This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft File: ToFckvwcZCWqy8xFFZbHPtZFcAc.mft (raw, json) Hash identifier: lJyFotfpCL7Vm7AQmuwoR9DjaudO46dLLYAvcdYOtMM= Subject key identifier: 00:D4:68:35:D2:B7:1E:AF:C2:7A:98:5A:F0:CD:30:94:67:4F:21:16 Authority key identifier: 4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07 Certificate issuer: /CN=4e815c92fc1c6425aacbcc451596c73ed6457007 Certificate serial: 019B593EE00AE6F8B7530F3586450520DFC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft Manifest number: 53 Signing time: Fri 26 Dec 2025 06:00:51 +0000 Manifest this update: Fri 26 Dec 2025 06:00:51 +0000 Manifest next update: Sat 27 Dec 2025 06:00:51 +0000 Files and hashes: 1: 1-OtTj0eqfh0GfxBOuMeEc8Q8_AA.roa (hash: 25H9xJdrvjjN7cufc9xed+r7fU9Rit0dST7O2iYnC00=) 2: ToFckvwcZCWqy8xFFZbHPtZFcAc.crl (hash: S5L5RvT2kfRqF9SEvORpi4Uu+lVe+D0YJqkBmXOgEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e0:0a:e6:f8:b7:53:0f:35:86:45:05:20:df:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e815c92fc1c6425aacbcc451596c73ed6457007 Validity Not Before: Dec 26 06:00:51 2025 GMT Not After : Dec 27 06:00:51 2025 GMT Subject: CN=00d46835d2b71eafc27a985af0cd3094674f2116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:8b:4a:c3:8d:a7:c9:8b:46:72:10:a4:b6: d2:6f:3a:3b:fd:8e:52:42:7c:b3:f9:84:b3:6c:bc: b0:8c:8c:1e:75:3c:a6:dc:3b:de:7c:a1:1f:1b:4d: 00:83:e8:87:e0:ee:a2:97:7f:1f:ef:46:a2:5e:e2: 08:ea:12:e1:47:ea:50:2f:74:62:f0:c9:8b:fa:5b: 15:67:7e:42:4e:18:50:2c:0f:7b:66:2a:0b:e6:03: 26:e1:13:ba:42:e4:f1:ef:36:7d:9d:b3:08:05:6c: 21:83:6a:6b:51:b9:ff:18:90:b4:c5:ee:32:ce:c8: 62:09:48:97:f5:e2:10:87:7b:59:24:8c:bc:82:2a: c9:b5:08:43:2c:4d:5b:45:85:cf:a0:d1:56:3d:b6: ed:f1:9b:93:99:ab:32:90:fd:c0:3b:71:b3:d9:e0: 95:1f:d3:54:59:50:d1:7b:df:4c:a2:31:ca:b0:ff: fc:05:46:7f:b4:11:16:14:99:60:02:ea:6c:fe:c5: 9b:a6:83:4e:9a:85:a7:40:da:bd:fa:e8:82:1f:41: 38:b7:4c:bf:b0:cc:3a:76:91:c4:26:36:80:31:3e: 85:e7:0b:2c:61:22:90:04:a1:9e:91:f6:08:77:b3: 49:66:70:de:55:8f:cb:0f:af:d0:fd:84:af:d6:bf: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D4:68:35:D2:B7:1E:AF:C2:7A:98:5A:F0:CD:30:94:67:4F:21:16 X509v3 Authority Key Identifier: keyid:4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e3:0b:6a:96:3e:0a:f4:e7:86:0d:7a:2e:60:2c:81:ce:51: 9f:0a:41:a3:73:d1:65:e5:97:62:2a:7a:e5:8d:c1:da:01:9d: 