This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json) Hash identifier: xbAcxZypnGkj9Rx/LPV0OWct3nWWKW3hOXxBFrCNw3o= Subject key identifier: 7B:F2:9B:73:18:5E:FF:68:E7:67:13:40:01:97:1F:65:85:CE:B7:FD Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Certificate serial: 019AF3BFF1FA7AEEC1C5A7E84D7338BFF798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft Manifest number: 0601 Signing time: Sat 06 Dec 2025 13:00:33 +0000 Manifest this update: Sat 06 Dec 2025 13:00:33 +0000 Manifest next update: Sun 07 Dec 2025 13:00:33 +0000 Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=) 2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: kpy4Jb87nbhB0pLjcavDxYf0gKIe6JWLSaI2S1M/Bmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:f1:fa:7a:ee:c1:c5:a7:e8:4d:73:38:bf:f7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Validity Not Before: Dec 6 13:00:33 2025 GMT Not After : Dec 7 13:00:33 2025 GMT Subject: CN=7bf29b73185eff68e767134001971f6585ceb7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:b7:e6:0d:ad:b0:82:90:4c:34:78:f3:0e: 99:5f:c9:5d:75:8c:16:6b:47:6b:20:a1:33:e7:95: b8:d0:0a:ef:78:f2:5a:c4:01:6d:93:e9:b7:60:66: e1:6b:ce:49:78:d6:c1:2c:f2:01:e0:63:43:fe:4f: f0:7d:6f:ed:5f:06:4d:a6:1b:41:0f:68:c4:c5:58: ce:1f:23:3b:e5:eb:d4:1b:21:31:64:4f:f9:71:02: 49:08:90:52:88:02:a9:84:4a:fb:f3:6f:35:c6:b7: 2f:38:e0:c8:16:ff:1c:e5:fe:10:69:03:f3:8f:50: 52:b4:02:27:63:b0:e1:f0:b7:91:14:32:df:3d:c1: f5:16:4b:df:5e:4e:ec:43:97:ea:b7:1a:7c:bf:cb: 34:91:46:58:5e:9f:37:be:33:14:6f:85:9e:ba:4a: 51:13:c7:32:f5:aa:0c:99:07:3b:7c:ed:6c:03:f6: e4:ca:b3:e8:51:14:0e:cc:aa:8b:f1:a2:6a:b8:ed: f3:47:a5:f1:c9:a3:2d:03:96:11:b6:fe:8f:7f:e9: 3d:12:cb:e6:74:4c:64:f3:c4:97:f3:35:b6:11:2d: f5:c5:33:7c:a2:60:28:a9:54:57:0b:8b:d2:5e:2f: 3e:9e:3b:bd:0d:01:0c:cc:cd:11:c2:6a:72:08:3f: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F2:9B:73:18:5E:FF:68:E7:67:13:40:01:97:1F:65:85:CE:B7:FD X509v3 Authority Key Identifier: keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d3:90:c7:e7:97:72:01:23:1e:52:32:96:e1:aa:6c:02:73: ce:e4:ab:55:13:91:7f:e6:b9:fa:08:8d:04:44:61:13:7f:b4: 4f:f6:f7:48:e2:2e:8c:06:a8:92:4d:f0:17:68:22:29:85:99: 13:8d:3e:c2:cc:12:84:0e:f9:dd:10:4e:1c:66:05:0a:f4:1c: 5d:db:53:0d:db:15:4c:b7:32:34:75:42:b1:ee:7b:3b:ab:35: 1f:93:15:a7:bd:40:a5:8b:6d:03:22:60:f2:9e:1e:79:d1:b8: 0c:2f:e2:d7:fb:8a:9f:b0:40:11:65:ea:fe:40:41:28:ab:ad: d7:54:28:46:4d:a9:bb:61:3f:c5:28:0a:ef:4b:a3:22:90:77: 23:6e:63:60:54:22:20:3d:23:8d:ef:2e:76:27:38:dc:f1:6b: 63:66:f2:68:2a:b1:6a:7e:09:f1:6c:be:e1:8f:a5:9f:1b:c3: b5:73:5b:9f:6e:dd:95:2d:d3:2f:47:2e:e5:e8:68:4e:c9:b6: 53:ab:e0:32:4f:9e:02:a7:8c:9c:56:d0:ec:0f:ec:06:37:37: 26:f4:aa:f7:ca:0f:5f:0f:dc:b4:89:55:02:1d:c2:d7:e3:d6: 3e:88:68:ee:3b:1f:fe:f8:99:57:31:79:c6:13:0f:fd:d1:e5: a6:93:9a:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/H6eu7BxafoTXM4v/eYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx ZTMyMDMwHhcNMjUxMjA2MTMwMDMzWhcNMjUxMjA3MTMwMDMzWjAzMTEwLwYDVQQD Eyg3YmYyOWI3MzE4NWVmZjY4ZTc2NzEzNDAwMTk3MWY2NTg1Y2ViN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhK35g2tsIKQTDR48w6ZX8lddYwW a0drIKEz55W40ArvePJaxAFtk+m3YGbha85JeNbBLPIB4GND/k/wfW/tXwZNphtB D2jExVjOHyM75evUGyExZE/5cQJJCJBSiAKphEr78281xrcvOODIFv8c5f4QaQPz j1BStAInY7Dh8LeRFDLfPcH1FkvfXk7sQ5fqtxp8v8s0kUZYXp83vjMUb4WeukpR E8cy9aoMmQc7fO1sA/bkyrPoURQOzKqL8aJquO3zR6XxyaMtA5YRtv6Pf+k9Esvm dExk88SX8zW2ES31xTN8omAoqVRXC4vSXi8+nju9DQEMzM0RwmpyCD8PwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvym3MYXv9o52cTQAGXH2WFzrf9MB8GA1UdIwQY MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1 LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9OQx+eX cgEjHlIyluGqbAJzzuSrVRORf+a5+giNBERhE3+0T/b3SOIujAaokk3wF2giKYWZ E40+wswShA753RBOHGYFCvQcXdtTDdsVTLcyNHVCse57O6s1H5MVp71ApYttAyJg 8p4eedG4DC/i1/uKn7BAEWXq/kBBKKut11QoRk2pu2E/xSgK70ujIpB3I25jYFQi ID0jje8udic43PFrY2byaCqxan4J8Wy+4Y+lnxvDtXNbn27dlS3TL0cu5ehoTsm2 U6vgMk+eAqeMnFbQ7A/sBjc3JvSq98oPXw/ctIlVAh3C1+PWPoho7jsf/viZVzF5 xhMP/dHlppOaOg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:21 2025 by rpki-client