This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft File: TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json) Hash identifier: cdhfqhk/QMNh882a//Y1YflrVuyfgtltaD+/zWyF83M= Subject key identifier: 8F:AD:5D:1D:FB:6C:51:2A:23:B7:96:ED:08:09:F4:E8:A0:03:D1:C2 Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Certificate serial: 019AF31BBDFE45F17C1B205EB57FC283276B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft Manifest number: 1785 Signing time: Sat 06 Dec 2025 10:01:12 +0000 Manifest this update: Sat 06 Dec 2025 10:01:12 +0000 Manifest next update: Sun 07 Dec 2025 10:01:12 +0000 Files and hashes: 1: Fg0uKp3KzK9Z6JH5UhH7WuwVnZU.roa (hash: V2gXPJdj6ekMjp/tE7s1qlDZ8F6P9cafMgL/dwyxEt8=) 2: IhsNkpEObyOhrdScw0XLGeqSfjU.roa (hash: cYBkSPS8A7jki3ADlXunYLfb3jaAdvC2BeR0D6SyyQw=) 3: NGPkgc-gMBPWvfnpR_WESooqffM.roa (hash: h7f13JmtNSfs0kxRIebuhHcsUGxQLBWtTWJQue5vIeg=) 4: RLeyW7lqx5hu9s9VIH-LZ4c9FSQ.roa (hash: 8qkFZX4fO9IGCK+/hjULowdb/hcL+0qKwz4xQec6iUE=) 5: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: p6MjuW0l873IqjfTazV4/EJ7vPBnXPYQNcAzEZ/YPKc=) 6: goaehW6miRu49OgNqpgG3rbQsXI.roa (hash: ONFsgrV+lwe2PVqjFxq7Gt+JlrAemij5QB6wyp+3m1Y=) 7: iYrh6kgklmXt3OMm1j72TOtV99Q.roa (hash: G93OEfB6NAVCu9uU8ghRcqmmsrUeCTXAMsgU4oLPza4=) 8: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (hash: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=) 9: qkm-dGrO1KB7zPSYZkfbAOZu2Jk.roa (hash: 4nzLJ3+1Nxzwd/rO/ckXGrhnSOi7MDSoWC6fmMd5N2o=) 10: sTgj5gtBXlZvbQkuD303wv14ZJM.roa (hash: 2lGTVGTpWSlL4AKzK4tCKidrFOFRYmSZ+Qh+p4OiuBc=) 11: u-uXh8WZWOS9uWtRFI-rTtX1S9A.roa (hash: kDD2Qmq25WjJ3/Vhs1pz7/0NseMdnFHogi9MbnP9L+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:bd:fe:45:f1:7c:1b:20:5e:b5:7f:c2:83:27:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd Validity Not Before: Dec 6 10:01:12 2025 GMT Not After : Dec 7 10:01:12 2025 GMT Subject: CN=8fad5d1dfb6c512a23b796ed0809f4e8a003d1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:15:6c:d9:03:e7:d5:00:f5:de:0e:21:2e: af:e4:8e:a1:b7:ae:92:ab:aa:3e:c4:b4:59:71:e3: 2e:9b:47:ea:ba:e5:91:24:19:63:ad:ed:64:31:57: 18:cb:74:b0:d4:1c:b0:df:bf:c6:4e:82:e0:17:14: d8:ff:50:90:d5:e1:2c:41:03:c9:2f:ca:a3:02:e3: 24:e6:4f:84:22:9d:2c:02:c8:3e:41:50:16:6e:08: 03:a1:72:9e:5c:64:b6:6c:e3:bc:e4:da:a5:aa:6f: ae:35:67:ea:ec:c5:9b:0c:d8:13:cc:b5:48:88:a0: 2d:20:6f:9b:24:5f:9c:43:26:97:1d:56:be:61:2f: 31:72:4d:d7:ee:5a:ea:ca:a6:64:92:33:63:51:80: 0a:76:a2:52:7a:97:34:af:f5:ee:d3:2b:4d:39:cc: 