This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json) Hash identifier: oZgMkbItyBAvOJQXUCjEy/7BkgMcCu82BULtB6zCu0Q= Subject key identifier: 46:C5:71:B5:95:29:1C:B3:C8:F6:1A:27:0F:36:35:79:91:1C:1B:E6 Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Certificate serial: 019B2F9E717CA8D9F02A219E5B067C549979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft Manifest number: 1712 Signing time: Thu 18 Dec 2025 04:01:11 +0000 Manifest this update: Thu 18 Dec 2025 04:01:11 +0000 Manifest next update: Fri 19 Dec 2025 04:01:11 +0000 Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=) 2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: b2zII2+1SNUTOTXHJpg+vytbmdNh4DuyG6xnxA4yeVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:71:7c:a8:d9:f0:2a:21:9e:5b:06:7c:54:99:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Validity Not Before: Dec 18 04:01:11 2025 GMT Not After : Dec 19 04:01:11 2025 GMT Subject: CN=46c571b595291cb3c8f61a270f363579911c1be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:48:95:62:87:91:fb:43:0b:d9:65:2a:0d: e6:70:49:89:bb:96:16:db:b9:aa:bf:9b:ad:de:1c: 26:4a:50:1b:72:a4:2b:47:8b:a1:22:3a:47:f8:a9: f4:c3:17:c8:47:0c:65:95:34:3c:88:21:ff:b3:e7: 97:2b:0e:2d:d1:42:7a:b9:59:e3:61:54:80:b9:88: 01:19:e0:d7:3d:1f:d4:70:95:dc:0c:7f:61:df:b9: d9:0d:c4:0e:1e:4a:85:b6:d4:76:15:4d:6c:d9:47: d3:2d:81:29:60:f9:3b:67:a4:a0:74:0d:65:9e:68: 6b:b8:6c:d9:32:bb:9a:46:e2:91:9e:a6:ba:7f:89: 0f:94:61:5d:44:5b:e7:8c:74:8f:f6:b7:19:43:77: 97:37:85:54:41:15:11:cc:c2:bc:20:66:f8:f8:9d: 16:4c:c1:4d:1a:a1:69:d9:41:10:46:21:6c:e2:85: 12:10:34:19:17:e3:7b:88:75:40:2d:ab:05:2d:2b: 05:5d:de:45:19:06:b6:14:99:b1:da:e2:97:02:00: a6:62:56:71:48:7e:62:8b:b9:1f:08:10:02:28:7e: 59:d2:c5:7e:87:0a:67:83:7b:2e:ad:9d:d7:ae:59: e5:a5:7b:6e:fa:c5:70:10:49:af:d4:ed:30:21:f7: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C5:71:B5:95:29:1C:B3:C8:F6:1A:27:0F:36:35:79:91:1C:1B:E6 X509v3 Authority Key Identifier: keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:93:4c:20:43:61:aa:a9:13:b4:70:19:15:7a:e6:32:af:03: 56:92:e8:d0:d2:b2:a6:98:56:13:88:92:58:2f:e7:b5:2d:25: 5a:00:d4:fe:a3:70:46:43:31:b8:01:1a:68:bc:e9:ab:c1:56: bc:38:2b:1e:20:df:88:22:fe:18:64:dc:49:0d:21:2e:15:71: a6:6b:2c:6b:2a:e8:66:9c:d4:69:bf:ba:8b:8c:91:b8:bc:07: 07:dc:f5:ec:1e:0a:1f:92:46:88:28:2f:e3:b2:24:d4:17:bd: 97:45:8f:5e:8a:1f:17:84:34:14:30:ff:39:a9:80:72:b3:20: cc:49:90:87:be:55:39:14:21:10:58:4f:c5:b8:e6:71:fa:42: c2:c6:3e:76:f8:04:1e:23:86:bb:99:cc:0c:32:a2:c1:40:7b: 11:c3:39:e6:6a:c9:ab:76:e9:39:ec:07:5a:83:cf:79:85:08: a1:43:76:20:01:54:b3:83:22:72:ad:86:a7:ec:8a:82:11:4b: 19:e5:b7:4d:c5:f9:aa:e4:3e:61:57:ca:84:d0:47:6f:ca:3e: a0:b0:de:34:55:de:89:ea:a0:ca:33:35:69:8b:ae:d0:03:cd: 83:57:15:c3:1f:d8:1f:c5:d0:bb:0c:bc:d8:13:01:41:ad:aa: 87:60:d3:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnnF8qNnwKiGeWwZ8VJl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy OGY4MmIwHhcNMjUxMjE4MDQwMTExWhcNMjUxMjE5MDQwMTExWjAzMTEwLwYDVQQD Eyg0NmM1NzFiNTk1MjkxY2IzYzhmNjFhMjcwZjM2MzU3OTkxMWMxYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXpIlWKHkftDC9llKg3mcEmJu5YW 27mqv5ut3hwmSlAbcqQrR4uhIjpH+Kn0wxfIRwxllTQ8iCH/s+eXKw4t0UJ6uVnj YVSAuYgBGeDXPR/UcJXcDH9h37nZDcQOHkqFttR2FU1s2UfTLYEpYPk7Z6SgdA1l nmhruGzZMruaRuKRnqa6f4kPlGFdRFvnjHSP9rcZQ3eXN4VUQRURzMK8IGb4+J0W TMFNGqFp2UEQRiFs4oUSEDQZF+N7iHVALasFLSsFXd5FGQa2FJmx2uKXAgCmYlZx SH5ii7kfCBACKH5Z0sV+hwpng3surZ3XrlnlpXtu+sVwEEmv1O0wIffehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbFcbWVKRyzyPYaJw82NXmRHBvmMB8GA1UdIwQY MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0 LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJNMIENh qqkTtHAZFXrmMq8DVpLo0NKypphWE4iSWC/ntS0lWgDU/qNwRkMxuAEaaLzpq8FW vDgrHiDfiCL+GGTcSQ0hLhVxpmssayroZpzUab+6i4yRuLwHB9z17B4KH5JGiCgv 47Ik1Be9l0WPXoofF4Q0FDD/OamAcrMgzEmQh75VORQhEFhPxbjmcfpCwsY+dvgE HiOGu5nMDDKiwUB7EcM55mrJq3bpOewHWoPPeYUIoUN2IAFUs4Micq2Gp+yKghFL GeW3TcX5quQ+YVfKhNBHb8o+oLDeNFXeieqgyjM1aYuu0APNg1cVwx/YH8XQuwy8 2BMBQa2qh2DTFA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:25 2025 by rpki-client