This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json) Hash identifier: RpmW2vy7kjpLjZfDrSs8SrOYEVpAuJGNtNZfsECZFDg= Subject key identifier: CA:5C:D4:11:59:9A:A0:03:CF:0F:81:90:9A:1F:E9:19:B4:53:75:94 Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd Certificate serial: 019B3042CF0098F5F255FA6D038654D5451F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft Manifest number: 0DA6 Signing time: Thu 18 Dec 2025 07:00:43 +0000 Manifest this update: Thu 18 Dec 2025 07:00:43 +0000 Manifest next update: Fri 19 Dec 2025 07:00:43 +0000 Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: zmQbRdWqbhoFgKF+OqZUpXVo0HHwhnodba9GT/vHxnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:cf:00:98:f5:f2:55:fa:6d:03:86:54:d5:45:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd Validity Not Before: Dec 18 07:00:43 2025 GMT Not After : Dec 19 07:00:43 2025 GMT Subject: CN=ca5cd411599aa003cf0f81909a1fe919b4537594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:66:df:a6:92:7c:c7:cf:4d:bd:38:5d:98: 29:67:83:16:ca:99:26:d3:c0:61:5c:07:c8:c5:f7: 02:2d:ac:62:07:9f:75:d2:2f:4e:6c:e7:f3:eb:1e: 87:96:e7:cb:f2:52:6a:c0:a3:d7:a1:8f:d7:a7:a7: 4c:df:5c:ab:a9:3a:00:1d:64:87:3b:ba:13:b5:2a: 50:54:77:84:6d:83:3c:dd:ab:57:7c:f9:31:4f:bf: 23:cf:63:a6:3f:1c:87:c9:9a:88:13:67:16:d4:6f: 45:2d:7c:58:33:e6:2a:f2:ad:ac:f3:f6:04:f6:9c: 4a:7d:ce:33:0c:59:3d:1d:6f:4e:41:cc:c6:e0:3b: 8b:da:ef:3b:a5:0f:f3:57:de:b6:80:00:08:6f:2b: 76:9c:ec:51:c6:23:12:38:1f:06:6b:af:f7:fb:90: 01:06:3e:30:e0:c9:5b:fa:c1:24:80:91:83:e6:4f: 3b:0a:f1:73:86:be:cb:19:4d:a4:c6:ba:55:6f:21: ee:d7:ab:8a:17:b5:5e:13:55:8d:d6:a7:35:de:0a: b8:ee:9d:f9:ba:83:87:ea:60:65:d3:b0:99:53:28: 74:e2:40:cf:3b:33:aa:55:6b:27:ef:83:9b:dc:e9: fc:ac:09:23:a8:d0:01:d8:cc:66:d2:99:d4:07:4e: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5C:D4:11:59:9A:A0:03:CF:0F:81:90:9A:1F:E9:19:B4:53:75:94 X509v3 Authority Key Identifier: keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0f:9c:9d:7b:67:76:5a:a3:5d:68:e4:13:32:c3:15:09:ec: a6:14:2f:b0:a2:65:77:49:83:77:c9:19:53:ae:0a:76:d7:8b: fe:60:3c:4f:ca:26:b9:40:96:71:86:b5:8c:00:f6:7c:20:2e: 23:85:85:77:ac:4c:5d:8f:ad:fc:29:6c:c0:b7:31:29:45:89: 2b:75:d1:c5:32:3f:1b:18:fd:4a:08:3f:61:fb:93:1f:9a:a7: 5e:16:b9:96:3b:85:bf:b5:a6:31:b3:9f:47:15:3a:e8:f9:1e: b7:3e:d7:8c:56:df:6a:9c:d9:e4:36:13:b3:09:e8:fd:7b:51: e7:85:56:49:6c:b6:f0:70:00:8a:aa:af:c3:21:db:4a:f9:20: b5:65:b5:28:c9:67:a1:ee:e0:29:1a:77:ea:cb:09:99:d1:e7: da:3f:3e:67:f4:80:3a:b6:88:04:89:b2:30:89:e3:4d:9f:15: 4f:2b:1c:ea:ae:45:4b:82:ae:df:a1:34:f9:94:bb:4b:4a:48: 42:f8:64:61:03:55:90:ae:80:4c:45:cf:38:1a:ce:37:28:c4: 3b:cb:a4:6f:62:4c:f7:70:53:7f:7a:66:07:90:74:82:75:36: 6d:0e:46:d5:cc:fa:cb:df:c8:39:67:dd:7f:4c:4f:b8:ef:4e: 02:da:e5:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQs8AmPXyVfptA4ZU1UUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWQwOTY3Y2EwMDAyZGQ5Y2U0NWJjNDNiYjcwMWI0MTcz ZDc5YmQwHhcNMjUxMjE4MDcwMDQzWhcNMjUxMjE5MDcwMDQzWjAzMTEwLwYDVQQD EyhjYTVjZDQxMTU5OWFhMDAzY2YwZjgxOTA5YTFmZTkxOWI0NTM3NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xJm36aSfMfPTb04XZgpZ4MWypkm 08BhXAfIxfcCLaxiB5910i9ObOfz6x6HlufL8lJqwKPXoY/Xp6dM31yrqToAHWSH O7oTtSpQVHeEbYM83atXfPkxT78jz2OmPxyHyZqIE2cW1G9FLXxYM+Yq8q2s8/YE 9pxKfc4zDFk9HW9OQczG4DuL2u87pQ/zV962gAAIbyt2nOxRxiMSOB8Ga6/3+5AB Bj4w4Mlb+sEkgJGD5k87CvFzhr7LGU2kxrpVbyHu16uKF7VeE1WN1qc13gq47p35 uoOH6mBl07CZUyh04kDPOzOqVWsn74Ob3On8rAkjqNAB2Mxm0pnUB06pAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpc1BFZmqADzw+BkJof6Rm0U3WUMB8GA1UdIwQY MBaAFLWtCWfKAALdnORbxDu3AbQXPXm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTIt N2MzNmVmNjEzYThmLzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDgxOWQtZTIzMS00MDYwLTlmMTItN2MzNmVmNjEzYThm LzEvdGEwSlo4b0FBdDJjNUZ2RU83Y0J0QmM5ZWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPg+cnXtn dlqjXWjkEzLDFQnsphQvsKJld0mDd8kZU64KdteL/mA8T8omuUCWcYa1jAD2fCAu I4WFd6xMXY+t/ClswLcxKUWJK3XRxTI/Gxj9Sgg/YfuTH5qnXha5ljuFv7WmMbOf RxU66Pketz7XjFbfapzZ5DYTswno/XtR54VWSWy28HAAiqqvwyHbSvkgtWW1KMln oe7gKRp36ssJmdHn2j8+Z/SAOraIBImyMInjTZ8VTysc6q5FS4Ku36E0+ZS7S0pI QvhkYQNVkK6ATEXPOBrONyjEO8ukb2JM93BTf3pmB5B0gnU2bQ5G1cz6y9/IOWfd f0xPuO9OAtrljA== -----END CERTIFICATE-----Generated at Thu Dec 18 15:43:23 2025 by rpki-client