This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json) Hash identifier: ej+dK91jYW91ue6oX+PiEUQPN3HHMQycCmRREZFQxwo= Subject key identifier: A9:B1:24:8F:04:AD:68:8D:A8:5D:56:EE:6B:DB:3D:C7:32:F8:55:AF Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019 Certificate serial: 019BF87650F2AEEA0126A3808D2F30CF72C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft Manifest number: 17D3 Signing time: Mon 26 Jan 2026 04:01:02 +0000 Manifest this update: Mon 26 Jan 2026 04:01:02 +0000 Manifest next update: Tue 27 Jan 2026 04:01:02 +0000 Files and hashes: 1: IFUzsftp1dffl9tnogc5GN2FPxg.roa (hash: c2nreEaxqTuATv8yMHczmqb0NFFqGvOhcZEByC2ZN9E=) 2: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: RCC+4rMpStBLn9+JCpKllJpxEcpInar0vyDImOInwls=) 3: vh2DQQ6ueJ_4GpQ58gbn9G7Sw6I.roa (hash: fy/ybQvpktclOxKkRMgTkW1YHsTAucNoQ+I2hQsP5r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:50:f2:ae:ea:01:26:a3:80:8d:2f:30:cf:72:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019 Validity Not Before: Jan 26 04:01:02 2026 GMT Not After : Jan 27 04:01:02 2026 GMT Subject: CN=a9b1248f04ad688da85d56ee6bdb3dc732f855af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f5:0e:8a:8e:62:8f:87:89:83:ba:94:d7:90: c7:a1:5c:51:95:da:36:2d:96:3e:5b:c0:e7:4b:5e: 23:9f:eb:bd:a8:13:38:a3:f3:77:b1:8d:a2:0f:ea: 02:93:0a:cd:34:84:1c:75:f7:30:c7:1e:36:a6:4d: 67:18:ac:47:97:6e:cd:ab:c8:ad:41:be:08:48:4d: 26:09:c6:2b:de:01:50:4a:e4:1b:bc:ec:6c:5a:36: 4e:f1:e8:48:c4:92:67:d2:9a:ba:e2:13:6b:a6:6a: 81:0d:46:9e:e4:7f:c8:99:32:6d:29:4f:c3:24:02: 01:ec:da:e1:f3:ee:c8:9c:ee:22:34:86:88:30:ea: 57:38:e3:87:6e:16:16:37:29:6c:04:15:f2:f6:06: 8c:b2:2d:48:2d:b3:70:01:89:19:83:4b:e1:f2:ed: cd:eb:91:e5:bf:62:73:ea:bc:9f:4f:ca:f2:e6:a3: c5:2b:24:07:97:a8:e4:d7:86:3d:e2:79:a1:89:55: 0b:3b:54:42:1b:ad:83:75:ff:c3:a6:57:e3:34:91: 9b:03:b5:b7:50:d0:70:eb:06:2d:11:13:8b:ad:4b: f8:b6:9d:31:44:e9:d2:7c:d5:b0:75:45:07:f6:e8: 88:7d:59:7e:52:73:9d:60:32:be:e6:26:6b:9c:eb: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B1:24:8F:04:AD:68:8D:A8:5D:56:EE:6B:DB:3D:C7:32:F8:55:AF X509v3 Authority Key Identifier: keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0c:6a:45:4d:b5:54:c9:05:d3:81:ef:c4:76:c4:04:af:e9: 45:81:1c:e4:b8:d8:93:77:97:bc:8d:ef:20:ca:f6:81:a8:0c: 95:c1:97:cb:2c:17:13:3b:60:97:c3:fc:28:b7:4b:67:2a:ed: d8:42:6b:4c:a8:49:ca:98:58:53:59:3b:8d:95:ca:f7:75:b7: 31:47:d4:66:e3:41:46:43:56:49:51:50:de:6e:82:49:a2:69: 4a:6a:f7:3f:43:aa:1c:26:66:11:c3:1d:aa:1a:71:24:84:b7: e8:c1:a4:04:4d:8b:6e:16:4f:ae:29:7a:ed:5a:91:f7:8a:ec: 6c:b7:aa:23:e9:8f:ce:1c:63:28:8a:42:94:f7:6f:12:2b:5d: 3a:d0:b1:65:d9:5b:b3:fa:7e:33:5a:dd:60:01:00:27:8f:9c: d0:00:bd:9a:19:84:4c:54:ae:1c:f9:b2:76:c8:37:8a:de:0e: b9:41:a7:62:a0:b9:c2:20:7b:f4:7d:25:63:62:33:a7:07:82: a5:ad:cc:e9:68:14:d9:04:29:70:a6:e8:a1:14:6e:13:7d:8d: ba:1c:52:53:3a:09:6c:09:c0:5c:50:cb:51:db:26:b5:5a:0f: fb:33:9f:09:c7:0c:75:aa:fa:e2:ec:ae:fe:0c:45:b2:e3:86: 37:20:cd:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dlDyruoBJqOAjS8wz3LGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0 NWQwMTkwHhcNMjYwMTI2MDQwMTAyWhcNMjYwMTI3MDQwMTAyWjAzMTEwLwYDVQQD EyhhOWIxMjQ4ZjA0YWQ2ODhkYTg1ZDU2ZWU2YmRiM2RjNzMyZjg1NWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/UOio5ij4eJg7qU15DHoVxRldo2 LZY+W8DnS14jn+u9qBM4o/N3sY2iD+oCkwrNNIQcdfcwxx42pk1nGKxHl27Nq8it Qb4ISE0mCcYr3gFQSuQbvOxsWjZO8ehIxJJn0pq64hNrpmqBDUae5H/ImTJtKU/D JAIB7Nrh8+7InO4iNIaIMOpXOOOHbhYWNylsBBXy9gaMsi1ILbNwAYkZg0vh8u3N 65Hlv2Jz6ryfT8ry5qPFKyQHl6jk14Y94nmhiVULO1RCG62Ddf/DplfjNJGbA7W3 UNBw6wYtEROLrUv4tp0xROnSfNWwdUUH9uiIfVl+UnOdYDK+5iZrnOs4XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmxJI8ErWiNqF1W7mvbPccy+FWvMB8GA1UdIwQY MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAxqRU21 VMkF04HvxHbEBK/pRYEc5LjYk3eXvI3vIMr2gagMlcGXyywXEztgl8P8KLdLZyrt 2EJrTKhJyphYU1k7jZXK93W3MUfUZuNBRkNWSVFQ3m6CSaJpSmr3P0OqHCZmEcMd qhpxJIS36MGkBE2LbhZPril67VqR94rsbLeqI+mPzhxjKIpClPdvEitdOtCxZdlb s/p+M1rdYAEAJ4+c0AC9mhmETFSuHPmydsg3it4OuUGnYqC5wiB79H0lY2IzpweC pa3M6WgU2QQpcKbooRRuE32NuhxSUzoJbAnAXFDLUdsmtVoP+zOfCccMdar64uyu /gxFsuOGNyDNGw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:34 2026 by rpki-client