq6MhEPUyqWHv7/v4bHX25FrmF69Ds45UwFpIPee2/ZZ IqvAYxqdlWjp00mlE72dq3N3xRhNyBIDh++BPG/rKt/BL4aCo3JidOVqNB5q5CGv meN4v3Bpum28OU3dUO9LfkFAbXdhkiwfC9p/bbCi+qu4Mr/LmBCimRIASG2eSFNr 9O1Rz3cmcD58iFOQ6kE+Keov77sR/OeEP4qKFKZKs18fsrihtmtV3qhxEBHUVWkN VqlaraUbVNj4W4wVKUgk5y8j9gxo81o62VFUSK458s0Uc7r9+oD3RnMhTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYR3UZru4x6pjYzvoGg+eTUBoVgMB8GA1UdIwQY MBaAFE2SvgJQlkO8ei+GKHFjnQjidsY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2Mt YjczMTJhYjIwMjczLzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2MtYjczMTJhYjIwMjcz LzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttJVDX/V tkuOJb8QO2UNTetTuz4Shb9diJoGk0NsG7Loen9VG1S5h3afpQ5zjpwlfa+qzUiI 9x9TDktV3TauRu0pjAOV2HkFS1I0ko4BgDlSbFnrbWh1yR8toniPOIRAKblyw5qp XOHuVmkpofm01efLl/91hh2HIHGUding8ycnnO61qVdY0MVacKXvwGS/FhMnpZyc fCf3Vierm1nxdd9UZv5mjFmaCVqdYBRelwPceFQk8+PbFjs8BPZOZtBMLDoF805q 7kCSHyBJEzHaYaNtlKA6CACpTKLy4EDZaFBBesJ0RCFq3h1vUIZVb5EFHqx1SbR4 lw1z+MpzDDoCBA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:51 2025 by rpki-client