This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json) Hash identifier: G16HJJSOLFQPmajtU68kcrxJ5fpwdt6lMo9vamtmS1k= Subject key identifier: 7D:BC:9F:6B:B4:8D:84:CC:62:9D:C4:E5:A9:41:E4:D1:67:E1:95:82 Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08 Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008 Certificate serial: 019B34C6812BF392A8C51D5226BB8C072307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 04:03:03 +0000 Manifest this update: Fri 19 Dec 2025 04:03:03 +0000 Manifest next update: Sat 20 Dec 2025 04:03:03 +0000 Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: yyULSAx+p34avYlBx9Aq+XwQsgUNWIN7K8LgeH0hKPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:81:2b:f3:92:a8:c5:1d:52:26:bb:8c:07:23:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008 Validity Not Before: Dec 19 04:03:03 2025 GMT Not After : Dec 20 04:03:03 2025 GMT Subject: CN=7dbc9f6bb48d84cc629dc4e5a941e4d167e19582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:aa:2d:e6:ad:a9:cf:ec:04:7e:b1:2c:3c:c1: 43:cd:a4:a2:b8:91:7c:e3:26:c9:29:02:74:56:88: 99:47:2b:6b:40:d9:9b:90:e2:2f:4a:38:0e:6a:cc: 5a:06:e3:af:31:db:ea:8c:e8:0b:0e:df:4a:e6:89: 62:9f:c7:c4:82:9a:d9:77:81:9d:90:38:0f:19:7f: b0:a8:42:a1:2e:8f:ce:f3:30:9f:ac:95:b1:1b:b9: ce:38:5e:93:53:9e:87:c2:7b:03:65:28:26:9d:c3: 31:93:91:cb:04:5d:58:6d:eb:5d:00:0c:d0:96:3a: 67:62:a3:b5:d8:d8:f6:ab:ca:fd:8d:cf:71:77:2d: 79:cc:60:32:50:2b:96:82:26:d5:d1:61:9f:8a:8f: 5a:82:14:4d:03:ec:c9:00:4e:b9:23:cf:61:06:ca: 49:a7:63:76:4d:b4:79:fd:72:1f:0c:cd:fa:ed:c3: 22:49:9c:b6:52:62:86:da:71:ba:dc:6a:e5:c6:4c: 39:c4:5d:a7:0f:d4:2d:5c:91:6d:4b:9c:19:6b:4f: bc:6a:94:fb:0e:79:2e:b0:02:41:30:6c:a2:ae:31: 8c:fb:20:40:e0:ef:78:91:83:24:3f:c8:a5:ff:a3: 8b:05:2a:0e:3d:aa:a7:df:db:38:13:78:d2:bf:d0: 90:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BC:9F:6B:B4:8D:84:CC:62:9D:C4:E5:A9:41:E4:D1:67:E1:95:82 X509v3 Authority Key Identifier: keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:2a:ee:af:4e:b8:08:ab:0c:a3:13:b2:2f:c6:29:c2:7b:22: 96:f7:bf:83:52:15:4d:14:fa:99:65:21:75:cd:73:a0:c8:bc: 3c:94:22:46:cf:67:dc:0a:c9:35:56:35:f3:b4:84:2e:c8:97: db:c9:88:05:fa:a3:ea:2d:27:39:b0:b1:b8:98:c0:c6:49:a1: 37:6a:fa:47:05:9f:82:39:60:ba:54:d1:8a:e4:b0:42:c0:2d: b8:40:31:58:5c:89:c5:ef:23:29:72:25:a8:ac:af:2a:d3:e3: 7f:ea:37:55:66:d9:ec:41:d2:1a:b7:a7:e2:84:3f:90:57:3f: f4:18:a1:37:da:88:c5:e5:f5:2c:f0:b3:47:f5:60:04:90:f9: 5e:62:e2:52:7b:b4:f2:63:b7:d7:c1:9f:4a:41:6a:c2:24:43: da:59:8f:cd:bf:fb:a9:0d:28:7e:c1:7d:bf:a6:7f:7c:e9:0c: dd:75:58:55:bf:48:cc:3d:73:ec:ac:22:c5:3e:59:2e:2d:02: 89:e7:a9:36:5f:2d:ca:0b:11:b3:00:16:e2:cc:35:f5:41:22: e0:47:e0:98:e6:f3:b1:e9:91:0b:c9:d6:1a:ae:9a:a1:2f:38: a4:2d:3c:69:c4:28:ea:43:a4:2a:8d:b5:0b:ea:8d:6f:9b:f2: 0d:be:f7:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xoEr85KoxR1SJruMByMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZWQ0Yzc4Njc0MjllZTAyZjVjZGMxYWZiZWFhNWJhNzEz MzYwMDgwHhcNMjUxMjE5MDQwMzAzWhcNMjUxMjIwMDQwMzAzWjAzMTEwLwYDVQQD Eyg3ZGJjOWY2YmI0OGQ4NGNjNjI5ZGM0ZTVhOTQxZTRkMTY3ZTE5NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaot5q2pz+wEfrEsPMFDzaSiuJF8 4ybJKQJ0VoiZRytrQNmbkOIvSjgOasxaBuOvMdvqjOgLDt9K5olin8fEgprZd4Gd kDgPGX+wqEKhLo/O8zCfrJWxG7nOOF6TU56HwnsDZSgmncMxk5HLBF1YbetdAAzQ ljpnYqO12Nj2q8r9jc9xdy15zGAyUCuWgibV0WGfio9aghRNA+zJAE65I89hBspJ p2N2TbR5/XIfDM367cMiSZy2UmKG2nG63Grlxkw5xF2nD9QtXJFtS5wZa0+8apT7 DnkusAJBMGyirjGM+yBA4O94kYMkP8il/6OLBSoOPaqn39s4E3jSv9CQPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH28n2u0jYTMYp3E5alB5NFn4ZWCMB8GA1UdIwQY MBaAFEztTHhnQp7gL1zcGvvqpbpxM2AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAt MTYwY2RlODhlZDNmLzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAtMTYwY2RlODhlZDNm LzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIirur064 CKsMoxOyL8Ypwnsilve/g1IVTRT6mWUhdc1zoMi8PJQiRs9n3ArJNVY187SELsiX 28mIBfqj6i0nObCxuJjAxkmhN2r6RwWfgjlgulTRiuSwQsAtuEAxWFyJxe8jKXIl qKyvKtPjf+o3VWbZ7EHSGren4oQ/kFc/9BihN9qIxeX1LPCzR/VgBJD5XmLiUnu0 8mO318GfSkFqwiRD2lmPzb/7qQ0ofsF9v6Z/fOkM3XVYVb9IzD1z7KwixT5ZLi0C ieepNl8tygsRswAW4sw19UEi4EfgmObzsemRC8nWGq6aoS84pC08acQo6kOkKo21 C+qNb5vyDb73Wg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:36 2025 by rpki-client