This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json) Hash identifier: 7j3v4ZMT7GyqXN2ZHA9quww5YA92fk7oJXfQxLAjyCk= Subject key identifier: 63:A9:F4:BD:B5:BF:99:19:62:F5:A9:E1:0D:B7:0F:15:0F:AD:26:E1 Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Certificate serial: 019B0710421C34BA98A7A3265326C9C62590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft Manifest number: 1770 Signing time: Wed 10 Dec 2025 07:01:04 +0000 Manifest this update: Wed 10 Dec 2025 07:01:04 +0000 Manifest next update: Thu 11 Dec 2025 07:01:04 +0000 Files and hashes: 1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: BRWLDPqqTHoj93CcicIkr8+cm0qq+wdtXMG0ypQSqmg=) 2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=) 3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=) 4: mTK71BiAahOGNOj1gIjcUiycIis.roa (hash: Kml3f2UysjEUhXvE3jKGWnv4uk2wh6/Ey/fuSSOhyUc=) 5: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:10:42:1c:34:ba:98:a7:a3:26:53:26:c9:c6:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Validity Not Before: Dec 10 07:01:04 2025 GMT Not After : Dec 11 07:01:04 2025 GMT Subject: CN=63a9f4bdb5bf991962f5a9e10db70f150fad26e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:e1:34:6c:82:a0:f7:19:9c:aa:f5:c2:84: 85:12:2c:cc:17:d7:ab:0b:43:58:e6:89:fd:56:5c: 9a:ea:45:49:f0:b5:b0:b0:54:55:51:4f:2e:b9:5f: 8c:b0:5d:0f:6d:e3:e8:a9:2e:a0:3d:47:a3:51:c1: f3:0a:04:65:8b:f7:a3:44:49:2d:76:d3:3b:b3:62: af:37:3c:e7:8a:12:cd:fe:53:2c:85:87:a9:4b:37: 2c:91:87:4e:52:a4:ad:fa:59:25:33:d2:a2:61:11: c8:fd:14:8e:9b:7f:23:8c:f8:fb:bb:63:51:ef:ff: cd:32:5f:e4:0a:cb:2d:a7:89:ad:74:42:74:63:08: 69:18:6f:5b:0f:82:bd:51:af:0b:4d:30:7b:f4:30: af:bf:a1:3c:b4:b5:37:c5:35:bc:57:a6:71:7c:39: 74:e2:7b:dc:ac:ba:51:17:bb:f0:bb:0c:13:c2:42: 80:b4:37:db:4e:92:cd:cc:46:78:d2:6f:28:bf:33: 25:a0:8c:4a:be:2c:d1:ef:c6:78:30:92:7d:33:5b: b8:72:b5:5c:92:71:42:73:8c:0f:cd:5f:ac:f1:ae: 05:ae:8f:72:17:a3:00:4d:0b:bc:25:4d:a7:4f:82: 8e:38:f5:44:47:ed:88:21:22:d4:b6:02:6e:17:fc: 1c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A9:F4:BD:B5:BF:99:19:62:F5:A9:E1:0D:B7:0F:15:0F:AD:26:E1 X509v3 Authority Key Identifier: keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d5:94:00:f5:04:81:36:fb:de:b4:74:2c:8b:a6:77:49:26: 15:2d:f2:31:6b:fb:f6:42:01:0f:f7:df:0d:c1:0c:b8:ba:ba: 27:85:46:76:63:77:f8:c6:37:8d:3c:13:1a:8c:11:51:0f:2e: f6:e9:ac:59:81:44:5a:66:00:7b:27:dd:12:d2:bc:01:72:9c: bc:3f:dc:7f:0a:92:7e:89:39:15:bf:35:41:ce:88:9d:df:6c: bc:ae:02:cd:bb:00:10:81:77:f0:fd:88:8d:d1:20:a5:af:39: 09:50:4c:fc:c6:d3:bb:b5:17:f5:c6:80:35:52:77:70:15:96: 08:a4:b3:2c:98:34:da:1f:03:3a:4b:bd:17:97:87:d4:31:63: 8d:33:57:f7:83:b2:7b:be:48:90:90:28:a2:7f:ce:ff:43:a4: 2a:d1:67:7c:c8:8f:57:d7:90:45:14:d9:6f:a8:9d:fa:63:47: df:55:00:df:ed:c8:db:d8:86:36:2c:5e:38:ed:44:4d:26:e2: 37:fc:f4:8c:f2:7c:1c:5d:40:28:5b:5d:2b:16:d9:46:58:26: 8b:be:c4:51:f3:a8:0e:b8:b2:15:04:01:0d:ce:c3:44:b2:07: 2b:93:08:9e:9e:66:7d:51:dd:25:98:65:f1:da:49:4a:14:eb: 33:68:72:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHEEIcNLqYp6MmUybJxiWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2ExZTg0NjViZmM0ZGY3MDA4OTQzNzJkMGI5ODA4ZThi NjI5ZWEwHhcNMjUxMjEwMDcwMTA0WhcNMjUxMjExMDcwMTA0WjAzMTEwLwYDVQQD Eyg2M2E5ZjRiZGI1YmY5OTE5NjJmNWE5ZTEwZGI3MGYxNTBmYWQyNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA3hNGyCoPcZnKr1woSFEizMF9er C0NY5on9Vlya6kVJ8LWwsFRVUU8uuV+MsF0PbePoqS6gPUejUcHzCgRli/ejREkt dtM7s2KvNzznihLN/lMshYepSzcskYdOUqSt+lklM9KiYRHI/RSOm38jjPj7u2NR 7//NMl/kCsstp4mtdEJ0YwhpGG9bD4K9Ua8LTTB79DCvv6E8tLU3xTW8V6ZxfDl0 4nvcrLpRF7vwuwwTwkKAtDfbTpLNzEZ40m8ovzMloIxKvizR78Z4MJJ9M1u4crVc knFCc4wPzV+s8a4Fro9yF6MATQu8JU2nT4KOOPVER+2IISLUtgJuF/wc9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOp9L21v5kZYvWp4Q23DxUPrSbhMB8GA1UdIwQY MBaAFP06HoRlv8TfcAiUNy0LmAjotinqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYt OTU1NWQzMGY2ZjhmLzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYtOTU1NWQzMGY2Zjhm LzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdWUAPUE gTb73rR0LIumd0kmFS3yMWv79kIBD/ffDcEMuLq6J4VGdmN3+MY3jTwTGowRUQ8u 9umsWYFEWmYAeyfdEtK8AXKcvD/cfwqSfok5Fb81Qc6Ind9svK4CzbsAEIF38P2I jdEgpa85CVBM/MbTu7UX9caANVJ3cBWWCKSzLJg02h8DOku9F5eH1DFjjTNX94Oy e75IkJAoon/O/0OkKtFnfMiPV9eQRRTZb6id+mNH31UA3+3I29iGNixeOO1ETSbi N/z0jPJ8HF1AKFtdKxbZRlgmi77EUfOoDriyFQQBDc7DRLIHK5MInp5mfVHdJZhl 8dpJShTrM2hy3A== -----END CERTIFICATE-----Generated at Wed Dec 10 09:50:41 2025 by rpki-client