This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json) Hash identifier: UClYFt5dMO2sCZz7L73flcfgYoAsvBRj5Q2k9kku2ss= Subject key identifier: F8:23:0B:DF:79:7E:A2:66:9D:FF:1A:BE:58:85:55:E3:F3:99:95:C6 Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd Certificate serial: 019AF464F47279EE70E93BA36513DB07BDD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft Manifest number: 0D87 Signing time: Sat 06 Dec 2025 16:00:48 +0000 Manifest this update: Sat 06 Dec 2025 16:00:48 +0000 Manifest next update: Sun 07 Dec 2025 16:00:48 +0000 Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: FMKPSFKrBYkAw+R6nuM8kQ00yKr1UZ2eNnRoUNEsKBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f4:72:79:ee:70:e9:3b:a3:65:13:db:07:bd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd Validity Not Before: Dec 6 16:00:48 2025 GMT Not After : Dec 7 16:00:48 2025 GMT Subject: CN=f8230bdf797ea2669dff1abe588555e3f39995c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:4f:60:53:87:63:e6:c4:a4:f3:bb:cb:6f: c1:f1:52:ce:fb:4c:5d:7a:20:23:78:cc:1e:90:04: 79:bd:24:ec:af:d6:a2:3d:c7:0e:2e:22:22:3a:95: f4:19:81:6a:6b:fd:9c:e8:34:7e:41:f8:40:84:69: e8:18:c6:f2:0e:a5:92:e8:d3:bd:6f:80:b0:48:1b: 4c:b9:10:e1:f8:5c:42:58:07:9a:b1:b4:80:bf:2b: 00:54:ff:62:b4:83:ce:76:84:51:17:11:13:ab:36: d0:02:91:1e:88:a3:ff:0c:09:19:e9:f2:e2:e6:04: 3b:16:f1:32:af:24:2d:91:1a:c5:d5:40:14:86:c9: d1:67:0b:e3:76:1c:51:63:3f:d4:6b:64:06:52:55: 04:05:60:2f:54:f5:22:5c:c1:33:48:45:97:ed:f1: 4b:6e:ea:e7:e1:4f:98:f6:53:ff:fc:08:e6:7c:f6: ae:1b:24:40:a6:7d:d5:9a:18:af:56:54:e4:ac:e8: 3b:3c:c7:c3:50:97:a4:09:5e:44:2f:d4:b7:ad:81: 35:1f:ef:ad:ee:fe:ca:f5:8f:4a:52:bc:15:8d:5c: 2e:a8:19:20:01:3c:8b:73:22:50:c5:36:fc:f8:be: ed:eb:1a:e3:da:9e:48:6e:3e:b5:2a:2f:9d:b3:55: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:23:0B:DF:79:7E:A2:66:9D:FF:1A:BE:58:85:55:E3:F3:99:95:C6 X509v3 Authority Key Identifier: keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:1a:dc:33:f5:5f:ca:9a:27:8b:08:88:04:ef:15:f1:f2:d5: db:b6:31:2e:0c:82:29:79:33:65:c5:7d:66:aa:2d:cf:57:45: fb:9c:61:02:12:77:e9:7e:8e:1c:e4:51:ea:9e:6a:1a:9b:f1: 21:48:0c:c8:51:88:1f:96:67:38:a5:34:b1:15:b0:c5:37:4e: de:17:34:a9:c2:1a:ed:bd:5c:41:e7:7b:7a:05:be:7b:c2:f5: 9d:4c:36:32:01:8e:8c:fd:e4:52:e7:2b:81:8c:b1:4c:9f:b6: cc:6f:23:91:bc:c9:a6:85:e2:67:61:35:fe:74:57:68:57:1a: 58:4b:3f:cd:aa:61:2c:b3:f6:8b:56:08:38:67:1c:75:9c:9a: bf:f5:fb:21:31:a1:97:ad:fe:b0:47:ad:87:18:96:9d:bb:b9: a6:da:2b:4d:6b:52:ca:25:db:04:3e:cd:a2:6b:c3:1e:7a:b1: f3:3c:4c:f4:d5:97:ef:7d:8b:74:f5:6a:fc:6d:33:a5:8d:f7: 28:85:a8:5d:22:2c:31:f2:79:54:07:76:4d:b9:bb:f4:71:02: 55:13:86:eb:6c:53:ed:88:64:84:81:86:47:36:eb:59:57:02: f7:2c:36:96:bc:e2:b2:c6:a6:33:95:34:7c:02:bc:e0:88:0a: 4d:63:c7:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPRyee5w6TujZRPbB73TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWQwOTY3Y2EwMDAyZGQ5Y2U0NWJjNDNiYjcwMWI0MTcz ZDc5YmQwHhcNMjUxMjA2MTYwMDQ4WhcNMjUxMjA3MTYwMDQ4WjAzMTEwLwYDVQQD EyhmODIzMGJkZjc5N2VhMjY2OWRmZjFhYmU1ODg1NTVlM2YzOTk5NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkxPYFOHY+bEpPO7y2/B8VLO+0xd eiAjeMwekAR5vSTsr9aiPccOLiIiOpX0GYFqa/2c6DR+QfhAhGnoGMbyDqWS6NO9 b4CwSBtMuRDh+FxCWAeasbSAvysAVP9itIPOdoRRFxETqzbQApEeiKP/DAkZ6fLi 5gQ7FvEyryQtkRrF1UAUhsnRZwvjdhxRYz/Ua2QGUlUEBWAvVPUiXMEzSEWX7fFL burn4U+Y9lP//AjmfPauGyRApn3VmhivVlTkrOg7PMfDUJekCV5EL9S3rYE1H++t 7v7K9Y9KUrwVjVwuqBkgATyLcyJQxTb8+L7t6xrj2p5Ibj61Ki+ds1XzjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgjC995fqJmnf8avliFVePzmZXGMB8GA1UdIwQY MBaAFLWtCWfKAALdnORbxDu3AbQXPXm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTIt N2MzNmVmNjEzYThmLzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTItN2MzNmVmNjEzYThm LzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0hrcM/Vf yponiwiIBO8V8fLV27YxLgyCKXkzZcV9Zqotz1dF+5xhAhJ36X6OHORR6p5qGpvx IUgMyFGIH5ZnOKU0sRWwxTdO3hc0qcIa7b1cQed7egW+e8L1nUw2MgGOjP3kUucr gYyxTJ+2zG8jkbzJpoXiZ2E1/nRXaFcaWEs/zaphLLP2i1YIOGccdZyav/X7ITGh l63+sEethxiWnbu5ptorTWtSyiXbBD7NomvDHnqx8zxM9NWX732LdPVq/G0zpY33 KIWoXSIsMfJ5VAd2Tbm79HECVROG62xT7YhkhIGGRzbrWVcC9yw2lrzissamM5U0 fAK84IgKTWPHhw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:24 2025 by rpki-client