This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json) Hash identifier: ignikbP1TsHOLFkL8JNCS/Q8dw06gtEYIrm8qQbfzRg= Subject key identifier: 5F:22:95:63:27:02:12:6F:80:BD:71:3B:62:28:22:7A:36:66:F9:CE Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Certificate serial: 019AF31B24A43B7593DC471033737CFCD37A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:00:33 +0000 Manifest this update: Sat 06 Dec 2025 10:00:33 +0000 Manifest next update: Sun 07 Dec 2025 10:00:33 +0000 Files and hashes: 1: EyfFy2NH9aJCITkH8OY0aqXp60U.roa (hash: g2tjwAhWJaxtQGBOt8pN1pr0p20riiq5xD7kk7B2kOI=) 2: JpQoMr07IMCnzpUf3J5IOOFupZQ.roa (hash: 0/xTgfGRIN2+JskAIstMX9/OEPtDKUPLwgbvCnLM6hA=) 3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: uBfNRY9cSzeO1lz3Hz1fIQfzNkJ9geQHA7rIPmUow50=) 4: uuK2CvjDB1elMTvaPuzNpmsW9KY.roa (hash: S75QfkrkhNbGGxbOdQrVjlRuXr4OJ2AaZXwkQhwwcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:24:a4:3b:75:93:dc:47:10:33:73:7c:fc:d3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Validity Not Before: Dec 6 10:00:33 2025 GMT Not After : Dec 7 10:00:33 2025 GMT Subject: CN=5f2295632702126f80bd713b6228227a3666f9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:5d:09:86:6b:72:62:48:a4:94:5c:e4:92: 9f:c6:50:bb:52:78:df:67:fe:3c:c9:78:04:65:a6: 8a:5b:a1:c0:af:a7:18:c1:3c:3f:5b:c4:fc:f9:57: 27:3a:87:47:77:0b:0b:3e:5f:84:71:38:9f:a3:3f: f5:bd:ae:a8:ce:d1:22:bd:e4:d1:fe:df:f4:89:2a: 07:1a:e0:57:b1:0a:e3:83:cf:63:86:ba:95:4a:13: 19:90:18:06:10:4c:08:53:07:07:70:56:6e:f2:89: ea:e5:24:8f:26:d6:6d:be:8f:20:0b:05:c7:99:a6: 9d:ce:23:fc:3c:61:8f:e1:f4:b5:d6:ba:7a:69:03: 57:24:45:28:6d:78:86:ea:45:3b:26:07:5d:a2:d3: 9c:d6:60:21:79:25:f2:d9:da:4b:ef:07:5c:34:1a: 90:49:cd:ae:6e:ce:07:68:9b:44:39:65:e4:2b:2e: 78:9f:02:06:eb:68:3d:02:34:20:fa:6b:a7:a0:5d: 65:e4:38:41:f6:b4:86:0d:04:79:17:01:68:f7:f7: be:b3:1f:02:e1:7c:7e:99:ed:06:f5:33:21:1e:41: b8:88:4e:5c:48:d4:13:6e:5a:05:ab:6d:d5:83:9c: dc:d6:35:13:78:92:47:ff:bc:19:08:91:c4:b1:82: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:22:95:63:27:02:12:6F:80:BD:71:3B:62:28:22:7A:36:66:F9:CE X509v3 Authority Key Identifier: keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:66:3b:91:b0:9b:a3:8f:ab:8c:ff:0a:66:b4:f5:4d:3a:9d: bf:41:2a:a9:d0:48:ee:b0:93:dc:fd:14:c1:2e:02:69:2b:6d: ee:92:69:98:bd:00:a4:4e:cf:7e:fc:89:b7:7c:2b:79:5b:96: 94:76:9c:38:ac:09:07:47:6b:fd:1d:f5:c8:d1:47:e8:97:be: 8b:10:fe:31:77:f1:66:c4:3b:b8:3b:d7:ba:31:ee:05:07:2e: cc:ef:0a:56:67:8c:4a:8d:71:57:cf:2f:19:e7:99:16:af:77: 3e:0e:1d:2a:a0:34:0d:53:ee:40:5f:f0:54:12:a2:a3:8c:83: aa:51:09:b6:98:45:72:a8:59:cc:7b:15:bc:06:6d:94:c7:29: c8:57:ff:d6:72:77:3a:fa:fb:0e:b8:ab:e2:87:ae:de:f8:28: a9:f2:c5:7f:5d:2c:bd:5c:44:5e:2d:2f:dd:4d:04:18:1f:6c: 3c:db:23:f9:a4:9d:7b:fc:1e:3d:6e:9e:a5:2b:46:14:22:04: 77:e1:bf:e3:d1:c3:94:cb:2b:fd:0c:d6:7e:5e:91:f1:68:73: 5f:be:27:89:be:80:9f:90:79:09:96:4a:c0:7d:15:91:ba:9d: f3:d9:24:29:4d:9d:bc:a4:5d:e5:be:52:67:9c:b1:4c:f1:76: 15:d5:75:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGySkO3WT3EcQM3N8/NN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4 ZDM1ZmMwHhcNMjUxMjA2MTAwMDMzWhcNMjUxMjA3MTAwMDMzWjAzMTEwLwYDVQQD Eyg1ZjIyOTU2MzI3MDIxMjZmODBiZDcxM2I2MjI4MjI3YTM2NjZmOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSVdCYZrcmJIpJRc5JKfxlC7Unjf Z/48yXgEZaaKW6HAr6cYwTw/W8T8+VcnOodHdwsLPl+EcTifoz/1va6oztEiveTR /t/0iSoHGuBXsQrjg89jhrqVShMZkBgGEEwIUwcHcFZu8onq5SSPJtZtvo8gCwXH maadziP8PGGP4fS11rp6aQNXJEUobXiG6kU7JgddotOc1mAheSXy2dpL7wdcNBqQ Sc2ubs4HaJtEOWXkKy54nwIG62g9AjQg+munoF1l5DhB9rSGDQR5FwFo9/e+sx8C 4Xx+me0G9TMhHkG4iE5cSNQTbloFq23Vg5zc1jUTeJJH/7wZCJHEsYKg5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8ilWMnAhJvgL1xO2IoIno2ZvnOMB8GA1UdIwQY MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt YzQwNzNjMTNmZjdjLzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGY7kbCb o4+rjP8KZrT1TTqdv0EqqdBI7rCT3P0UwS4CaStt7pJpmL0ApE7PfvyJt3wreVuW lHacOKwJB0dr/R31yNFH6Je+ixD+MXfxZsQ7uDvXujHuBQcuzO8KVmeMSo1xV88v GeeZFq93Pg4dKqA0DVPuQF/wVBKio4yDqlEJtphFcqhZzHsVvAZtlMcpyFf/1nJ3 Ovr7Drir4oeu3vgoqfLFf10svVxEXi0v3U0EGB9sPNsj+aSde/wePW6epStGFCIE d+G/49HDlMsr/QzWfl6R8WhzX74nib6An5B5CZZKwH0Vkbqd89kkKU2dvKRd5b5S Z5yxTPF2FdV1Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:13 2025 by rpki-client