This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json) Hash identifier: 4UCJ2Pbw1d/rNhgg9wFc6dSYJq8acfr16j5FNlsgS28= Subject key identifier: 71:A6:ED:C5:7C:1C:E7:3C:A3:42:1F:6F:D8:F4:6C:F5:FC:41:0D:7E Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba Certificate serial: 019AF209A26087F34EBD6D64FFABB05DEAC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=) 2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: ME/h9Pf5iGN4K65/sJF6/KJ3vlXNXdwk2ajU7pY9VoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a2:60:87:f3:4e:bd:6d:64:ff:ab:b0:5d:ea:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=71a6edc57c1ce73ca3421f6fd8f46cf5fc410d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:3a:cd:55:8d:39:90:d0:b6:5d:2d:11:35: 0f:a2:c9:e1:61:12:94:27:6a:56:b0:84:86:de:10: 24:2c:74:df:4c:a9:a3:40:9a:fa:f6:ca:cc:b3:cb: 76:a7:10:7d:e9:e1:86:42:16:4c:52:ca:84:c0:8b: 17:5b:64:34:de:c7:10:6e:d3:c2:07:d2:f2:98:80: b5:a2:dc:9f:67:e9:8a:04:07:20:a5:6a:bd:f9:92: 81:bd:65:22:5f:43:ea:60:bf:43:d6:22:00:7d:eb: a0:c1:85:c8:f7:2b:43:ac:15:a5:dc:21:99:b8:af: 19:c9:25:e2:0e:3d:99:05:b5:52:1f:f1:97:cf:92: 06:b5:99:84:75:2f:4f:36:a4:52:cf:6b:b1:fc:bf: 7b:00:02:0b:53:cd:55:63:35:d3:58:f9:97:36:7c: fe:ee:a1:48:78:4a:d5:96:84:97:db:a9:6b:82:d7: 69:91:5c:46:67:b8:40:f2:77:fa:3d:ca:f8:be:64: 87:c5:c9:1f:bf:2d:0f:a8:62:9f:17:41:04:d6:0c: c7:6a:3a:3c:b2:08:51:9d:d8:a4:bc:19:2e:23:a9: c1:fd:3c:78:4e:80:9a:f5:a8:be:df:25:e1:14:58: 56:2b:f2:3f:bd:66:e7:61:20:e5:76:8b:b4:95:f2: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A6:ED:C5:7C:1C:E7:3C:A3:42:1F:6F:D8:F4:6C:F5:FC:41:0D:7E X509v3 Authority Key Identifier: keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:26:0f:be:86:9b:46:0c:10:b2:bf:8f:39:26:ec:a1:42:1a: 7f:30:d2:fc:c0:35:f5:4a:fe:10:2f:4a:e6:8d:60:2a:2b:54: 97:ac:70:39:95:2a:01:a4:ae:67:87:96:db:ca:bf:da:32:b8: 6a:49:d5:18:44:21:e5:b7:3d:d6:6a:3a:e9:91:39:95:55:14: d9:f7:a0:13:3e:5a:a6:a8:2f:b0:83:2d:89:41:07:07:73:b1: 03:30:07:81:eb:83:df:5f:93:02:07:ff:84:9c:ce:03:27:d8: 2e:f2:d7:31:3d:33:d1:23:1d:1b:3e:3e:fe:8e:30:1c:2d:c3: 68:8e:ca:57:dc:79:36:14:ca:7a:1e:1c:22:ea:a0:c7:a9:a7: fc:e1:ef:66:90:89:76:88:09:68:e6:14:3d:14:e0:3e:46:52: 55:5b:4b:67:44:ff:3f:a1:18:d6:c4:7d:f7:42:66:d9:f9:3e: e6:c8:77:ad:66:31:0d:63:70:83:be:96:9c:fe:58:ca:d5:18: f7:f1:8e:de:f8:05:d3:28:95:10:1e:71:00:37:38:7c:b0:a2: d9:54:ac:00:a3:c8:80:81:61:e4:90:00:36:8e:17:34:7e:dd: 4b:b7:0f:56:66:df:94:64:41:e1:7f:56:e9:5a:98:85:b3:82: 80:43:36:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaJgh/NOvW1k/6uwXerFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGI0MjkyMmQzODdjNTc4ZmE1NzY5MjQ4N2YyYTE5MDY4 NTg5YmEwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD Eyg3MWE2ZWRjNTdjMWNlNzNjYTM0MjFmNmZkOGY0NmNmNWZjNDEwZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoU6zVWNOZDQtl0tETUPosnhYRKU J2pWsISG3hAkLHTfTKmjQJr69srMs8t2pxB96eGGQhZMUsqEwIsXW2Q03scQbtPC B9LymIC1otyfZ+mKBAcgpWq9+ZKBvWUiX0PqYL9D1iIAfeugwYXI9ytDrBWl3CGZ uK8ZySXiDj2ZBbVSH/GXz5IGtZmEdS9PNqRSz2ux/L97AAILU81VYzXTWPmXNnz+ 7qFIeErVloSX26lrgtdpkVxGZ7hA8nf6Pcr4vmSHxckfvy0PqGKfF0EE1gzHajo8 sghRndikvBkuI6nB/Tx4ToCa9ai+3yXhFFhWK/I/vWbnYSDldou0lfK+hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGm7cV8HOc8o0Ifb9j0bPX8QQ1+MB8GA1UdIwQY MBaAFLaLQpItOHxXj6V2kkh/KhkGhYm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEt NGE1NDViMTE2ODgwLzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEtNGE1NDViMTE2ODgw LzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyYPvoab RgwQsr+POSbsoUIafzDS/MA19Ur+EC9K5o1gKitUl6xwOZUqAaSuZ4eW28q/2jK4 aknVGEQh5bc91mo66ZE5lVUU2fegEz5apqgvsIMtiUEHB3OxAzAHgeuD31+TAgf/ hJzOAyfYLvLXMT0z0SMdGz4+/o4wHC3DaI7KV9x5NhTKeh4cIuqgx6mn/OHvZpCJ dogJaOYUPRTgPkZSVVtLZ0T/P6EY1sR990Jm2fk+5sh3rWYxDWNwg76WnP5YytUY 9/GO3vgF0yiVEB5xADc4fLCi2VSsAKPIgIFh5JAANo4XNH7dS7cPVmbflGRB4X9W 6VqYhbOCgEM2Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:02 2025 by rpki-client