This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json) Hash identifier: 5vZId4D3g+iQG2NBGQA8jFKKQqRWBc59uWtXiWFFgyw= Subject key identifier: 4A:B0:C6:99:7B:32:E1:9A:D2:B5:46:AF:BE:56:5A:FE:6D:0F:89:C4 Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019 Certificate serial: 019AF31C06AA8CF79DC45708898E5D8212C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft Manifest number: 174B Signing time: Sat 06 Dec 2025 10:01:31 +0000 Manifest this update: Sat 06 Dec 2025 10:01:31 +0000 Manifest next update: Sun 07 Dec 2025 10:01:31 +0000 Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: qOsSYbENi4tDvJ2SK24dKuyozN0fxvf2qXYjKO0LpR0=) 2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=) 3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:06:aa:8c:f7:9d:c4:57:08:89:8e:5d:82:12:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019 Validity Not Before: Dec 6 10:01:31 2025 GMT Not After : Dec 7 10:01:31 2025 GMT Subject: CN=4ab0c6997b32e19ad2b546afbe565afe6d0f89c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:b4:80:9e:78:5f:28:ed:38:3c:38:d7:6a: 5b:06:75:fd:ea:da:b1:5b:ae:c9:34:82:93:7f:2d: 63:30:0d:10:8d:c1:79:00:f6:04:42:02:38:6f:0a: 89:ae:6b:f1:e1:63:bf:f8:cf:3e:d4:93:5c:e7:86: 71:20:cb:51:f6:ee:06:76:14:5b:3e:a8:4a:19:1d: 03:f6:84:f3:75:76:4f:d8:c0:77:d8:7d:b6:71:a5: da:f8:51:7b:1f:ce:68:17:ff:1e:34:c0:ec:84:64: 12:b8:2d:82:8a:88:2a:f1:44:91:af:46:86:15:e8: a1:e1:f9:be:bf:27:5e:60:b6:a3:f6:c4:e0:0a:db: 89:7e:10:97:40:c2:16:3c:e8:a0:67:f2:72:08:74: 5f:e2:0a:31:a2:ee:cb:22:9b:ed:05:b4:39:af:ba: 44:f9:0e:c3:f2:0f:3b:c5:0a:59:e5:1f:95:e6:2d: f9:dc:c5:d4:16:b1:ec:2c:c4:1e:6a:cf:6f:c0:ba: 50:09:7d:08:b1:36:ae:b6:40:1b:1a:17:b7:c4:b0: 79:48:87:70:5a:7f:37:8e:6a:77:58:9b:64:95:91: 16:59:fb:91:5c:08:df:db:49:af:1b:08:48:01:6e: b7:53:c3:98:2f:e3:ce:93:69:b0:25:15:3f:19:2e: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:C6:99:7B:32:E1:9A:D2:B5:46:AF:BE:56:5A:FE:6D:0F:89:C4 X509v3 Authority Key Identifier: keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:6e:19:68:ab:b6:db:d2:79:e2:ee:6b:f3:63:4e:c4:13:33: a5:8e:07:18:d3:88:71:65:ad:31:ef:7e:d5:37:2f:fa:d9:5a: 45:36:78:d4:51:82:3f:b9:34:0b:c7:6d:e7:ee:b9:94:28:be: 4a:0e:fc:d4:9b:2c:2f:6d:9b:83:e6:ae:17:2e:40:7e:ac:4b: ce:31:28:44:ff:0d:a7:17:d0:67:32:07:ff:1d:06:b1:65:c6: 86:f0:6e:4d:dc:b0:66:c5:e7:fc:13:a9:b1:5a:1a:b1:32:89: 82:9b:ad:06:e6:2c:ab:da:47:1b:e8:09:51:2f:91:12:62:e6: 3c:00:6a:03:b8:c1:6f:01:ce:2d:50:be:59:3a:1a:aa:c2:76: a2:c0:a2:a6:b3:45:94:f6:8e:17:7a:a4:af:70:6b:b1:86:c5: 2f:7d:f1:f9:cb:e9:24:9e:a4:e9:67:24:03:e9:4e:a0:83:30: f2:b8:95:ae:6c:44:8e:a9:ee:48:48:8f:33:06:af:af:1e:9e: f4:90:14:2b:b0:46:79:bd:a7:48:6e:b1:ea:96:6b:f7:4a:43: e2:cc:55:88:ad:c3:22:d6:94:15:76:e3:e8:d5:ab:3f:48:2a: 7b:3b:7b:09:f8:68:e8:d4:fa:b9:2b:da:e7:20:71:fe:e9:a4: 94:85:bb:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAaqjPedxFcIiY5dghLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0 NWQwMTkwHhcNMjUxMjA2MTAwMTMxWhcNMjUxMjA3MTAwMTMxWjAzMTEwLwYDVQQD Eyg0YWIwYzY5OTdiMzJlMTlhZDJiNTQ2YWZiZTU2NWFmZTZkMGY4OWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1620gJ54XyjtODw412pbBnX96tqx W67JNIKTfy1jMA0QjcF5APYEQgI4bwqJrmvx4WO/+M8+1JNc54ZxIMtR9u4GdhRb PqhKGR0D9oTzdXZP2MB32H22caXa+FF7H85oF/8eNMDshGQSuC2Ciogq8USRr0aG Feih4fm+vydeYLaj9sTgCtuJfhCXQMIWPOigZ/JyCHRf4goxou7LIpvtBbQ5r7pE +Q7D8g87xQpZ5R+V5i353MXUFrHsLMQeas9vwLpQCX0IsTautkAbGhe3xLB5SIdw Wn83jmp3WJtklZEWWfuRXAjf20mvGwhIAW63U8OYL+POk2mwJRU/GS7zDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqwxpl7MuGa0rVGr75WWv5tD4nEMB8GA1UdIwQY MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwW4ZaKu2 29J54u5r82NOxBMzpY4HGNOIcWWtMe9+1Tcv+tlaRTZ41FGCP7k0C8dt5+65lCi+ Sg781JssL22bg+auFy5AfqxLzjEoRP8NpxfQZzIH/x0GsWXGhvBuTdywZsXn/BOp sVoasTKJgputBuYsq9pHG+gJUS+REmLmPABqA7jBbwHOLVC+WToaqsJ2osCiprNF lPaOF3qkr3BrsYbFL33x+cvpJJ6k6WckA+lOoIMw8riVrmxEjqnuSEiPMwavrx6e 9JAUK7BGeb2nSG6x6pZr90pD4sxViK3DItaUFXbj6NWrP0gqezt7Cfho6NT6uSva 5yBx/umklIW79Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:28 2025 by rpki-client