This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json) Hash identifier: jm432lNDJYzLhd+d/BmARyvSWXaefaf3ieEVlR40lGw= Subject key identifier: A3:65:2C:1A:32:D1:21:CE:0C:A3:D6:0A:2A:CA:39:7A:7B:B6:15:4E Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Certificate serial: 019AF23FF23683285495D1B9FFD4D08F742B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft Manifest number: 0604 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=) 2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: l1ypSxjwSAAMGHAzEdOqIGDhI4fVYJ1A+LMJZy324Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f2:36:83:28:54:95:d1:b9:ff:d4:d0:8f:74:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=a3652c1a32d121ce0ca3d60a2aca397a7bb6154e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:95:c5:d4:e3:61:9e:45:4a:b0:46:48:dd: 85:46:0d:5d:2d:a6:e2:0a:df:d4:23:b0:53:17:de: 74:4f:7f:5d:3b:e4:95:09:56:f9:1c:07:cc:cb:1c: fa:45:c0:95:82:dd:d8:32:87:de:a9:1d:b7:a6:16: 97:2f:03:83:60:aa:5c:08:5b:e7:e2:8f:76:44:00: e1:88:16:80:8c:6b:5c:1d:22:4a:41:2d:cf:a9:a9: 33:3c:da:52:85:d7:79:49:e4:52:94:8a:c5:a4:a9: 20:62:21:5e:5b:7b:88:5c:1b:f7:d8:d4:b0:a1:6c: 82:d2:dd:90:3e:17:2b:32:39:a2:ff:55:6f:3b:32: 79:ae:10:b3:b2:77:00:cd:5e:83:52:d6:2d:2a:1b: b1:fb:77:8c:27:ee:4b:7d:ef:b3:1a:a1:fd:61:a5: ce:ac:10:d7:13:e7:e0:05:48:b4:dc:89:60:2f:c8: 76:12:a4:96:f3:13:19:af:00:9e:23:b4:22:c2:12: e1:4d:ef:77:5c:92:de:94:03:cf:d6:bf:66:db:d9: 85:0f:51:ee:8b:ab:ab:e0:16:f8:da:ef:be:43:f1: 90:cf:f2:5e:28:35:a8:24:79:74:0d:7f:52:34:13: 75:4b:b6:a6:ba:c3:54:cb:26:87:76:3d:af:43:57: 15:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:2C:1A:32:D1:21:CE:0C:A3:D6:0A:2A:CA:39:7A:7B:B6:15:4E X509v3 Authority Key Identifier: keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e9:02:eb:98:3f:9f:0e:a8:7d:5a:17:eb:8b:6c:3c:22:14: ba:04:eb:13:6b:38:ee:74:16:fe:d7:cd:91:16:0e:37:93:4f: 43:2c:7f:ce:66:56:1f:45:eb:b6:ba:08:18:33:17:87:03:f2: 4c:5a:32:34:a2:ac:e7:1d:de:60:b3:a5:2c:c2:ee:31:0e:61: 08:a4:87:76:3f:d3:f6:2a:56:9e:d1:c2:0b:77:ce:8c:ef:a8: 2f:29:f5:78:4c:d0:1f:8b:b6:98:e7:62:5a:b9:82:af:3e:a8: b8:50:b4:31:95:d4:dd:b5:69:6b:76:aa:bb:c5:93:4f:5b:98: c8:de:b6:8f:e0:49:40:1f:fb:96:35:b1:dd:af:01:b6:d6:1c: fd:a0:42:88:50:03:39:f3:bd:b5:88:a7:79:cc:0a:aa:f9:72: 76:e0:73:9b:01:33:75:a1:32:f3:e1:96:95:61:0b:54:81:89: 4d:8c:84:21:37:8e:0c:a2:e9:19:4c:17:4a:94:f8:aa:a7:75: 19:df:ca:b1:e4:25:03:21:73:99:73:8a:b6:76:05:9a:be:5a: da:5b:db:a0:f5:61:b3:f6:4b:44:56:90:4d:69:7e:5c:8d:ea: 2d:65:a2:9e:2a:d8:26:91:aa:5b:89:cf:8c:50:a7:c5:fd:93: 25:fb:82:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/I2gyhUldG5/9TQj3QrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlODU5NGViZGM3ZDdjZjdkYTJlMDAzYzg0ZDg2YTdjMWFm ODcxYmMwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD EyhhMzY1MmMxYTMyZDEyMWNlMGNhM2Q2MGEyYWNhMzk3YTdiYjYxNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lKVxdTjYZ5FSrBGSN2FRg1dLabi Ct/UI7BTF950T39dO+SVCVb5HAfMyxz6RcCVgt3YMofeqR23phaXLwODYKpcCFvn 4o92RADhiBaAjGtcHSJKQS3PqakzPNpShdd5SeRSlIrFpKkgYiFeW3uIXBv32NSw oWyC0t2QPhcrMjmi/1VvOzJ5rhCzsncAzV6DUtYtKhux+3eMJ+5Lfe+zGqH9YaXO rBDXE+fgBUi03IlgL8h2EqSW8xMZrwCeI7QiwhLhTe93XJLelAPP1r9m29mFD1Hu i6ur4Bb42u++Q/GQz/JeKDWoJHl0DX9SNBN1S7amusNUyyaHdj2vQ1cVrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNlLBoy0SHODKPWCirKOXp7thVOMB8GA1UdIwQY MBaAFE6FlOvcfXz32i4APITYanwa+HG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUt Y2U5NGUzOGU4MmQ2LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUtY2U5NGUzOGU4MmQ2 LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOkC65g/ nw6ofVoX64tsPCIUugTrE2s47nQW/tfNkRYON5NPQyx/zmZWH0XrtroIGDMXhwPy TFoyNKKs5x3eYLOlLMLuMQ5hCKSHdj/T9ipWntHCC3fOjO+oLyn1eEzQH4u2mOdi WrmCrz6ouFC0MZXU3bVpa3aqu8WTT1uYyN62j+BJQB/7ljWx3a8BttYc/aBCiFAD OfO9tYinecwKqvlyduBzmwEzdaEy8+GWlWELVIGJTYyEITeODKLpGUwXSpT4qqd1 Gd/KseQlAyFzmXOKtnYFmr5a2lvboPVhs/ZLRFaQTWl+XI3qLWWinirYJpGqW4nP jFCnxf2TJfuCYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:33 2025 by rpki-client