This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json) Hash identifier: hdma/MzRJG/UnKRcJny+R4i1Nc+Qhri6vyC+aT2gKaE= Subject key identifier: 4B:C2:E2:EE:91:01:7A:05:C2:D8:0E:55:D1:FD:A6:BD:A9:79:D1:7C Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Certificate serial: 019BACEE56C19E3FF343A0C6FA8E79A55445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft Manifest number: 0661 Signing time: Sun 11 Jan 2026 12:00:59 +0000 Manifest this update: Sun 11 Jan 2026 12:00:59 +0000 Manifest next update: Mon 12 Jan 2026 12:00:59 +0000 Files and hashes: 1: UlU02LC4n2pDDDLWDfGKbBexvUQ.roa (hash: 1DEZfsrrVxXltp/RRFJK80hKK2fgGVXeXhVVxwfDsss=) 2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: OIfloUvtjM8ahQOdRZWREAy/7KHcdZK7eh3Nuy9Lmoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ee:56:c1:9e:3f:f3:43:a0:c6:fa:8e:79:a5:54:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Validity Not Before: Jan 11 12:00:59 2026 GMT Not After : Jan 12 12:00:59 2026 GMT Subject: CN=4bc2e2ee91017a05c2d80e55d1fda6bda979d17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:64:4c:6c:35:b9:89:d4:a0:22:b1:8b:8c: e9:6f:81:65:3c:f4:e3:6f:e7:22:ab:05:96:e1:bf: 42:b1:c4:18:ed:e2:42:7a:ae:05:c8:02:a5:1e:a2: c5:c8:67:c5:cf:11:db:dc:39:7e:a3:16:a9:e0:d2: d8:ed:5d:60:bd:d2:45:34:b8:4a:41:99:51:14:ab: 1b:a9:de:ef:bb:bb:76:1e:aa:f6:23:18:b9:95:f0: db:4d:f5:2b:1b:82:fb:31:78:b3:45:dd:b1:63:0c: bd:ab:d4:c1:84:19:9d:8a:a9:24:4d:74:22:cd:c3: b1:ac:d9:0e:a7:b5:56:d5:3d:fd:7b:4b:c6:55:9b: fa:a9:69:0b:12:63:1f:e0:f5:be:98:d8:04:55:fa: 4a:34:83:b9:46:13:b0:e3:e8:5e:36:b7:cc:e7:3d: de:f1:f1:ca:c3:1c:f5:fc:7f:26:f2:ca:7d:1f:96: ef:d6:7f:18:4b:74:30:da:79:5d:73:e2:26:b1:e8: 61:9e:98:30:a0:4a:de:e9:cf:39:75:a8:0b:1b:bf: cc:af:9c:8f:de:b7:dd:d6:66:76:5f:13:64:12:21: d1:64:31:ce:88:89:26:08:32:79:81:c8:e9:ab:de: e5:13:84:c2:7e:00:a4:f9:03:76:28:3e:e1:fc:07: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:E2:EE:91:01:7A:05:C2:D8:0E:55:D1:FD:A6:BD:A9:79:D1:7C X509v3 Authority Key Identifier: keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:97:fc:47:db:3a:60:7c:8b:50:cc:6b:08:f8:70:ca:cb:cc: 6e:bf:88:10:8c:47:2c:5e:bc:17:2b:8e:d5:bd:7d:2a:fb:7b: 20:83:3f:00:a5:0b:64:34:e7:d2:a9:73:4f:08:0b:c0:45:9a: 39:b3:b4:7a:bc:b9:3f:9c:a6:fb:36:d9:c2:b3:ec:f9:5b:5b: 21:7c:a8:64:32:06:17:5c:8d:64:bb:a2:b5:ae:3d:31:60:e8: 30:0d:67:35:eb:b6:dd:18:bc:6b:99:ea:5b:a0:a4:a6:dc:37: 96:57:8e:30:d3:41:64:18:a5:69:a4:c4:6c:eb:59:f5:93:33: 8b:48:48:fe:96:1d:ca:ca:16:e0:4c:35:eb:86:05:fe:a2:ae: 9b:97:8f:f1:1c:41:4e:0e:fc:99:dd:51:76:e9:5c:7f:d1:33: f0:9b:7b:8e:a2:1e:b7:50:41:5a:84:27:97:c2:eb:a5:a2:7f: d8:ea:90:e7:9e:4f:01:64:bf:85:31:f1:00:31:c5:37:56:57: 7c:66:e5:3e:3d:c5:4d:2d:68:ed:a5:45:f9:96:50:ac:c4:d2: 99:74:2e:e6:0a:9a:9b:1c:37:c5:0d:de:49:97:8b:97:62:ae: f9:83:cd:ec:bc:7b:38:44:0b:1d:07:1b:90:81:ab:e4:48:d6: ed:bd:09:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus7lbBnj/zQ6DG+o55pVRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx ZTMyMDMwHhcNMjYwMTExMTIwMDU5WhcNMjYwMTEyMTIwMDU5WjAzMTEwLwYDVQQD Eyg0YmMyZTJlZTkxMDE3YTA1YzJkODBlNTVkMWZkYTZiZGE5NzlkMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMtkTGw1uYnUoCKxi4zpb4FlPPTj b+ciqwWW4b9CscQY7eJCeq4FyAKlHqLFyGfFzxHb3Dl+oxap4NLY7V1gvdJFNLhK QZlRFKsbqd7vu7t2Hqr2Ixi5lfDbTfUrG4L7MXizRd2xYwy9q9TBhBmdiqkkTXQi zcOxrNkOp7VW1T39e0vGVZv6qWkLEmMf4PW+mNgEVfpKNIO5RhOw4+heNrfM5z3e 8fHKwxz1/H8m8sp9H5bv1n8YS3Qw2nldc+ImsehhnpgwoEre6c85dagLG7/Mr5yP 3rfd1mZ2XxNkEiHRZDHOiIkmCDJ5gcjpq97lE4TCfgCk+QN2KD7h/AcycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvC4u6RAXoFwtgOVdH9pr2pedF8MB8GA1UdIwQY MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1 LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5f8R9s6 YHyLUMxrCPhwysvMbr+IEIxHLF68FyuO1b19Kvt7IIM/AKULZDTn0qlzTwgLwEWa ObO0ery5P5ym+zbZwrPs+VtbIXyoZDIGF1yNZLuita49MWDoMA1nNeu23Ri8a5nq W6Ckptw3lleOMNNBZBilaaTEbOtZ9ZMzi0hI/pYdysoW4Ew164YF/qKum5eP8RxB Tg78md1Rdulcf9Ez8Jt7jqIet1BBWoQnl8LrpaJ/2OqQ555PAWS/hTHxADHFN1ZX fGblPj3FTS1o7aVF+ZZQrMTSmXQu5gqamxw3xQ3eSZeLl2Ku+YPN7Lx7OEQLHQcb kIGr5EjW7b0JKQ== -----END CERTIFICATE-----Generated at Sun Jan 11 14:40:12 2026 by rpki-client