This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json) Hash identifier: d0pYzx688UZMy6QhryRWQygWoysxSTcQXAR5SqHtuCc= Subject key identifier: AF:64:1F:C8:12:95:36:56:AE:86:94:06:E7:8B:44:69:85:75:B6:3F Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Certificate serial: 019B3F11BC63472B95136B9C4A34EC697ECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft Manifest number: 171A Signing time: Sun 21 Dec 2025 04:01:25 +0000 Manifest this update: Sun 21 Dec 2025 04:01:25 +0000 Manifest next update: Mon 22 Dec 2025 04:01:25 +0000 Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=) 2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: suHDYSw1gtXaEC1rqLWXT0ldFNRsMWtewdPaOJSkvvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:bc:63:47:2b:95:13:6b:9c:4a:34:ec:69:7e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Validity Not Before: Dec 21 04:01:25 2025 GMT Not After : Dec 22 04:01:25 2025 GMT Subject: CN=af641fc812953656ae869406e78b44698575b63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:b6:cf:10:98:d4:60:d9:0f:4d:af:6e:92: 33:ae:9f:1d:53:9e:34:c5:f4:6c:34:84:9f:7f:70: c2:f4:7c:fd:e7:03:77:cc:6b:22:21:4d:6c:c8:f0: 9f:7b:93:f5:99:42:8f:4e:e9:61:e7:11:4c:61:02: 09:bd:5c:b9:f7:36:ea:47:64:03:87:50:5b:25:fb: e3:ea:cd:00:df:fe:a1:f5:e3:db:ad:75:50:86:9c: 52:7a:74:9f:e0:2d:fd:c2:eb:5b:d3:24:4c:37:36: d8:e0:63:c3:fd:ca:ea:ab:86:46:35:40:4f:53:f9: 64:cd:5f:83:5d:c0:9f:42:fe:b6:bc:26:24:3f:81: 2c:14:47:61:90:c5:c7:b7:21:e4:79:71:b5:3a:e7: be:bf:21:10:2b:ee:52:47:3e:7e:f3:32:10:32:d6: c2:4c:46:3e:12:90:3c:ed:71:01:23:91:d4:f7:2e: 3c:e1:70:e5:97:b9:d9:b4:fc:ce:d6:d8:3d:59:6e: 74:90:1b:9d:19:43:87:06:0d:4a:91:5e:b5:08:70: e8:f2:94:e3:b1:06:10:c9:b4:9f:c1:36:1f:9a:c9: ca:16:04:b7:02:17:ac:13:23:c2:5b:52:1d:18:ef: 8c:3b:a0:eb:0f:42:4c:f4:eb:50:9e:0b:2b:23:28: 4e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:64:1F:C8:12:95:36:56:AE:86:94:06:E7:8B:44:69:85:75:B6:3F X509v3 Authority Key Identifier: keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b7:0f:7b:bf:44:ce:ad:02:d6:c1:1e:12:e5:6d:06:03:04: 0b:f1:ef:77:1d:e4:a4:ba:fb:ef:ac:73:0d:25:2a:02:b3:4b: f8:79:ce:0a:06:eb:5a:61:6c:29:b2:9e:a6:a2:ca:9c:52:30: 9e:03:56:78:33:8f:e5:c9:e1:af:2c:62:17:54:7a:bf:4c:c4: 2b:10:2f:c8:48:6b:d9:10:bd:60:df:2d:fe:3c:ef:d2:bc:89: e4:96:d1:ca:61:ba:32:03:60:dc:72:30:39:f4:f9:24:b3:f4: 86:42:e5:95:97:8a:c8:3f:5a:e1:8f:89:a5:d9:26:32:ca:07: f6:3a:52:cd:05:ea:74:58:dd:ad:2f:83:09:c9:52:b0:32:ca: 1f:cc:32:d6:75:01:33:e9:46:f3:98:9f:a8:c4:8b:c1:2e:ed: e2:c5:6b:b1:6b:2c:91:74:09:19:b7:63:13:e9:e3:53:5b:5f: 05:94:4e:11:18:f5:10:1d:48:0c:43:bc:f6:82:3e:eb:b5:ab: 6b:8b:71:35:e3:8c:00:5d:00:ad:e1:b2:87:76:26:df:f5:e0: 45:69:3c:21:dc:39:75:39:71:85:86:eb:8c:2f:67:1b:c7:89: aa:e3:56:56:f3:c4:9c:be:95:a9:dd:e0:05:22:1b:45:2a:ec: c2:4e:83:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EbxjRyuVE2ucSjTsaX7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy OGY4MmIwHhcNMjUxMjIxMDQwMTI1WhcNMjUxMjIyMDQwMTI1WjAzMTEwLwYDVQQD EyhhZjY0MWZjODEyOTUzNjU2YWU4Njk0MDZlNzhiNDQ2OTg1NzViNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwe2zxCY1GDZD02vbpIzrp8dU540 xfRsNISff3DC9Hz95wN3zGsiIU1syPCfe5P1mUKPTulh5xFMYQIJvVy59zbqR2QD h1BbJfvj6s0A3/6h9ePbrXVQhpxSenSf4C39wutb0yRMNzbY4GPD/crqq4ZGNUBP U/lkzV+DXcCfQv62vCYkP4EsFEdhkMXHtyHkeXG1Oue+vyEQK+5SRz5+8zIQMtbC TEY+EpA87XEBI5HU9y484XDll7nZtPzO1tg9WW50kBudGUOHBg1KkV61CHDo8pTj sQYQybSfwTYfmsnKFgS3AhesEyPCW1IdGO+MO6DrD0JM9OtQngsrIyhO3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9kH8gSlTZWroaUBueLRGmFdbY/MB8GA1UdIwQY MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0 LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLcPe79E zq0C1sEeEuVtBgMEC/Hvdx3kpLr776xzDSUqArNL+HnOCgbrWmFsKbKepqLKnFIw ngNWeDOP5cnhryxiF1R6v0zEKxAvyEhr2RC9YN8t/jzv0ryJ5JbRymG6MgNg3HIw OfT5JLP0hkLllZeKyD9a4Y+JpdkmMsoH9jpSzQXqdFjdrS+DCclSsDLKH8wy1nUB M+lG85ifqMSLwS7t4sVrsWsskXQJGbdjE+njU1tfBZROERj1EB1IDEO89oI+67Wr a4txNeOMAF0AreGyh3Ym3/XgRWk8Idw5dTlxhYbrjC9nG8eJquNWVvPEnL6Vqd3g BSIbRSrswk6DLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:56 2025 by rpki-client