This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft File: TON2ekBU9IaN4L2fsjpcx2kP_tU.mft (raw, json) Hash identifier: EPvbQcBmzWHhkpIA/skCrkJAppp67SPsL1EezAAt3kc= Subject key identifier: 67:C4:FB:AC:E6:79:EA:E0:EE:2D:06:11:1B:88:69:4E:52:A3:9A:6F Authority key identifier: 4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5 Certificate issuer: /CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5 Certificate serial: 019B18DFAC85182B9F502A48F487EB001F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft Manifest number: 0F14 Signing time: Sat 13 Dec 2025 18:01:10 +0000 Manifest this update: Sat 13 Dec 2025 18:01:10 +0000 Manifest next update: Sun 14 Dec 2025 18:01:10 +0000 Files and hashes: 1: TON2ekBU9IaN4L2fsjpcx2kP_tU.crl (hash: YTg/7PRVjn/m9ma4odd9mpHD7vBld7bbFOKjjkPiBK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:ac:85:18:2b:9f:50:2a:48:f4:87:eb:00:1f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5 Validity Not Before: Dec 13 18:01:10 2025 GMT Not After : Dec 14 18:01:10 2025 GMT Subject: CN=67c4fbace679eae0ee2d06111b88694e52a39a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2c:40:f6:46:1f:71:71:db:48:c2:6e:52:26: 50:91:d8:37:fc:03:e2:78:eb:47:0c:bd:7a:b9:7a: c8:41:81:ed:0a:06:0b:45:93:32:b4:44:9c:95:c7: cc:89:c4:5d:a3:53:32:07:4b:bb:8f:0a:d8:3d:8e: 54:29:e1:ed:c5:da:65:b5:f8:eb:36:ba:52:1e:76: 78:5c:38:59:62:1b:c8:d7:c9:c4:18:0e:84:5f:4b: 0b:2b:26:a7:37:7b:5f:cb:f3:b5:92:62:55:4c:3b: ed:75:4b:57:e6:cf:bc:3d:c6:92:a5:14:a6:df:2a: 27:90:df:0a:07:5c:27:70:bf:79:60:7c:9d:71:93: 32:5d:e1:49:fa:a4:6f:ca:79:aa:6c:fa:57:29:7a: ef:b1:fb:27:1f:70:ff:0d:ee:3c:e4:8f:07:b9:ad: ab:fe:b7:12:2b:84:72:b4:94:76:d3:86:4c:29:18: b3:a2:8e:a7:1d:76:ea:ee:1f:c4:da:7f:9c:81:ea: 1f:47:fb:e0:23:14:a4:42:ab:c4:7d:0b:23:4d:b1: a0:54:d3:ad:5b:22:56:64:f4:f0:73:37:d8:d9:e2: 84:5c:76:9d:ca:26:66:32:f3:87:51:17:20:ac:b8: dc:b3:b9:8b:1e:41:4e:7b:ce:90:9c:d1:3e:ac:2d: fd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C4:FB:AC:E6:79:EA:E0:EE:2D:06:11:1B:88:69:4E:52:A3:9A:6F X509v3 Authority Key Identifier: keyid:4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:3b:80:1b:a7:45:e7:2b:b2:bb:92:d8:9c:c3:16:22:d9:db: 98:92:0a:03:b8:9b:b0:79:77:c8:a4:50:7a:f8:aa:66:bc:0d: 3e:25:2b:49:d4:ab:a3:eb:0d:75:c3:20:63:10:e9:69:7a:f9: f3:17:93:fe:92:42:88:0d:0a:eb:76:38:12:cf:7a:16:18:b5: 58:73:05:a6:40:91:8c:fd:65:3a:89:f9:28:a9:aa:df:09:20: 05:17:36:7c:3f:39:f2:b0:2e:3c:7b:fb:31:30:65:33:35:ca: 79:4a:fd:b5:30:f8:ed:bc:3e:b1:a7:59:36:2c:04:54:39:e6: f7:e9:9d:dd:f7:70:04:b5:62:45:68:df:58:60:f1:f3:06:16: de:29:13:ec:fa:fc:c6:67:85:f4:2b:01:d6:da:54:0b:f2:a3: 4c:08:4b:d1:c7:bd:67:3e:26:e0:88:93:7d:43:78:e2:fa:9f: 07:11:bc:75:21:8d:06:89:e2:52:c3:d1:ba:d2:e8:4f:c3:4e: ac:cd:dc:cd:de:93:a1:07:c7:3f:8a:e8:5f:62:04:b7:20:36: e4:70:9a:3a:0f:99:fd:74:f9:a8:60:70:1a:f6:b9:17:14:2d: fe:ea:14:dd:21:c6:e1:0a:61:4e:39:b4:e0:31:3c:60:17:ea: 35:24:db:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY36yFGCufUCpI9IfrAB9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTM3NjdhNDA1NGY0ODY4ZGUwYmQ5ZmIyM2E1Y2M3Njkw ZmZlZDUwHhcNMjUxMjEzMTgwMTEwWhcNMjUxMjE0MTgwMTEwWjAzMTEwLwYDVQQD Eyg2N2M0ZmJhY2U2NzllYWUwZWUyZDA2MTExYjg4Njk0ZTUyYTM5YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CxA9kYfcXHbSMJuUiZQkdg3/APi eOtHDL16uXrIQYHtCgYLRZMytESclcfMicRdo1MyB0u7jwrYPY5UKeHtxdpltfjr NrpSHnZ4XDhZYhvI18nEGA6EX0sLKyanN3tfy/O1kmJVTDvtdUtX5s+8PcaSpRSm 3yonkN8KB1wncL95YHydcZMyXeFJ+qRvynmqbPpXKXrvsfsnH3D/De485I8Hua2r /rcSK4RytJR204ZMKRizoo6nHXbq7h/E2n+cgeofR/vgIxSkQqvEfQsjTbGgVNOt WyJWZPTwczfY2eKEXHadyiZmMvOHURcgrLjcs7mLHkFOe86QnNE+rC39ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfE+6zmeerg7i0GERuIaU5So5pvMB8GA1UdIwQY MBaAFEzjdnpAVPSGjeC9n7I6XMdpD/7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mN2JhZjQtZDI2Ni00ZmU1LWE2ZmYt YTAwNjY3ZjRjZjcxLzEvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mN2JhZjQtZDI2Ni00ZmU1LWE2ZmYtYTAwNjY3ZjRjZjcx LzEvVE9OMmVrQlU5SWFONEwyZnNqcGN4MmtQX3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDuAG6dF 5yuyu5LYnMMWItnbmJIKA7ibsHl3yKRQeviqZrwNPiUrSdSro+sNdcMgYxDpaXr5 8xeT/pJCiA0K63Y4Es96Fhi1WHMFpkCRjP1lOon5KKmq3wkgBRc2fD858rAuPHv7 MTBlMzXKeUr9tTD47bw+sadZNiwEVDnm9+md3fdwBLViRWjfWGDx8wYW3ikT7Pr8 xmeF9CsB1tpUC/KjTAhL0ce9Zz4m4IiTfUN44vqfBxG8dSGNBoniUsPRutLoT8NO rM3czd6ToQfHP4roX2IEtyA25HCaOg+Z/XT5qGBwGva5FxQt/uoU3SHG4QphTjm0 4DE8YBfqNSTbTQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:51 2025 by rpki-client