This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json) Hash identifier: ttf1F8dIT8u98qDGSLORmVsyIGjsjmQZi5CjSnyWYz0= Subject key identifier: 54:A8:89:88:F1:DD:91:37:E0:AF:E2:B9:B2:09:FB:C3:3E:DC:96:A1 Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Certificate serial: 019AF2092EA68F3B3D36215EE399C1448C60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft Manifest number: 12F5 Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=) 2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=) 3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=) 4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: 922IrwF5qIIYSQHN7CKKtxSv1jB+kY8k8WQrQM9DfYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2e:a6:8f:3b:3d:36:21:5e:e3:99:c1:44:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=54a88988f1dd9137e0afe2b9b209fbc33edc96a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:c9:22:74:7f:b1:15:57:d0:03:ea:c8:ed: 4c:f1:d7:66:3e:b2:f7:d5:8f:7c:9c:15:ca:82:42: aa:35:1d:11:2b:e9:89:8b:1c:4f:d7:7e:b7:bc:93: bb:d0:2a:c1:75:bb:34:fd:a0:3f:f5:d0:97:22:b6: 56:02:1f:59:f0:fa:dc:09:a1:2e:45:4b:9b:a4:c9: cd:29:d4:a1:6f:84:93:be:f4:8d:cf:be:5f:93:8e: c7:12:d8:c5:80:88:34:a1:b8:53:80:db:c6:8e:bf: 49:e4:c4:17:9c:4f:4b:68:5a:55:19:b9:39:90:fc: c2:53:93:48:b8:94:36:79:ba:58:82:cd:15:04:66: 3f:ad:c2:6b:17:0e:19:de:84:c0:2f:6b:4b:23:c3: 17:d8:ba:80:b4:d9:50:9d:94:72:59:4b:a4:b4:20: 32:0d:4e:ec:18:d5:74:06:4a:45:29:a5:80:e4:87: 6c:1e:8e:a9:6a:60:73:0b:5e:61:09:10:7e:a0:9d: 84:27:ac:62:66:53:80:8c:aa:be:3a:d2:fb:e4:90: 9d:5a:97:23:68:74:3a:27:63:82:85:aa:75:02:4d: 25:70:a4:8d:09:70:23:5b:45:3f:a2:f5:c4:3e:0d: 09:99:97:bb:38:3f:22:bf:9a:b8:9a:c3:34:9a:c3: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A8:89:88:F1:DD:91:37:E0:AF:E2:B9:B2:09:FB:C3:3E:DC:96:A1 X509v3 Authority Key Identifier: keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e3:5b:1a:1d:cc:f0:88:3a:c9:7a:16:eb:b2:5e:7e:4e:29: 6f:81:b6:49:59:89:f9:e2:c1:3b:a4:4d:66:78:af:11:78:13: bf:9c:f4:ce:9d:6c:f2:5e:41:3c:8f:69:db:f6:d2:11:9a:bb: 9b:73:82:85:c5:6f:10:9d:9c:0c:74:9c:10:cb:40:44:af:a5: aa:3e:ac:fc:1f:2e:42:42:af:ef:d5:16:ba:0d:f8:e5:36:f1: f8:21:77:c9:38:6d:4c:e8:da:06:cc:43:77:70:50:9d:9b:51: 11:33:d5:4d:f5:1c:0c:92:3f:1f:6a:14:80:3c:69:4d:c7:e5: e5:7e:d7:b5:9e:14:fd:47:0e:b9:6e:3a:7a:a6:ed:aa:d8:56: ee:da:ca:c1:37:dc:8d:1c:e2:17:c6:18:f4:50:14:ce:4a:f7: 2e:7f:9d:1f:49:00:52:ce:f2:47:bf:d6:19:c6:98:aa:22:ca: 27:60:3a:d7:8f:a1:e7:19:dd:da:ae:d0:1f:1b:a9:31:87:dd: ed:74:99:32:b1:05:ca:f6:b6:f8:b8:89:b7:fe:c8:ac:ed:ea: 71:62:39:5c:a9:9b:40:42:c1:4e:34:db:dc:f0:6d:eb:cd:01: 35:eb:f9:99:cd:cf:5b:9a:71:91:9f:e1:33:25:b4:80:86:00: 0c:c2:4b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS6mjzs9NiFe45nBRIxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh YWEwZmQwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD Eyg1NGE4ODk4OGYxZGQ5MTM3ZTBhZmUyYjliMjA5ZmJjMzNlZGM5NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYfJInR/sRVX0APqyO1M8ddmPrL3 1Y98nBXKgkKqNR0RK+mJixxP1363vJO70CrBdbs0/aA/9dCXIrZWAh9Z8PrcCaEu RUubpMnNKdShb4STvvSNz75fk47HEtjFgIg0obhTgNvGjr9J5MQXnE9LaFpVGbk5 kPzCU5NIuJQ2ebpYgs0VBGY/rcJrFw4Z3oTAL2tLI8MX2LqAtNlQnZRyWUuktCAy DU7sGNV0BkpFKaWA5IdsHo6pamBzC15hCRB+oJ2EJ6xiZlOAjKq+OtL75JCdWpcj aHQ6J2OChap1Ak0lcKSNCXAjW0U/ovXEPg0JmZe7OD8iv5q4msM0msMSjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSoiYjx3ZE34K/iubIJ+8M+3JahMB8GA1UdIwQY MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+NbGh3M 8Ig6yXoW67Jefk4pb4G2SVmJ+eLBO6RNZnivEXgTv5z0zp1s8l5BPI9p2/bSEZq7 m3OChcVvEJ2cDHScEMtARK+lqj6s/B8uQkKv79UWug345Tbx+CF3yThtTOjaBsxD d3BQnZtRETPVTfUcDJI/H2oUgDxpTcfl5X7XtZ4U/UcOuW46eqbtqthW7trKwTfc jRziF8YY9FAUzkr3Ln+dH0kAUs7yR7/WGcaYqiLKJ2A614+h5xnd2q7QHxupMYfd 7XSZMrEFyva2+LiJt/7IrO3qcWI5XKmbQELBTjTb3PBt680BNev5mc3PW5pxkZ/h MyW0gIYADMJLmw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:24 2025 by rpki-client