This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json) Hash identifier: /+2TvSt8zLWaei8ul8RRvfXGSzqjAgbp1JUTenDRw4A= Subject key identifier: 5C:CA:82:8A:7F:D9:A6:59:83:8A:3E:76:CE:2D:EA:98:31:AA:9C:AF Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Certificate serial: 019AAE71A8C40076145310AD2CD48071180B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft Manifest number: 12D2 Signing time: Sun 23 Nov 2025 02:01:15 +0000 Manifest this update: Sun 23 Nov 2025 02:01:15 +0000 Manifest next update: Mon 24 Nov 2025 02:01:15 +0000 Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=) 2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=) 3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=) 4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: QCWz1dHCK+GyGIYGiiEerQaTEHgWH2yUnVTnWweN81M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ae:71:a8:c4:00:76:14:53:10:ad:2c:d4:80:71:18:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Validity Not Before: Nov 23 02:01:15 2025 GMT Not After : Nov 24 02:01:15 2025 GMT Subject: CN=5cca828a7fd9a659838a3e76ce2dea9831aa9caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:ca:86:d8:4f:b2:46:8e:4b:73:6e:59:88: c5:a9:f1:bc:16:b2:cb:66:6d:d0:cd:ca:c1:b4:aa: 8d:28:17:eb:35:9a:52:5e:cf:b3:d5:e9:a4:56:ac: e2:c2:dd:ff:62:8a:ad:df:36:53:8a:40:8c:6c:81: ea:e7:5b:bf:ac:53:9b:22:f9:50:02:10:2a:52:a9: 0e:5b:31:85:ea:59:6d:17:3f:0a:67:e9:f0:4f:7b: 51:ad:2e:26:b8:5a:43:e9:c0:4b:64:d0:33:1b:fe: 2f:bf:a4:cb:fb:28:18:88:5d:2d:05:0c:f4:a1:be: 9d:44:f2:c2:3c:0e:2e:e2:b6:ee:24:c5:99:83:e7: 41:8b:8c:55:86:43:a1:9f:38:b6:d6:da:88:d7:16: 1e:e7:d9:eb:48:d3:1d:ff:ce:82:af:15:ae:60:72: e5:53:d4:a8:df:ae:d7:f6:d6:4c:b2:4a:10:da:71: ba:54:e3:86:fe:3b:b1:07:21:b8:5a:9c:1a:5b:4a: e9:8d:77:5e:38:2f:90:27:e6:d8:bb:18:c4:b7:da: 33:9e:68:f2:5d:4f:74:99:40:f8:c6:9b:8f:fe:cd: 34:5f:c6:c9:24:88:c9:0f:57:da:20:c7:a1:f7:b8: 0f:c0:6f:db:d9:67:dc:0e:21:49:b8:16:0c:65:29: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CA:82:8A:7F:D9:A6:59:83:8A:3E:76:CE:2D:EA:98:31:AA:9C:AF X509v3 Authority Key Identifier: keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ec:fc:c7:ca:29:af:dc:7c:10:b6:f4:62:b3:30:05:09:05: 4c:6e:22:79:e2:82:36:4f:6b:97:dd:70:ed:8c:58:28:bd:9d: 20:9c:89:04:cb:82:4d:3f:c3:7a:05:33:55:f8:bf:cc:59:dd: 6b:55:cf:a8:3e:3d:55:5f:44:82:55:04:40:59:c5:07:c1:17: bd:4d:48:58:50:0e:08:09:a1:25:c3:4d:02:66:5b:f2:81:4c: 6a:5b:ca:e2:46:7f:47:a0:1c:aa:f8:e6:65:b6:b9:ca:eb:16: c0:50:c7:a2:30:6e:45:b9:f1:8a:68:8b:11:f8:d6:80:b9:4d: 15:4c:17:19:1e:a0:3d:2a:a8:09:0c:71:db:4c:26:5f:d7:57: 80:3b:73:0c:60:5c:31:83:2a:09:21:dc:14:37:0b:2c:2f:01: 1a:f8:9f:f9:10:6f:42:70:d2:96:21:7c:fb:ef:2a:e1:f2:5e: d6:36:3d:45:61:f4:63:4c:29:1c:7f:11:4c:3d:c3:b2:04:05: 9d:c6:47:74:ad:c0:9d:36:99:ee:cd:b6:ce:9d:e0:3f:2d:31: ed:b2:db:00:73:a8:36:e4:1c:e1:d1:d6:99:9d:07:c3:29:e7: 55:1c:6a:14:a8:e7:6a:c4:42:9b:6a:71:88:31:56:6c:8c:b4: 01:74:35:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqucajEAHYUUxCtLNSAcRgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh YWEwZmQwHhcNMjUxMTIzMDIwMTE1WhcNMjUxMTI0MDIwMTE1WjAzMTEwLwYDVQQD Eyg1Y2NhODI4YTdmZDlhNjU5ODM4YTNlNzZjZTJkZWE5ODMxYWE5Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2DKhthPskaOS3NuWYjFqfG8FrLL Zm3QzcrBtKqNKBfrNZpSXs+z1emkVqziwt3/Yoqt3zZTikCMbIHq51u/rFObIvlQ AhAqUqkOWzGF6lltFz8KZ+nwT3tRrS4muFpD6cBLZNAzG/4vv6TL+ygYiF0tBQz0 ob6dRPLCPA4u4rbuJMWZg+dBi4xVhkOhnzi21tqI1xYe59nrSNMd/86CrxWuYHLl U9So367X9tZMskoQ2nG6VOOG/juxByG4WpwaW0rpjXdeOC+QJ+bYuxjEt9oznmjy XU90mUD4xpuP/s00X8bJJIjJD1faIMeh97gPwG/b2WfcDiFJuBYMZSky0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzKgop/2aZZg4o+ds4t6pgxqpyvMB8GA1UdIwQY MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauz8x8op r9x8ELb0YrMwBQkFTG4ieeKCNk9rl91w7YxYKL2dIJyJBMuCTT/DegUzVfi/zFnd a1XPqD49VV9EglUEQFnFB8EXvU1IWFAOCAmhJcNNAmZb8oFMalvK4kZ/R6Acqvjm Zba5yusWwFDHojBuRbnximiLEfjWgLlNFUwXGR6gPSqoCQxx20wmX9dXgDtzDGBc MYMqCSHcFDcLLC8BGvif+RBvQnDSliF8++8q4fJe1jY9RWH0Y0wpHH8RTD3DsgQF ncZHdK3AnTaZ7s22zp3gPy0x7bLbAHOoNuQc4dHWmZ0HwynnVRxqFKjnasRCm2px iDFWbIy0AXQ10A== -----END CERTIFICATE-----Generated at Sun Nov 23 06:31:44 2025 by rpki-client