This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft File: ripe-ncc-ta.mft (raw, json) Hash identifier: qjojq1Rt7OSE+7Q9a6FUamEPIxfvTongs4HpskU4580= Subject key identifier: EA:23:DC:D1:DA:75:0F:BD:6C:AD:48:D1:F7:43:FF:B1:67:9D:1C:1F Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 Certificate issuer: /CN=ripe-ncc-ta Certificate serial: 0120 Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft Manifest number: 56 Signing time: Wed 14 Jan 2026 10:50:01 +0000 Manifest this update: Wed 14 Jan 2026 10:50:01 +0000 Manifest next update: Tue 14 Apr 2026 10:50:01 +0000 Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: LxP+BnzIe9kcD4NJ1Deb+rbPZZZlY817tDGUP+bmr9Q=) 2: ripe-ncc-ta.crl (hash: h/9cz8LGvxzUjby9Jkg11MqBLL6sLMSv3zMZ7iRSpQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 10:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ripe-ncc-ta Validity Not Before: Jan 14 10:50:01 2026 GMT Not After : Apr 14 10:50:01 2026 GMT Subject: CN=ea23dcd1da750fbd6cad48d1f743ffb1679d1c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:fe:64:7e:b2:5a:12:f1:47:1c:94:56:56: c9:66:fc:47:7b:cd:a8:5d:37:aa:30:13:34:76:8c: 06:be:31:c9:d6:f7:c5:c9:c4:c4:5d:81:d2:de:6c: 83:0b:00:bf:7e:af:72:07:36:23:d3:13:82:63:7f: 60:f0:da:65:75:6e:d2:1f:30:be:93:ed:d5:10:f7: 81:fe:63:dd:d2:2f:2b:26:6e:43:0e:36:fa:a0:c9: 18:5f:29:07:19:9c:c0:a0:fe:d9:9b:76:8b:7a:71: a1:e1:9e:40:93:82:a4:e6:04:e0:71:f1:81:7c:9c: 66:03:50:41:b5:b1:8d:41:67:a5:69:91:ed:13:a7: 59:30:df:c9:cc:53:09:c1:41:46:f4:7c:69:0f:6d: 2e:67:ea:53:99:d7:5f:8d:e5:6a:81:db:de:85:28: 4a:d8:85:22:a6:7d:a7:44:53:eb:01:7f:3b:7e:34: 6e:7a:b3:51:8b:b0:37:53:65:c7:e4:c5:4b:e4:ac: 9c:6f:d1:38:b4:fb:e6:23:8e:b4:90:0e:bd:f7:d0: ac:1b:d1:15:4f:46:c6:e5:da:0c:df:78:96:78:75: 2c:36:79:14:e6:73:41:3e:2f:11:0a:34:4a:d6:58: 7b:11:81:8d:b5:fb:78:37:ee:89:0e:20:23:0d:a3: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:DC:D1:DA:75:0F:BD:6C:AD:48:D1:F7:43:FF:B1:67:9D:1C:1F X509v3 Authority Key Identifier: keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:24:fc:f3:e0:2b:fd:08:70:b1:c7:0e:35:20:fb:04:77:c9: 3b:40:7c:21:ba:68:af:a7:f7:27:41:e0:bd:65:ab:f3:eb:92: ce:8a:75:25:34:f4:27:b6:35:e7:dd:da:8d:47:35:6d:c1:a6: b2:d7:cb:b7:1d:4f:be:b9:b6:84:32:d9:03:ea:71:93:c6:b5: 75:2b:f8:dc:6f:6b:be:18:48:8b:10:09:04:65:3a:b2:c2:cd: 32:1a:52:a4:f8:73:f7:35:b5:ff:bd:4b:82:24:b6:68:76:68: 88:5b:8d:d5:28:d3:e4:fe:75:a5:27:bd:4a:4e:02:19:7f:ad: dc:b4:54:fe:ca:5d:a6:09:65:cc:33:0b:ea:06:a7:7d:0f:e5: 3e:2b:ed:75:bf:8f:fe:48:b6:ac:ac:1c:8a:c1:04:2d:32:a5: 27:a0:2d:e2:4e:be:ba:ac:bb:7b:3c:5d:55:2b:85:1b:1f:69: 9d:a3:78:87:0d:a7:76:37:9a:bb:8f:b3:ff:98:5f:74:5d:b1: d4:5e:bc:28:12:75:2a:39:ab:41:5c:fd:49:ea:f7:7b:61:dc: 6e:ff:8d:17:7a:33:60:ee:1e:b8:12:23:27:7d:2c:7d:1e:9b: b5:57:81:2f:e3:17:0b:15:90:dd:87:f1:27:ff:35:81:f3:00: 1a:4d:f3:2b -----BEGIN CERTIFICATE----- MIIERjCCAy6gAwIBAgICASAwDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw ZS1uY2MtdGEwHhcNMjYwMTE0MTA1MDAxWhcNMjYwNDE0MTA1MDAxWjAzMTEwLwYD VQQDEyhlYTIzZGNkMWRhNzUwZmJkNmNhZDQ4ZDFmNzQzZmZiMTY3OWQxYzFmMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspb+ZH6yWhLxRxyUVlbJZvxH e82oXTeqMBM0dowGvjHJ1vfFycTEXYHS3myDCwC/fq9yBzYj0xOCY39g8NpldW7S HzC+k+3VEPeB/mPd0i8rJm5DDjb6oMkYXykHGZzAoP7Zm3aLenGh4Z5Ak4Kk5gTg cfGBfJxmA1BBtbGNQWelaZHtE6dZMN/JzFMJwUFG9HxpD20uZ+pTmddfjeVqgdve hShK2IUipn2nRFPrAX87fjRuerNRi7A3U2XH5MVL5Kycb9E4tPvmI460kA6999Cs G9EVT0bG5doM33iWeHUsNnkU5nNBPi8RCjRK1lh7EYGNtft4N+6JDiAjDaPo5wID AQABo4IBfzCCAXswHQYDVR0OBBYEFOoj3NHadQ+9bK1I0fdD/7FnnRwfMB8GA1Ud IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90 YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2JPzz4Cv9CHCxxw41IPsEd8k7QHwh umivp/cnQeC9Zavz65LOinUlNPQntjXn3dqNRzVtwaay18u3HU++ubaEMtkD6nGT xrV1K/jcb2u+GEiLEAkEZTqyws0yGlKk+HP3NbX/vUuCJLZodmiIW43VKNPk/nWl J71KTgIZf63ctFT+yl2mCWXMMwvqBqd9D+U+K+11v4/+SLasrByKwQQtMqUnoC3i Tr66rLt7PF1VK4UbH2mdo3iHDad2N5q7j7P/mF90XbHUXrwoEnUqOatBXP1J6vd7 Ydxu/40XejNg7h64EiMnfSx9Hpu1V4Ev4xcLFZDdh/En/zWB8wAaTfMr -----END CERTIFICATE-----Generated at Sat Jan 24 20:48:30 2026 by rpki-client