This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json) Hash identifier: 2m6FVE8Nr4gsNq7rQaKelyryFmeO59V1KTLxdFT6Rw8= Subject key identifier: A1:6B:D6:8B:28:0D:2F:14:66:5E:09:5A:3B:9A:3F:D3:0A:4C:9F:DD Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa Certificate serial: 019B416D6989C8C7ACC087E97328B718C316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft Manifest number: 0B7A Signing time: Sun 21 Dec 2025 15:00:47 +0000 Manifest this update: Sun 21 Dec 2025 15:00:47 +0000 Manifest next update: Mon 22 Dec 2025 15:00:47 +0000 Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: IE3JtjoV4/O88zn2teRkjMatuEndpg9iVpTSSCIlRm8=) 2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:69:89:c8:c7:ac:c0:87:e9:73:28:b7:18:c3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa Validity Not Before: Dec 21 15:00:47 2025 GMT Not After : Dec 22 15:00:47 2025 GMT Subject: CN=a16bd68b280d2f14665e095a3b9a3fd30a4c9fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:f0:86:43:b3:e2:94:73:b7:5d:83:60:43: 44:9f:12:de:54:af:53:e3:5d:e0:be:71:53:d5:66: 8d:66:b2:30:71:40:b9:21:52:1a:27:58:05:0d:14: 13:93:b1:db:e2:83:46:1b:0e:81:17:e2:8f:dd:a8: 7c:29:ab:3f:8d:dc:09:6d:ea:fa:1d:f6:d4:f5:5f: 89:aa:8b:fe:c5:bb:c5:57:0c:be:28:b2:99:67:f2: 9e:c4:c4:f1:37:aa:a4:49:8f:41:d2:f7:9f:14:8d: b2:51:62:b5:9c:e1:c2:b3:a4:1f:27:1a:9c:8e:62: 78:76:cf:1c:ad:8b:2b:11:8e:cd:39:86:bd:1b:9f: 2f:3d:dc:70:c9:98:73:08:53:a8:10:1b:eb:7b:46: ea:dc:91:41:a1:a2:96:8b:7b:a2:60:a8:3d:99:83: d9:3d:10:ad:ba:93:cd:1d:e0:af:10:3f:ba:df:9e: 7d:be:a4:36:ad:af:2c:59:35:cc:e0:d3:72:68:2d: af:2c:da:25:3d:81:f3:7f:67:d9:46:38:73:88:c2: 20:14:63:a0:5f:8d:07:d4:2f:b7:00:14:c5:db:b2: c1:44:83:3c:eb:03:e9:25:b7:8a:8e:ab:4b:e1:12: ba:9c:78:e0:48:6c:7c:90:f3:fe:3b:e7:08:78:e1: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6B:D6:8B:28:0D:2F:14:66:5E:09:5A:3B:9A:3F:D3:0A:4C:9F:DD X509v3 Authority Key Identifier: keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a9:c0:9a:f4:38:e2:45:88:75:8d:b3:3e:09:8a:07:0f:a5: c4:d4:5c:73:71:87:78:7c:00:5f:86:5b:c0:21:08:06:aa:63: b1:46:c6:58:87:dd:c6:65:0d:4e:fb:1f:b1:95:af:d1:5d:26: 56:0e:ab:1a:57:04:67:e6:cc:fc:a4:00:6a:e5:56:54:76:42: e0:2a:c7:58:c5:0f:4c:26:10:dd:fb:82:5c:c5:76:4f:3b:1b: 01:5c:4a:cc:7b:4e:72:ae:2c:83:1e:b0:e9:a5:8d:6f:0a:99: 81:e4:b8:66:fb:d5:e3:5f:59:48:07:ab:0b:a5:c2:47:6b:e4: f3:c3:f5:4c:68:fd:d0:30:d8:91:18:b1:44:fd:96:a7:83:62: c0:56:e3:9f:7c:4e:23:92:28:a2:7b:80:e0:db:d3:86:30:e5: de:d0:2c:55:d1:78:e2:a3:c6:17:7d:c8:48:0a:28:79:51:6f: 55:4f:de:e5:03:89:ca:cb:31:b9:9e:98:f3:04:45:5c:8b:00: 74:cd:46:d5:c6:9d:d5:d8:08:d6:a1:9a:f4:95:6a:0a:0e:b0: 0e:2d:5f:32:c4:c9:f9:6e:8c:e3:f3:0b:1a:2c:f2:fb:dd:b6: 9b:80:34:f6:9d:87:57:04:b6:ee:02:1e:23:a6:bb:ca:55:46: 10:5b:17:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbWmJyMeswIfpcyi3GMMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi YTMwZmEwHhcNMjUxMjIxMTUwMDQ3WhcNMjUxMjIyMTUwMDQ3WjAzMTEwLwYDVQQD EyhhMTZiZDY4YjI4MGQyZjE0NjY1ZTA5NWEzYjlhM2ZkMzBhNGM5ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWzwhkOz4pRzt12DYENEnxLeVK9T 413gvnFT1WaNZrIwcUC5IVIaJ1gFDRQTk7Hb4oNGGw6BF+KP3ah8Kas/jdwJber6 HfbU9V+Jqov+xbvFVwy+KLKZZ/KexMTxN6qkSY9B0vefFI2yUWK1nOHCs6QfJxqc jmJ4ds8crYsrEY7NOYa9G58vPdxwyZhzCFOoEBvre0bq3JFBoaKWi3uiYKg9mYPZ PRCtupPNHeCvED+63559vqQ2ra8sWTXM4NNyaC2vLNolPYHzf2fZRjhziMIgFGOg X40H1C+3ABTF27LBRIM86wPpJbeKjqtL4RK6nHjgSGx8kPP+O+cIeOHZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFr1osoDS8UZl4JWjuaP9MKTJ/dMB8GA1UdIwQY MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et YmMyODlkYzE3ZDIwLzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6nAmvQ4 4kWIdY2zPgmKBw+lxNRcc3GHeHwAX4ZbwCEIBqpjsUbGWIfdxmUNTvsfsZWv0V0m Vg6rGlcEZ+bM/KQAauVWVHZC4CrHWMUPTCYQ3fuCXMV2TzsbAVxKzHtOcq4sgx6w 6aWNbwqZgeS4ZvvV419ZSAerC6XCR2vk88P1TGj90DDYkRixRP2Wp4NiwFbjn3xO I5IoonuA4NvThjDl3tAsVdF44qPGF33ISAooeVFvVU/e5QOJyssxuZ6Y8wRFXIsA dM1G1cad1dgI1qGa9JVqCg6wDi1fMsTJ+W6M4/MLGizy+922m4A09p2HVwS27gIe I6a7ylVGEFsX8g== -----END CERTIFICATE-----Generated at Mon Dec 22 00:08:09 2025 by rpki-client