This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json) Hash identifier: +CP/Un14oSv2sxKbsvTUyoQD8kYoOT61JXpGGazn2Ic= Subject key identifier: 26:CF:93:D1:95:4B:E4:54:2A:A6:0A:9C:C8:71:7F:03:79:97:06:B8 Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Certificate serial: 019B3F7F09CC7C2EEFB0DDFC0C285C8F6664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 06:00:48 +0000 Manifest this update: Sun 21 Dec 2025 06:00:48 +0000 Manifest next update: Mon 22 Dec 2025 06:00:48 +0000 Files and hashes: 1: BhaT-M-zQEVQbEPTvK_whwRLo3g.roa (hash: yoydrscKhHCdRvyWQAObyBBT0xMyfOzTOU389MtWZv4=) 2: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: 2NG5cZUSiH8AZQhJKbrchtwxLnC6NS+9wc+ibMnLg+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:09:cc:7c:2e:ef:b0:dd:fc:0c:28:5c:8f:66:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5 Validity Not Before: Dec 21 06:00:48 2025 GMT Not After : Dec 22 06:00:48 2025 GMT Subject: CN=26cf93d1954be4542aa60a9cc8717f03799706b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:bc:ac:6a:7b:19:3e:d8:93:ef:63:4d:5d: 7d:86:94:95:2e:ba:9d:ea:3a:45:ca:14:47:bf:67: 36:08:3f:d6:9f:e3:22:3d:a2:a2:34:06:6a:ce:b8: cf:db:83:3f:8f:78:88:e5:f5:99:b3:23:bf:ee:ef: d2:1e:e5:d0:8f:ea:89:13:41:b4:d2:6b:ab:9f:1e: 8b:b9:18:9e:d1:6d:d3:84:72:bc:a6:bf:38:5b:df: 16:61:4b:ab:fe:41:e8:fa:7b:5c:b2:4e:ff:f2:29: c2:6a:b5:83:64:0d:d7:6f:80:ed:63:20:e4:c7:24: 42:0e:81:0b:7c:1e:0e:20:2c:f2:51:5d:84:77:c4: 7f:20:9e:da:3e:77:8a:0b:28:83:fa:fe:b1:1b:f1: d4:37:60:8a:db:1e:01:7a:58:1e:59:91:6c:ba:da: 20:81:a6:58:cd:b5:a9:72:4e:ea:9e:62:53:81:07: a5:80:47:f4:34:f5:aa:87:bf:75:e9:8e:c9:6b:32: a4:01:04:35:9d:95:42:e7:f8:2a:0c:99:92:b3:8b: 47:58:53:93:21:20:15:5d:f7:fd:83:38:6f:b4:25: 59:d5:84:5f:eb:a6:e0:7f:ef:84:b1:93:5d:41:2a: 89:da:3a:7c:4a:30:84:1e:18:83:61:fb:33:f3:6f: f3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:93:D1:95:4B:E4:54:2A:A6:0A:9C:C8:71:7F:03:79:97:06:B8 X509v3 Authority Key Identifier: keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:91:9c:3f:c4:e5:ae:ab:e2:ab:e9:16:31:e4:b7:3c:98:37: e4:a0:34:40:37:06:58:40:39:54:48:05:38:5b:b2:48:f7:30: 86:83:44:c4:e3:49:13:85:98:a4:ce:62:bf:4e:e0:88:99:ef: 5d:12:21:1d:b3:70:56:ab:7a:94:7e:10:0c:11:73:8e:11:8c: 55:7b:1c:15:b3:f3:d9:7e:a6:52:1e:a0:dc:b6:05:cf:70:39: d1:f1:77:f0:8d:fc:80:a7:8c:9f:2c:87:42:16:af:68:fc:ea: 97:06:e2:e3:18:5c:9a:25:88:d5:e3:41:12:47:72:b6:e0:6f: 36:51:4e:ad:e3:0a:5b:c1:87:ef:47:e0:4b:b9:a3:94:a8:cb: 7d:c1:e4:67:e8:9a:08:60:da:c9:9a:df:d6:c9:6f:36:4e:00: d8:7d:29:0e:43:98:66:c4:65:c2:21:15:5a:e1:1b:1a:6d:1c: f2:d0:eb:59:c5:dd:43:17:8c:d2:84:39:49:da:dd:0a:01:e0: 49:a6:83:a2:4f:51:08:ac:0a:bb:be:e1:74:35:61:54:11:b9: 23:7d:91:82:59:34:2a:f7:ec:ad:0a:6a:06:30:4a:95:5e:a3: 28:79:90:1b:30:3e:a7:01:0d:ee:76:66:f4:33:a9:5d:42:2b: 2e:f3:a8:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fwnMfC7vsN38DChcj2ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTRkNjE5OWFlYzgyOGY2OTg5ZTJlODRjZWMxNzc2NWJh YzVjZDUwHhcNMjUxMjIxMDYwMDQ4WhcNMjUxMjIyMDYwMDQ4WjAzMTEwLwYDVQQD EygyNmNmOTNkMTk1NGJlNDU0MmFhNjBhOWNjODcxN2YwMzc5OTcwNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ou8rGp7GT7Yk+9jTV19hpSVLrqd 6jpFyhRHv2c2CD/Wn+MiPaKiNAZqzrjP24M/j3iI5fWZsyO/7u/SHuXQj+qJE0G0 0murnx6LuRie0W3ThHK8pr84W98WYUur/kHo+ntcsk7/8inCarWDZA3Xb4DtYyDk xyRCDoELfB4OICzyUV2Ed8R/IJ7aPneKCyiD+v6xG/HUN2CK2x4BelgeWZFsutog gaZYzbWpck7qnmJTgQelgEf0NPWqh7916Y7JazKkAQQ1nZVC5/gqDJmSs4tHWFOT ISAVXff9gzhvtCVZ1YRf66bgf++EsZNdQSqJ2jp8SjCEHhiDYfsz82/zPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbPk9GVS+RUKqYKnMhxfwN5lwa4MB8GA1UdIwQY MBaAFE2k1hma7IKPaYni6EzsF3ZbrFzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQt NDA4MzdkNDg0NzNkLzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yYzg0ODItNTMzMS00ZTU3LTk5NzQtNDA4MzdkNDg0NzNk LzEvVGFUV0dacnNnbzlwaWVMb1RPd1hkbHVzWE5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZGcP8Tl rqviq+kWMeS3PJg35KA0QDcGWEA5VEgFOFuySPcwhoNExONJE4WYpM5iv07giJnv XRIhHbNwVqt6lH4QDBFzjhGMVXscFbPz2X6mUh6g3LYFz3A50fF38I38gKeMnyyH QhavaPzqlwbi4xhcmiWI1eNBEkdytuBvNlFOreMKW8GH70fgS7mjlKjLfcHkZ+ia CGDayZrf1slvNk4A2H0pDkOYZsRlwiEVWuEbGm0c8tDrWcXdQxeM0oQ5SdrdCgHg SaaDok9RCKwKu77hdDVhVBG5I32Rglk0KvfsrQpqBjBKlV6jKHmQGzA+pwEN7nZm 9DOpXUIrLvOoKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:28:17 2025 by rpki-client