This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft File: ripe-ncc-ta.mft (raw, json) Hash identifier: d/duZeOodrQnyp2DLTwaDCjAmqqp/APVe5LHBdVoTqw= Subject key identifier: F3:D6:F1:49:B2:4B:B0:77:F7:CC:85:CC:20:E4:19:13:0D:3A:5D:12 Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 Certificate issuer: /CN=ripe-ncc-ta Certificate serial: 011D Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft Manifest number: 55 Signing time: Thu 20 Nov 2025 14:19:36 +0000 Manifest this update: Thu 20 Nov 2025 14:19:36 +0000 Manifest next update: Fri 20 Feb 2026 14:19:36 +0000 Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: l9/MIk4eqR2fam30U+ysID6spO4xRJde1PWEwLHsSMA=) 2: ripe-ncc-ta.crl (hash: P4f3gRX2d5S/MZfj3BChkExTU6B6mJL5tkHL9q3hmgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Feb 2026 14:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ripe-ncc-ta Validity Not Before: Nov 20 14:19:36 2025 GMT Not After : Feb 20 14:19:36 2026 GMT Subject: CN=f3d6f149b24bb077f7cc85cc20e419130d3a5d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:95:2d:04:65:31:9d:76:3f:a6:ec:55:b1: 1f:0b:cc:6b:ab:f9:fd:c0:36:72:3a:2a:57:76:fb: 91:2f:c0:78:ca:c0:0e:97:32:25:24:ef:11:d8:6c: 20:58:6d:30:94:96:e4:20:4e:72:80:f5:bb:7d:d9: 61:49:6f:7e:63:be:11:07:a0:03:62:7c:5c:bc:50: 97:e7:95:33:ff:cb:a2:74:e3:39:3f:fe:51:64:ad: 66:a2:62:40:77:7c:25:bf:6e:33:d4:32:fe:44:00: fd:54:40:59:d2:34:75:19:7d:cb:fc:a0:45:3c:03: b1:61:d4:47:04:64:ee:25:59:8d:94:e3:81:a2:21: f0:12:58:90:ac:c1:87:87:8a:b7:3a:0b:a8:05:42: eb:05:d9:97:a3:8a:84:6d:4f:98:ad:35:12:2a:5b: 68:1c:5f:b7:31:11:99:ed:85:b8:57:a3:24:37:88: 8c:1f:a2:a1:2f:d9:19:c7:f7:6f:72:19:3a:13:3e: 7e:8a:65:63:f9:31:f4:c8:48:44:b3:3a:b7:cb:4c: f3:af:fe:5f:1c:6f:12:4a:33:15:ad:08:55:3e:45: 41:47:ca:78:32:3b:f2:f3:38:aa:be:ee:98:9a:76: fd:09:83:f6:7c:4f:7e:c8:85:68:c8:bd:dd:fe:9b: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D6:F1:49:B2:4B:B0:77:F7:CC:85:CC:20:E4:19:13:0D:3A:5D:12 X509v3 Authority Key Identifier: keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e6:08:38:f0:87:78:b2:90:c3:9e:1b:f5:5d:82:8f:94:0a: 91:08:f9:74:3f:e7:65:e4:4e:31:b8:a7:c4:f1:33:e9:9b:9a: a5:48:4a:3f:f5:1f:3d:c3:c8:80:f0:49:92:39:33:a2:b7:79: ca:8f:d8:08:0d:fa:aa:f5:94:3f:97:79:5c:c7:91:69:49:6e: 58:5f:6c:4c:54:8d:13:ac:81:2c:78:85:2f:f8:27:9f:f7:3e: e1:5f:9b:39:64:2e:72:32:d7:bd:3c:08:79:47:db:a3:4d:b9: 36:56:67:39:63:f3:59:21:93:97:d0:a4:9a:97:8b:2e:fe:76: 79:e3:c2:b1:8b:a1:ea:5c:2f:ba:d8:9b:37:8a:dc:cf:b4:03: 03:40:d3:35:c7:c7:88:76:4e:9d:56:33:fd:59:38:b6:71:45: 8b:de:c2:c6:ec:87:eb:6f:db:23:83:56:e9:0e:aa:5b:b2:9b: 5a:27:b4:72:06:ec:fa:6c:18:d8:ac:8f:22:d8:ff:ba:4b:f5: cc:6b:b0:75:8f:31:94:9d:03:e3:52:56:9f:42:e8:26:aa:1c: 36:83:11:d4:6c:21:7b:70:03:28:4b:82:51:02:12:ed:6d:e5: 40:6d:37:09:57:ae:fb:bd:b3:68:8b:89:67:78:07:80:65:f2: 3f:86:9d:b5 -----BEGIN CERTIFICATE----- MIIERjCCAy6gAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw ZS1uY2MtdGEwHhcNMjUxMTIwMTQxOTM2WhcNMjYwMjIwMTQxOTM2WjAzMTEwLwYD VQQDEyhmM2Q2ZjE0OWIyNGJiMDc3ZjdjYzg1Y2MyMGU0MTkxMzBkM2E1ZDEyMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7eVLQRlMZ12P6bsVbEfC8xr q/n9wDZyOipXdvuRL8B4ysAOlzIlJO8R2GwgWG0wlJbkIE5ygPW7fdlhSW9+Y74R B6ADYnxcvFCX55Uz/8uidOM5P/5RZK1momJAd3wlv24z1DL+RAD9VEBZ0jR1GX3L /KBFPAOxYdRHBGTuJVmNlOOBoiHwEliQrMGHh4q3OguoBULrBdmXo4qEbU+YrTUS KltoHF+3MRGZ7YW4V6MkN4iMH6KhL9kZx/dvchk6Ez5+imVj+TH0yEhEszq3y0zz r/5fHG8SSjMVrQhVPkVBR8p4Mjvy8ziqvu6Ymnb9CYP2fE9+yIVoyL3d/ptS0QID AQABo4IBfzCCAXswHQYDVR0OBBYEFPPW8UmyS7B398yFzCDkGRMNOl0SMB8GA1Ud IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90 YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCa5gg48Id4spDDnhv1XYKPlAqRCPl0 P+dl5E4xuKfE8TPpm5qlSEo/9R89w8iA8EmSOTOit3nKj9gIDfqq9ZQ/l3lcx5Fp SW5YX2xMVI0TrIEseIUv+Cef9z7hX5s5ZC5yMte9PAh5R9ujTbk2Vmc5Y/NZIZOX 0KSal4su/nZ548Kxi6HqXC+62Js3itzPtAMDQNM1x8eIdk6dVjP9WTi2cUWL3sLG 7Ifrb9sjg1bpDqpbsptaJ7RyBuz6bBjYrI8i2P+6S/XMa7B1jzGUnQPjUlafQugm qhw2gxHUbCF7cAMoS4JRAhLtbeVAbTcJV677vbNoi4lneAeAZfI/hp21 -----END CERTIFICATE-----Generated at Sat Dec 6 04:22:39 2025 by rpki-client