This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft File: taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json) Hash identifier: DfnsAJJoHaNPqjO9gsj3rC0BLYLWoZDvquqAdt6nJvc= Subject key identifier: 68:A1:5C:00:3E:9F:BE:45:62:3C:AC:CC:18:76:FD:FD:1B:00:D1:53 Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B Certificate issuer: /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Certificate serial: 019AF1D226A3F8B4F2598A3F5971A011D93F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=) 2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: awjFEULlUJX6HVqP3ACS9zo16iwB3HmhfK93DFhLb0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:26:a3:f8:b4:f2:59:8a:3f:59:71:a0:11:d9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=68a15c003e9fbe45623caccc1876fdfd1b00d153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7a:f7:e9:30:e9:56:04:fd:a9:f8:14:dd:7a: e4:c4:f0:64:36:3f:ae:f8:25:14:95:cf:43:ab:fc: b4:f6:08:59:1c:dc:85:e9:69:e8:bf:6e:c5:e1:87: 53:88:51:04:7b:b1:82:6d:79:61:7e:c3:9a:bf:2c: 67:3b:23:38:a1:c1:6b:05:00:d9:7e:a8:17:dc:0a: d5:66:6f:a8:04:1a:08:2b:d0:fb:6d:18:f4:fb:b5: 09:1d:55:b5:46:13:d6:f0:6f:7c:bd:41:17:ba:82: 30:51:78:27:34:4d:b6:af:e5:a1:a5:d3:85:8c:8c: e4:dd:b6:0f:8d:7c:34:cc:68:86:3e:dd:ed:d0:42: c4:e0:da:bc:4a:1b:2f:35:9c:95:57:6a:5d:2c:40: 45:2a:05:29:30:b5:1e:d0:2a:a3:27:f9:83:19:06: 0a:cf:69:35:67:10:1a:5e:98:d1:ac:ac:6c:63:08: ac:05:0e:e8:c9:1a:98:fd:9f:4d:c8:c8:e7:5a:ad: ca:f5:58:72:b3:fe:52:93:ab:21:b0:b4:b1:12:07: 96:d5:c9:fc:0b:e0:4a:1e:b8:d8:e7:0d:72:a4:5c: 14:ea:4b:c3:5c:03:1c:c6:f1:80:b7:a2:8a:fb:78: 9a:8d:54:19:8b:1b:79:99:8a:ae:ad:b4:cf:c4:10: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A1:5C:00:3E:9F:BE:45:62:3C:AC:CC:18:76:FD:FD:1B:00:D1:53 X509v3 Authority Key Identifier: keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:54:50:fc:ce:56:6c:df:f4:4f:3d:f6:3b:79:25:ee:97:be: c5:1f:15:69:03:a9:87:d9:af:0a:8f:89:81:ea:94:8f:a6:fc: 1d:81:84:72:de:56:48:c0:25:e7:b8:e2:4a:44:f0:ff:1b:0a: 02:93:d0:d4:e9:86:78:18:ed:9f:98:92:c2:44:b1:e6:46:df: af:86:e9:50:6f:06:0e:db:e0:0b:1c:63:1a:72:40:85:ea:dc: 6b:2a:7d:e6:54:37:e4:19:43:e7:68:34:8f:8d:eb:e5:07:9a: e1:c9:a1:17:e9:23:dc:75:97:20:b7:d8:96:f6:6f:19:45:66: 84:7d:05:49:79:5d:95:94:47:ed:45:13:64:d2:cd:f8:e3:73: d6:c6:e9:76:08:b9:c1:ef:43:53:91:31:b3:53:e0:ac:bd:5a: 32:51:41:9a:d4:ac:25:72:a8:99:62:00:cb:dd:f7:9a:d0:3f: 82:64:ce:d8:be:5c:bf:73:d3:08:7a:de:9e:88:9d:bc:ce:be: a0:32:b3:34:7a:a9:fa:37:40:fb:19:8b:46:84:9b:92:37:d6: 99:1d:19:82:50:9e:e9:78:b2:cb:5f:4c:44:5d:90:87:f1:4a: d1:e0:1d:c1:ef:8d:8a:fa:56:7e:ce:b8:8a:eb:90:08:4d:a7: 38:58:4a:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iaj+LTyWYo/WXGgEdk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy OGY4MmIwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD Eyg2OGExNWMwMDNlOWZiZTQ1NjIzY2FjY2MxODc2ZmRmZDFiMDBkMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hr36TDpVgT9qfgU3XrkxPBkNj+u +CUUlc9Dq/y09ghZHNyF6Wnov27F4YdTiFEEe7GCbXlhfsOavyxnOyM4ocFrBQDZ fqgX3ArVZm+oBBoIK9D7bRj0+7UJHVW1RhPW8G98vUEXuoIwUXgnNE22r+WhpdOF jIzk3bYPjXw0zGiGPt3t0ELE4Nq8ShsvNZyVV2pdLEBFKgUpMLUe0CqjJ/mDGQYK z2k1ZxAaXpjRrKxsYwisBQ7oyRqY/Z9NyMjnWq3K9Vhys/5Sk6shsLSxEgeW1cn8 C+BKHrjY5w1ypFwU6kvDXAMcxvGAt6KK+3iajVQZixt5mYqurbTPxBBZ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGihXAA+n75FYjyszBh2/f0bANFTMB8GA1UdIwQY MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0 LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFRQ/M5W bN/0Tz32O3kl7pe+xR8VaQOph9mvCo+JgeqUj6b8HYGEct5WSMAl57jiSkTw/xsK ApPQ1OmGeBjtn5iSwkSx5kbfr4bpUG8GDtvgCxxjGnJAhercayp95lQ35BlD52g0 j43r5Qea4cmhF+kj3HWXILfYlvZvGUVmhH0FSXldlZRH7UUTZNLN+ONz1sbpdgi5 we9DU5Exs1PgrL1aMlFBmtSsJXKomWIAy933mtA/gmTO2L5cv3PTCHrenoidvM6+ oDKzNHqp+jdA+xmLRoSbkjfWmR0ZglCe6Xiyy19MRF2Qh/FK0eAdwe+NivpWfs64 iuuQCE2nOFhK0w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:48 2025 by rpki-client