This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json) Hash identifier: tbBR48UnAixLxamvqyffMVaG4MfEW3BRkSLDycjVRl4= Subject key identifier: 4B:20:00:DB:EC:98:5F:BD:A5:5A:4D:FA:50:1C:E9:B5:A0:37:62:26 Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe Certificate serial: 019AF08861AC271836A099A072057FDEA066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:01:00 +0000 Manifest this update: Fri 05 Dec 2025 22:01:00 +0000 Manifest next update: Sat 06 Dec 2025 22:01:00 +0000 Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=) 2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: MyHwin9l1YUUfXW5BcqEJmMN1BdNSOUnONNwFq/7mp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:61:ac:27:18:36:a0:99:a0:72:05:7f:de:a0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe Validity Not Before: Dec 5 22:01:00 2025 GMT Not After : Dec 6 22:01:00 2025 GMT Subject: CN=4b2000dbec985fbda55a4dfa501ce9b5a0376226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:4e:f0:a0:2c:10:bf:d3:2c:17:e6:3c:e2: c0:70:c7:20:5f:2b:43:5c:c8:9e:a7:a9:11:21:6b: 55:63:cb:70:60:38:97:12:b4:e7:23:fa:96:5b:7f: 30:7f:43:19:b4:cc:0f:87:41:ff:be:43:4c:e0:2e: 18:3f:92:e9:ce:d2:7d:0d:51:64:88:1d:9f:b9:7c: 74:26:af:80:43:54:53:ee:77:7d:e8:87:6a:12:cb: de:38:4d:9f:f2:40:11:c7:be:58:52:9b:41:07:9f: 2b:5f:0e:b3:a4:e3:f0:ee:3f:f6:97:29:03:df:b5: 10:84:76:16:93:67:91:ff:b6:97:34:ff:d8:f5:3f: a0:3b:97:a0:38:8d:79:fe:7e:e6:82:91:f4:51:23: b4:fb:46:f0:58:6c:5a:9a:a6:74:f2:33:03:02:b6: f7:f0:7d:5d:b4:ad:b6:97:7c:7c:10:82:2c:45:ab: 9f:da:a5:ce:f5:c5:9c:10:42:19:53:21:37:02:c4: 55:11:e4:03:7f:0b:f3:31:53:58:35:ee:ef:bc:c5: 84:fa:fa:43:12:89:3a:61:20:48:ba:1c:3e:8d:93: c0:c4:3b:10:ef:83:5d:8f:ce:71:e8:c6:c2:64:0d: 22:bf:35:a1:3c:76:a8:4f:10:7d:1d:f5:56:3e:c0: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:20:00:DB:EC:98:5F:BD:A5:5A:4D:FA:50:1C:E9:B5:A0:37:62:26 X509v3 Authority Key Identifier: keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2c:f7:ab:0a:a8:75:9a:15:37:55:1e:16:f0:d7:4d:4c:84: 9d:0b:c1:2e:10:f9:43:3e:4e:2b:c0:1d:2a:39:5e:03:e3:a2: 9f:05:79:40:cc:a3:58:1e:50:a0:15:2e:a0:5e:00:f1:78:1e: 9f:15:7f:43:92:76:cd:22:6d:0e:eb:69:33:88:0a:31:4d:3c: e8:f1:ed:5b:f1:1b:33:9e:e2:a8:27:e5:7d:97:60:e0:bd:76: 3b:6f:18:6c:9d:26:3c:17:56:71:7d:22:dd:f4:34:ac:3a:fb: 20:83:76:da:8f:6f:5a:6f:58:82:f9:6b:fc:07:55:43:56:dd: 0f:03:e3:4d:aa:8f:5e:ab:6c:32:ce:ae:af:a5:91:8f:2e:87: 86:8a:14:b2:7f:b2:5a:77:b5:28:70:88:09:c8:47:a8:6b:4c: 19:bd:f8:5f:ff:37:cb:bb:3e:5a:34:a4:81:a4:e1:51:32:2f: d4:76:3a:8c:39:62:f6:67:c3:ed:bb:4d:68:61:df:02:88:d4: 79:70:4e:ec:d3:23:04:37:c1:7d:6d:4f:2b:8a:5a:1d:db:63: 10:20:40:b2:14:c3:e1:bf:bc:15:a3:f4:5b:7b:8d:e2:52:22: 35:b4:24:34:fe:7a:77:e7:3b:b5:ed:f0:5e:02:19:d2:2b:5a: 41:47:4b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGGsJxg2oJmgcgV/3qBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYTM3MTFkYzVkZTQ1ZjJmNWI0NzkwMTY1OWU5NTZkOTM4 MjcyZmUwHhcNMjUxMjA1MjIwMTAwWhcNMjUxMjA2MjIwMTAwWjAzMTEwLwYDVQQD Eyg0YjIwMDBkYmVjOTg1ZmJkYTU1YTRkZmE1MDFjZTliNWEwMzc2MjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5JO8KAsEL/TLBfmPOLAcMcgXytD XMiep6kRIWtVY8twYDiXErTnI/qWW38wf0MZtMwPh0H/vkNM4C4YP5LpztJ9DVFk iB2fuXx0Jq+AQ1RT7nd96IdqEsveOE2f8kARx75YUptBB58rXw6zpOPw7j/2lykD 37UQhHYWk2eR/7aXNP/Y9T+gO5egOI15/n7mgpH0USO0+0bwWGxamqZ08jMDArb3 8H1dtK22l3x8EIIsRauf2qXO9cWcEEIZUyE3AsRVEeQDfwvzMVNYNe7vvMWE+vpD Eok6YSBIuhw+jZPAxDsQ74Ndj85x6MbCZA0ivzWhPHaoTxB9HfVWPsDSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsgANvsmF+9pVpN+lAc6bWgN2ImMB8GA1UdIwQY MBaAFE2jcR3F3kXy9bR5AWWelW2TgnL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzct ZTI1MTEwOWJmZDE5LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hODMxYzAtNDU3Yy00YmE4LWJlYzctZTI1MTEwOWJmZDE5 LzEvVGFOeEhjWGVSZkwxdEhrQlpaNlZiWk9DY3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSz3qwqo dZoVN1UeFvDXTUyEnQvBLhD5Qz5OK8AdKjleA+OinwV5QMyjWB5QoBUuoF4A8Xge nxV/Q5J2zSJtDutpM4gKMU086PHtW/EbM57iqCflfZdg4L12O28YbJ0mPBdWcX0i 3fQ0rDr7IIN22o9vWm9Ygvlr/AdVQ1bdDwPjTaqPXqtsMs6ur6WRjy6HhooUsn+y Wne1KHCICchHqGtMGb34X/83y7s+WjSkgaThUTIv1HY6jDli9mfD7btNaGHfAojU eXBO7NMjBDfBfW1PK4paHdtjECBAshTD4b+8FaP0W3uN4lIiNbQkNP56d+c7te3w XgIZ0itaQUdLZA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:29 2025 by rpki-client