This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft File: ToFckvwcZCWqy8xFFZbHPtZFcAc.mft (raw, json) Hash identifier: BUvylctTZbvYghS6QTPCStcBT7UmvnFvVJ634KeoWFc= Subject key identifier: 8B:4F:F7:C2:C0:57:E4:05:5D:91:BE:B4:5C:AE:BA:C4:8B:40:61:13 Authority key identifier: 4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07 Certificate issuer: /CN=4e815c92fc1c6425aacbcc451596c73ed6457007 Certificate serial: 019AF0F5D02D64234CCDF76C80E164776D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft Manifest number: 1D Signing time: Sat 06 Dec 2025 00:00:32 +0000 Manifest this update: Sat 06 Dec 2025 00:00:32 +0000 Manifest next update: Sun 07 Dec 2025 00:00:32 +0000 Files and hashes: 1: 1-OtTj0eqfh0GfxBOuMeEc8Q8_AA.roa (hash: 25H9xJdrvjjN7cufc9xed+r7fU9Rit0dST7O2iYnC00=) 2: ToFckvwcZCWqy8xFFZbHPtZFcAc.crl (hash: 8FwRKmBZEr3pdR3H/44XnPyqPWYOZkiwqt952BA6MWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d0:2d:64:23:4c:cd:f7:6c:80:e1:64:77:6d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e815c92fc1c6425aacbcc451596c73ed6457007 Validity Not Before: Dec 6 00:00:32 2025 GMT Not After : Dec 7 00:00:32 2025 GMT Subject: CN=8b4ff7c2c057e4055d91beb45caebac48b406113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:2f:0d:08:64:e9:51:08:c7:d8:2c:b4:09: 5e:99:2d:f0:31:43:a8:29:ef:26:1b:a8:91:dc:e8: a6:06:f4:57:b0:b4:89:2e:68:08:58:cb:83:ff:3f: fa:36:8e:ab:43:b2:c6:4a:b5:2f:e2:16:16:ec:40: 55:a5:af:65:78:ea:98:b4:44:42:ee:41:13:9f:ec: b2:d2:7e:b5:d4:a5:e0:03:e8:80:4b:0a:75:b6:81: 02:ca:03:cc:fa:15:46:5b:25:5f:ce:ef:03:ec:fa: c5:ff:5e:a5:2c:48:3a:54:d2:1c:61:6b:4b:4f:76: 18:bd:0a:7c:ad:af:85:26:f6:9a:e3:8b:e5:84:a9: cb:02:75:0b:1f:bd:c2:9d:f7:d2:4a:d6:34:a4:19: a5:c0:97:26:51:57:6f:6c:7e:28:4b:4e:11:73:85: b2:b5:4b:34:6c:39:9f:16:b3:d9:81:33:95:0d:f5: 04:88:bf:4f:1f:80:00:7b:f3:14:b8:82:b9:d1:6c: 09:2b:4a:a3:23:0d:d7:31:26:94:b2:17:fc:68:fa: 6b:a3:99:cb:41:10:f4:7f:9d:6a:80:9c:7e:38:c8: 6a:6f:35:50:44:00:7d:a3:26:d5:e9:66:07:0f:c3: 64:fe:12:c8:a4:07:87:47:79:33:f1:3b:fd:5a:7a: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4F:F7:C2:C0:57:E4:05:5D:91:BE:B4:5C:AE:BA:C4:8B:40:61:13 X509v3 Authority Key Identifier: keyid:4E:81:5C:92:FC:1C:64:25:AA:CB:CC:45:15:96:C7:3E:D6:45:70:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToFckvwcZCWqy8xFFZbHPtZFcAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bcf7b2-44a5-4da1-9477-35cf86e4e56d/1/ToFckvwcZCWqy8xFFZbHPtZFcAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d9:7b:2b:5b:13:23:57:5c:63:84:00:e5:39:7e:30:c1:b2: 