This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json) Hash identifier: WKM1tof9bpu6iumN+B/UcO/EGCLlRxGjsRh2vXHV168= Subject key identifier: 2B:1E:C6:64:4A:66:4E:28:82:4D:D3:D7:2D:07:45:D4:29:12:65:1D Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Certificate serial: 019B714738A88ED5F36F93F47436A844197E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft Manifest number: 17A7 Signing time: Tue 30 Dec 2025 22:00:51 +0000 Manifest this update: Tue 30 Dec 2025 22:00:51 +0000 Manifest next update: Wed 31 Dec 2025 22:00:51 +0000 Files and hashes: 1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: PmxZqu3ORYUyQMjJepkVsPRDmZQV99+Ge4XLdQ9t1ZY=) 2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=) 3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=) 4: mTK71BiAahOGNOj1gIjcUiycIis.roa (hash: Kml3f2UysjEUhXvE3jKGWnv4uk2wh6/Ey/fuSSOhyUc=) 5: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:38:a8:8e:d5:f3:6f:93:f4:74:36:a8:44:19:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Validity Not Before: Dec 30 22:00:51 2025 GMT Not After : Dec 31 22:00:51 2025 GMT Subject: CN=2b1ec6644a664e28824dd3d72d0745d42912651d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:dc:ea:0c:d5:ff:d3:e4:75:ac:2e:c7:6a: 9b:6a:77:77:fe:9f:4f:28:cc:67:f0:a6:40:04:25: c7:a4:99:86:d5:98:44:d8:6f:eb:0b:33:20:24:71: fd:58:64:fc:fc:9b:0d:f9:f1:a1:af:0e:1d:91:c1: 1f:51:49:13:df:70:15:78:13:38:3a:18:08:e4:b1: 8c:3c:f4:40:05:fa:02:b6:6c:7f:e5:0c:30:8f:af: 06:aa:d5:ea:49:c3:0f:b7:f6:61:56:84:1e:bf:c2: 5a:f9:57:fa:62:c6:aa:67:8a:23:36:81:74:1d:0a: 4d:20:c2:45:22:07:a4:9f:80:9b:a0:d8:bd:fa:9d: f6:6c:71:fd:51:d8:a9:d9:ff:0a:2e:fd:4e:72:42: 40:e3:df:a8:d3:ec:cc:e8:87:fb:ad:70:59:a3:f2: f7:5d:60:9f:10:5b:72:fb:66:aa:49:83:0b:db:28: 6e:2f:2a:5f:72:59:a7:e8:91:8e:db:29:48:75:61: 0b:10:97:4d:57:2a:09:51:89:8e:04:73:2a:3f:94: 3d:ad:e3:ae:ef:b2:32:22:5b:74:99:3d:83:c0:e9: fb:3c:e1:e0:d6:a1:56:87:c5:bb:41:62:72:5d:61: 79:08:25:5f:09:b6:5f:a2:d8:10:71:7e:ea:84:87: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1E:C6:64:4A:66:4E:28:82:4D:D3:D7:2D:07:45:D4:29:12:65:1D X509v3 Authority Key Identifier: keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8c:79:22:8d:96:f8:b6:80:39:95:ba:3b:fe:a2:9e:3a:73: 61:f1:1e:0c:ef:2b:16:20:34:47:5d:05:0b:15:5c:8e:46:33: 15:85:1b:5b:81:5e:db:a8:51:20:64:61:56:ff:02:61:25:08: e8:e9:11:8f:ad:9c:11:0a:bc:5d:2d:f9:74:58:d1:5a:73:5a: 16:f0:be:96:88:a6:43:85:82:71:cd:47:d6:5f:12:88:2b:2f: a3:96:5b:7a:ae:2a:26:01:66:29:f3:24:7c:53:7f:41:5d:a9: 9d:6f:f0:51:32:60:40:a6:da:a9:4b:b0:9a:20:ea:55:58:84: f7:b9:da:f0:21:ef:06:ef:4e:c7:d9:6d:43:20:58:36:13:79: 82:01:1c:a4:21:80:fd:8c:cb:54:f2:a7:64:f2:af:67:d7:74: 9b:8e:73:90:f7:94:bc:2e:35:f9:c1:ad:c1:10:30:47:47:4f: 7f:e4:be:7a:13:e6:54:ff:99:b8:f6:4e:86:50:35:3f:5d:ab: 1c:27:db:71:46:32:b2:fb:c8:3c:78:04:6a:97:b4:13:2d:fa: 83:39:2f:14:22:ba:1e:e3:15:ee:50:b1:48:ae:d2:da:c8:30: be:17:f4:db:c9:67:23:f6:22:31:15:b9:23:4c:f3:2b:d1:94: 4d:65:7c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRziojtXzb5P0dDaoRBl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2ExZTg0NjViZmM0ZGY3MDA4OTQzNzJkMGI5ODA4ZThi NjI5ZWEwHhcNMjUxMjMwMjIwMDUxWhcNMjUxMjMxMjIwMDUxWjAzMTEwLwYDVQQD EygyYjFlYzY2NDRhNjY0ZTI4ODI0ZGQzZDcyZDA3NDVkNDI5MTI2NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4jc6gzV/9Pkdawux2qband3/p9P KMxn8KZABCXHpJmG1ZhE2G/rCzMgJHH9WGT8/JsN+fGhrw4dkcEfUUkT33AVeBM4 OhgI5LGMPPRABfoCtmx/5Qwwj68GqtXqScMPt/ZhVoQev8Ja+Vf6YsaqZ4ojNoF0 HQpNIMJFIgekn4CboNi9+p32bHH9Udip2f8KLv1OckJA49+o0+zM6If7rXBZo/L3 XWCfEFty+2aqSYML2yhuLypfclmn6JGO2ylIdWELEJdNVyoJUYmOBHMqP5Q9reOu 77IyIlt0mT2DwOn7POHg1qFWh8W7QWJyXWF5CCVfCbZfotgQcX7qhId8zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsexmRKZk4ogk3T1y0HRdQpEmUdMB8GA1UdIwQY MBaAFP06HoRlv8TfcAiUNy0LmAjotinqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYt OTU1NWQzMGY2ZjhmLzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYtOTU1NWQzMGY2Zjhm LzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYx5Io2W +LaAOZW6O/6injpzYfEeDO8rFiA0R10FCxVcjkYzFYUbW4Fe26hRIGRhVv8CYSUI 6OkRj62cEQq8XS35dFjRWnNaFvC+loimQ4WCcc1H1l8SiCsvo5Zbeq4qJgFmKfMk fFN/QV2pnW/wUTJgQKbaqUuwmiDqVViE97na8CHvBu9Ox9ltQyBYNhN5ggEcpCGA /YzLVPKnZPKvZ9d0m45zkPeUvC41+cGtwRAwR0dPf+S+ehPmVP+ZuPZOhlA1P12r HCfbcUYysvvIPHgEape0Ey36gzkvFCK6HuMV7lCxSK7S2sgwvhf028lnI/YiMRW5 I0zzK9GUTWV8Rw== -----END CERTIFICATE-----Generated at Wed Dec 31 02:01:47 2025 by rpki-client