This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json) Hash identifier: O/4EtfwdC4UHqVAE1TqMBIUdEONOXMF+3dXozDMXDZQ= Subject key identifier: B9:68:9F:4C:B0:5D:B8:82:2D:94:2C:5C:F4:80:60:6C:80:68:64:84 Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66 Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66 Certificate serial: 019B5418B50CF5D426063955CED1454B228F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft Manifest number: 1723 Signing time: Thu 25 Dec 2025 06:01:03 +0000 Manifest this update: Thu 25 Dec 2025 06:01:03 +0000 Manifest next update: Fri 26 Dec 2025 06:01:03 +0000 Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: ioMRBkGSUfi/f6nd9u9XqI3ofRWvL0JUVzYLDiw2aKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:b5:0c:f5:d4:26:06:39:55:ce:d1:45:4b:22:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66 Validity Not Before: Dec 25 06:01:03 2025 GMT Not After : Dec 26 06:01:03 2025 GMT Subject: CN=b9689f4cb05db8822d942c5cf480606c80686484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:8e:3b:9b:e0:8f:54:17:01:31:2e:ae:1e: 4b:50:0f:96:67:59:a3:ef:77:d6:56:f7:8e:04:67: 44:de:da:3a:dc:e2:e1:29:2a:bf:27:e3:89:b6:6f: 94:19:65:75:65:55:cd:e9:dc:f9:19:c2:10:db:44: 63:92:8c:6b:48:0b:02:53:81:bd:b9:5a:75:43:85: 62:e2:76:b1:ef:90:c9:ec:cb:de:6f:c4:ee:a8:f2: 5c:6f:a4:d9:d0:17:5f:7b:b2:a5:69:f8:bb:07:99: b5:25:f8:f4:c1:f1:8f:47:b3:cf:3e:2c:f7:78:fb: 66:26:0c:2e:a8:07:19:a1:ff:de:89:50:a4:15:4b: 69:2c:62:d1:cf:f3:3d:de:23:f7:d5:56:93:a4:94: 8f:53:fd:09:c5:67:d7:4c:a4:35:3e:58:d1:fc:66: b5:86:94:5b:b4:fb:73:25:cf:d2:19:d5:d3:48:d3: 20:16:11:c2:52:b1:25:06:94:dc:25:78:76:d1:77: 70:09:38:26:7e:22:7f:11:1c:38:ea:dc:49:c4:57: ac:d6:3c:e7:6a:75:4a:cb:f3:9f:e6:68:48:4c:2d: 98:6e:ec:bd:de:a7:12:9e:28:26:76:e1:68:a2:7d: 24:ea:b9:6c:46:7d:19:6e:3b:d2:4c:f8:a1:54:93: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:68:9F:4C:B0:5D:B8:82:2D:94:2C:5C:F4:80:60:6C:80:68:64:84 X509v3 Authority Key Identifier: keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:75:6f:82:4c:f0:f9:a0:c2:11:89:8a:2d:25:15:08:34:22: 07:16:e6:05:8e:71:2c:c7:f0:46:2b:c8:9c:55:0e:11:fb:e0: de:9a:3a:28:4c:d4:10:ed:69:85:cb:34:8c:de:f2:db:86:b4: 72:9b:d2:56:72:dd:84:65:16:34:f3:27:34:1d:6b:3f:52:08: 5c:e5:16:49:83:dd:af:b8:e7:c0:51:3d:a7:5c:f5:db:45:dc: f5:51:34:3f:05:3b:cb:72:74:d4:70:f4:d4:19:40:4d:3d:d4: 72:f3:dc:51:14:e9:35:f4:24:c3:36:3c:1e:23:7f:53:03:ad: 5b:bc:5f:7c:c6:c5:33:90:c1:59:dc:c3:8f:45:64:ea:3b:9c: 9f:ff:6f:d1:a9:9e:93:2a:4c:b6:4b:d4:f6:f0:5f:b5:f2:21: 5b:12:db:4f:d4:e3:2b:03:e0:f3:5f:e6:84:4a:c9:27:42:7d: 1d:91:20:89:72:03:89:2f:1b:f7:f3:08:95:f3:c0:1c:65:33: 87:ed:76:d1:e1:66:ae:84:01:d0:58:63:c1:80:5d:c3:2d:0d: 3e:c4:c8:0c:67:03:de:fc:00:cf:dd:cd:26:a1:70:f9:98:13: 78:f2:d1:8f:9a:07:e4:92:47:f9:70:29:a1:07:a9:de:52:4a: 14:bf:05:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGLUM9dQmBjlVztFFSyKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOWY5MzAwMmQ3OGU4ZTQwZGE1NjBjNDI5MWZiODMwZDky ZGZmNjYwHhcNMjUxMjI1MDYwMTAzWhcNMjUxMjI2MDYwMTAzWjAzMTEwLwYDVQQD EyhiOTY4OWY0Y2IwNWRiODgyMmQ5NDJjNWNmNDgwNjA2YzgwNjg2NDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2uOO5vgj1QXATEurh5LUA+WZ1mj 73fWVveOBGdE3to63OLhKSq/J+OJtm+UGWV1ZVXN6dz5GcIQ20RjkoxrSAsCU4G9 uVp1Q4Vi4nax75DJ7Mveb8TuqPJcb6TZ0Bdfe7Klafi7B5m1Jfj0wfGPR7PPPiz3 ePtmJgwuqAcZof/eiVCkFUtpLGLRz/M93iP31VaTpJSPU/0JxWfXTKQ1PljR/Ga1 hpRbtPtzJc/SGdXTSNMgFhHCUrElBpTcJXh20XdwCTgmfiJ/ERw46txJxFes1jzn anVKy/Of5mhITC2Ybuy93qcSnigmduFoon0k6rlsRn0ZbjvSTPihVJOzLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlon0ywXbiCLZQsXPSAYGyAaGSEMB8GA1UdIwQY MBaAFAKfkwAteOjkDaVgxCkfuDDZLf9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2Yt NWYyNjM1NWM4YTc0LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2YtNWYyNjM1NWM4YTc0 LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3Vvgkzw +aDCEYmKLSUVCDQiBxbmBY5xLMfwRivInFUOEfvg3po6KEzUEO1phcs0jN7y24a0 cpvSVnLdhGUWNPMnNB1rP1IIXOUWSYPdr7jnwFE9p1z120Xc9VE0PwU7y3J01HD0 1BlATT3UcvPcURTpNfQkwzY8HiN/UwOtW7xffMbFM5DBWdzDj0Vk6jucn/9v0ame kypMtkvU9vBftfIhWxLbT9TjKwPg81/mhErJJ0J9HZEgiXIDiS8b9/MIlfPAHGUz h+120eFmroQB0FhjwYBdwy0NPsTIDGcD3vwAz93NJqFw+ZgTePLRj5oH5JJH+XAp oQep3lJKFL8F0g== -----END CERTIFICATE-----Generated at Thu Dec 25 14:32:21 2025 by rpki-client