This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json) Hash identifier: Jqk0/mviY+1eMp4Ig5GnSr2Jfs7Dom4CT4jPUK/iQ94= Subject key identifier: CD:36:E8:80:12:9C:9C:4F:63:30:5F:9A:D0:B8:FE:0F:57:CF:91:4E Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Certificate serial: 019B454AB579D9700CD401D80496CF3D5235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft Manifest number: 1793 Signing time: Mon 22 Dec 2025 09:01:22 +0000 Manifest this update: Mon 22 Dec 2025 09:01:22 +0000 Manifest next update: Tue 23 Dec 2025 09:01:22 +0000 Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=) 2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: CYNxShx0sCpi8VkJf4P/GoVEGuH55TeQqBNC0LyHOxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:b5:79:d9:70:0c:d4:01:d8:04:96:cf:3d:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Validity Not Before: Dec 22 09:01:22 2025 GMT Not After : Dec 23 09:01:22 2025 GMT Subject: CN=cd36e880129c9c4f63305f9ad0b8fe0f57cf914e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:0a:6f:43:5b:3d:d1:8c:95:54:6e:9b:3d: d8:7c:a9:72:2b:33:03:a8:9b:55:48:e0:2e:ec:a7: 81:be:3b:39:43:58:55:b9:c9:c1:8b:62:cd:38:92: fa:8b:8a:c3:46:ed:d6:a9:a4:b1:8c:b2:62:a6:2d: 7e:5d:32:df:01:e3:70:ac:27:89:9d:58:fc:49:fa: 6c:4c:7b:c7:f8:d9:4f:79:3d:8a:91:5d:c5:94:98: 39:99:73:41:d2:69:8d:fc:78:c0:c5:1f:9f:97:7d: b4:77:21:99:b9:db:9c:cf:b5:31:09:63:00:63:32: b5:2f:80:c4:98:a7:26:aa:26:42:ad:f7:d6:fe:83: b6:71:c0:01:fa:13:d4:7f:87:42:39:bd:c1:88:e8: c0:fc:20:db:91:d1:b0:2e:87:92:b6:c8:4f:e2:2d: 1b:cf:3b:46:c8:09:58:e2:44:0e:81:30:a1:6c:ae: 30:74:e1:53:82:00:af:5e:9d:51:6d:1f:75:1c:c6: 76:01:4f:b8:44:4d:c7:f6:f2:41:e2:67:b2:65:62: 09:cc:28:40:84:2f:e4:e4:52:46:6d:07:17:e9:6a: 21:19:cc:a5:83:cf:fb:ac:94:3a:fd:cf:01:2b:54: 3e:59:cc:b8:7b:00:25:d2:e8:bd:99:7d:9a:74:25: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:36:E8:80:12:9C:9C:4F:63:30:5F:9A:D0:B8:FE:0F:57:CF:91:4E X509v3 Authority Key Identifier: keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b5:84:55:f7:b9:79:3e:a3:a8:1b:c1:2a:b6:1a:3d:7d:16: 13:0f:2b:83:aa:1f:88:1e:66:b7:38:fd:1f:1d:f9:40:07:18: ef:8f:3b:2a:ba:39:0e:8f:08:82:0e:02:55:94:ea:63:71:59: 16:04:6e:d0:79:02:b4:e1:b0:fa:86:83:5e:e7:98:8d:12:dd: 1c:60:ef:b0:99:a8:5a:56:6f:a1:ad:55:18:a5:28:9c:04:71: 6e:36:9b:d4:85:fd:09:be:18:53:74:bd:a4:ed:80:18:b2:80: e7:93:5e:cb:cc:79:c8:1b:05:4b:bb:69:34:3d:e4:a9:16:95: 59:e3:c3:d2:b1:00:ff:bd:4c:5c:8c:52:a5:22:0e:cb:40:2f: 24:38:aa:0c:8f:cb:f8:b4:63:03:fe:11:ac:32:4c:9c:b4:f6: 61:eb:b5:1d:0b:58:d9:d1:88:b1:56:9d:39:52:9f:a4:78:13: 3a:31:79:99:e1:01:3d:9c:64:88:e8:5b:59:c9:b3:ef:57:3c: 3d:94:af:d8:06:24:bf:61:78:cf:18:4c:7d:20:e0:34:4f:e6: 03:e7:53:68:89:c7:24:87:fd:c4:60:b9:78:98:6c:5b:b9:b7: a2:44:01:83:cd:64:05:4d:3d:68:b3:0f:92:e8:aa:7e:4a:ea: fc:08:fd:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSrV52XAM1AHYBJbPPVI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh YzVjZDUwHhcNMjUxMjIyMDkwMTIyWhcNMjUxMjIzMDkwMTIyWjAzMTEwLwYDVQQD EyhjZDM2ZTg4MDEyOWM5YzRmNjMzMDVmOWFkMGI4ZmUwZjU3Y2Y5MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ0Kb0NbPdGMlVRumz3YfKlyKzMD qJtVSOAu7KeBvjs5Q1hVucnBi2LNOJL6i4rDRu3WqaSxjLJipi1+XTLfAeNwrCeJ nVj8SfpsTHvH+NlPeT2KkV3FlJg5mXNB0mmN/HjAxR+fl320dyGZuducz7UxCWMA YzK1L4DEmKcmqiZCrffW/oO2ccAB+hPUf4dCOb3BiOjA/CDbkdGwLoeStshP4i0b zztGyAlY4kQOgTChbK4wdOFTggCvXp1RbR91HMZ2AU+4RE3H9vJB4meyZWIJzChA hC/k5FJGbQcX6WohGcylg8/7rJQ6/c8BK1Q+Wcy4ewAl0ui9mX2adCWthwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM026IASnJxPYzBfmtC4/g9Xz5FOMB8GA1UdIwQY MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLWEVfe5 eT6jqBvBKrYaPX0WEw8rg6ofiB5mtzj9Hx35QAcY7487Kro5Do8Igg4CVZTqY3FZ FgRu0HkCtOGw+oaDXueYjRLdHGDvsJmoWlZvoa1VGKUonARxbjab1IX9Cb4YU3S9 pO2AGLKA55Ney8x5yBsFS7tpND3kqRaVWePD0rEA/71MXIxSpSIOy0AvJDiqDI/L +LRjA/4RrDJMnLT2Yeu1HQtY2dGIsVadOVKfpHgTOjF5meEBPZxkiOhbWcmz71c8 PZSv2AYkv2F4zxhMfSDgNE/mA+dTaInHJIf9xGC5eJhsW7m3okQBg81kBU09aLMP kuiqfkrq/Aj9AA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:36:10 2025 by rpki-client