This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json) Hash identifier: 4sO64eA3D/Yvos0w3ufM898B9hB/gz3DNBQsstG0rik= Subject key identifier: 29:68:3F:24:BC:83:F2:86:A2:75:F8:C6:65:EF:D8:A3:9C:F0:25:D2 Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe Certificate serial: 019B39EB0CC08991A0E2E93C5D92C544E901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 04:01:04 +0000 Manifest this update: Sat 20 Dec 2025 04:01:04 +0000 Manifest next update: Sun 21 Dec 2025 04:01:04 +0000 Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=) 2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: e6patTkk18NS7PRNPnPNXG5dO7R1SZFQ+/eCdIkDM6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:0c:c0:89:91:a0:e2:e9:3c:5d:92:c5:44:e9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe Validity Not Before: Dec 20 04:01:04 2025 GMT Not After : Dec 21 04:01:04 2025 GMT Subject: CN=29683f24bc83f286a275f8c665efd8a39cf025d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:d8:6d:09:ed:13:1e:78:e4:35:ef:de:24: 11:f9:85:09:df:a5:cf:a0:b7:ec:2b:c9:9d:13:a8: ce:fc:22:50:ac:d1:1d:24:bb:a6:96:c5:2c:ee:e6: 92:66:8f:9e:ce:32:a3:88:b6:b5:f6:99:4c:10:b3: da:b3:9a:42:46:7f:0d:f0:1c:a1:3d:fe:d3:b3:9d: f4:81:08:96:fd:9c:3c:c8:ac:ff:55:2e:b0:c5:63: 2c:30:a0:d4:23:dc:c5:09:ed:c7:ca:11:93:e1:eb: 02:02:e1:3a:98:9d:0a:54:f8:80:8a:08:e9:82:96: 97:3d:e1:bf:b2:ea:10:76:57:e3:ca:b1:f7:01:f7: a1:16:ba:5c:cd:a7:c4:b5:63:40:39:48:16:40:6c: fc:6d:ae:30:89:12:f3:91:3f:f4:42:ca:df:8a:d2: 62:b5:92:81:8e:6d:37:24:2a:ba:79:77:52:31:ff: 92:56:96:5a:ca:61:9d:6a:76:69:00:15:91:d9:39: 78:99:ea:96:fd:a6:e1:8c:f8:6e:bf:27:b7:2c:5c: 7e:5d:44:5e:34:a6:d9:c8:6e:06:54:4a:e6:7f:ca: 21:11:8b:f5:16:f2:3b:43:b3:0e:8c:85:12:7f:63: 42:a7:05:f5:bb:b2:35:8d:e2:0d:80:e6:2f:08:d1: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:68:3F:24:BC:83:F2:86:A2:75:F8:C6:65:EF:D8:A3:9C:F0:25:D2 X509v3 Authority Key Identifier: keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:56:5a:45:95:db:e3:30:52:3e:6c:02:9f:4f:99:11:90:3c: 4e:35:12:e8:be:6b:a5:0b:c5:ce:e0:4e:f2:32:33:61:1d:eb: ad:27:2d:45:89:f6:33:20:b9:ea:04:5b:1d:c9:21:62:55:ba: 18:91:6b:9f:ae:de:04:b7:ff:10:34:98:19:04:d0:de:dc:8e: 77:4a:e1:4a:6d:97:3d:bf:b6:77:61:8e:c8:74:b2:73:11:26: f0:b4:d6:8f:63:c3:1f:0a:1b:22:46:13:f5:99:c5:39:10:1a: f2:f6:39:5f:e1:6a:ce:b9:83:13:c7:e1:2c:8a:0b:55:ce:c8: f2:c8:ce:cc:b4:f1:e0:a1:6f:f7:df:36:6f:61:8b:5f:17:c6: 9f:52:b6:c3:82:fb:70:e7:43:01:76:c1:e6:07:ab:7b:81:70: aa:15:11:54:ea:f1:a0:49:7f:13:7b:3f:e1:00:9e:b8:bc:c3: 25:08:39:00:74:8f:31:28:94:e6:38:e9:bb:db:59:0e:99:cf: 47:fd:d4:15:23:22:70:c1:04:14:52:49:44:8b:d4:07:5c:64: 60:fe:85:d7:02:6e:f3:be:a8:0f:60:b8:e3:15:ab:03:80:bb: 0a:7b:89:ce:bd:67:12:27:e1:0a:1e:fb:f0:df:28:d0:45:98: 84:1d:df:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56wzAiZGg4uk8XZLFROkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTM3MTFkYzVkZTQ1ZjJmNWI0NzkwMTY1OWU5NTZkOTM4 MjcyZmUwHhcNMjUxMjIwMDQwMTA0WhcNMjUxMjIxMDQwMTA0WjAzMTEwLwYDVQQD EygyOTY4M2YyNGJjODNmMjg2YTI3NWY4YzY2NWVmZDhhMzljZjAyNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTnYbQntEx545DXv3iQR+YUJ36XP oLfsK8mdE6jO/CJQrNEdJLumlsUs7uaSZo+ezjKjiLa19plMELPas5pCRn8N8Byh Pf7Ts530gQiW/Zw8yKz/VS6wxWMsMKDUI9zFCe3HyhGT4esCAuE6mJ0KVPiAigjp gpaXPeG/suoQdlfjyrH3AfehFrpczafEtWNAOUgWQGz8ba4wiRLzkT/0QsrfitJi tZKBjm03JCq6eXdSMf+SVpZaymGdanZpABWR2Tl4meqW/abhjPhuvye3LFx+XURe NKbZyG4GVErmf8ohEYv1FvI7Q7MOjIUSf2NCpwX1u7I1jeINgOYvCNGJQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCloPyS8g/KGonX4xmXv2KOc8CXSMB8GA1UdIwQY MBaAFE2jcR3F3kXy9bR5AWWelW2TgnL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzct ZTI1MTEwOWJmZDE5LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzctZTI1MTEwOWJmZDE5 LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1ZaRZXb 4zBSPmwCn0+ZEZA8TjUS6L5rpQvFzuBO8jIzYR3rrSctRYn2MyC56gRbHckhYlW6 GJFrn67eBLf/EDSYGQTQ3tyOd0rhSm2XPb+2d2GOyHSycxEm8LTWj2PDHwobIkYT 9ZnFORAa8vY5X+FqzrmDE8fhLIoLVc7I8sjOzLTx4KFv9982b2GLXxfGn1K2w4L7 cOdDAXbB5gere4FwqhURVOrxoEl/E3s/4QCeuLzDJQg5AHSPMSiU5jjpu9tZDpnP R/3UFSMicMEEFFJJRIvUB1xkYP6F1wJu876oD2C44xWrA4C7CnuJzr1nEifhCh77 8N8o0EWYhB3fZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:56 2025 by rpki-client