This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json) Hash identifier: QnCjne9ftJNW0poPp1WrrQYiHCPPJaUqX8l6aWCwCuw= Subject key identifier: F2:B9:A1:6C:0A:1D:06:C5:72:4D:36:F8:BF:ED:FF:4B:CF:4C:B2:56 Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Certificate serial: 019B4AA7C28F1BEA0C52ABBA473248B614B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft Manifest number: 062E Signing time: Tue 23 Dec 2025 10:01:06 +0000 Manifest this update: Tue 23 Dec 2025 10:01:06 +0000 Manifest next update: Wed 24 Dec 2025 10:01:06 +0000 Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=) 2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: EwJqYGWTvgNo/zNtlMnKw31T3O0CZWCUcMuFsYs1m/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:c2:8f:1b:ea:0c:52:ab:ba:47:32:48:b6:14:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Validity Not Before: Dec 23 10:01:06 2025 GMT Not After : Dec 24 10:01:06 2025 GMT Subject: CN=f2b9a16c0a1d06c5724d36f8bfedff4bcf4cb256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:4d:22:fe:1d:90:bc:b3:96:bb:2f:dd:9d: f8:d2:77:d5:4f:19:0e:ba:eb:54:e1:0e:6e:f9:44: 0c:fd:01:ff:35:b2:c2:02:fc:21:ad:a8:12:73:c4: c8:bc:ca:3b:15:57:d1:8d:04:7b:3d:f7:47:1b:80: 98:22:17:56:8f:e7:ee:90:1e:e1:18:61:2a:43:d1: a0:92:9d:e1:30:c0:61:b7:c9:d7:ac:5d:8e:3f:6d: 4c:f6:a2:b7:37:f2:ce:5c:da:25:e7:4f:7f:84:b4: 02:ce:a3:aa:a8:14:34:79:ef:74:c5:b4:f5:c5:a7: 0e:cd:2c:95:ce:c1:c4:ec:e2:07:96:6d:9c:b5:e6: df:36:4c:03:a5:79:1f:8b:d4:3e:47:18:05:ea:6a: a3:84:0f:50:89:48:ef:94:19:4b:99:a3:0b:a6:3a: b2:6f:a3:d4:59:2a:69:57:ff:bf:21:66:6f:cb:7f: 21:11:37:c4:9c:e9:65:7a:b7:fd:23:e6:f8:22:04: d1:31:e7:27:1b:cc:10:9e:9a:a5:c4:b4:6d:69:e0: 51:6e:df:1c:fe:b8:66:05:ab:65:c5:d1:28:6b:7a: 87:85:9e:f3:97:a3:90:d0:b2:a8:cc:3a:02:aa:35: 7d:b1:29:7c:31:3d:ec:2d:ca:91:9e:29:12:24:a5: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B9:A1:6C:0A:1D:06:C5:72:4D:36:F8:BF:ED:FF:4B:CF:4C:B2:56 X509v3 Authority Key Identifier: keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2a:11:96:17:6f:2a:d4:1e:60:e7:df:02:cf:6a:fd:71:c9: 44:11:2b:4c:d2:80:73:e8:70:46:2d:a6:1e:91:aa:34:49:23: 78:71:01:e0:00:5a:87:48:f5:0e:dc:5c:ec:fb:6a:71:93:2e: 0d:b8:fb:42:6b:a3:b5:70:5e:2f:f1:b5:17:13:40:c5:e6:2c: 48:e8:6e:9c:ec:56:89:b8:32:2b:05:76:4d:39:ff:e6:d0:fa: c2:8f:58:d4:37:93:91:65:e5:b8:87:6c:c1:80:6e:35:c3:a9: af:17:bf:a5:e9:8b:b3:c6:47:5b:1f:2d:95:44:ac:4e:21:3c: 15:93:4d:9f:94:b2:18:91:b9:6b:85:19:e9:19:c5:38:ce:4d: 5e:1c:45:4e:a0:25:66:13:7e:17:2c:94:9f:c5:43:be:16:09: 31:43:8d:7d:05:58:a2:45:58:e0:16:f4:f2:6e:b7:3a:cd:55: 2c:d9:f7:d5:01:e5:29:e4:8e:29:aa:6a:41:92:db:08:42:84: 38:85:b9:32:88:1a:d6:8a:07:37:10:af:0d:70:55:44:2c:18: b6:9c:00:98:df:2a:a1:ed:01:03:9a:52:a4:3b:f7:5a:d3:d2: 74:37:13:ae:d7:62:49:4c:29:e3:1d:f7:ed:82:f2:ab:17:03: 9e:dc:9a:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp8KPG+oMUqu6RzJIthSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx ZTMyMDMwHhcNMjUxMjIzMTAwMTA2WhcNMjUxMjI0MTAwMTA2WjAzMTEwLwYDVQQD EyhmMmI5YTE2YzBhMWQwNmM1NzI0ZDM2ZjhiZmVkZmY0YmNmNGNiMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv9NIv4dkLyzlrsv3Z340nfVTxkO uutU4Q5u+UQM/QH/NbLCAvwhragSc8TIvMo7FVfRjQR7PfdHG4CYIhdWj+fukB7h GGEqQ9Ggkp3hMMBht8nXrF2OP21M9qK3N/LOXNol509/hLQCzqOqqBQ0ee90xbT1 xacOzSyVzsHE7OIHlm2ctebfNkwDpXkfi9Q+RxgF6mqjhA9QiUjvlBlLmaMLpjqy b6PUWSppV/+/IWZvy38hETfEnOllerf9I+b4IgTRMecnG8wQnpqlxLRtaeBRbt8c /rhmBatlxdEoa3qHhZ7zl6OQ0LKozDoCqjV9sSl8MT3sLcqRnikSJKXndwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK5oWwKHQbFck02+L/t/0vPTLJWMB8GA1UdIwQY MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1 LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSoRlhdv KtQeYOffAs9q/XHJRBErTNKAc+hwRi2mHpGqNEkjeHEB4ABah0j1Dtxc7PtqcZMu Dbj7QmujtXBeL/G1FxNAxeYsSOhunOxWibgyKwV2TTn/5tD6wo9Y1DeTkWXluIds wYBuNcOprxe/pemLs8ZHWx8tlUSsTiE8FZNNn5SyGJG5a4UZ6RnFOM5NXhxFTqAl ZhN+FyyUn8VDvhYJMUONfQVYokVY4Bb08m63Os1VLNn31QHlKeSOKapqQZLbCEKE OIW5Moga1ooHNxCvDXBVRCwYtpwAmN8qoe0BA5pSpDv3WtPSdDcTrtdiSUwp4x33 7YLyqxcDntyatw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:04:42 2025 by rpki-client