This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json) Hash identifier: PdoMN0q9bIWBJOFzq8E8xFSA59hPb3h3hQHM6+tbD7s= Subject key identifier: 0E:9C:8C:A9:C1:C2:81:74:1B:BD:8D:C4:78:06:1C:25:49:61:64:7D Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66 Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66 Certificate serial: 019B35331134836E7D5394565426F3338628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft Manifest number: 1713 Signing time: Fri 19 Dec 2025 06:01:37 +0000 Manifest this update: Fri 19 Dec 2025 06:01:37 +0000 Manifest next update: Sat 20 Dec 2025 06:01:37 +0000 Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: JY2SB0YFosPuz1NF0L8wp0G4gelpTYk6YopS6MPDSuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:11:34:83:6e:7d:53:94:56:54:26:f3:33:86:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66 Validity Not Before: Dec 19 06:01:37 2025 GMT Not After : Dec 20 06:01:37 2025 GMT Subject: CN=0e9c8ca9c1c281741bbd8dc478061c254961647d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:a5:e2:94:94:2e:da:60:4a:db:fc:38:1b: 5f:f4:f4:12:e7:ac:e7:ff:88:fe:f2:61:fd:78:39: 11:ab:04:8b:01:8c:65:ae:87:b9:fe:7b:c7:c5:66: ef:8d:d1:71:1e:62:29:1d:9f:8d:bd:d4:b4:bd:2e: 0f:d9:14:8e:91:2b:d5:38:d3:94:5b:1c:c7:ab:0b: c9:ec:97:f9:c1:6f:55:ab:4f:7e:cb:32:12:58:29: e2:58:cd:0e:d0:96:1a:4b:b6:59:99:ec:2a:5b:2d: 13:1e:13:e5:02:66:dc:7a:4d:eb:bb:9e:d1:b7:0f: 58:c6:6e:0b:3a:f5:6c:e3:71:10:a7:59:c6:94:2e: e8:96:ec:43:df:1f:30:16:87:93:1d:c9:6e:11:11: 5a:45:0b:d5:d2:44:8c:77:e1:49:aa:4e:ab:89:7c: 14:56:2f:8a:d3:dc:17:03:29:17:19:eb:aa:f0:a4: 68:8f:bc:f6:ee:26:0c:56:a0:ec:b5:20:8f:4e:68: c0:9f:bc:2b:46:6d:50:95:d5:f2:bc:c1:0b:04:8d: 16:66:c5:4b:88:87:ad:d3:f8:86:f0:f2:a2:5a:29: ad:ac:8d:fd:3d:fb:b6:00:86:bf:34:43:3d:1a:5d: e8:ed:48:47:a8:a0:6c:4f:af:a0:d1:92:26:19:87: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9C:8C:A9:C1:C2:81:74:1B:BD:8D:C4:78:06:1C:25:49:61:64:7D X509v3 Authority Key Identifier: keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4c:c5:81:5a:2d:9d:d6:46:73:64:20:23:36:2c:88:14:b9: ea:19:68:3a:9f:fc:80:52:70:e7:37:9b:f4:86:45:ab:12:22: 36:4c:da:da:66:20:a5:16:27:bd:1d:1c:ac:0b:52:a4:5b:fa: b2:1f:7d:fa:5a:35:0f:cc:5c:91:dc:0c:b6:f5:d9:e8:34:5a: 51:fc:dc:e8:75:42:6b:af:ea:db:63:02:ea:ce:88:42:f5:ea: e9:17:9e:d7:68:66:6c:70:31:cf:35:8d:a4:e4:7e:40:45:58: 85:85:51:c3:b9:08:24:e0:fb:12:3a:fd:fe:fd:be:73:a0:df: 94:e0:3c:2e:41:39:d4:8c:a2:71:91:52:d4:60:80:ce:08:9c: c9:27:ce:41:2b:88:87:42:67:40:78:a8:dc:11:39:96:ac:b6: 38:3e:80:8c:3b:02:2b:bf:55:41:f3:69:e3:27:e7:fa:80:d2: 8b:2f:f2:e3:ed:74:33:a5:8d:c6:84:ba:eb:80:5f:ca:57:3e: 14:c9:47:52:f3:a7:37:f1:90:92:cd:92:6e:e6:68:97:79:12: e7:a9:8f:13:e0:18:83:20:af:d0:de:48:ce:1a:4d:ef:1b:38: b1:d0:09:08:54:6e:67:58:8b:06:2f:f2:a5:8d:91:ec:e8:7f: 24:18:8c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MxE0g259U5RWVCbzM4YoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOWY5MzAwMmQ3OGU4ZTQwZGE1NjBjNDI5MWZiODMwZDky ZGZmNjYwHhcNMjUxMjE5MDYwMTM3WhcNMjUxMjIwMDYwMTM3WjAzMTEwLwYDVQQD EygwZTljOGNhOWMxYzI4MTc0MWJiZDhkYzQ3ODA2MWMyNTQ5NjE2NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cyl4pSULtpgStv8OBtf9PQS56zn /4j+8mH9eDkRqwSLAYxlroe5/nvHxWbvjdFxHmIpHZ+NvdS0vS4P2RSOkSvVONOU WxzHqwvJ7Jf5wW9Vq09+yzISWCniWM0O0JYaS7ZZmewqWy0THhPlAmbcek3ru57R tw9Yxm4LOvVs43EQp1nGlC7oluxD3x8wFoeTHcluERFaRQvV0kSMd+FJqk6riXwU Vi+K09wXAykXGeuq8KRoj7z27iYMVqDstSCPTmjAn7wrRm1QldXyvMELBI0WZsVL iIet0/iG8PKiWimtrI39Pfu2AIa/NEM9Gl3o7UhHqKBsT6+g0ZImGYeitwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6cjKnBwoF0G72NxHgGHCVJYWR9MB8GA1UdIwQY MBaAFAKfkwAteOjkDaVgxCkfuDDZLf9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2Yt NWYyNjM1NWM4YTc0LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2YtNWYyNjM1NWM4YTc0 LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkzFgVot ndZGc2QgIzYsiBS56hloOp/8gFJw5zeb9IZFqxIiNkza2mYgpRYnvR0crAtSpFv6 sh99+lo1D8xckdwMtvXZ6DRaUfzc6HVCa6/q22MC6s6IQvXq6Ree12hmbHAxzzWN pOR+QEVYhYVRw7kIJOD7Ejr9/v2+c6DflOA8LkE51IyicZFS1GCAzgicySfOQSuI h0JnQHio3BE5lqy2OD6AjDsCK79VQfNp4yfn+oDSiy/y4+10M6WNxoS664Bfylc+ FMlHUvOnN/GQks2SbuZol3kS56mPE+AYgyCv0N5IzhpN7xs4sdAJCFRuZ1iLBi/y pY2R7Oh/JBiMeQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:51:03 2025 by rpki-client