This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json) Hash identifier: M1tA7DuVeDsRJ9s6kgg6r54/X/v9uocni/+NqzIWGaQ= Subject key identifier: 65:8E:74:27:8A:54:EF:E0:10:53:AF:73:E3:C6:9A:36:C4:5E:DB:15 Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca Certificate serial: 019AF0BF6872BC03EEAEADF181315EE8829D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft Manifest number: 050A Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: k+oe215eO0bcgNE1z/CDkaTaWM2n9u3+zownay695y0=) 2: tGJHUWGPAj2sNRvmRAxAOhgR5fs.asa (hash: YRhN0en4GGOE8GeJocO8zzFp1vDVFkOXxMJ7moWGXLc=) 3: wqDhS7gdeGbdKyK4P2B2xid5RCk.roa (hash: pzt+fKb4dYAAFu+QRte1CXzAs8gCt6ejAy8RnTWXAJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:68:72:bc:03:ee:ae:ad:f1:81:31:5e:e8:82:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=658e74278a54efe01053af73e3c69a36c45edb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:11:e8:b4:38:1e:22:53:24:89:68:a6:cb: 9c:d9:62:a8:4a:5d:2d:6b:b6:69:d9:4c:30:a6:f5: d2:be:85:92:51:8d:99:18:42:50:3c:17:47:21:8e: 69:c4:61:3f:eb:27:1a:29:da:df:85:72:a5:c2:1f: 3a:d4:e7:4a:f5:8e:38:4d:bb:25:93:e5:60:b3:96: 03:f3:5d:6a:0a:1c:ff:54:bb:9f:df:c4:49:21:b2: 1f:90:70:f3:b1:b2:c2:f6:eb:ae:7e:f0:f0:f1:41: 31:9e:a2:d7:d2:9c:0e:73:11:4e:7d:c0:1a:f6:75: 10:6d:cb:70:0f:1d:89:05:8b:4f:c5:81:7a:a8:5a: d0:56:bf:84:4e:ca:cd:37:ee:e6:84:fb:4e:6c:b8: 26:70:bd:55:47:34:7c:34:d6:93:3a:65:63:c1:81: 19:71:c1:50:45:97:51:30:53:9c:49:79:d8:42:24: 09:5a:90:78:93:5a:51:20:fd:67:7d:af:be:e1:7a: 04:0e:f5:c1:69:f7:31:11:52:00:3a:17:a2:77:39: 76:c4:ce:69:2c:af:1b:c5:fd:fc:48:13:96:2b:19: ff:cc:a2:4c:df:64:0d:26:d1:3f:1f:2b:ea:8d:db: c0:37:87:73:03:43:e9:54:bf:b3:4f:26:65:a1:51: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:74:27:8A:54:EF:E0:10:53:AF:73:E3:C6:9A:36:C4:5E:DB:15 X509v3 Authority Key Identifier: keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b6:04:a0:ca:7d:dd:54:e9:1b:4d:48:2c:c7:76:f7:62:70: aa:25:02:c8:21:a4:f6:26:aa:89:ec:76:11:d1:e4:b4:dd:0d: 29:7b:d8:90:01:f2:86:74:aa:9a:c2:be:5c:0b:4e:9f:e3:1e: 75:00:e6:c1:52:31:3f:1a:b7:49:18:1a:77:d6:96:07:e7:f8: 6a:fe:ea:17:67:ba:5f:d3:9e:1f:71:bd:b4:4c:57:78:5d:51: 14:81:22:64:30:ef:45:cd:5c:79:3a:13:a5:a1:2b:c6:c8:9f: 90:cf:d0:9b:27:a2:d5:b4:3e:63:eb:28:d3:94:b7:3c:54:f9: 1b:55:1c:20:d0:3e:9a:be:94:e7:3e:83:6e:06:39:6b:26:3f: a2:35:1a:5c:c7:3b:cd:6c:3e:72:86:3c:29:87:bd:35:1b:e7: 0b:45:86:cf:fb:16:32:af:4e:24:9f:f7:ff:71:c4:22:74:7c: 58:fa:72:1a:c2:71:5b:15:71:43:b1:14:3f:52:78:37:65:a3: 7c:6b:32:4f:00:8f:be:a5:57:05:25:06:07:07:e7:68:54:2f: 65:13:ba:61:e6:f5:70:4f:26:f5:bf:4c:b3:23:e9:54:8a:30: 1d:aa:cf:e8:93:b7:ac:03:b1:73:46:5d:92:cd:62:84:2b:9a: b2:7b:c9:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2hyvAPurq3xgTFe6IKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZWY3ODA4MmMwNzI5MmFhYWUyNDBmNmVjZmQzYWZkYmE3 OGI4Y2EwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD Eyg2NThlNzQyNzhhNTRlZmUwMTA1M2FmNzNlM2M2OWEzNmM0NWVkYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzncR6LQ4HiJTJIlopsuc2WKoSl0t a7Zp2UwwpvXSvoWSUY2ZGEJQPBdHIY5pxGE/6ycaKdrfhXKlwh861OdK9Y44Tbsl k+Vgs5YD811qChz/VLuf38RJIbIfkHDzsbLC9uuufvDw8UExnqLX0pwOcxFOfcAa 9nUQbctwDx2JBYtPxYF6qFrQVr+ETsrNN+7mhPtObLgmcL1VRzR8NNaTOmVjwYEZ ccFQRZdRMFOcSXnYQiQJWpB4k1pRIP1nfa++4XoEDvXBafcxEVIAOheidzl2xM5p LK8bxf38SBOWKxn/zKJM32QNJtE/HyvqjdvAN4dzA0PpVL+zTyZloVGIMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWOdCeKVO/gEFOvc+PGmjbEXtsVMB8GA1UdIwQY MBaAFEzveAgsBykqquJA9uz9Ov26eLjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEt ODgzYjkwY2QxMzRhLzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEtODgzYjkwY2QxMzRh LzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbYEoMp9 3VTpG01ILMd292JwqiUCyCGk9iaqiex2EdHktN0NKXvYkAHyhnSqmsK+XAtOn+Me dQDmwVIxPxq3SRgad9aWB+f4av7qF2e6X9OeH3G9tExXeF1RFIEiZDDvRc1ceToT paErxsifkM/Qmyei1bQ+Y+so05S3PFT5G1UcINA+mr6U5z6DbgY5ayY/ojUaXMc7 zWw+coY8KYe9NRvnC0WGz/sWMq9OJJ/3/3HEInR8WPpyGsJxWxVxQ7EUP1J4N2Wj fGsyTwCPvqVXBSUGBwfnaFQvZRO6Yeb1cE8m9b9MsyPpVIowHarP6JO3rAOxc0Zd ks1ihCuasnvJVg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:31 2025 by rpki-client