2c:fc:65:12:8b:f7:a3:da:9d:27:2c:3a:f0:96:95:91:13:18: a9:07:fa:e1:0e:0c:cc:d0:83:38:43:ec:4f:4f:7e:eb:36:58: d8:ad:1d:9e:72:0a:a6:3b:8b:f3:fb:1a:dd:14:15:ae:3e:9b: 11:30:54:84:ce:27:24:14:8c:b2:e2:4c:6e:aa:1f:2c:9b:2c: 72:fe:7d:22:5c:53:53:75:91:44:bd:a1:9f:e4:0b:1e:db:b0: 64:71:0b:cc:9f:7d:de:91:63:05:8d:1c:65:61:99:6a:35:f9: ce:60:54:3c:e4:86:29:ef:aa:27:72:2f:1a:be:64:70:bc:2a: d4:5b:e7:22:0f:17:83:df:01:8a:44:9c:4c:d0:bf:36:24:7e: 10:2c:ce:e2:aa:07:00:8b:2c:7c:ad:af:b3:18:ea:48:01:61: cd:c0:d7:57:1a:6f:a4:77:10:2a:30:e4:2b:08:3b:f8:8f:a3: b0:85:c0:c6:8f:af:69:40:05:06:4c:5d:ee:8b:71:3e:1d:3c: f6:a6:76:b5:e1:5a:94:a3:fb:f5:e3:b4:e9:0d:8b:8c:42:e8: 4d:21:34:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPuAK5vi3Uw81hkUFIN/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlODE1YzkyZmMxYzY0MjVhYWNiY2M0NTE1OTZjNzNlZDY0 NTcwMDcwHhcNMjUxMjI2MDYwMDUxWhcNMjUxMjI3MDYwMDUxWjAzMTEwLwYDVQQD EygwMGQ0NjgzNWQyYjcxZWFmYzI3YTk4NWFmMGNkMzA5NDY3NGYyMTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr12LSsONp8mLRnIQpLbSbzo7/Y5S Qnyz+YSzbLywjIwedTym3DvefKEfG00Ag+iH4O6il38f70aiXuII6hLhR+pQL3Ri 8MmL+lsVZ35CThhQLA97ZioL5gMm4RO6QuTx7zZ9nbMIBWwhg2prUbn/GJC0xe4y zshiCUiX9eIQh3tZJIy8girJtQhDLE1bRYXPoNFWPbbt8ZuTmasykP3AO3Gz2eCV H9NUWVDRe99MojHKsP/8BUZ/tBEWFJlgAups/sWbpoNOmoWnQNq9+uiCH0E4t0y/ sMw6dpHEJjaAMT6F5wssYSKQBKGekfYId7NJZnDeVY/LD6/Q/YSv1r+q4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADUaDXStx6vwnqYWvDNMJRnTyEWMB8GA1UdIwQY MBaAFE6BXJL8HGQlqsvMRRWWxz7WRXAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG9GY2t2d2NaQ1dxeTh4RkZaYkhQdFpGY0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iY2Y3YjItNDRhNS00ZGExLTk0Nzct MzVjZjg2ZTRlNTZkLzEvVG9GY2t2d2NaQ1dxeTh4RkZaYkhQdFpGY0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iY2Y3YjItNDRhNS00ZGExLTk0NzctMzVjZjg2ZTRlNTZk LzEvVG9GY2t2d2NaQ1dxeTh4RkZaYkhQdFpGY0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuMLapY+ CvTnhg16LmAsgc5RnwpBo3PRZeWXYip65Y3B2gGdLPxlEov3o9qdJyw68JaVkRMY qQf64Q4MzNCDOEPsT09+6zZY2K0dnnIKpjuL8/sa3RQVrj6bETBUhM4nJBSMsuJM bqofLJsscv59IlxTU3WRRL2hn+QLHtuwZHELzJ993pFjBY0cZWGZajX5zmBUPOSG Ke+qJ3IvGr5kcLwq1FvnIg8Xg98BikScTNC/NiR+ECzO4qoHAIssfK2vsxjqSAFh zcDXVxpvpHcQKjDkKwg7+I+jsIXAxo+vaUAFBkxd7otxPh089qZ2teFalKP79eO0 6Q2LjELoTSE0Sg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:38 2025 by rpki-client