This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json) Hash identifier: ijkWXbsZmXUnUZQm5LMFk8nUbtiZYNCprFLPO1pYqdY= Subject key identifier: FC:F9:64:C0:AA:11:95:34:D4:9A:67:0B:0B:41:75:4A:7C:DB:34:DA Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2 Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2 Certificate serial: 019BF6BF4B827466C77B43A4BC4BB812A472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft Manifest number: 052D Signing time: Sun 25 Jan 2026 20:01:30 +0000 Manifest this update: Sun 25 Jan 2026 20:01:30 +0000 Manifest next update: Mon 26 Jan 2026 20:01:30 +0000 Files and hashes: 1: rn7LDn_3TIuJ6_nV4YeL1VVnvBU.roa (hash: qwTsKePGZVoR+2BoWJdeN5jR/mfrUPxGkb8IXH3ZPvI=) 2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: +gTt3YgjVDzuixWLjHPCcfShULEHwctOQVSH9gp/P7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:4b:82:74:66:c7:7b:43:a4:bc:4b:b8:12:a4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2 Validity Not Before: Jan 25 20:01:30 2026 GMT Not After : Jan 26 20:01:30 2026 GMT Subject: CN=fcf964c0aa119534d49a670b0b41754a7cdb34da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:84:70:35:8f:55:6d:04:9d:95:5a:6c:05: ac:42:84:ef:00:d0:f7:46:67:27:ce:5d:cd:ff:74: 19:4c:bf:64:f4:a4:71:50:c5:b8:80:97:bf:e0:ab: 05:da:19:19:d2:ae:c2:2b:d4:2c:84:b5:57:48:d8: 1c:ed:89:be:81:c7:bc:c6:10:7a:af:d0:0f:80:13: c9:10:37:1e:0e:a6:57:4a:8d:5d:48:80:94:9b:0f: 94:49:90:ca:8e:18:f1:a0:ea:83:6e:73:1d:a2:2e: 8e:0b:25:4b:5a:f7:23:b3:bb:07:5e:7d:c8:68:86: f2:55:41:50:76:12:da:08:6b:3d:d2:11:ea:d5:50: 05:55:a1:49:a4:f1:49:ee:38:af:6e:7d:ce:a2:46: 3a:0b:28:46:7e:50:70:fe:ec:ef:11:d7:41:03:29: ac:77:00:72:42:6a:66:65:8c:d5:63:a9:27:c4:72: 2b:2e:56:3a:32:ab:ab:3c:b0:2c:23:2c:82:c7:4f: 3e:d7:4e:a0:b7:44:39:0c:72:39:b0:0a:1d:a4:9c: c2:8f:5d:cf:bf:14:1b:67:a1:ba:c4:95:d5:d3:c5: f9:52:3d:81:a2:1b:be:78:00:a5:4b:1a:58:d1:53: 5f:47:29:77:e9:de:84:8b:c5:9b:80:10:b4:cb:f5: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F9:64:C0:AA:11:95:34:D4:9A:67:0B:0B:41:75:4A:7C:DB:34:DA X509v3 Authority Key Identifier: keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:68:09:be:f8:65:bb:8f:d2:e6:6c:43:89:13:da:ee:2a:32: 08:05:67:1c:b1:85:62:a4:74:f3:8a:d1:1b:2e:93:c8:03:30: b2:45:32:39:2e:19:2a:03:2b:4a:58:03:af:b0:73:9c:fa:8c: 8f:04:b5:f9:c4:fe:b6:69:d2:f7:c8:31:42:89:2f:c6:0a:b6: a3:68:5d:cd:1d:66:fa:2f:01:ae:d8:90:6f:57:25:7a:ab:b2: 1b:09:0d:14:df:26:c9:4a:c5:40:06:58:32:67:52:48:e8:c4: f4:27:16:5b:85:bc:3d:6e:76:65:7b:30:5e:19:68:27:27:6b: 1e:13:db:f4:fb:52:e5:c7:e7:6c:03:4f:ed:55:d3:3e:0c:dc: c4:36:21:9e:f3:2f:e3:0d:cd:b5:49:d7:38:a9:42:ec:a1:28: 19:e1:ed:5f:70:e1:23:cf:f4:20:d8:23:95:00:0b:67:0f:18: 65:02:b7:92:fb:0f:c8:34:df:d2:7f:e6:e1:77:2c:2d:57:3a: 55:c1:bd:d4:14:0a:e5:79:f6:81:91:bf:3d:d5:82:86:bf:d7: e6:fd:58:bb:40:9b:58:cb:02:58:0e:ca:53:71:c4:2b:3a:38: e2:53:cc:e0:23:97:49:c6:5a:d8:5a:7d:6b:16:76:e9:24:c1: b1:a2:99:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0uCdGbHe0OkvEu4EqRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWZkMWJmZTM4ODQwYTY5ZmY1NjcxZDU5YmYzZGIyMmI5 OGRkZTIwHhcNMjYwMTI1MjAwMTMwWhcNMjYwMTI2MjAwMTMwWjAzMTEwLwYDVQQD EyhmY2Y5NjRjMGFhMTE5NTM0ZDQ5YTY3MGIwYjQxNzU0YTdjZGIzNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMyEcDWPVW0EnZVabAWsQoTvAND3 Rmcnzl3N/3QZTL9k9KRxUMW4gJe/4KsF2hkZ0q7CK9QshLVXSNgc7Ym+gce8xhB6 r9APgBPJEDceDqZXSo1dSICUmw+USZDKjhjxoOqDbnMdoi6OCyVLWvcjs7sHXn3I aIbyVUFQdhLaCGs90hHq1VAFVaFJpPFJ7jivbn3OokY6CyhGflBw/uzvEddBAyms dwByQmpmZYzVY6knxHIrLlY6MqurPLAsIyyCx08+106gt0Q5DHI5sAodpJzCj13P vxQbZ6G6xJXV08X5Uj2Bohu+eAClSxpY0VNfRyl36d6Ei8WbgBC0y/WAmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPz5ZMCqEZU01JpnCwtBdUp82zTaMB8GA1UdIwQY MBaAFLWv0b/jiECmn/VnHVm/PbIrmN3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFfUnYtT0lRS2FmOVdjZFdiODlzaXVZM2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lNzQ4NDgtOWM4Mi00ODU1LWE4YTkt MzdlZjkyZDA3MTIzLzEvdGFfUnYtT0lRS2FmOVdjZFdiODlzaXVZM2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lNzQ4NDgtOWM4Mi00ODU1LWE4YTktMzdlZjkyZDA3MTIz LzEvdGFfUnYtT0lRS2FmOVdjZFdiODlzaXVZM2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWgJvvhl u4/S5mxDiRPa7ioyCAVnHLGFYqR084rRGy6TyAMwskUyOS4ZKgMrSlgDr7BznPqM jwS1+cT+tmnS98gxQokvxgq2o2hdzR1m+i8BrtiQb1clequyGwkNFN8myUrFQAZY MmdSSOjE9CcWW4W8PW52ZXswXhloJydrHhPb9PtS5cfnbANP7VXTPgzcxDYhnvMv 4w3NtUnXOKlC7KEoGeHtX3DhI8/0INgjlQALZw8YZQK3kvsPyDTf0n/m4XcsLVc6 VcG91BQK5Xn2gZG/PdWChr/X5v1Yu0CbWMsCWA7KU3HEKzo44lPM4COXScZa2Fp9 axZ26STBsaKZ4g== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:42 2026 by rpki-client