This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json) Hash identifier: k9/Q7+te+DD3nIAjG5ezKtuGJqZVopNVCAxoYm/Ituk= Subject key identifier: A1:DE:2A:C1:D7:CA:BB:5E:02:68:DD:50:01:C9:04:A8:EA:76:27:93 Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba Certificate serial: 019B5A524947AE79AFC3F9002C64F19795D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:01:40 +0000 Manifest this update: Fri 26 Dec 2025 11:01:40 +0000 Manifest next update: Sat 27 Dec 2025 11:01:40 +0000 Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=) 2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: 2AFaWHZRVNXDMWF44fSKIO+En6SY18ag5Gg1/mXTM80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:49:47:ae:79:af:c3:f9:00:2c:64:f1:97:95:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba Validity Not Before: Dec 26 11:01:40 2025 GMT Not After : Dec 27 11:01:40 2025 GMT Subject: CN=a1de2ac1d7cabb5e0268dd5001c904a8ea762793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:39:fd:cd:e7:0f:64:e8:7c:77:66:e8:7d: 4a:37:5a:f2:9f:e6:ee:60:d7:41:35:39:3f:dd:ee: 18:1d:16:3e:bf:00:44:dd:be:6d:80:98:c1:6c:67: 6e:41:47:65:af:df:a7:a9:51:dc:0c:2a:6e:85:f4: cd:c3:4f:de:3f:03:77:d3:a9:e6:56:5a:52:df:22: 3d:da:47:c0:68:0a:e3:f5:6f:7c:5b:5f:22:58:30: f0:7d:9d:d1:d4:6b:6c:26:d6:bb:52:5e:31:2d:70: ba:c1:b1:54:d3:b1:ac:f4:d4:94:a8:19:f4:b4:2d: 63:65:96:e6:4f:a7:d9:b5:7d:9b:15:e4:13:46:9e: 0a:63:df:c0:08:39:3f:7a:57:46:f8:8d:16:b8:bb: 39:37:24:fa:90:f4:dc:57:45:d7:77:3a:d0:5f:f0: 4d:e7:74:f0:40:b2:36:3c:3a:03:2b:3d:c6:4b:9a: ab:3d:10:44:f6:fb:2a:d3:05:35:9d:19:90:bc:5d: 97:56:10:78:ff:7c:6f:2b:3e:95:61:39:19:1a:b6: 51:7a:f7:9a:48:fe:d5:0d:ed:75:11:5d:8a:f3:dc: 36:5b:ce:4e:77:34:6e:85:3e:49:a3:07:5b:a2:6f: 7e:13:fb:7c:e5:9f:8c:ca:d7:5a:43:c8:0e:a7:cb: c2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DE:2A:C1:D7:CA:BB:5E:02:68:DD:50:01:C9:04:A8:EA:76:27:93 X509v3 Authority Key Identifier: keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5f:84:1f:d7:46:aa:e1:b5:5a:f4:95:63:d5:2e:e2:23:40: 3b:5d:5d:76:bc:ff:99:84:73:53:b5:c6:4b:0c:1a:cc:03:b7: 2a:e1:3c:09:50:5a:67:ad:24:33:c3:f6:6f:40:71:5d:ea:cb: 9b:9e:57:08:2a:d9:30:8f:43:76:1f:e3:ed:5f:43:89:6a:b4: bf:6a:a3:b3:9a:cc:6a:b2:43:29:55:0d:63:4a:35:97:03:a0: 49:da:7d:2a:5f:e9:51:45:b3:c9:d6:fe:10:54:15:0b:57:8c: 94:32:de:8d:47:5f:bf:13:34:28:78:bf:80:a2:92:bd:d5:65: b7:37:31:1f:a0:0e:9c:8d:ff:ac:af:ce:79:9a:8e:dd:0a:ea: e6:43:f7:80:23:1e:50:4b:0b:08:c1:8c:fb:01:03:d7:cd:95: 5b:56:d6:e7:22:e9:a5:72:ca:de:b9:7e:fa:72:1b:e0:29:57: 32:e7:16:82:f5:68:63:db:76:a0:80:55:05:ae:df:06:b9:a3: e7:0b:20:05:2a:92:f3:39:53:07:94:57:40:ec:8b:ab:58:6d: 4b:0c:84:0e:6d:70:8a:fb:ae:62:9f:3d:bd:4e:36:9f:67:ae: d1:0c:06:f1:b2:d3:c5:38:29:85:3a:95:19:56:79:d3:75:0f: cc:d8:54:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUklHrnmvw/kALGTxl5XUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGI0MjkyMmQzODdjNTc4ZmE1NzY5MjQ4N2YyYTE5MDY4 NTg5YmEwHhcNMjUxMjI2MTEwMTQwWhcNMjUxMjI3MTEwMTQwWjAzMTEwLwYDVQQD EyhhMWRlMmFjMWQ3Y2FiYjVlMDI2OGRkNTAwMWM5MDRhOGVhNzYyNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OY5/c3nD2TofHdm6H1KN1ryn+bu YNdBNTk/3e4YHRY+vwBE3b5tgJjBbGduQUdlr9+nqVHcDCpuhfTNw0/ePwN306nm VlpS3yI92kfAaArj9W98W18iWDDwfZ3R1GtsJta7Ul4xLXC6wbFU07Gs9NSUqBn0 tC1jZZbmT6fZtX2bFeQTRp4KY9/ACDk/eldG+I0WuLs5NyT6kPTcV0XXdzrQX/BN 53TwQLI2PDoDKz3GS5qrPRBE9vsq0wU1nRmQvF2XVhB4/3xvKz6VYTkZGrZRevea SP7VDe11EV2K89w2W85OdzRuhT5Jowdbom9+E/t85Z+MytdaQ8gOp8vC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHeKsHXyrteAmjdUAHJBKjqdieTMB8GA1UdIwQY MBaAFLaLQpItOHxXj6V2kkh/KhkGhYm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEt NGE1NDViMTE2ODgwLzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEtNGE1NDViMTE2ODgw LzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKV+EH9dG quG1WvSVY9Uu4iNAO11ddrz/mYRzU7XGSwwazAO3KuE8CVBaZ60kM8P2b0BxXerL m55XCCrZMI9Ddh/j7V9DiWq0v2qjs5rMarJDKVUNY0o1lwOgSdp9Kl/pUUWzydb+ EFQVC1eMlDLejUdfvxM0KHi/gKKSvdVltzcxH6AOnI3/rK/OeZqO3Qrq5kP3gCMe UEsLCMGM+wED182VW1bW5yLppXLK3rl++nIb4ClXMucWgvVoY9t2oIBVBa7fBrmj 5wsgBSqS8zlTB5RXQOyLq1htSwyEDm1wivuuYp89vU42n2eu0QwG8bLTxTgphTqV GVZ503UPzNhUUA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:01 2025 by rpki-client