This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json) Hash identifier: b2QEoHT96sSheDdgyKrqbcxdT7Kju0k+1Ee03GnGJ+4= Subject key identifier: CE:2B:A2:66:C3:B6:35:D7:C7:01:A2:A6:46:A7:8F:3E:DD:B2:17:61 Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0 Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0 Certificate serial: 019B44A58158E5C848B243520D77F3852264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft Manifest number: 14CF Signing time: Mon 22 Dec 2025 06:00:55 +0000 Manifest this update: Mon 22 Dec 2025 06:00:55 +0000 Manifest next update: Tue 23 Dec 2025 06:00:55 +0000 Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=) 2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: FTZXfbzFFX09eyjOJ0sG3R6txk+z1a8D/fwPPFJluZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:81:58:e5:c8:48:b2:43:52:0d:77:f3:85:22:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0 Validity Not Before: Dec 22 06:00:55 2025 GMT Not After : Dec 23 06:00:55 2025 GMT Subject: CN=ce2ba266c3b635d7c701a2a646a78f3eddb21761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:ca:5a:48:5c:9e:c6:87:ba:d2:f9:de:e9: a9:20:58:78:59:a7:ac:2a:65:02:61:e1:86:ab:ef: 9c:6c:17:a5:79:01:90:ab:8b:b5:b9:6b:25:9c:ce: a8:14:89:2e:8c:5b:d9:90:95:15:34:d2:01:98:bb: 82:44:79:e7:63:b7:85:1c:47:44:ae:7e:e7:63:96: 9c:dd:2c:f2:5f:61:31:2c:1a:67:08:e2:d4:d3:40: 6d:67:3e:a9:ca:d1:05:e7:73:2a:bf:12:a5:69:77: 7c:e4:27:85:07:7c:9b:10:68:35:d4:1e:09:b8:05: d6:be:5e:98:75:ce:06:96:2b:d8:cf:c1:a3:21:9b: 5a:06:6d:de:a6:58:63:aa:b9:ae:92:fa:48:5d:98: 90:58:1e:b3:1f:9f:b5:64:6b:6a:c0:c3:91:d1:32: d1:78:33:f4:af:11:5c:a9:15:4a:1b:20:70:b0:20: b8:41:dd:50:97:75:3e:c6:7f:cd:22:29:8c:41:6f: 1a:e3:79:ac:1a:24:c2:5f:e8:18:7c:41:f1:bc:52: 5b:22:87:5b:5a:4f:ce:ae:49:09:22:4b:51:c2:9e: 58:b5:95:41:32:a9:1d:c4:f1:3f:e2:10:fd:e8:89: 94:5f:77:7b:ca:8f:1b:da:ba:ba:90:68:03:91:ab: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2B:A2:66:C3:B6:35:D7:C7:01:A2:A6:46:A7:8F:3E:DD:B2:17:61 X509v3 Authority Key Identifier: keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4d:9f:83:57:ed:4a:e2:ac:4b:d6:cd:3f:f5:a0:b3:5b:9c: e0:d2:fa:e9:c8:5f:13:f1:7d:6d:0c:52:6f:f6:18:68:40:94: 87:f1:a2:db:ab:e7:83:4c:b0:16:d3:a3:71:e4:24:37:74:5f: 7b:12:91:41:c1:dc:a1:03:25:17:3d:86:45:1e:64:84:b7:58: 01:8b:7d:97:b7:a3:ae:93:5d:ee:da:af:b5:84:e1:b3:fa:fe: ea:6c:9a:de:a8:dd:c3:d3:63:da:e1:25:52:0f:92:03:a9:98: ba:97:5e:62:fa:8d:8c:9a:e6:a5:43:47:02:8b:19:63:ff:c5: d4:fc:1f:12:77:64:a0:6f:83:20:8e:bf:29:3d:c3:5b:c7:c8: 02:02:75:b1:48:f0:70:b1:31:76:75:58:bd:d2:61:de:2b:86: 57:f4:99:ee:d7:82:3a:b8:4b:05:8a:75:f4:d0:8e:c7:95:37: 3d:c0:cf:36:51:84:74:90:fa:79:2e:f3:e8:88:b3:67:b5:ad: b5:b2:4e:4f:89:5c:32:c3:b3:7c:b5:4b:54:44:5e:92:cb:15: c9:97:e0:48:32:87:22:51:ce:21:2b:db:34:12:34:36:af:98: 1b:4d:9d:7e:6e:d4:e1:2a:ba:bb:51:1c:30:9e:b0:87:38:f8: 5b:b5:0b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpYFY5chIskNSDXfzhSJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMDcxYmFkOTI5ZTM2MmIwNjJiODljODdmYTQxYjVkZWRh NGZmYzAwHhcNMjUxMjIyMDYwMDU1WhcNMjUxMjIzMDYwMDU1WjAzMTEwLwYDVQQD EyhjZTJiYTI2NmMzYjYzNWQ3YzcwMWEyYTY0NmE3OGYzZWRkYjIxNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLfKWkhcnsaHutL53umpIFh4Waes KmUCYeGGq++cbBeleQGQq4u1uWslnM6oFIkujFvZkJUVNNIBmLuCRHnnY7eFHEdE rn7nY5ac3SzyX2ExLBpnCOLU00BtZz6pytEF53MqvxKlaXd85CeFB3ybEGg11B4J uAXWvl6Ydc4GlivYz8GjIZtaBm3eplhjqrmukvpIXZiQWB6zH5+1ZGtqwMOR0TLR eDP0rxFcqRVKGyBwsCC4Qd1Ql3U+xn/NIimMQW8a43msGiTCX+gYfEHxvFJbIodb Wk/OrkkJIktRwp5YtZVBMqkdxPE/4hD96ImUX3d7yo8b2rq6kGgDkatk7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4rombDtjXXxwGipkanjz7dshdhMB8GA1UdIwQY MBaAFEwHG62SnjYrBiuJyH+kG13tpP/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYt YmMxZDlhMDM0NTkzLzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYtYmMxZDlhMDM0NTkz LzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk2fg1ft SuKsS9bNP/Wgs1uc4NL66chfE/F9bQxSb/YYaECUh/Gi26vng0ywFtOjceQkN3Rf exKRQcHcoQMlFz2GRR5khLdYAYt9l7ejrpNd7tqvtYThs/r+6mya3qjdw9Nj2uEl Ug+SA6mYupdeYvqNjJrmpUNHAosZY//F1PwfEndkoG+DII6/KT3DW8fIAgJ1sUjw cLExdnVYvdJh3iuGV/SZ7teCOrhLBYp19NCOx5U3PcDPNlGEdJD6eS7z6IizZ7Wt tbJOT4lcMsOzfLVLVERekssVyZfgSDKHIlHOISvbNBI0Nq+YG02dfm7U4Sq6u1Ec MJ6whzj4W7ULQw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:57 2025 by rpki-client