This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json) Hash identifier: m5jB8Dx9HnFnEQ+E58Vhqo8ODCVZ8KygQNaJDiaVru4= Subject key identifier: E5:21:44:39:C2:BE:94:DB:9F:2B:9A:67:A3:29:8E:48:3C:2F:2D:52 Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66 Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66 Certificate serial: 019AF19B3651B941367E9FBFC7A372C53436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: mQ3i5RDDk0ofKa22ofNgMAWTaOakRJfDjrGmon2+UN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:36:51:b9:41:36:7e:9f:bf:c7:a3:72:c5:34:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=e5214439c2be94db9f2b9a67a3298e483c2f2d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:cf:ec:c4:75:9a:07:05:e6:76:f4:ab:13: b2:59:25:92:a5:26:3e:fd:e3:7b:55:50:85:32:46: 8b:56:ae:4b:b2:4f:14:08:6e:78:66:8e:e1:82:0b: 99:9d:01:7d:cc:34:27:3a:23:df:ba:a5:44:aa:a3: ab:58:93:38:48:8f:cd:bf:0d:fd:33:c1:cb:08:94: d8:f8:5e:e2:51:03:1f:13:ab:70:27:09:c9:b0:db: de:dd:e2:41:61:52:9c:5a:20:ab:07:ad:ea:b1:6a: 3d:f4:34:60:3f:70:43:41:2d:e5:6e:4e:92:16:b0: 0a:25:ee:25:83:87:ee:44:a6:0b:7f:e7:67:a5:c5: 4f:ed:6f:e9:f4:a3:61:76:75:0e:8a:0b:32:08:92: cf:e1:0e:79:86:59:10:ca:c9:8f:28:56:48:14:3a: df:0b:8c:31:ee:78:b9:f5:2f:92:73:b6:a4:cf:ae: e8:6d:7e:e2:f9:1b:23:23:94:e7:35:b3:d3:88:bb: 68:ba:17:45:1f:b1:1a:db:49:30:1a:62:11:21:b4: 0a:3a:6c:0d:9f:f8:2f:e6:d3:94:c9:e9:9b:5f:76: 30:af:8f:a3:a1:c3:16:6b:e7:49:a5:02:78:cc:0a: 2c:95:0e:9c:2b:29:3f:99:55:5e:c1:44:8c:6c:ec: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:44:39:C2:BE:94:DB:9F:2B:9A:67:A3:29:8E:48:3C:2F:2D:52 X509v3 Authority Key Identifier: keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a2:24:ab:11:74:66:0e:0e:3f:a0:bf:10:4a:ea:98:ee:1c: 97:9a:11:f5:bf:70:0f:e2:23:cc:dd:19:69:a1:90:f4:69:7f: 05:b3:c5:93:9d:1f:43:42:22:46:46:ae:0b:da:f1:d3:e6:94: 0e:c1:19:5a:b7:78:55:45:19:37:5f:01:f8:46:d5:38:a2:48: 5a:42:2e:e8:60:1b:46:1d:06:e6:80:37:9b:22:b9:98:d3:86: 14:96:13:b8:6c:0a:a9:89:05:32:77:f6:8a:6e:66:8a:f8:f9: 14:7e:cb:de:65:d2:e3:8e:ee:d5:1a:6c:9a:ff:a6:cc:a4:ab: b4:ea:cc:c7:76:0f:9d:99:71:65:18:7e:2d:f9:6b:58:e9:3a: b0:43:7f:28:e4:19:09:13:76:58:b4:95:72:22:86:af:41:24: 9d:0d:07:dc:ae:81:5b:18:55:c0:23:77:ea:ce:a4:c0:d9:6a: f0:14:15:cf:09:b3:14:50:f4:2c:08:70:7c:8c:6d:43:8e:9e: b7:bf:bf:c6:be:30:ad:d5:0e:e8:3e:66:b9:dc:20:70:68:68: 66:1c:77:6c:c9:1d:36:f5:47:6d:ba:f7:2f:e9:65:aa:db:e9: bc:af:c7:06:ca:e7:44:ef:d0:d9:a7:2a:76:51:18:70:f8:e9: dc:9e:32:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzZRuUE2fp+/x6NyxTQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOWY5MzAwMmQ3OGU4ZTQwZGE1NjBjNDI5MWZiODMwZDky ZGZmNjYwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EyhlNTIxNDQzOWMyYmU5NGRiOWYyYjlhNjdhMzI5OGU0ODNjMmYyZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR/P7MR1mgcF5nb0qxOyWSWSpSY+ /eN7VVCFMkaLVq5Lsk8UCG54Zo7hgguZnQF9zDQnOiPfuqVEqqOrWJM4SI/Nvw39 M8HLCJTY+F7iUQMfE6twJwnJsNve3eJBYVKcWiCrB63qsWo99DRgP3BDQS3lbk6S FrAKJe4lg4fuRKYLf+dnpcVP7W/p9KNhdnUOigsyCJLP4Q55hlkQysmPKFZIFDrf C4wx7ni59S+Sc7akz67obX7i+RsjI5TnNbPTiLtouhdFH7Ea20kwGmIRIbQKOmwN n/gv5tOUyembX3Ywr4+jocMWa+dJpQJ4zAoslQ6cKyk/mVVewUSMbOxIGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUhRDnCvpTbnyuaZ6Mpjkg8Ly1SMB8GA1UdIwQY MBaAFAKfkwAteOjkDaVgxCkfuDDZLf9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2Yt NWYyNjM1NWM4YTc0LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2YtNWYyNjM1NWM4YTc0 LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqIkqxF0 Zg4OP6C/EErqmO4cl5oR9b9wD+IjzN0ZaaGQ9Gl/BbPFk50fQ0IiRkauC9rx0+aU DsEZWrd4VUUZN18B+EbVOKJIWkIu6GAbRh0G5oA3myK5mNOGFJYTuGwKqYkFMnf2 im5mivj5FH7L3mXS447u1Rpsmv+mzKSrtOrMx3YPnZlxZRh+LflrWOk6sEN/KOQZ CRN2WLSVciKGr0EknQ0H3K6BWxhVwCN36s6kwNlq8BQVzwmzFFD0LAhwfIxtQ46e t7+/xr4wrdUO6D5mudwgcGhoZhx3bMkdNvVHbbr3L+llqtvpvK/HBsrnRO/Q2acq dlEYcPjp3J4yFA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:02 2025 by rpki-client