This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json) Hash identifier: r5jl6NHiDrbYKJxX2uTA8/lgR1ElP2bT4y15CKHFi/I= Subject key identifier: 7E:45:3E:E4:6C:A4:09:EE:D1:F0:AA:79:DD:B7:2C:68:37:E1:51:40 Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Certificate serial: 019B202B6B3E6877040048AECBD5FCF85CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft Manifest number: 170A Signing time: Mon 15 Dec 2025 04:01:14 +0000 Manifest this update: Mon 15 Dec 2025 04:01:14 +0000 Manifest next update: Tue 16 Dec 2025 04:01:14 +0000 Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=) 2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: xfpYLp0vuFatlx7HuzGkoD+07/1O7MWryVJV2IpYzXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:6b:3e:68:77:04:00:48:ae:cb:d5:fc:f8:5c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Validity Not Before: Dec 15 04:01:14 2025 GMT Not After : Dec 16 04:01:14 2025 GMT Subject: CN=7e453ee46ca409eed1f0aa79ddb72c6837e15140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:af:d1:ce:4b:2e:a1:e0:be:d4:6e:7a:7d: ec:d6:c3:38:b3:ef:56:df:77:82:c3:b4:a5:40:91: 70:ce:c3:c3:14:97:56:08:49:2b:30:01:17:7c:b0: e0:d6:14:ab:82:1a:2e:2f:19:37:c6:33:3f:08:a7: 2b:04:38:77:02:3f:76:d4:c5:b7:67:45:30:63:74: 78:1a:67:31:eb:2d:b1:45:a6:2f:53:55:dd:1d:5b: 50:d6:eb:75:88:39:ce:2c:7f:d6:7c:8d:06:1a:16: 49:53:d2:8f:ee:fc:ba:7d:36:c5:d7:0f:6e:29:22: 8d:a0:d6:97:a9:fa:f6:49:16:8b:7b:98:74:2d:b0: 74:e9:49:3d:73:b5:5f:56:e0:0f:c8:b1:b6:5d:09: 36:4f:8c:2c:97:79:e9:4a:a1:8a:30:86:50:48:7c: ae:d9:8e:c8:79:1f:29:1f:20:13:03:0b:f1:89:15: bf:41:95:fb:a0:ac:3b:3b:1b:86:e0:77:b0:7b:8c: a2:61:92:99:0b:29:a2:11:36:0a:61:87:16:7d:f9: e7:7e:40:ed:98:a5:9d:f2:29:a1:80:d1:80:37:96: 04:8f:62:bb:ca:1d:de:da:2f:ab:e3:5c:61:6a:c2: e8:2c:f3:15:da:51:a4:1a:5f:0b:0f:d6:f6:aa:23: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:45:3E:E4:6C:A4:09:EE:D1:F0:AA:79:DD:B7:2C:68:37:E1:51:40 X509v3 Authority Key Identifier: keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:18:6e:3a:d8:71:da:14:d0:58:76:71:a3:0f:25:2c:12:17: 14:29:b7:07:e2:ee:bd:8a:38:72:d0:21:96:b7:c4:1a:d6:08: ba:3a:6e:e8:fb:ec:86:f6:96:6b:ce:29:f9:f3:0e:f3:50:4f: 66:ed:0c:52:b5:b6:ff:d1:a0:42:8a:eb:8d:32:40:6f:aa:0e: bc:bd:61:99:a4:10:8b:fd:d8:9f:8a:40:bb:12:16:c5:cd:e8: 2c:d4:6d:b0:9e:ec:f3:4c:2d:c0:46:ca:2d:e6:c8:3d:5d:1c: bc:e1:fd:56:d9:8a:d5:69:fc:03:1d:cc:46:bb:fc:d5:01:25: 83:b0:3c:d2:34:fa:76:3f:1b:1b:66:88:28:31:fb:4c:22:04: 81:fa:de:87:dc:0b:54:aa:34:2f:81:2b:b6:a7:70:d1:fd:5b: 9c:94:2c:28:7e:59:a6:00:47:00:dc:c4:89:1a:fe:17:79:f3: 5e:a2:22:41:fd:01:da:57:f6:fd:79:9f:a9:26:c5:4b:b8:2a: 59:79:12:eb:e8:28:6c:f0:d9:23:40:89:d1:87:ee:d1:61:d3: c8:d0:f8:c2:19:a4:07:67:a6:26:09:1b:71:60:fe:64:ac:9b: 11:d5:ce:5b:0e:48:57:b7:06:e5:b5:33:4b:22:3a:03:8e:32: 37:0a:eb:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK2s+aHcEAEiuy9X8+FzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy OGY4MmIwHhcNMjUxMjE1MDQwMTE0WhcNMjUxMjE2MDQwMTE0WjAzMTEwLwYDVQQD Eyg3ZTQ1M2VlNDZjYTQwOWVlZDFmMGFhNzlkZGI3MmM2ODM3ZTE1MTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo6v0c5LLqHgvtRuen3s1sM4s+9W 33eCw7SlQJFwzsPDFJdWCEkrMAEXfLDg1hSrghouLxk3xjM/CKcrBDh3Aj921MW3 Z0UwY3R4Gmcx6y2xRaYvU1XdHVtQ1ut1iDnOLH/WfI0GGhZJU9KP7vy6fTbF1w9u KSKNoNaXqfr2SRaLe5h0LbB06Uk9c7VfVuAPyLG2XQk2T4wsl3npSqGKMIZQSHyu 2Y7IeR8pHyATAwvxiRW/QZX7oKw7OxuG4Hewe4yiYZKZCymiETYKYYcWffnnfkDt mKWd8imhgNGAN5YEj2K7yh3e2i+r41xhasLoLPMV2lGkGl8LD9b2qiPzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5FPuRspAnu0fCqed23LGg34VFAMB8GA1UdIwQY MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0 LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBhuOthx 2hTQWHZxow8lLBIXFCm3B+LuvYo4ctAhlrfEGtYIujpu6PvshvaWa84p+fMO81BP Zu0MUrW2/9GgQorrjTJAb6oOvL1hmaQQi/3Yn4pAuxIWxc3oLNRtsJ7s80wtwEbK LebIPV0cvOH9VtmK1Wn8Ax3MRrv81QElg7A80jT6dj8bG2aIKDH7TCIEgfreh9wL VKo0L4Ertqdw0f1bnJQsKH5ZpgBHANzEiRr+F3nzXqIiQf0B2lf2/XmfqSbFS7gq WXkS6+gobPDZI0CJ0Yfu0WHTyND4whmkB2emJgkbcWD+ZKybEdXOWw5IV7cG5bUz SyI6A44yNwrrsQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:22:52 2025 by rpki-client