This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json) Hash identifier: nZe0BG5CEHGII37zWVQJC2LRlcDc4pgwx7aDzV4B538= Subject key identifier: 3C:46:EA:0C:48:9E:E7:09:47:19:42:6D:24:B8:20:57:2B:C8:8E:7A Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Certificate serial: 019AF50AA0DC1F30D1C928FBD9438AC4519B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:45 +0000 Manifest this update: Sat 06 Dec 2025 19:01:45 +0000 Manifest next update: Sun 07 Dec 2025 19:01:45 +0000 Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 7c4dlVaS7MERRCmRk6fJXsfUqYbvmUHeDXT64ATZrPc=) 2: UqGmWpGtflaEJvCw0bHQvmEnA74.roa (hash: EKIY9C4V0PmpfSkXvjVMr8vcUWFSLcsQTMlkDeIRJyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a0:dc:1f:30:d1:c9:28:fb:d9:43:8a:c4:51:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a Validity Not Before: Dec 6 19:01:45 2025 GMT Not After : Dec 7 19:01:45 2025 GMT Subject: CN=3c46ea0c489ee7094719426d24b820572bc88e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:e4:90:a3:4c:ca:8c:32:a4:d7:41:8e:13: 3d:d0:d7:7f:65:3c:cc:4c:b1:17:a0:fd:6b:40:59: 8b:cd:ec:74:ba:f3:30:68:03:2e:44:56:50:fd:85: 6a:56:53:d8:96:ae:5a:b7:ac:ef:52:f0:f9:a3:32: 5f:13:f6:d8:14:7d:33:d7:a5:09:e7:41:32:09:b9: bc:ba:28:f8:87:e6:d0:80:e8:a9:e3:8c:8e:80:75: 44:10:ff:7d:e1:64:05:bd:49:7a:fb:bd:b5:c5:e2: 9e:a3:f2:a0:44:a8:26:fc:3d:0f:1e:e4:d0:81:c3: 58:aa:86:7b:58:23:32:ac:b8:02:39:86:6b:3e:11: 38:04:8f:af:c1:f1:aa:6b:31:31:81:24:4d:57:0e: c4:0e:50:5a:d9:69:58:a7:cf:35:a1:ec:57:03:15: 28:37:6a:81:c9:01:67:ff:0f:60:83:ef:94:75:83: e7:e0:a6:60:0f:67:07:1a:87:e1:36:52:77:85:2f: 41:ef:ea:db:5c:ab:ff:de:fd:97:b2:8d:da:2c:0b: ba:e0:ce:ee:61:7c:45:a0:a9:54:98:82:21:72:c8: 3e:a3:b0:69:3e:64:b1:35:f2:c1:58:d5:8c:9e:f0: d2:95:e6:1c:65:b1:c9:b6:df:8f:c7:90:cd:32:7a: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:EA:0C:48:9E:E7:09:47:19:42:6D:24:B8:20:57:2B:C8:8E:7A X509v3 Authority Key Identifier: keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d8:0c:e9:9c:e2:a8:14:9b:48:22:1f:3a:db:dd:55:2c:66: e6:95:cc:12:b6:f3:a0:cb:dc:e6:3b:3d:71:50:20:07:09:0c: fc:0b:9b:e5:e2:8d:54:d1:b4:aa:7d:25:5b:c2:e4:86:ee:ff: cd:da:97:47:3f:8b:cc:56:f2:59:58:51:27:b7:d5:55:aa:71: 6b:c6:2b:be:a2:f4:85:a8:a5:51:85:27:d7:9c:bd:e2:69:c3: 86:77:3e:4b:e8:f7:95:de:74:70:ad:05:f3:a0:09:a8:31:be: 89:cb:e7:84:eb:40:4a:bb:23:cc:62:de:13:2f:81:50:aa:0d: 83:9a:ed:d2:65:5c:5c:e5:e7:0c:e2:a6:bd:ce:6d:e5:d5:e1: 5e:d6:28:29:b5:4e:e1:91:47:ab:db:27:99:c5:c9:d3:7f:0b: 36:bd:44:a7:7c:73:d3:ad:11:d2:14:eb:76:23:c3:81:51:7b: a9:e5:72:70:36:46:9b:14:a1:79:31:f1:8b:31:91:2a:49:4f: 20:b9:c7:d1:bc:64:4e:73:8e:dd:63:88:b1:cc:44:51:d8:06: ac:58:b7:2d:70:58:89:e6:3f:37:60:87:35:f4:39:6a:c3:3e: a3:73:d4:4a:80:4f:b4:de:e1:d5:80:d5:7b:bf:cd:98:56:a8: ee:ab:f9:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqDcHzDRySj72UOKxFGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi MWE5OGEwHhcNMjUxMjA2MTkwMTQ1WhcNMjUxMjA3MTkwMTQ1WjAzMTEwLwYDVQQD EygzYzQ2ZWEwYzQ4OWVlNzA5NDcxOTQyNmQyNGI4MjA1NzJiYzg4ZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5vkkKNMyowypNdBjhM90Nd/ZTzM TLEXoP1rQFmLzex0uvMwaAMuRFZQ/YVqVlPYlq5at6zvUvD5ozJfE/bYFH0z16UJ 50EyCbm8uij4h+bQgOip44yOgHVEEP994WQFvUl6+721xeKeo/KgRKgm/D0PHuTQ gcNYqoZ7WCMyrLgCOYZrPhE4BI+vwfGqazExgSRNVw7EDlBa2WlYp881oexXAxUo N2qByQFn/w9gg++UdYPn4KZgD2cHGofhNlJ3hS9B7+rbXKv/3v2Xso3aLAu64M7u YXxFoKlUmIIhcsg+o7BpPmSxNfLBWNWMnvDSleYcZbHJtt+Px5DNMnqF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxG6gxInucJRxlCbSS4IFcryI56MB8GA1UdIwQY MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNgM6Zzi qBSbSCIfOtvdVSxm5pXMErbzoMvc5js9cVAgBwkM/Aub5eKNVNG0qn0lW8Lkhu7/ zdqXRz+LzFbyWVhRJ7fVVapxa8YrvqL0hailUYUn15y94mnDhnc+S+j3ld50cK0F 86AJqDG+icvnhOtASrsjzGLeEy+BUKoNg5rt0mVcXOXnDOKmvc5t5dXhXtYoKbVO 4ZFHq9snmcXJ038LNr1Ep3xz060R0hTrdiPDgVF7qeVycDZGmxSheTHxizGRKklP ILnH0bxkTnOO3WOIscxEUdgGrFi3LXBYieY/N2CHNfQ5asM+o3PUSoBPtN7h1YDV e7/NmFao7qv5kA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:27 2025 by rpki-client