14:1d:70:38:21:ec:69:ad:0a:87:45:e3:d5:67:9f: 71:80:36:b5:ee:50:ce:0d:83:cb:f9:d5:8a:a4:cb: 92:05:94:e1:56:9f:3d:5f:e3:e2:2a:70:21:cf:d5: 3c:5c:33:e3:88:ae:7c:8f:42:17:88:bb:bd:0c:0b: 27:d5:33:1b:ef:ac:bb:57:46:bf:b7:45:c2:0e:6f: bf:a2:d2:0b:ae:49:a9:18:1b:85:72:8d:d3:96:1e: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:5D:1D:FB:6C:51:2A:23:B7:96:ED:08:09:F4:E8:A0:03:D1:C2 X509v3 Authority Key Identifier: keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:28:b8:eb:0d:1b:3a:1a:f6:c3:1d:b7:73:86:6c:7b:01:ba: 10:08:d5:8b:df:c6:3e:a4:cb:b4:fc:b9:1e:a4:9e:d3:1b:74: 86:11:2e:37:3a:3c:9e:15:cb:08:05:aa:bf:a0:2f:87:22:d0: f7:e6:ac:10:7b:30:4f:1a:fd:e4:8e:b4:2b:46:17:fd:66:83: 41:f0:3b:24:c3:93:11:90:98:d9:e5:ec:5d:4f:5f:f5:fb:42: 20:70:69:b6:ba:2e:f5:d4:a6:67:b7:ea:77:7c:2e:b5:0a:02: 3a:7b:70:08:20:9a:e0:ed:33:bb:07:45:d8:46:ec:2a:29:5e: 9c:a7:4f:f5:b7:af:27:99:39:f3:ca:3a:5b:3f:e0:af:73:71: 29:7d:57:5b:e8:db:e0:45:23:a7:98:b7:9c:e4:48:0f:c2:e0: c7:40:b4:02:f1:0c:c3:d2:01:88:66:fc:51:e2:2d:f1:57:76: c2:87:86:af:de:ee:e9:b7:c3:d6:7c:90:6e:e7:b7:83:b2:cd: f3:1b:24:63:a5:c7:de:34:83:58:ac:6f:f5:2c:1d:1c:ac:1e: d5:49:39:39:08:e6:b9:a7:69:df:7e:68:b4:da:ae:35:e2:da: c9:59:b5:9f:ea:a9:99:09:fa:45:27:ac:93:f1:68:30:4c:03: 72:9e:bf:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG73+RfF8GyBetX/CgydrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2 NzdiY2QwHhcNMjUxMjA2MTAwMTEyWhcNMjUxMjA3MTAwMTEyWjAzMTEwLwYDVQQD Eyg4ZmFkNWQxZGZiNmM1MTJhMjNiNzk2ZWQwODA5ZjRlOGEwMDNkMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOYVbNkD59UA9d4OIS6v5I6ht66S q6o+xLRZceMum0fquuWRJBljre1kMVcYy3Sw1Byw37/GToLgFxTY/1CQ1eEsQQPJ L8qjAuMk5k+EIp0sAsg+QVAWbggDoXKeXGS2bOO85Nqlqm+uNWfq7MWbDNgTzLVI iKAtIG+bJF+cQyaXHVa+YS8xck3X7lrqyqZkkjNjUYAKdqJSepc0r/Xu0ytNOcwU HXA4IexprQqHRePVZ59xgDa17lDODYPL+dWKpMuSBZThVp89X+PiKnAhz9U8XDPj iK58j0IXiLu9DAsn1TMb76y7V0a/t0XCDm+/otILrkmpGBuFco3Tlh5uHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+tXR37bFEqI7eW7QgJ9OigA9HCMB8GA1UdIwQY MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSi46w0b Ohr2wx23c4ZsewG6EAjVi9/GPqTLtPy5HqSe0xt0hhEuNzo8nhXLCAWqv6AvhyLQ 9+asEHswTxr95I60K0YX/WaDQfA7JMOTEZCY2eXsXU9f9ftCIHBptrou9dSmZ7fq d3wutQoCOntwCCCa4O0zuwdF2EbsKilenKdP9bevJ5k588o6Wz/gr3NxKX1XW+jb 4EUjp5i3nORID8Lgx0C0AvEMw9IBiGb8UeIt8Vd2woeGr97u6bfD1nyQbue3g7LN 8xskY6XH3jSDWKxv9SwdHKwe1Uk5OQjmuadp335otNquNeLayVm1n+qpmQn6RSes k/FoMEwDcp6/JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:43 2025 by rpki-client