This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json) Hash identifier: WRyEw+Y4NsDbFCexNgUrLFvgHLLimF1hnO6RwOVglmc= Subject key identifier: BF:45:C3:82:80:A4:03:C6:A7:7F:B4:B9:15:C3:B2:1F:4B:6C:03:D1 Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa Certificate serial: 019B35D78780B09A0DF2D7E255EB4FA93AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft Manifest number: 0B74 Signing time: Fri 19 Dec 2025 09:01:15 +0000 Manifest this update: Fri 19 Dec 2025 09:01:15 +0000 Manifest next update: Sat 20 Dec 2025 09:01:15 +0000 Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: SArp1D/50AIiLW1uCcuHhBoNxomS7tWuKgYLjyORT1g=) 2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:87:80:b0:9a:0d:f2:d7:e2:55:eb:4f:a9:3a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa Validity Not Before: Dec 19 09:01:15 2025 GMT Not After : Dec 20 09:01:15 2025 GMT Subject: CN=bf45c38280a403c6a77fb4b915c3b21f4b6c03d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:e3:99:40:71:ba:9f:76:c2:62:af:43:6f: 1c:40:1f:1a:52:bc:f6:8f:86:14:91:b0:8f:cf:a1: f1:b1:3c:b6:08:09:bb:89:3e:d8:bb:44:39:a4:7a: ce:98:fe:84:83:22:71:4e:ba:63:c2:0d:4c:f5:c2: ff:48:1e:f0:20:fc:6e:d7:d7:de:5e:f7:0e:8b:1b: bb:f4:a4:11:7d:ee:e8:7b:44:09:18:3b:76:cf:8e: ec:2c:f9:d8:e0:89:52:b2:fd:2c:4b:c6:a3:32:09: 6d:04:87:d3:2d:77:83:4c:35:61:3a:83:6a:20:02: fe:d4:05:6a:78:00:ac:21:c1:19:c9:b8:58:03:8f: 59:11:02:ee:8f:0f:ae:f1:e5:0b:ab:eb:e5:3e:e7: dc:dd:90:d6:f3:db:71:bd:20:00:09:23:94:19:fb: 34:01:3a:2d:30:92:66:71:2c:83:19:95:35:98:2b: 49:16:be:9f:1e:4e:64:3d:64:de:68:47:04:7d:d9: 56:b7:e8:e9:57:89:f0:db:d7:c3:25:a4:27:71:eb: f6:48:e1:f7:3b:2c:59:19:a6:0d:4a:c0:fe:7b:3b: f7:f1:9f:79:cc:cb:b9:da:7c:93:ec:15:71:11:34: ae:d2:9e:c5:dc:1d:be:c2:47:76:a2:50:c6:76:32: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:45:C3:82:80:A4:03:C6:A7:7F:B4:B9:15:C3:B2:1F:4B:6C:03:D1 X509v3 Authority Key Identifier: keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ca:34:b7:e7:eb:5a:08:cc:f7:2c:e7:d2:e1:09:df:a0:a2: 04:49:e3:d0:02:9a:0f:cd:03:2e:38:e6:b8:f9:bd:33:b9:39: 79:1c:8b:14:00:28:dd:6e:42:18:1b:de:cd:49:c2:a3:50:4f: c3:17:f8:43:b6:5a:15:06:8a:72:83:ff:cc:dc:05:11:ad:4b: f5:ff:54:69:7a:52:0a:79:38:ba:60:8c:f1:b2:d1:c5:f2:c3: 42:8c:14:c5:62:fc:c7:60:f6:13:2c:06:e4:0d:ee:11:48:96: 05:2e:67:99:82:ca:b0:bc:5b:f5:20:e1:4a:d1:83:d2:8a:19: 88:78:a6:69:e6:2c:73:ab:33:2f:4e:c3:01:7d:da:54:ba:87: 5e:d7:13:bf:6a:e3:7c:b1:50:d2:43:ce:7b:97:05:99:09:19: dc:5d:8f:e2:95:0c:0a:a3:14:00:39:cc:a8:30:54:83:2f:e4: fc:19:94:09:9c:0b:f3:f7:8a:0a:ed:32:38:8c:59:23:1c:07: e3:f4:b4:eb:05:8c:b4:f5:91:80:3d:5c:1e:34:15:13:0a:07: 73:41:63:a2:db:40:68:a6:88:e2:dc:35:13:6a:43:cb:59:8b: 05:bc:08:f7:59:86:39:b1:72:fc:28:31:0e:1c:9a:9e:78:9f: 3c:3c:dd:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114eAsJoN8tfiVetPqTrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi YTMwZmEwHhcNMjUxMjE5MDkwMTE1WhcNMjUxMjIwMDkwMTE1WjAzMTEwLwYDVQQD EyhiZjQ1YzM4MjgwYTQwM2M2YTc3ZmI0YjkxNWMzYjIxZjRiNmMwM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzTjmUBxup92wmKvQ28cQB8aUrz2 j4YUkbCPz6HxsTy2CAm7iT7Yu0Q5pHrOmP6EgyJxTrpjwg1M9cL/SB7wIPxu19fe XvcOixu79KQRfe7oe0QJGDt2z47sLPnY4IlSsv0sS8ajMgltBIfTLXeDTDVhOoNq IAL+1AVqeACsIcEZybhYA49ZEQLujw+u8eULq+vlPufc3ZDW89txvSAACSOUGfs0 ATotMJJmcSyDGZU1mCtJFr6fHk5kPWTeaEcEfdlWt+jpV4nw29fDJaQncev2SOH3 OyxZGaYNSsD+ezv38Z95zMu52nyT7BVxETSu0p7F3B2+wkd2olDGdjI3WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9Fw4KApAPGp3+0uRXDsh9LbAPRMB8GA1UdIwQY MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et YmMyODlkYzE3ZDIwLzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADso0t+fr WgjM9yzn0uEJ36CiBEnj0AKaD80DLjjmuPm9M7k5eRyLFAAo3W5CGBvezUnCo1BP wxf4Q7ZaFQaKcoP/zNwFEa1L9f9UaXpSCnk4umCM8bLRxfLDQowUxWL8x2D2EywG 5A3uEUiWBS5nmYLKsLxb9SDhStGD0ooZiHimaeYsc6szL07DAX3aVLqHXtcTv2rj fLFQ0kPOe5cFmQkZ3F2P4pUMCqMUADnMqDBUgy/k/BmUCZwL8/eKCu0yOIxZIxwH 4/S06wWMtPWRgD1cHjQVEwoHc0FjottAaKaI4tw1E2pDy1mLBbwI91mGObFy/Cgx DhyannifPDzdKw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:17:30 2025 by rpki-client