This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft File: TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft (raw, json) Hash identifier: 6UahKajv8/YFL6gBmxMH12iyTMUhSOiqsl9w2M0IhK4= Subject key identifier: 6A:D0:65:C5:DB:2E:21:21:19:D1:B1:29:E1:0E:26:01:65:E7:F6:17 Authority key identifier: 4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7 Certificate issuer: /CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7 Certificate serial: 019AF12CC93DF8913631C0512DB5D27D79A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl (hash: ygRDoa+irBxuk5S985tFGoOscljbgB+2FBaOpp++log=) 2: ebErOTcxF8x0HRmokQpD8A9P798.roa (hash: hgALEdNUDsS4deffBsaMplhK9QNYL4vbKGcbf+NsbgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c9:3d:f8:91:36:31:c0:51:2d:b5:d2:7d:79:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce488c6401c8f5e969e15d64651fb4b2d2dcdf7 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=6ad065c5db2e212119d1b129e10e260165e7f617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:66:68:1c:3d:ce:e6:3d:a3:56:6d:db:51: 17:6e:f6:ae:35:f2:e0:3b:60:63:b5:08:31:ba:46: d9:57:87:2c:e4:16:62:2b:0f:db:5f:0d:10:c8:dd: fd:0e:9f:6b:4d:f1:8a:a8:8c:c4:85:11:01:82:70: 52:a8:34:7e:85:bd:78:8b:65:99:32:01:fa:9c:e3: 39:c7:00:10:5c:7d:15:c0:5f:22:64:f6:0c:9f:70: ac:e8:90:2e:50:d2:59:2b:54:25:e0:be:fa:03:da: dc:68:bb:97:48:88:5e:9b:46:42:42:a2:d2:c5:b5: f7:88:06:fa:03:7e:62:6e:4d:9f:8e:af:71:73:4d: 8f:ea:17:58:5f:1c:09:96:8c:17:08:e5:eb:b3:f6: ee:ff:8c:60:a6:c4:bc:f4:76:d5:d8:9a:41:ea:c7: e4:22:10:d6:09:ef:aa:fc:40:30:e4:ca:c4:56:f2: 10:42:41:b2:ad:38:7d:b5:37:64:7d:4d:a0:3c:5a: b3:92:27:1c:20:8b:3b:76:57:25:9b:b4:9d:c4:a0: 43:fb:9c:ca:85:a2:06:22:e7:b3:8d:15:b2:35:48: 69:78:5c:f0:b7:52:e1:05:cf:ed:5f:d3:20:d3:14: 20:32:bd:91:ce:e7:ba:f8:00:b1:ea:73:e6:cb:51: 8d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D0:65:C5:DB:2E:21:21:19:D1:B1:29:E1:0E:26:01:65:E7:F6:17 X509v3 Authority Key Identifier: keyid:4C:E4:88:C6:40:1C:8F:5E:96:9E:15:D6:46:51:FB:4B:2D:2D:CD:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOSIxkAcj16WnhXWRlH7Sy0tzfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5c595-2673-4d5f-8a85-ae8c81f96f42/1/TOSIxkAcj16WnhXWRlH7Sy0tzfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5a:fc:f5:09:b0:63:0a:dd:08:3d:89:98:ab:c2:d1:b4:dd: b1:86:12:8c:e1:44:6d:38:6d:1c:e7:62:f6:a8:a2:a4:73:cf: 4b:9e:78:6d:32:00:88:c8:c1:30:e0:22:f0:1d:71:0b:75:63: 57:d3:0d:09:6b:72:31:12:d4:81:0c:b8:7d:c9:0a:53:82:5a: 6b:fa:82:48:fa:48:ab:b8:b3:49:d4:06:2f:4b:77:d9:8d:f1: 91:51:3a:15:35:94:ef:07:fd:a8:3c:d1:9e:c7:eb:38:16:45: 50:32:91:e6:2a:d9:27:2d:8f:ff:85:f9:40:d1:62:48:ab:91: 64:2a:70:35:f4:4c:44:b3:11:d6:00:4f:e5:10:e3:58:51:28: f6:32:9a:db:bc:2f:e9:f0:f3:44:14:8b:0f:22:45:48:d9:d8: 71:ea:ff:a7:5a:a9:9c:d3:bd:0f:e9:ee:89:15:ae:fc:e1:f4: c8:4e:d5:9a:18:8d:9c:b2:21:1c:b6:85:3f:dc:1f:58:a9:74: fc:35:88:87:74:bf:44:39:3e:d7:51:29:1f:17:76:38:76:1c: 4c:74:70:1f:24:96:11:49:27:61:30:37:50:a5:e4:9e:34:84: 59:46:e4:d9:12:b4:9f:e4:d5:47:8f:85:04:71:e6:51:c6:48: 9d:0c:36:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMk9+JE2McBRLbXSfXmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTQ4OGM2NDAxYzhmNWU5NjllMTVkNjQ2NTFmYjRiMmQy ZGNkZjcwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD Eyg2YWQwNjVjNWRiMmUyMTIxMTlkMWIxMjllMTBlMjYwMTY1ZTdmNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsRmaBw9zuY9o1Zt21EXbvauNfLg O2BjtQgxukbZV4cs5BZiKw/bXw0QyN39Dp9rTfGKqIzEhREBgnBSqDR+hb14i2WZ MgH6nOM5xwAQXH0VwF8iZPYMn3Cs6JAuUNJZK1Ql4L76A9rcaLuXSIhem0ZCQqLS xbX3iAb6A35ibk2fjq9xc02P6hdYXxwJlowXCOXrs/bu/4xgpsS89HbV2JpB6sfk IhDWCe+q/EAw5MrEVvIQQkGyrTh9tTdkfU2gPFqzkiccIIs7dlclm7SdxKBD+5zK haIGIuezjRWyNUhpeFzwt1LhBc/tX9Mg0xQgMr2Rzue6+ACx6nPmy1GNfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrQZcXbLiEhGdGxKeEOJgFl5/YXMB8GA1UdIwQY MBaAFEzkiMZAHI9elp4V1kZR+0stLc33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUt YWU4YzgxZjk2ZjQyLzEvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jNWM1OTUtMjY3My00ZDVmLThhODUtYWU4YzgxZjk2ZjQy LzEvVE9TSXhrQWNqMTZXbmhYV1JsSDdTeTB0emZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilr89Qmw YwrdCD2JmKvC0bTdsYYSjOFEbThtHOdi9qiipHPPS554bTIAiMjBMOAi8B1xC3Vj V9MNCWtyMRLUgQy4fckKU4Jaa/qCSPpIq7izSdQGL0t32Y3xkVE6FTWU7wf9qDzR nsfrOBZFUDKR5irZJy2P/4X5QNFiSKuRZCpwNfRMRLMR1gBP5RDjWFEo9jKa27wv 6fDzRBSLDyJFSNnYcer/p1qpnNO9D+nuiRWu/OH0yE7VmhiNnLIhHLaFP9wfWKl0 /DWIh3S/RDk+11EpHxd2OHYcTHRwHySWEUknYTA3UKXknjSEWUbk2RK0n+TVR4+F BHHmUcZInQw2zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:50 2025 by rpki-client