This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json) Hash identifier: bWqHhL2bPseRETYnl3QpuMEqwqu/Urq1WFFREKJgy4Y= Subject key identifier: 9A:37:5F:74:DB:2E:8A:8F:9E:B9:AB:F2:AA:20:F3:4B:BA:10:D7:18 Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08 Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008 Certificate serial: 019B5977B901ACE8920B61DDA4AD72870DEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:02:56 +0000 Manifest this update: Fri 26 Dec 2025 07:02:56 +0000 Manifest next update: Sat 27 Dec 2025 07:02:56 +0000 Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: 2V3mIUS8PMSmbTPCaKnVrW7Z3JjIMUW9g2tqbSuhKuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:b9:01:ac:e8:92:0b:61:dd:a4:ad:72:87:0d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008 Validity Not Before: Dec 26 07:02:56 2025 GMT Not After : Dec 27 07:02:56 2025 GMT Subject: CN=9a375f74db2e8a8f9eb9abf2aa20f34bba10d718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:2f:f3:ef:93:cd:fe:e1:1d:66:05:d0:9b: cb:92:8b:ef:35:cb:d1:86:d8:89:6a:00:58:60:cd: 56:77:df:aa:02:b3:57:5d:f6:60:37:56:b8:90:a8: e4:4a:37:a9:ba:4a:76:4b:2d:56:f9:05:fa:db:71: 12:e9:5b:fd:97:50:65:3d:53:0a:24:34:4e:d7:a6: 42:b9:4f:3a:09:14:e9:14:17:a1:ee:bb:47:73:26: e0:33:00:42:47:b1:e9:64:f4:47:ff:15:ee:76:3d: f3:9f:4b:2a:fe:fb:dd:e2:9b:3a:13:88:da:6a:c5: 2e:74:c7:9f:77:0d:5d:fe:e0:77:33:00:0e:80:a4: 9d:d7:f6:1e:99:4e:6a:0b:15:b9:26:e4:4d:af:df: af:a5:b7:8c:f3:47:d3:4d:2e:97:02:a4:8b:de:56: ae:79:19:c5:bd:7a:40:ab:10:3a:0f:61:bd:07:3f: 2c:ca:ce:6b:3e:8a:4f:65:13:3f:40:df:6f:b5:27: fe:73:ef:9c:89:52:ea:87:83:7c:d2:4d:d3:36:d9: 0e:f8:55:cf:f0:3b:50:1a:5f:3d:37:58:c1:02:e2: fe:81:55:c9:c6:1f:c5:a0:ac:d1:8b:44:46:12:c9: 11:8b:27:39:e8:27:59:b1:59:fe:b2:f2:82:6a:d6: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:5F:74:DB:2E:8A:8F:9E:B9:AB:F2:AA:20:F3:4B:BA:10:D7:18 X509v3 Authority Key Identifier: keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:04:c8:c7:5d:b0:53:bf:13:fd:fd:fc:cd:81:a8:e1:ac:90: 92:f8:05:fe:69:2c:e5:cc:86:9c:ea:93:62:76:47:0d:6a:92: b7:ef:e0:32:72:95:3e:91:da:e3:24:df:71:3c:be:ff:c6:99: 7f:50:a8:cb:77:45:33:8e:c1:00:0d:5e:ea:6c:75:21:e1:c6: bc:88:cb:4d:b4:39:fa:bd:80:e0:82:07:87:61:a4:8c:fb:b9: a1:26:e3:43:6d:02:95:da:88:94:74:db:17:6c:30:67:36:95: db:7d:19:7a:f6:94:7e:e9:f4:a4:0d:cb:ee:ca:55:27:3c:a4: f0:5b:5d:1a:62:7f:d9:2c:37:19:b0:d9:ed:e9:96:77:56:06: 67:6e:ba:c7:5b:85:9c:27:8f:26:55:46:4c:ce:0d:5d:27:8b: 81:be:5c:31:ce:98:b4:c5:6a:47:90:f0:e4:24:10:1d:40:50: fe:e5:c3:05:71:7e:a8:4c:0b:f1:16:ea:da:35:62:37:6e:0b: 0f:5a:6d:32:fb:f7:f9:cb:b7:47:81:f5:8d:8f:d2:eb:21:54: c0:05:bc:a2:1c:c0:1c:d5:84:f0:8b:6a:bc:40:5a:1c:c2:fd: c6:f3:27:a4:e1:5f:98:8a:0f:ed:73:8b:80:2b:a0:0b:1b:7d: de:68:e2:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd7kBrOiSC2HdpK1yhw3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZWQ0Yzc4Njc0MjllZTAyZjVjZGMxYWZiZWFhNWJhNzEz MzYwMDgwHhcNMjUxMjI2MDcwMjU2WhcNMjUxMjI3MDcwMjU2WjAzMTEwLwYDVQQD Eyg5YTM3NWY3NGRiMmU4YThmOWViOWFiZjJhYTIwZjM0YmJhMTBkNzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHsv8++Tzf7hHWYF0JvLkovvNcvR htiJagBYYM1Wd9+qArNXXfZgN1a4kKjkSjepukp2Sy1W+QX623ES6Vv9l1BlPVMK JDRO16ZCuU86CRTpFBeh7rtHcybgMwBCR7HpZPRH/xXudj3zn0sq/vvd4ps6E4ja asUudMefdw1d/uB3MwAOgKSd1/YemU5qCxW5JuRNr9+vpbeM80fTTS6XAqSL3lau eRnFvXpAqxA6D2G9Bz8sys5rPopPZRM/QN9vtSf+c++ciVLqh4N80k3TNtkO+FXP 8DtQGl89N1jBAuL+gVXJxh/FoKzRi0RGEskRiyc56CdZsVn+svKCataVoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo3X3TbLoqPnrmr8qog80u6ENcYMB8GA1UdIwQY MBaAFEztTHhnQp7gL1zcGvvqpbpxM2AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAt MTYwY2RlODhlZDNmLzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAtMTYwY2RlODhlZDNm LzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQTIx12w U78T/f38zYGo4ayQkvgF/mks5cyGnOqTYnZHDWqSt+/gMnKVPpHa4yTfcTy+/8aZ f1Coy3dFM47BAA1e6mx1IeHGvIjLTbQ5+r2A4IIHh2GkjPu5oSbjQ20CldqIlHTb F2wwZzaV230ZevaUfun0pA3L7spVJzyk8FtdGmJ/2Sw3GbDZ7emWd1YGZ266x1uF nCePJlVGTM4NXSeLgb5cMc6YtMVqR5Dw5CQQHUBQ/uXDBXF+qEwL8Rbq2jViN24L D1ptMvv3+cu3R4H1jY/S6yFUwAW8ohzAHNWE8ItqvEBaHML9xvMnpOFfmIoP7XOL gCugCxt93mjiZQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:50 2025 by rpki-client