This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json) Hash identifier: 81tYYNhy6cyf/NzhOmpwEoLmRSvvgamOBgNHfVkkTFI= Subject key identifier: C7:E4:F0:59:2E:E5:66:92:A1:C3:70:D3:2F:43:B6:44:77:B1:ED:FB Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96 Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96 Certificate serial: 019B3EDA5B5E3177F5516E12441B22DF759A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft Manifest number: 0E5C Signing time: Sun 21 Dec 2025 03:00:56 +0000 Manifest this update: Sun 21 Dec 2025 03:00:56 +0000 Manifest next update: Mon 22 Dec 2025 03:00:56 +0000 Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: ZCwJTTxM7F+U6EHITIMftzzNXltoKzoYov/UnZDOJ84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:5b:5e:31:77:f5:51:6e:12:44:1b:22:df:75:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96 Validity Not Before: Dec 21 03:00:56 2025 GMT Not After : Dec 22 03:00:56 2025 GMT Subject: CN=c7e4f0592ee56692a1c370d32f43b64477b1edfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:af:be:ed:f8:82:78:1c:35:69:40:76:6f: 0a:06:f7:24:60:e9:8d:0d:2e:ae:c2:56:41:e6:ac: 71:04:0d:3a:5c:6c:e4:d4:a9:73:0d:16:57:7f:00: b2:7f:40:c4:ba:7f:c5:7b:44:b0:a4:d6:d1:a3:60: 91:77:43:4a:30:48:43:0b:c8:95:9c:ff:5b:e3:93: c0:14:ac:c2:3c:ed:30:a3:52:78:05:44:3c:6a:4a: e9:e5:83:3d:b3:14:4b:b3:c9:06:00:3c:da:9e:90: ff:a3:ca:19:1e:fd:92:9f:92:fa:49:ca:18:ff:13: 0b:c0:42:67:f4:3c:fc:df:ca:ad:1a:18:d3:be:dd: 9e:48:51:c5:52:5b:b8:2c:b9:15:d8:82:70:89:e2: ac:7e:ea:c9:06:fb:0c:12:0a:13:65:8a:a5:15:49: 90:1f:74:b5:c3:8e:5d:89:d4:39:c6:43:23:4d:8f: 50:e4:19:ce:dd:29:ff:cc:ca:82:4f:c3:42:68:7d: eb:48:1e:42:fd:79:18:f1:15:02:b0:b3:a4:0e:96: 10:53:8f:49:52:a9:66:3d:96:34:29:98:94:48:2e: b8:10:54:b5:af:ec:78:47:6c:a0:4e:bb:53:48:5e: 0f:75:c4:22:f7:d9:67:6e:ca:43:0b:43:68:c7:d7: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E4:F0:59:2E:E5:66:92:A1:C3:70:D3:2F:43:B6:44:77:B1:ED:FB X509v3 Authority Key Identifier: keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d5:c0:5c:8a:8e:18:67:53:92:92:8f:96:f7:3d:8b:38:9d: 2f:23:92:f1:53:de:4a:ab:91:1b:b5:f5:ae:05:b3:a9:c7:6d: 99:e5:fd:02:aa:b4:c1:fe:6f:10:fa:f6:a8:3a:c2:43:ae:56: 8b:24:08:36:ee:f5:ff:ff:f5:9d:81:b4:19:df:29:8e:15:fb: 25:52:c6:25:1a:92:10:43:28:fe:3e:bd:a3:ed:2e:72:92:58: 93:05:31:1e:e6:99:ae:35:5f:2d:72:99:83:22:f7:be:bc:45: 7d:63:b7:e9:8a:bf:64:e8:bc:f3:a1:b8:13:0d:69:64:72:8f: ca:9b:77:98:27:04:23:c3:b2:1e:b5:ea:d2:26:1c:88:9f:98: c5:df:bd:a3:67:ae:ca:bc:e2:fe:db:57:ab:b0:62:32:11:ec: 0a:08:bd:64:73:0f:28:a6:8b:9d:c5:94:3d:49:87:74:ab:5f: ad:c3:01:c4:24:e0:37:b2:9f:e2:fb:46:e6:49:b9:f8:97:d5: d3:1a:40:34:ed:e2:74:57:d5:9e:33:39:0e:32:20:14:09:87: 42:50:d7:5d:d8:84:94:1e:b3:46:26:3c:05:4d:9f:76:97:ba: 10:02:d1:e9:66:5b:fc:c0:db:c2:13:8e:40:41:dc:a4:a5:c1: b8:54:ec:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lteMXf1UW4SRBsi33WaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTA4MjAwNDkyMjc4NDg0ZDZjODhmNTM4NmJhN2IzOTY5 NmNiOTYwHhcNMjUxMjIxMDMwMDU2WhcNMjUxMjIyMDMwMDU2WjAzMTEwLwYDVQQD EyhjN2U0ZjA1OTJlZTU2NjkyYTFjMzcwZDMyZjQzYjY0NDc3YjFlZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjyvvu34gngcNWlAdm8KBvckYOmN DS6uwlZB5qxxBA06XGzk1KlzDRZXfwCyf0DEun/Fe0SwpNbRo2CRd0NKMEhDC8iV nP9b45PAFKzCPO0wo1J4BUQ8akrp5YM9sxRLs8kGADzanpD/o8oZHv2Sn5L6ScoY /xMLwEJn9Dz838qtGhjTvt2eSFHFUlu4LLkV2IJwieKsfurJBvsMEgoTZYqlFUmQ H3S1w45didQ5xkMjTY9Q5BnO3Sn/zMqCT8NCaH3rSB5C/XkY8RUCsLOkDpYQU49J UqlmPZY0KZiUSC64EFS1r+x4R2ygTrtTSF4PdcQi99lnbspDC0Nox9cgKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfk8Fku5WaSocNw0y9DtkR3se37MB8GA1UdIwQY MBaAFEzgggBJInhITWyI9Thrp7OWlsuWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZDU0MmQtMWVjNS00OTQzLWI2M2Ut OTE1MTIwYjYzMDkzLzEvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yZDU0MmQtMWVjNS00OTQzLWI2M2UtOTE1MTIwYjYzMDkz LzEvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdXAXIqO GGdTkpKPlvc9izidLyOS8VPeSquRG7X1rgWzqcdtmeX9Aqq0wf5vEPr2qDrCQ65W iyQINu71///1nYG0Gd8pjhX7JVLGJRqSEEMo/j69o+0ucpJYkwUxHuaZrjVfLXKZ gyL3vrxFfWO36Yq/ZOi886G4Ew1pZHKPypt3mCcEI8OyHrXq0iYciJ+Yxd+9o2eu yrzi/ttXq7BiMhHsCgi9ZHMPKKaLncWUPUmHdKtfrcMBxCTgN7Kf4vtG5km5+JfV 0xpANO3idFfVnjM5DjIgFAmHQlDXXdiElB6zRiY8BU2fdpe6EALR6WZb/MDbwhOO QEHcpKXBuFTstA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:43 2025 by rpki-client