This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json) Hash identifier: VkgYaZtVhT8J8KLAqtn2NOXeuwqMRqHPqa24uksLbPA= Subject key identifier: 07:E9:50:46:0B:CC:5D:30:F9:14:00:D6:B7:42:29:B1:EF:D5:2F:B9 Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4 Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4 Certificate serial: 019B5D53960D84927C8AEFACF0B9FAF94A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft Manifest number: 14DE Signing time: Sat 27 Dec 2025 01:01:57 +0000 Manifest this update: Sat 27 Dec 2025 01:01:57 +0000 Manifest next update: Sun 28 Dec 2025 01:01:57 +0000 Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=) 2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: mEWZxvvIT7RJ0saw+m1hfb4eY26MyCFmdwHWCGX7e8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:96:0d:84:92:7c:8a:ef:ac:f0:b9:fa:f9:4a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4 Validity Not Before: Dec 27 01:01:57 2025 GMT Not After : Dec 28 01:01:57 2025 GMT Subject: CN=07e950460bcc5d30f91400d6b74229b1efd52fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:73:e9:ea:af:fd:34:c6:63:c9:83:6b:17: f8:de:46:2e:f1:4e:d7:da:90:f0:f3:e2:87:dc:3a: 40:59:b1:03:5d:e4:63:01:c0:e8:97:14:9b:b6:0f: 9c:e1:90:b4:ec:c3:38:69:cc:d9:bf:6c:46:a2:39: f9:e6:4f:ee:a2:56:c8:46:ae:15:c7:cb:63:a3:bd: 51:f4:04:27:da:dd:ac:72:9e:c1:7a:b3:8c:e7:cb: 7e:0e:6c:63:6e:5a:7d:b9:4b:db:33:cc:ee:2f:06: fe:1c:3d:83:64:0b:36:6b:54:bc:e4:e3:aa:f8:ac: 65:11:27:da:e7:23:5f:d1:5c:24:7f:f1:12:eb:11: 3b:61:37:5a:e1:6a:bd:f9:04:78:b2:83:4b:4b:6c: 63:48:da:5d:0e:d6:e2:ac:16:96:1c:e8:a4:ee:f2: a5:18:84:23:f9:ed:48:6d:ae:ae:92:2c:be:eb:22: 3d:36:c7:1f:dd:dd:ce:c5:b2:f9:ca:e5:87:c8:a9: 1f:50:53:0a:8a:b5:b0:d1:0b:01:a3:76:c0:26:e4: e3:ac:b9:73:3b:88:40:34:6a:3c:74:9f:b2:03:02: 95:a9:fd:23:25:33:39:ad:d2:be:1a:6c:81:c5:f2: ab:24:71:9d:46:cc:db:b0:f2:20:56:8f:63:dd:09: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E9:50:46:0B:CC:5D:30:F9:14:00:D6:B7:42:29:B1:EF:D5:2F:B9 X509v3 Authority Key Identifier: keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d3:1b:ae:0a:cf:35:20:68:c2:c6:68:9e:46:f6:69:f9:f6: 9b:a4:c9:f7:16:8e:a9:05:01:4a:51:c4:df:eb:dc:fa:32:f7: 2c:d1:d8:cf:c1:55:5b:7f:f0:11:e0:b2:58:68:48:04:2f:b9: fc:c6:5d:fa:c1:f8:83:5f:e4:75:61:06:af:66:94:3d:56:61: 96:48:03:a6:0c:57:38:41:32:3a:d9:b4:30:cb:74:28:72:50: 26:95:c6:5a:40:a0:a6:2a:89:34:d3:9f:d3:11:fb:a4:85:db: 20:c9:f5:4c:30:61:23:53:2c:56:0d:17:57:a7:a2:c2:1d:5e: 74:fc:6c:8b:02:fa:5b:08:9a:50:22:9c:6c:2f:03:df:d0:31: b9:4b:ff:9e:35:88:ab:b9:fc:f6:05:e5:05:fe:bd:f0:1e:4e: 48:4f:b3:3b:21:5a:97:72:b7:7b:0f:40:b4:4b:23:ff:90:5f: f4:c0:b0:dc:60:e1:79:a2:76:90:65:36:98:fa:7b:70:6c:e2: 23:f0:77:8d:05:01:2c:c2:d2:86:2e:2c:78:a9:fc:f5:66:cd: b2:b7:84:1b:48:6a:77:3f:34:12:da:92:4a:d0:04:66:a9:83: 44:f7:13:e5:66:44:17:15:38:77:98:8f:be:f5:c1:e8:fc:92: ee:97:46:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU5YNhJJ8iu+s8Ln6+UpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw ZGU5YjQwHhcNMjUxMjI3MDEwMTU3WhcNMjUxMjI4MDEwMTU3WjAzMTEwLwYDVQQD EygwN2U5NTA0NjBiY2M1ZDMwZjkxNDAwZDZiNzQyMjliMWVmZDUyZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySpz6eqv/TTGY8mDaxf43kYu8U7X 2pDw8+KH3DpAWbEDXeRjAcDolxSbtg+c4ZC07MM4aczZv2xGojn55k/uolbIRq4V x8tjo71R9AQn2t2scp7BerOM58t+Dmxjblp9uUvbM8zuLwb+HD2DZAs2a1S85OOq +KxlESfa5yNf0Vwkf/ES6xE7YTda4Wq9+QR4soNLS2xjSNpdDtbirBaWHOik7vKl GIQj+e1Iba6ukiy+6yI9Nscf3d3OxbL5yuWHyKkfUFMKirWw0QsBo3bAJuTjrLlz O4hANGo8dJ+yAwKVqf0jJTM5rdK+GmyBxfKrJHGdRszbsPIgVo9j3QmRXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfpUEYLzF0w+RQA1rdCKbHv1S+5MB8GA1UdIwQY MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt NWE5NWNjODBjZDFiLzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONMbrgrP NSBowsZonkb2afn2m6TJ9xaOqQUBSlHE3+vc+jL3LNHYz8FVW3/wEeCyWGhIBC+5 /MZd+sH4g1/kdWEGr2aUPVZhlkgDpgxXOEEyOtm0MMt0KHJQJpXGWkCgpiqJNNOf 0xH7pIXbIMn1TDBhI1MsVg0XV6eiwh1edPxsiwL6WwiaUCKcbC8D39AxuUv/njWI q7n89gXlBf698B5OSE+zOyFal3K3ew9AtEsj/5Bf9MCw3GDheaJ2kGU2mPp7cGzi I/B3jQUBLMLShi4seKn89WbNsreEG0hqdz80EtqSStAEZqmDRPcT5WZEFxU4d5iP vvXB6PyS7pdGYw== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:34 2025 by rpki-client