This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json) Hash identifier: GsVJMfyJjypUzHh1KYm8CUpue5X7fEzIrx/m8LZVy14= Subject key identifier: D8:09:BF:64:AD:7D:DB:EC:09:9F:76:75:FB:0A:60:EB:6C:4C:FF:47 Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96 Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96 Certificate serial: 019AF389174EA6A0350B051889E359C465B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft Manifest number: 0E35 Signing time: Sat 06 Dec 2025 12:00:39 +0000 Manifest this update: Sat 06 Dec 2025 12:00:39 +0000 Manifest next update: Sun 07 Dec 2025 12:00:39 +0000 Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: T8o1IJjxOzSKv8K3IK05xC5frhOel17gMci5hIvreWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:17:4e:a6:a0:35:0b:05:18:89:e3:59:c4:65:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96 Validity Not Before: Dec 6 12:00:39 2025 GMT Not After : Dec 7 12:00:39 2025 GMT Subject: CN=d809bf64ad7ddbec099f7675fb0a60eb6c4cff47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:ce:09:60:67:1d:d4:ea:8c:a7:66:9d:f2: 2e:87:0d:ab:6a:95:d2:4e:1b:19:50:c2:0e:0f:25: 6e:09:a5:f8:0e:b5:66:5c:59:8c:11:30:74:61:53: 1d:c2:7f:e2:cd:6e:24:5b:35:c6:51:6a:bc:81:0f: ff:de:e0:42:c1:ea:33:cd:14:f8:90:b6:70:0c:e3: 00:cd:e5:a4:8e:c4:6f:e4:58:58:a4:a9:bf:6f:e8: 33:87:49:9c:3e:12:46:f2:2b:4a:23:c8:6d:f6:80: 6b:63:ad:e8:78:c8:b3:c3:59:67:c0:04:9d:b7:46: dd:3e:41:60:f8:5e:56:98:a3:8d:de:ed:88:75:06: bf:29:3e:42:99:07:9a:dc:ea:ef:81:13:80:c0:35: 90:16:1b:a0:39:b3:61:d2:97:60:db:91:20:fa:5a: 51:c9:72:ee:1a:d4:16:eb:7f:98:f2:72:5c:2d:9b: a3:4e:0a:96:6d:c7:1f:10:64:5b:2d:ef:fe:76:ca: b3:f8:e4:6b:e2:93:1b:9e:85:0f:00:4f:de:65:24: bc:3f:49:e8:01:cf:37:92:82:ae:c4:35:bf:2f:8e: 76:30:43:b3:84:5e:0c:ab:68:b0:a9:65:e9:ed:47: 6d:f9:fd:bb:2e:ca:de:32:f3:35:cb:0d:31:6e:39: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:09:BF:64:AD:7D:DB:EC:09:9F:76:75:FB:0A:60:EB:6C:4C:FF:47 X509v3 Authority Key Identifier: keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:97:07:85:b2:ce:c7:5c:50:81:6e:49:94:c0:60:da:f2:ab: 8f:d3:66:cd:76:75:fb:bb:28:87:d7:e6:c2:6f:07:f5:e0:51: e4:0b:6a:89:04:0f:d0:4b:55:ce:0b:e9:e9:cf:f6:d7:12:d3: a8:9b:78:95:11:64:01:8e:fb:1f:4a:a1:d7:56:24:2a:47:60: d9:0f:40:47:f0:e1:54:ef:88:a1:86:d8:ac:f9:ad:5d:17:c9: e7:40:61:32:91:13:53:e9:16:f1:b3:9b:90:33:c6:6a:b0:52: 1b:f2:b0:1c:b4:7e:4b:83:bd:0c:45:2e:57:a5:cf:f0:d6:8e: eb:6f:16:3e:92:6c:e2:6f:ad:9e:41:7c:17:16:72:df:6c:1c: 2f:a5:d3:46:91:f3:cf:cc:cc:0f:ed:2f:ab:dd:b6:b7:45:0f: 4d:43:ca:75:eb:b7:5e:89:8a:09:d5:b8:39:83:be:e8:ee:3d: 06:08:d4:98:98:f6:3d:13:12:4a:8e:5e:1b:4c:da:f7:79:cc: 59:9b:e1:1d:a0:97:d8:ed:a4:9f:b9:e7:ef:fb:c4:a9:2f:78: 7b:47:38:0e:37:a7:74:13:a2:65:aa:db:e0:d9:03:4f:eb:2c: 8f:d2:81:2d:87:46:1c:06:3d:cc:d5:63:34:8a:f6:18:da:d1: d6:ad:71:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRdOpqA1CwUYieNZxGWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTA4MjAwNDkyMjc4NDg0ZDZjODhmNTM4NmJhN2IzOTY5 NmNiOTYwHhcNMjUxMjA2MTIwMDM5WhcNMjUxMjA3MTIwMDM5WjAzMTEwLwYDVQQD EyhkODA5YmY2NGFkN2RkYmVjMDk5Zjc2NzVmYjBhNjBlYjZjNGNmZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqXOCWBnHdTqjKdmnfIuhw2rapXS ThsZUMIODyVuCaX4DrVmXFmMETB0YVMdwn/izW4kWzXGUWq8gQ//3uBCweozzRT4 kLZwDOMAzeWkjsRv5FhYpKm/b+gzh0mcPhJG8itKI8ht9oBrY63oeMizw1lnwASd t0bdPkFg+F5WmKON3u2IdQa/KT5CmQea3OrvgROAwDWQFhugObNh0pdg25Eg+lpR yXLuGtQW63+Y8nJcLZujTgqWbccfEGRbLe/+dsqz+ORr4pMbnoUPAE/eZSS8P0no Ac83koKuxDW/L452MEOzhF4Mq2iwqWXp7Udt+f27LsreMvM1yw0xbjmKSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgJv2StfdvsCZ92dfsKYOtsTP9HMB8GA1UdIwQY MBaAFEzgggBJInhITWyI9Thrp7OWlsuWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZDU0MmQtMWVjNS00OTQzLWI2M2Ut OTE1MTIwYjYzMDkzLzEvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yZDU0MmQtMWVjNS00OTQzLWI2M2UtOTE1MTIwYjYzMDkz LzEvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZcHhbLO x1xQgW5JlMBg2vKrj9NmzXZ1+7soh9fmwm8H9eBR5AtqiQQP0EtVzgvp6c/21xLT qJt4lRFkAY77H0qh11YkKkdg2Q9AR/DhVO+IoYbYrPmtXRfJ50BhMpETU+kW8bOb kDPGarBSG/KwHLR+S4O9DEUuV6XP8NaO628WPpJs4m+tnkF8FxZy32wcL6XTRpHz z8zMD+0vq922t0UPTUPKdeu3XomKCdW4OYO+6O49BgjUmJj2PRMSSo5eG0za93nM WZvhHaCX2O2kn7nn7/vEqS94e0c4DjendBOiZarb4NkDT+ssj9KBLYdGHAY9zNVj NIr2GNrR1q1xVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:37 2025 by rpki-client