This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json) Hash identifier: iUSzJsydopefNFddGfc7xjrwbjQTkeMQ9j3uq080eiA= Subject key identifier: 0D:11:B4:BE:FC:33:2D:FE:D7:DD:AA:28:62:2C:59:51:DE:82:16:FA Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019 Certificate serial: 019B48150FAF30F2B407429FD71A5363CA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft Manifest number: 1777 Signing time: Mon 22 Dec 2025 22:01:38 +0000 Manifest this update: Mon 22 Dec 2025 22:01:38 +0000 Manifest next update: Tue 23 Dec 2025 22:01:38 +0000 Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: fvgzdqZH/jkFQPbMFnMQmfFwxL6aQ8AeAX5bK57crGE=) 2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=) 3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:0f:af:30:f2:b4:07:42:9f:d7:1a:53:63:ca:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019 Validity Not Before: Dec 22 22:01:38 2025 GMT Not After : Dec 23 22:01:38 2025 GMT Subject: CN=0d11b4befc332dfed7ddaa28622c5951de8216fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:1d:51:ae:f6:99:36:31:56:e2:4c:5d:6b: 33:06:20:91:1f:85:c5:18:ff:d3:65:a3:1e:1f:7a: 55:e7:d4:03:af:4d:61:e1:f6:93:c7:4d:a6:1f:dd: cc:ea:1f:80:72:d4:0b:94:f8:29:0c:4b:89:1a:97: 3a:73:74:a3:a5:30:a7:c4:9c:4e:bd:96:8d:15:85: 20:05:d0:0e:35:17:e9:79:71:d0:dc:f7:89:42:dc: 5f:38:9f:9c:2c:f1:3d:b8:89:02:ba:ee:b8:5c:01: ed:50:f9:c4:a6:45:2d:bf:93:29:6e:79:78:f9:9a: f5:ac:d3:0d:59:dc:2f:de:5c:b6:3a:a2:24:bf:d7: 4b:82:9a:09:c0:8e:37:e2:48:2f:23:00:de:b4:9e: 1b:8a:94:01:96:17:fd:ef:a4:a1:6a:d8:e2:2c:b5: d7:bf:d2:18:64:1d:c0:eb:c0:98:ee:59:02:e8:03: 9b:bb:c5:3b:9e:73:ea:24:54:e7:93:53:df:99:3b: 5f:c1:b9:34:64:06:21:68:fb:62:8f:34:b9:8b:3e: aa:ce:df:88:1e:ae:0a:bb:5e:11:50:98:4e:72:c8: e7:d9:15:ee:9b:87:7e:f5:3e:4a:1d:62:09:57:70: 8b:99:9c:5d:34:26:08:57:c8:d2:a3:63:8d:60:02: 36:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:11:B4:BE:FC:33:2D:FE:D7:DD:AA:28:62:2C:59:51:DE:82:16:FA X509v3 Authority Key Identifier: keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:26:48:47:f1:8a:1b:27:64:6e:88:fd:c4:6c:14:a5:83:17: 5d:58:06:4f:b7:fc:12:5f:16:a7:7d:d1:52:78:8d:1a:c3:45: d7:d6:2d:56:16:fa:96:e9:90:5e:c5:28:0a:3b:4f:17:7e:20: 0f:5d:72:17:6c:82:5b:28:2b:ce:b7:fc:0d:1f:ff:46:a1:a8: 23:d1:d4:c9:e5:da:92:42:8a:4d:17:11:b7:5b:bf:17:ad:d8: 6e:a6:b8:1f:2f:d0:b3:5c:70:44:a0:ad:93:fb:4b:ae:08:b2: 46:a0:fa:15:b6:bd:e7:a5:6f:4d:37:07:d4:c7:ed:99:a8:5f: 9f:49:ef:04:09:4d:0d:d9:07:13:56:37:4e:16:ad:38:66:56: 13:6a:64:ab:96:28:bb:4e:56:5b:e1:fd:fb:c9:e0:c8:b6:8c: 13:07:bb:8e:fa:67:e2:c7:7a:77:88:59:7a:20:ba:6c:3b:c5: 20:37:c0:5d:29:bb:9f:eb:b2:d1:93:9d:ad:34:db:5e:2c:3a: a5:22:f3:44:75:f2:94:ba:4f:09:d5:2f:d2:e0:33:32:e9:41: d5:5d:e0:95:78:bb:9c:18:b2:06:b8:d8:04:08:51:3c:fe:53: c0:69:2c:76:a5:96:11:ac:47:f0:99:f3:be:8c:30:f4:dc:c0: 00:d5:00:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFQ+vMPK0B0Kf1xpTY8oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0 NWQwMTkwHhcNMjUxMjIyMjIwMTM4WhcNMjUxMjIzMjIwMTM4WjAzMTEwLwYDVQQD EygwZDExYjRiZWZjMzMyZGZlZDdkZGFhMjg2MjJjNTk1MWRlODIxNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH0dUa72mTYxVuJMXWszBiCRH4XF GP/TZaMeH3pV59QDr01h4faTx02mH93M6h+ActQLlPgpDEuJGpc6c3SjpTCnxJxO vZaNFYUgBdAONRfpeXHQ3PeJQtxfOJ+cLPE9uIkCuu64XAHtUPnEpkUtv5Mpbnl4 +Zr1rNMNWdwv3ly2OqIkv9dLgpoJwI434kgvIwDetJ4bipQBlhf976ShatjiLLXX v9IYZB3A68CY7lkC6AObu8U7nnPqJFTnk1PfmTtfwbk0ZAYhaPtijzS5iz6qzt+I Hq4Ku14RUJhOcsjn2RXum4d+9T5KHWIJV3CLmZxdNCYIV8jSo2ONYAI2wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0RtL78My3+192qKGIsWVHeghb6MB8GA1UdIwQY MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryZIR/GK Gydkboj9xGwUpYMXXVgGT7f8El8Wp33RUniNGsNF19YtVhb6lumQXsUoCjtPF34g D11yF2yCWygrzrf8DR//RqGoI9HUyeXakkKKTRcRt1u/F63Ybqa4Hy/Qs1xwRKCt k/tLrgiyRqD6Fba956VvTTcH1Mftmahfn0nvBAlNDdkHE1Y3ThatOGZWE2pkq5Yo u05WW+H9+8ngyLaMEwe7jvpn4sd6d4hZeiC6bDvFIDfAXSm7n+uy0ZOdrTTbXiw6 pSLzRHXylLpPCdUv0uAzMulB1V3glXi7nBiyBrjYBAhRPP5TwGksdqWWEaxH8Jnz voww9NzAANUAOQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:49:00 2025 by rpki-client