98:12:76:14:99:4e:f4:4d:83:0e:cc:36:83:0c:9e:e1:52:b6: a7:a6:59:9d:13:61:c5:99:a5:f0:f0:c1:01:42:7f:36:f6:a2: f1:3a:d0:76:3f:73:76:f7:28:77:92:5e:a4:1e:b2:41:1e:90: bf:69:1e:77:b9:a0:66:31:9f:b8:1c:89:61:66:14:40:3c:e2: 37:f2:74:1e:69:d8:a6:89:08:84:83:dd:13:d5:9f:60:09:fd: 04:d8:30:b5:21:c8:1e:e0:53:f4:b7:e5:dc:ee:6f:ca:dc:e4: b7:bd:45:b8:a5:e6:dc:60:4a:28:53:91:5c:b3:9c:39:01:c3: fa:1e:9a:07:c3:a4:a6:ca:3a:34:1e:2a:50:6c:8d:49:85:98: 91:c0:e9:46:0a:7b:5b:35:ca:d2:e8:b0:c3:9e:c1:60:84:c0: 62:8c:49:76:9e:36:ad:b3:61:3e:1c:d4:56:8e:68:a9:01:a7: a2:b8:80:73:1a:b1:b0:21:e0:40:18:e8:da:62:09:43:98:ff: 45:4f:ba:5d:dd:00:76:bf:9b:9c:4b:86:c3:21:0e:5c:17:12: 45:e9:ef:08:b9:30:58:6c:42:02:92:c1:1e:0e:ad:bb:c4:0d: 47:b6:1c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dAtZCNMzfdsgOFkd21mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlODE1YzkyZmMxYzY0MjVhYWNiY2M0NTE1OTZjNzNlZDY0 NTcwMDcwHhcNMjUxMjA2MDAwMDMyWhcNMjUxMjA3MDAwMDMyWjAzMTEwLwYDVQQD Eyg4YjRmZjdjMmMwNTdlNDA1NWQ5MWJlYjQ1Y2FlYmFjNDhiNDA2MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz0vDQhk6VEIx9gstAlemS3wMUOo Ke8mG6iR3OimBvRXsLSJLmgIWMuD/z/6No6rQ7LGSrUv4hYW7EBVpa9leOqYtERC 7kETn+yy0n611KXgA+iASwp1toECygPM+hVGWyVfzu8D7PrF/16lLEg6VNIcYWtL T3YYvQp8ra+FJvaa44vlhKnLAnULH73CnffSStY0pBmlwJcmUVdvbH4oS04Rc4Wy tUs0bDmfFrPZgTOVDfUEiL9PH4AAe/MUuIK50WwJK0qjIw3XMSaUshf8aPpro5nL QRD0f51qgJx+OMhqbzVQRAB9oybV6WYHD8Nk/hLIpAeHR3kz8Tv9Wno9RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItP98LAV+QFXZG+tFyuusSLQGETMB8GA1UdIwQY MBaAFE6BXJL8HGQlqsvMRRWWxz7WRXAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG9GY2t2d2NaQ1dxeTh4RkZaYkhQdFpGY0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iY2Y3YjItNDRhNS00ZGExLTk0Nzct MzVjZjg2ZTRlNTZkLzEvVG9GY2t2d2NaQ1dxeTh4RkZaYkhQdFpGY0FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iY2Y3YjItNDRhNS00ZGExLTk0NzctMzVjZjg2ZTRlNTZk LzEvVG9GY2t2d2NaQ1dxeTh4RkZaYkhQdFpGY0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9l7K1sT I1dcY4QA5Tl+MMGymBJ2FJlO9E2DDsw2gwye4VK2p6ZZnRNhxZml8PDBAUJ/Nvai 8TrQdj9zdvcod5JepB6yQR6Qv2ked7mgZjGfuByJYWYUQDziN/J0HmnYpokIhIPd E9WfYAn9BNgwtSHIHuBT9Lfl3O5vytzkt71FuKXm3GBKKFORXLOcOQHD+h6aB8Ok pso6NB4qUGyNSYWYkcDpRgp7WzXK0uiww57BYITAYoxJdp42rbNhPhzUVo5oqQGn oriAcxqxsCHgQBjo2mIJQ5j/RU+6Xd0Adr+bnEuGwyEOXBcSRenvCLkwWGxCApLB Hg6tu8QNR7Yc3g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:29 2025 by rpki-client