This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: yq4MurSiMflfY5MZ8SEfDxNG84219F83VLq+nZT0qb0= Subject key identifier: E3:AF:51:F5:F3:22:06:1E:6B:AA:00:9E:38:B0:1F:7A:7C:49:66:6F Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019AF8E807B6B7FC174D6E7CDB22BD3C0578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 1788 Signing time: Sun 07 Dec 2025 13:02:27 +0000 Manifest this update: Sun 07 Dec 2025 13:02:27 +0000 Manifest next update: Mon 08 Dec 2025 13:02:27 +0000 Files and hashes: 1: Fg0uKp3KzK9Z6JH5UhH7WuwVnZU.roa (hash: V2gXPJdj6ekMjp/tE7s1qlDZ8F6P9cafMgL/dwyxEt8=) 2: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=) 3: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=) 4: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=) 5: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: qxrC8YRrYvCpX9sPLXcKhCmVdBK0422AtBRIkj5aWkc=) 6: goaehW6miRu49OgNqpgG3rbQsXI.roa (hash: ONFsgrV+lwe2PVqjFxq7Gt+JlrAemij5QB6wyp+3m1Y=) 7: iYrh6kgklmXt3OMm1j72TOtV99Q.roa (hash: G93OEfB6NAVCu9uU8ghRcqmmsrUeCTXAMsgU4oLPza4=) 8: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=) 9: qkm-dGrO1KB7zPSYZkfbAOZu2Jk.roa (hash: 4nzLJ3+1Nxzwd/rO/ckXGrhnSOi7MDSoWC6fmMd5N2o=) 10: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=) 11: u-uXh8WZWOS9uWtRFI-rTtX1S9A.roa (hash: kDD2Qmq25WjJ3/Vhs1pz7/0NseMdnFHogi9MbnP9L+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e8:07:b6:b7:fc:17:4d:6e:7c:db:22:bd:3c:05:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Dec 7 13:02:27 2025 GMT Not After : Dec 8 13:02:27 2025 GMT Subject: CN=e3af51f5f322061e6baa009e38b01f7a7c49666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:17:fd:60:10:99:d0:74:8c:aa:f1:68:cc: 6b:7a:67:cf:16:5a:28:59:81:b5:95:70:b6:9f:2a: dd:f0:78:83:d5:e9:c9:c9:76:32:fb:3d:7f:22:f4: e4:67:88:24:0a:27:85:71:a8:cd:a0:2a:43:48:a1: 9d:b5:73:95:69:1a:3e:3a:b3:09:34:c8:87:48:f1: 8d:d5:a8:cd:5d:05:ab:c6:11:63:25:0c:3d:f0:e9: 15:b4:3d:4b:68:47:e9:fe:65:aa:58:bc:9f:2f:74: fc:6b:29:50:74:ce:55:af:17:27:1a:a1:7f:fa:ae: 61:1c:d6:90:70:18:70:de:57:1f:60:c3:7b:00:4f: 74:3a:11:4f:d9:e0:93:22:a1:e6:12:3e:92:13:e5: 8c:37:cd:20:d3:99:9f:d2:49:e6:1d:4c:11:ee:66: 81:53:e5:8e:95:a3:a5:11:0d:0e:c0:0f:8c:2f:55: 69:c2:95:3b:9e:3f:47:fe:f2:f2:fa:53:d3:3c:da: 2e:0c:09:39:ab:50:3f:3e:73:dc:d3:c3:cb:bc:3a: e0:5f:4e:66:b1:a7:e2:e5:72:27:21:d7:94:52:0f: 82:64:de:d1:58:20:12:85:4f:39:78:b8:5b:f8:b8: c3:c0:e9:54:37:e6:a9:cf:30:69:62:9d:64:5b:b6: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:51:F5:F3:22:06:1E:6B:AA:00:9E:38:B0:1F:7A:7C:49:66:6F X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6f:55:34:dc:93:9b:a5:c7:69:46:44:0e:ec:5c:8c:c2:aa: 73:93:f7:c1:af:ca:6d:85:a3:6a:d9:08:48:fb:65:a4:ec:81: 93:b2:2f:89:b8:2d:37:5d:f3:9e:d4:1c:fd:e3:3e:91:48:c9: d5:f9:3a:b0:8c:77:2d:bd:19:77:1c:d4:e7:c7:97:a8:a8:52: 3c:4a:68:9d:01:a6:d5:02:f7:4e:83:c2:d6:57:22:b3:25:42: b2:e4:db:bb:f1:e1:bb:73:de:9c:4b:e1:9d:4d:ee:6b:a5:69: b2:3a:07:10:7f:f7:37:e4:cb:e5:8e:2e:62:86:3b:43:04:55: cf:80:17:3e:ec:1f:0a:7e:11:95:75:86:3b:41:65:4d:02:00: 87:b6:63:2d:59:69:92:7c:c5:ae:d3:31:c6:e1:5f:1d:95:22: 50:c8:02:c8:6e:9e:60:e8:0c:7f:b2:94:34:8c:4c:9d:a7:15: 2a:62:df:a2:e3:65:f8:d7:cb:1f:27:22:f6:8b:03:66:29:e7: ca:f6:87:8d:cc:9d:5b:55:3c:ee:5e:37:98:a9:07:bd:ab:7d: f7:c3:53:6d:68:59:22:7f:c9:f9:96:1f:24:a3:6c:de:34:f5: d8:9b:e6:4f:2a:68:80:ea:5b:c3:73:e0:b2:86:af:ea:54:08: c8:66:09:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr46Ae2t/wXTW582yK9PAV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjUxMjA3MTMwMjI3WhcNMjUxMjA4MTMwMjI3WjAzMTEwLwYDVQQD EyhlM2FmNTFmNWYzMjIwNjFlNmJhYTAwOWUzOGIwMWY3YTdjNDk2NjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJsX/WAQmdB0jKrxaMxremfPFloo WYG1lXC2nyrd8HiD1enJyXYy+z1/IvTkZ4gkCieFcajNoCpDSKGdtXOVaRo+OrMJ NMiHSPGN1ajNXQWrxhFjJQw98OkVtD1LaEfp/mWqWLyfL3T8aylQdM5VrxcnGqF/ +q5hHNaQcBhw3lcfYMN7AE90OhFP2eCTIqHmEj6SE+WMN80g05mf0knmHUwR7maB U+WOlaOlEQ0OwA+ML1VpwpU7nj9H/vLy+lPTPNouDAk5q1A/PnPc08PLvDrgX05m safi5XInIdeUUg+CZN7RWCAShU85eLhb+LjDwOlUN+apzzBpYp1kW7b6JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOvUfXzIgYea6oAnjiwH3p8SWZvMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoG9VNNyT m6XHaUZEDuxcjMKqc5P3wa/KbYWjatkISPtlpOyBk7IvibgtN13zntQc/eM+kUjJ 1fk6sIx3Lb0ZdxzU58eXqKhSPEponQGm1QL3ToPC1lcisyVCsuTbu/Hhu3PenEvh nU3ua6VpsjoHEH/3N+TL5Y4uYoY7QwRVz4AXPuwfCn4RlXWGO0FlTQIAh7ZjLVlp knzFrtMxxuFfHZUiUMgCyG6eYOgMf7KUNIxMnacVKmLfouNl+NfLHyci9osDZinn yvaHjcydW1U87l43mKkHvat998NTbWhZIn/J+ZYfJKNs3jT12JvmTypogOpbw3Pg soav6lQIyGYJpA== -----END CERTIFICATE-----Generated at Sun Dec 7 15:55:20 2025 by rpki-client