This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft File: TaktycvByBxzpp8xWlMbR_ROPFQ.mft (raw, json) Hash identifier: CKqVABs/YqqTHhktjvTsZjTuAOPwl6qdnOey02fmcds= Subject key identifier: 17:1D:AF:BF:BC:07:EA:53:45:9C:D8:71:3B:4E:DF:92:F6:A3:83:FC Authority key identifier: 4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54 Certificate issuer: /CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54 Certificate serial: 019AF2AD917B754D9774E4A561CFD15EA5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft Manifest number: 087A Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: TaktycvByBxzpp8xWlMbR_ROPFQ.crl (hash: gLgnaHcpixsGyVpDS/s15glFM2xqZGIRKdmrHEdn6cM=) 2: sC-8YGmj0CBSq2FvzDwG7HGg9gc.roa (hash: 5UyLBATOmTY+U2MSulJDzw/FA2TIy0HRDqJHG4VBs7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:91:7b:75:4d:97:74:e4:a5:61:cf:d1:5e:a5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=171dafbfbc07ea53459cd8713b4edf92f6a383fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:80:fd:58:ad:6d:53:f0:1d:aa:79:5f:25: 7e:b0:54:a0:c1:8b:98:16:c6:47:29:21:d6:a4:3a: ce:73:43:df:3a:18:70:89:50:95:bd:ea:3a:ac:8f: 38:f2:1f:1c:cb:c9:11:84:3b:5f:69:fa:0b:b1:8e: 38:21:da:23:26:c8:6d:e7:e2:62:5a:c8:f3:f8:77: 7d:47:22:15:c4:c7:96:4c:95:10:1c:75:66:65:a0: 87:6d:03:bc:ac:bd:3a:a2:ea:7a:4b:63:7e:36:20: 40:84:6e:d7:07:de:62:e1:62:5e:55:8c:eb:08:d3: a2:c8:7e:e7:c0:35:8c:d2:64:06:9a:0b:08:0e:55: 8a:d5:dd:4e:bc:a0:b1:71:ff:c6:29:87:c5:a4:07: 0b:d2:42:00:36:46:89:9e:2e:dd:17:2d:a5:ba:19: 2a:5e:d8:b7:11:51:fd:9c:72:cf:d6:51:fa:e3:2f: d0:a1:8f:60:a2:0d:07:f9:10:2f:db:b9:f3:89:41: 18:e6:a0:2c:50:ec:ef:3f:1a:79:fe:88:ef:a7:c1: bb:ac:a3:49:6e:a8:7b:b4:97:99:d6:5e:fa:fe:dc: 27:78:ce:d3:21:d0:24:cd:81:63:fc:39:8d:10:99: 34:63:9e:e9:18:58:d5:89:40:ab:ca:a5:41:20:60: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:AF:BF:BC:07:EA:53:45:9C:D8:71:3B:4E:DF:92:F6:A3:83:FC X509v3 Authority Key Identifier: keyid:4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ee:0d:ee:75:6a:09:62:52:4d:d0:3d:c9:01:f8:b9:db:ce: 34:fe:4a:47:1e:4b:20:f5:e0:db:e7:d1:5d:53:38:e3:83:82: c4:1d:80:49:62:57:6a:83:f5:f1:51:c7:3f:2e:e7:83:b0:c7: 39:75:ae:d3:cf:15:92:a0:74:47:10:0d:0b:d0:9d:ed:2b:9e: 54:d2:eb:0c:bf:57:5b:36:e8:f5:2b:07:dc:a0:06:8f:8b:13: 0b:30:7c:9b:f5:de:e5:5f:97:91:71:7e:89:1e:a8:33:f8:1e: 12:e2:93:a8:d0:9e:38:a3:c9:2c:85:d4:d0:c8:c0:63:29:3b: 52:c2:cb:98:f5:12:df:40:f8:dc:94:a5:10:75:23:d7:d2:23: 77:22:ec:f7:67:ec:bb:9d:52:b1:61:ec:93:35:fe:b1:3e:67: 3e:6a:43:00:3b:47:7b:94:3a:91:f6:cf:82:c1:2f:08:f7:d3: 9f:d7:80:02:6f:7f:29:79:f2:26:7f:20:45:13:e9:09:c3:02: 7a:11:9a:b1:07:5f:f3:6a:5e:cf:cd:60:a3:a2:4f:b0:55:1a: d1:f6:51:cb:58:57:29:33:bc:e9:42:bd:fa:f4:7e:f7:a0:03: bf:4d:f4:a0:cc:f9:61:07:2c:1f:ff:63:3b:b2:8b:48:cc:53: b9:2e:17:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZF7dU2XdOSlYc/RXqW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTkyZGM5Y2JjMWM4MWM3M2E2OWYzMTVhNTMxYjQ3ZjQ0 ZTNjNTQwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD EygxNzFkYWZiZmJjMDdlYTUzNDU5Y2Q4NzEzYjRlZGY5MmY2YTM4M2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz2A/VitbVPwHap5XyV+sFSgwYuY FsZHKSHWpDrOc0PfOhhwiVCVveo6rI848h8cy8kRhDtfafoLsY44IdojJsht5+Ji Wsjz+Hd9RyIVxMeWTJUQHHVmZaCHbQO8rL06oup6S2N+NiBAhG7XB95i4WJeVYzr CNOiyH7nwDWM0mQGmgsIDlWK1d1OvKCxcf/GKYfFpAcL0kIANkaJni7dFy2luhkq Xti3EVH9nHLP1lH64y/QoY9gog0H+RAv27nziUEY5qAsUOzvPxp5/ojvp8G7rKNJ bqh7tJeZ1l76/twneM7TIdAkzYFj/DmNEJk0Y57pGFjViUCryqVBIGAqUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcdr7+8B+pTRZzYcTtO35L2o4P8MB8GA1UdIwQY MBaAFE2pLcnLwcgcc6afMVpTG0f0TjxUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFrdHljdkJ5Qnh6cHA4eFdsTWJSX1JPUEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jNTY3NGUtZGI2MS00NzIyLWI5MjIt NTM1YmUyNzVlNmY1LzEvVGFrdHljdkJ5Qnh6cHA4eFdsTWJSX1JPUEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jNTY3NGUtZGI2MS00NzIyLWI5MjItNTM1YmUyNzVlNmY1 LzEvVGFrdHljdkJ5Qnh6cHA4eFdsTWJSX1JPUEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASe4N7nVq CWJSTdA9yQH4udvONP5KRx5LIPXg2+fRXVM444OCxB2ASWJXaoP18VHHPy7ng7DH OXWu088VkqB0RxANC9Cd7SueVNLrDL9XWzbo9SsH3KAGj4sTCzB8m/Xe5V+XkXF+ iR6oM/geEuKTqNCeOKPJLIXU0MjAYyk7UsLLmPUS30D43JSlEHUj19IjdyLs92fs u51SsWHskzX+sT5nPmpDADtHe5Q6kfbPgsEvCPfTn9eAAm9/KXnyJn8gRRPpCcMC ehGasQdf82pez81go6JPsFUa0fZRy1hXKTO86UK9+vR+96ADv030oMz5YQcsH/9j O7KLSMxTuS4Xnw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:47 2025 by rpki-client