This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft File: TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json) Hash identifier: rKYOosCrMoXJ/dnFvHdtFU5gs1GJ/C7wDqYnATM2lSY= Subject key identifier: C2:05:30:95:8B:FB:E1:80:B3:88:C0:3A:CC:08:7A:D6:22:06:B2:FA Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0 Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0 Certificate serial: 019AF389CF9FB0FFD18D328F124282037AB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft Manifest number: 14A5 Signing time: Sat 06 Dec 2025 12:01:26 +0000 Manifest this update: Sat 06 Dec 2025 12:01:26 +0000 Manifest next update: Sun 07 Dec 2025 12:01:26 +0000 Files and hashes: 1: Q7AhmlPF0P4he1DdnyBzxO1UbNg.roa (hash: taA8dfVnJrloOBeiFJz3Gf4qdbtYPfCeh6aOOG2s/PY=) 2: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: wpf5ONsREqA5MH0HUUOWwuXiPjgnR7KZJU3i0d8y7z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:cf:9f:b0:ff:d1:8d:32:8f:12:42:82:03:7a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0 Validity Not Before: Dec 6 12:01:26 2025 GMT Not After : Dec 7 12:01:26 2025 GMT Subject: CN=c20530958bfbe180b388c03acc087ad62206b2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:a5:57:2a:96:73:24:f0:52:c5:ae:b3:28: e8:5d:a0:22:b3:08:5e:b0:f7:97:fc:73:b7:17:10: 04:74:bf:0c:b1:54:f6:4d:3a:e6:a9:4e:ec:59:fd: 1e:37:62:9d:31:34:e8:40:92:88:eb:a6:01:1c:5e: b2:e1:a5:42:d2:ac:58:07:83:f9:7f:9e:a5:11:fb: 79:9f:fa:de:96:1c:7b:36:44:03:e4:00:29:d9:1e: 95:90:ad:fe:35:0e:a7:6d:48:20:94:f1:36:42:72: 16:f7:0e:ac:ba:ed:0b:16:e3:d9:45:da:20:0c:a8: d4:1a:f3:01:b4:e0:ab:0a:8c:31:0d:7a:55:ee:d2: 95:42:28:38:82:94:aa:c3:bd:e6:3f:67:1a:8d:96: e8:73:a3:27:df:b6:46:31:57:b1:36:69:6a:02:e2: bc:af:bf:a8:3c:51:98:0b:2f:e0:82:fb:c9:c3:de: 54:e0:67:97:ef:13:e4:49:e5:2c:9c:4b:4d:35:62: d1:7f:ba:f1:86:9d:7b:24:03:43:36:52:6d:16:94: 61:f8:13:9f:72:be:4b:06:46:a9:25:5c:74:cf:05: 65:c3:3d:a6:3f:22:32:a2:1c:23:a6:aa:cb:bb:fb: 66:93:4f:3c:de:ad:66:80:cb:35:0b:5a:bd:d0:fd: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:30:95:8B:FB:E1:80:B3:88:C0:3A:CC:08:7A:D6:22:06:B2:FA X509v3 Authority Key Identifier: keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b7:ac:22:7b:30:9d:cf:fa:0f:25:f0:8f:c8:2d:45:04:c8: e7:80:3f:88:90:b4:4f:5e:87:3c:ee:af:b1:20:d8:b1:30:2e: 68:67:9f:1e:76:a4:3f:cc:dd:61:c8:a3:96:ae:2f:8b:e7:df: eb:e8:c3:42:9a:ca:1e:65:fa:a7:6a:82:80:f9:0b:fe:82:8c: 7f:fa:82:27:97:04:43:f1:98:75:de:a4:db:d5:d8:ad:ae:4f: a1:99:1a:0a:aa:71:a7:4a:7c:6a:27:a8:e4:67:aa:6a:57:e9: d2:5c:cf:ca:3d:53:02:2c:df:2b:66:e0:b5:e5:9e:51:28:a6: f1:a4:6d:aa:bd:2a:a8:99:5d:a0:a4:55:3d:a2:a7:4a:bf:0a: 86:e1:63:95:af:c5:d9:d3:b6:6b:b3:77:aa:e0:a8:78:5e:1c: 52:2c:c4:64:dd:c3:4f:84:3b:29:82:a9:b2:33:38:96:07:f1: a1:88:65:e6:9d:3d:6d:63:b3:2c:1b:90:db:ae:05:dd:9f:4c: c8:ab:d3:a2:65:76:9f:99:bb:2d:0d:da:a5:62:be:49:cc:5b: de:ef:d3:7c:59:20:a7:14:1c:4d:35:9e:f7:cc:50:30:85:ad: 1e:9c:ae:8b:76:4a:1e:15:0c:3b:e4:46:b6:3d:76:9a:50:6f: d4:2b:8e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzic+fsP/RjTKPEkKCA3q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMDcxYmFkOTI5ZTM2MmIwNjJiODljODdmYTQxYjVkZWRh NGZmYzAwHhcNMjUxMjA2MTIwMTI2WhcNMjUxMjA3MTIwMTI2WjAzMTEwLwYDVQQD EyhjMjA1MzA5NThiZmJlMTgwYjM4OGMwM2FjYzA4N2FkNjIyMDZiMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2elVyqWcyTwUsWusyjoXaAiswhe sPeX/HO3FxAEdL8MsVT2TTrmqU7sWf0eN2KdMTToQJKI66YBHF6y4aVC0qxYB4P5 f56lEft5n/relhx7NkQD5AAp2R6VkK3+NQ6nbUgglPE2QnIW9w6suu0LFuPZRdog DKjUGvMBtOCrCowxDXpV7tKVQig4gpSqw73mP2cajZboc6Mn37ZGMVexNmlqAuK8 r7+oPFGYCy/ggvvJw95U4GeX7xPkSeUsnEtNNWLRf7rxhp17JANDNlJtFpRh+BOf cr5LBkapJVx0zwVlwz2mPyIyohwjpqrLu/tmk0883q1mgMs1C1q90P2M2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIFMJWL++GAs4jAOswIetYiBrL6MB8GA1UdIwQY MBaAFEwHG62SnjYrBiuJyH+kG13tpP/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYt YmMxZDlhMDM0NTkzLzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Mzg0MWItYTUyNi00MGUzLThhNGYtYmMxZDlhMDM0NTkz LzEvVEFjYnJaS2VOaXNHSzRuSWY2UWJYZTJrXzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibesInsw nc/6DyXwj8gtRQTI54A/iJC0T16HPO6vsSDYsTAuaGefHnakP8zdYcijlq4vi+ff 6+jDQprKHmX6p2qCgPkL/oKMf/qCJ5cEQ/GYdd6k29XYra5PoZkaCqpxp0p8aieo 5Geqalfp0lzPyj1TAizfK2bgteWeUSim8aRtqr0qqJldoKRVPaKnSr8KhuFjla/F 2dO2a7N3quCoeF4cUizEZN3DT4Q7KYKpsjM4lgfxoYhl5p09bWOzLBuQ264F3Z9M yKvTomV2n5m7LQ3apWK+Scxb3u/TfFkgpxQcTTWe98xQMIWtHpyui3ZKHhUMO+RG tj12mlBv1CuOBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:51 2025 by rpki-client