This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json) Hash identifier: IxIiKF2ciL63LRMAffzX9VQDqB3ed5tlyKfAtl/eER4= Subject key identifier: 2B:B3:1E:9F:B4:6D:A3:3E:2D:B0:09:BF:5F:58:9A:97:27:09:D1:2A Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35 Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935 Certificate serial: 019B1202E9EA69BDBFB95AD4E5E49A05EABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft Manifest number: 015A Signing time: Fri 12 Dec 2025 10:02:19 +0000 Manifest this update: Fri 12 Dec 2025 10:02:19 +0000 Manifest next update: Sat 13 Dec 2025 10:02:19 +0000 Files and hashes: 1: 1-78e97Jrk9Uh_jE37kqFne1h0ac.roa (hash: z20HWJG9MeJX/qHD5qtfUrm0n+lWcEMp1qD7mshzZJo=) 2: 1zKIP7xP-3mviAaLxu-Q9kO8TDw.roa (hash: i+hbxTxfZVrUKiiV4ml6H+EfTXIaAVLa/rzpycnZQE0=) 3: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: Q3Y5wO5vptyrz3H6Z5zU4M5GpXIV5US+kwV/vt612WI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:e9:ea:69:bd:bf:b9:5a:d4:e5:e4:9a:05:ea:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935 Validity Not Before: Dec 12 10:02:19 2025 GMT Not After : Dec 13 10:02:19 2025 GMT Subject: CN=2bb31e9fb46da33e2db009bf5f589a972709d12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5e:13:8d:3e:f2:27:fa:c2:f7:1c:3c:ad:e1: 63:e7:45:3a:62:5b:25:4a:6b:36:95:55:83:ec:f7: 1b:30:51:ef:05:d9:b9:24:c4:b1:78:a7:73:3f:d2: 45:ae:13:44:dc:e3:05:0c:04:ee:1c:2f:59:9c:4d: 08:3b:b4:29:b9:85:76:9f:63:00:7f:ee:14:35:16: e4:63:7d:c3:ca:c5:c0:fc:7a:ca:2a:30:c1:0d:f4: f7:2d:c9:d1:ca:8e:58:d5:9e:57:45:94:4e:3e:eb: 6d:3a:db:95:75:98:cf:cf:82:a5:d6:23:85:fa:48: 93:37:86:35:e4:b3:25:96:0b:3d:1f:69:58:19:61: 7a:6a:78:ba:5a:d2:13:87:b6:fa:6d:d7:e2:85:db: e1:f3:ab:e1:4d:b8:f8:cc:97:9a:8c:6b:e4:3f:e9: 48:fe:b2:00:de:ac:5c:b4:b1:95:e5:2f:23:69:52: 8e:15:13:42:64:d0:46:7c:31:37:2c:a9:95:07:05: db:a3:8d:df:2a:d2:03:c1:db:6d:ab:90:23:5a:28: 93:2e:0d:22:53:15:5a:29:c6:9a:87:68:3e:86:27: d7:9e:51:6a:d3:bc:90:cb:81:ec:1d:04:af:23:55: 69:2d:26:c4:37:e4:7a:e2:32:49:15:44:89:a9:1d: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B3:1E:9F:B4:6D:A3:3E:2D:B0:09:BF:5F:58:9A:97:27:09:D1:2A X509v3 Authority Key Identifier: keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:27:bd:2b:b8:c8:a8:13:90:b1:8a:19:49:4a:c3:a8:d3: 84:61:05:15:ca:ea:6e:1c:a7:03:15:d6:94:90:1f:79:1a:c2: b6:f6:16:93:de:56:63:a4:68:ab:05:1f:91:92:50:10:dc:34: e2:9a:3d:37:1f:1b:46:6c:de:92:15:ae:9e:9f:4b:03:87:d2: dd:1e:75:ae:43:49:29:07:05:dc:72:a1:7a:80:00:34:8a:a4: c1:12:da:6a:4f:13:b0:c0:95:66:96:e9:59:5a:55:b4:60:69: 74:fc:48:4f:1c:0f:18:9e:87:15:e2:a9:b4:50:02:a4:b8:a4: 76:3f:f1:5b:5d:15:c2:7b:8c:12:9c:69:a0:f9:2b:33:4d:6b: db:9e:48:05:8c:66:d2:33:74:f0:62:6d:71:18:4f:a4:02:9d: 8c:c3:f5:ac:33:5c:00:ed:4b:48:86:20:f6:ca:9a:59:63:03: ed:00:9c:33:37:29:33:41:c2:6f:01:03:00:ab:c0:f5:db:96: 1c:ed:54:a8:6d:62:8f:ee:10:91:41:ed:74:af:ab:c5:9f:71: 18:11:cf:97:6d:47:fe:64:9e:78:88:09:62:eb:38:6d:8a:0e: 43:3a:92:74:f2:00:af:74:d3:6c:d4:d7:88:be:e6:58:f9:45: 38:ae:96:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAunqab2/uVrU5eSaBeq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTkwMzc5YmQ4ZDA0Mzc0YjNhZGVmMDYwZDUxYWUyMTU3 MTA5MzUwHhcNMjUxMjEyMTAwMjE5WhcNMjUxMjEzMTAwMjE5WjAzMTEwLwYDVQQD EygyYmIzMWU5ZmI0NmRhMzNlMmRiMDA5YmY1ZjU4OWE5NzI3MDlkMTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA714TjT7yJ/rC9xw8reFj50U6Ylsl Sms2lVWD7PcbMFHvBdm5JMSxeKdzP9JFrhNE3OMFDATuHC9ZnE0IO7QpuYV2n2MA f+4UNRbkY33DysXA/HrKKjDBDfT3LcnRyo5Y1Z5XRZROPuttOtuVdZjPz4Kl1iOF +kiTN4Y15LMllgs9H2lYGWF6ani6WtITh7b6bdfihdvh86vhTbj4zJeajGvkP+lI /rIA3qxctLGV5S8jaVKOFRNCZNBGfDE3LKmVBwXbo43fKtIDwdttq5AjWiiTLg0i UxVaKcaah2g+hifXnlFq07yQy4HsHQSvI1VpLSbEN+R64jJJFUSJqR1q0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuzHp+0baM+LbAJv19YmpcnCdEqMB8GA1UdIwQY MBaAFEzpA3m9jQQ3Szre8GDVGuIVcQk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYt ODIwMGI4NjYwM2IxLzEvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYtODIwMGI4NjYwM2Ix LzEvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNInvSu4 yKgTkLGKGUlKw6jThGEFFcrqbhynAxXWlJAfeRrCtvYWk95WY6RoqwUfkZJQENw0 4po9Nx8bRmzekhWunp9LA4fS3R51rkNJKQcF3HKheoAANIqkwRLaak8TsMCVZpbp WVpVtGBpdPxITxwPGJ6HFeKptFACpLikdj/xW10VwnuMEpxpoPkrM01r255IBYxm 0jN08GJtcRhPpAKdjMP1rDNcAO1LSIYg9sqaWWMD7QCcMzcpM0HCbwEDAKvA9duW HO1UqG1ij+4QkUHtdK+rxZ9xGBHPl21H/mSeeIgJYus4bYoOQzqSdPIAr3TTbNTX iL7mWPlFOK6WfQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:01:20 2025 by rpki-client