This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json) Hash identifier: nmC1SS0gwZLULqZLPs4OVHZeqpxSID6xPiXILaZ5aJk= Subject key identifier: 3C:2B:32:57:1E:35:2E:8B:B7:E5:4B:A9:82:F0:3D:18:03:7F:AD:29 Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Certificate serial: 019AF42E7234BAD2B2DEA9852A10FA3E85A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 15:01:15 +0000 Manifest this update: Sat 06 Dec 2025 15:01:15 +0000 Manifest next update: Sun 07 Dec 2025 15:01:15 +0000 Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=) 2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=) 3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: 1tuUtJos/Lu1pF0f8qau6ozzDizgcufCuBc/ERQqjSE=) 4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=) 5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:72:34:ba:d2:b2:de:a9:85:2a:10:fa:3e:85:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Validity Not Before: Dec 6 15:01:15 2025 GMT Not After : Dec 7 15:01:15 2025 GMT Subject: CN=3c2b32571e352e8bb7e54ba982f03d18037fad29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:78:2f:a9:78:c5:ec:f0:e4:5f:13:3c:44:af: a7:79:e8:55:53:3e:0b:f1:43:b7:a4:73:c2:97:c3: c6:f1:73:94:46:c5:47:fe:1e:19:bc:a0:41:db:80: 2e:7b:cd:00:0e:f7:83:b4:23:af:9a:6d:ff:50:c3: 29:a6:0a:5b:42:64:07:df:68:05:5c:a4:fe:a4:3b: 9d:94:0e:91:6a:6e:db:f3:b7:71:d1:3b:54:93:93: 82:6c:72:d7:5c:72:e6:d5:78:99:1a:f8:46:d1:eb: c5:d0:c8:8e:0a:3d:ce:cc:8e:2c:54:a4:20:0c:a6: a3:40:e5:2b:a2:b9:7d:66:6c:83:57:8d:82:b5:2a: d0:bf:30:c9:19:56:3b:bf:aa:62:75:ae:de:81:1e: 65:fb:44:6c:0a:bb:3d:8f:2b:c3:2f:b8:6c:44:ae: 2c:6f:4d:78:3a:35:e8:6d:af:8d:01:c5:95:8a:1e: f2:6c:3a:a5:be:e7:74:e5:bd:a1:15:c4:0b:0e:2b: bc:6f:4c:35:70:98:a3:20:01:69:2a:db:fd:75:14: a5:79:1b:23:cd:b5:ba:81:28:8b:93:9a:c2:7d:56: d9:99:b5:6c:b3:fd:ba:17:a6:e1:41:0e:ea:41:7a: 14:dc:cd:59:33:32:78:b9:f7:65:d6:67:a9:ac:da: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:32:57:1E:35:2E:8B:B7:E5:4B:A9:82:F0:3D:18:03:7F:AD:29 X509v3 Authority Key Identifier: keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:36:09:b7:48:db:f3:e5:dd:58:90:2f:71:2d:00:68:15:a3: e7:30:a7:b6:c5:79:27:f9:1b:00:e8:99:14:61:4f:fd:c0:5d: 02:cc:d4:f9:5e:a0:6e:c8:cc:4a:01:1c:50:a9:ea:68:b8:88: f0:7e:90:6c:29:b3:47:a9:0a:74:16:c1:79:b0:94:b4:c0:c1: 57:e3:ed:37:40:75:d4:1c:3e:3c:ae:fb:6f:69:fe:de:ef:49: d3:c6:37:be:b0:2a:b1:12:e5:5c:26:3a:d7:f2:44:1d:c3:54: 94:30:ec:4a:69:01:c4:fc:74:99:98:f0:97:d9:df:65:d4:9a: 6c:6e:15:fc:dc:cf:5b:98:d9:48:e7:2f:31:b5:46:49:ae:17: eb:44:8e:95:be:4c:bb:92:19:74:a2:92:40:29:64:07:78:0a: ac:4f:c7:e4:4c:99:53:7a:c6:c7:3c:82:dd:b5:90:6f:e7:78: eb:42:52:f8:ad:3f:1a:1c:55:6b:28:eb:1f:51:ed:33:25:71: 5f:3a:cc:b9:e8:3d:4b:b8:3f:ce:ce:d1:c8:6f:e1:c7:ee:f6: e2:c6:7c:a0:2b:c7:6e:6e:79:02:ad:e7:ea:cf:14:cd:65:55: d3:10:0f:fd:86:1a:84:06:1e:5d:a8:66:c3:c6:88:1c:a8:2b: 5e:08:59:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnI0utKy3qmFKhD6PoWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy YTgxZWEwHhcNMjUxMjA2MTUwMTE1WhcNMjUxMjA3MTUwMTE1WjAzMTEwLwYDVQQD EygzYzJiMzI1NzFlMzUyZThiYjdlNTRiYTk4MmYwM2QxODAzN2ZhZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53gvqXjF7PDkXxM8RK+neehVUz4L 8UO3pHPCl8PG8XOURsVH/h4ZvKBB24Aue80ADveDtCOvmm3/UMMppgpbQmQH32gF XKT+pDudlA6Ram7b87dx0TtUk5OCbHLXXHLm1XiZGvhG0evF0MiOCj3OzI4sVKQg DKajQOUrorl9ZmyDV42CtSrQvzDJGVY7v6pida7egR5l+0RsCrs9jyvDL7hsRK4s b014OjXoba+NAcWVih7ybDqlvud05b2hFcQLDiu8b0w1cJijIAFpKtv9dRSleRsj zbW6gSiLk5rCfVbZmbVss/26F6bhQQ7qQXoU3M1ZMzJ4ufdl1meprNpUfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwrMlceNS6Lt+VLqYLwPRgDf60pMB8GA1UdIwQY MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1 LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDYJt0jb 8+XdWJAvcS0AaBWj5zCntsV5J/kbAOiZFGFP/cBdAszU+V6gbsjMSgEcUKnqaLiI 8H6QbCmzR6kKdBbBebCUtMDBV+PtN0B11Bw+PK77b2n+3u9J08Y3vrAqsRLlXCY6 1/JEHcNUlDDsSmkBxPx0mZjwl9nfZdSabG4V/NzPW5jZSOcvMbVGSa4X60SOlb5M u5IZdKKSQClkB3gKrE/H5EyZU3rGxzyC3bWQb+d460JS+K0/GhxVayjrH1HtMyVx XzrMueg9S7g/zs7RyG/hx+724sZ8oCvHbm55Aq3n6s8UzWVV0xAP/YYahAYeXahm w8aIHKgrXghZlw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:43 2025 by rpki-client