This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json) Hash identifier: ZR6dYoQPOeIdXbdI6zKbRO19aVAQl1yo2+0FD4gYvbg= Subject key identifier: 13:21:F5:C9:EA:A4:A9:1B:DC:85:63:07:E6:87:FB:12:26:DA:3C:3E Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4 Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4 Certificate serial: 019AF12EECA41969A644EF9FB7DD05E6802D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft Manifest number: 14A6 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=) 2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: /Wj34CZn3pRClgOLkUoaOyNgWYh4sXjo9RyyoOIi5qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ec:a4:19:69:a6:44:ef:9f:b7:dd:05:e6:80:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=1321f5c9eaa4a91bdc856307e687fb1226da3c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:13:d8:3e:60:14:62:ba:ed:5f:91:ff:35: ea:7e:8f:1d:5c:89:48:6d:eb:5d:6e:a9:a2:03:1b: ac:d9:ff:f5:71:7b:59:f7:f7:c0:15:c7:d7:cb:de: 12:97:f4:62:fd:9b:b1:e0:a2:83:b7:3e:a0:0c:6f: 69:15:06:5c:c8:74:68:94:26:a2:f1:f1:39:05:e1: a1:66:14:fa:8b:da:6a:a1:98:a3:e4:06:df:3b:cb: 00:38:ec:3a:d5:49:ef:74:bd:5a:e5:72:48:11:df: 0c:3c:00:8f:2c:07:9a:81:b5:45:b6:85:1b:73:69: b1:4d:ac:e6:d7:f4:5a:6f:35:f5:ff:c6:5c:af:d9: 3d:25:2c:f9:2b:ea:51:16:15:61:4c:be:08:ff:a9: 96:45:dd:27:e2:92:37:42:48:b7:fa:8d:02:91:54: 89:ea:38:84:e6:b9:63:ac:8a:4c:95:d4:97:70:8c: 71:8d:1c:57:09:a1:98:d2:eb:d6:8f:12:a2:f6:65: af:de:5c:74:d9:06:70:a9:6d:17:46:1b:c8:47:1f: ae:fb:b2:de:8a:4b:3c:3d:df:77:ac:42:42:75:29: cc:c8:54:49:35:9c:23:02:de:ba:78:85:42:2e:6e: a7:8e:c3:c5:74:18:8f:72:1b:62:64:f0:0f:f7:98: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:21:F5:C9:EA:A4:A9:1B:DC:85:63:07:E6:87:FB:12:26:DA:3C:3E X509v3 Authority Key Identifier: keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:65:59:45:f4:da:c0:b3:23:f7:bb:de:26:de:f1:7a:cf:e8: 2a:b0:b1:0c:20:99:65:9a:fa:1a:95:18:1f:ee:5a:5a:5e:6c: 8c:df:f2:cf:5e:bd:d0:2c:59:63:9c:8a:20:08:89:35:9f:0c: 8a:1d:65:fd:ee:fa:a0:73:1e:5b:6e:e5:3f:c1:5e:69:3b:33: b9:73:d9:ea:da:06:fb:ff:0c:bd:e4:bf:31:8c:71:67:f9:d4: a8:06:c5:0a:5f:2f:00:19:c4:08:1b:91:2a:dd:e3:9c:fd:bb: bc:09:f8:64:a0:b8:34:f4:2c:2f:bd:3d:b6:df:b7:09:1d:72: 8f:13:09:ef:16:38:02:88:1b:30:ba:7d:e1:97:70:51:4d:39: 1c:42:7f:5f:e6:ca:1b:85:13:fd:c4:62:68:e3:90:d2:51:17: 7a:9f:52:3d:84:22:c8:3c:3a:58:36:33:ce:13:7c:18:57:af: 93:48:92:38:c1:0a:70:51:30:ca:2b:5f:39:2d:39:c0:b5:aa: 6d:3d:ee:97:b8:8e:4f:dd:56:77:28:0b:9a:41:d8:f1:ee:d2: a4:54:68:41:0a:62:77:1d:90:93:21:50:60:7e:d8:91:4b:96: 6f:af:9f:fc:ec:78:00:ba:70:75:f4:14:fd:e7:c9:5e:7b:ba: 2a:ac:d3:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuykGWmmRO+ft90F5oAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw ZGU5YjQwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD EygxMzIxZjVjOWVhYTRhOTFiZGM4NTYzMDdlNjg3ZmIxMjI2ZGEzYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IYT2D5gFGK67V+R/zXqfo8dXIlI betdbqmiAxus2f/1cXtZ9/fAFcfXy94Sl/Ri/Zux4KKDtz6gDG9pFQZcyHRolCai 8fE5BeGhZhT6i9pqoZij5AbfO8sAOOw61UnvdL1a5XJIEd8MPACPLAeagbVFtoUb c2mxTazm1/RabzX1/8Zcr9k9JSz5K+pRFhVhTL4I/6mWRd0n4pI3Qki3+o0CkVSJ 6jiE5rljrIpMldSXcIxxjRxXCaGY0uvWjxKi9mWv3lx02QZwqW0XRhvIRx+u+7Le iks8Pd93rEJCdSnMyFRJNZwjAt66eIVCLm6njsPFdBiPchtiZPAP95gkoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMh9cnqpKkb3IVjB+aH+xIm2jw+MB8GA1UdIwQY MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt NWE5NWNjODBjZDFiLzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmVZRfTa wLMj97veJt7xes/oKrCxDCCZZZr6GpUYH+5aWl5sjN/yz1690CxZY5yKIAiJNZ8M ih1l/e76oHMeW27lP8FeaTszuXPZ6toG+/8MveS/MYxxZ/nUqAbFCl8vABnECBuR Kt3jnP27vAn4ZKC4NPQsL709tt+3CR1yjxMJ7xY4AogbMLp94ZdwUU05HEJ/X+bK G4UT/cRiaOOQ0lEXep9SPYQiyDw6WDYzzhN8GFevk0iSOMEKcFEwyitfOS05wLWq bT3ul7iOT91WdygLmkHY8e7SpFRoQQpidx2QkyFQYH7YkUuWb6+f/Ox4ALpwdfQU /efJXnu6KqzTfg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:51 2025 by rpki-client