This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json) Hash identifier: 7WaeYtad7uzxNuY3qtEkvcsHOV+wakmKujtPQEldUCc= Subject key identifier: 1F:E1:4F:42:DB:51:B0:F2:D2:60:C1:C4:A5:51:81:9C:F5:4E:45:46 Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Certificate serial: 019B65B1196268DFE5B31201321359D5D044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft Manifest number: 17A1 Signing time: Sun 28 Dec 2025 16:01:03 +0000 Manifest this update: Sun 28 Dec 2025 16:01:03 +0000 Manifest next update: Mon 29 Dec 2025 16:01:03 +0000 Files and hashes: 1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: yGEz7dulJ+w94DlXN+iIE+T6q6o96fk+opyJFUB9Lg0=) 2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=) 3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=) 4: mTK71BiAahOGNOj1gIjcUiycIis.roa (hash: Kml3f2UysjEUhXvE3jKGWnv4uk2wh6/Ey/fuSSOhyUc=) 5: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:19:62:68:df:e5:b3:12:01:32:13:59:d5:d0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Validity Not Before: Dec 28 16:01:03 2025 GMT Not After : Dec 29 16:01:03 2025 GMT Subject: CN=1fe14f42db51b0f2d260c1c4a551819cf54e4546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:23:60:da:1e:71:97:d4:f6:25:8b:01:b9: 86:ed:4c:92:47:2d:e3:48:87:2e:d5:21:17:0a:b2: 87:81:10:cb:bf:c4:69:37:d6:4f:34:b5:91:ed:b2: 99:21:2c:ba:fc:dc:49:ca:f3:ba:a2:8a:7c:7a:cd: 56:e8:d3:4a:14:b3:dd:d5:90:88:48:6e:4b:7a:7f: f0:5d:ce:11:ed:57:4f:71:0d:9a:5c:29:18:57:93: 69:30:d3:02:f8:63:f3:bd:fa:d9:73:8c:08:f1:ea: 0b:0a:df:ce:8b:d0:2c:26:53:a2:96:8b:67:16:b1: 98:1c:0f:c4:72:1c:b2:7d:65:28:21:4b:f6:f6:c0: d5:d2:da:04:93:46:98:b3:0a:7d:ff:4e:32:34:87: 48:5b:8a:73:b5:e2:5e:04:b0:26:ce:62:99:b0:27: a0:2c:8f:69:8f:93:3e:29:8b:97:44:f9:71:0f:90: 00:9a:9f:d3:f9:87:5a:8f:e5:a8:11:c3:f4:54:bb: db:2e:87:51:38:5f:55:40:9b:bf:0d:23:1c:66:7c: e6:69:9e:02:3e:2c:33:07:14:35:ef:82:72:55:7e: 98:7d:de:53:65:bf:17:de:fc:c0:03:54:f7:21:77: 2e:8e:56:0d:61:84:60:29:57:ea:d8:b0:e3:e4:cc: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E1:4F:42:DB:51:B0:F2:D2:60:C1:C4:A5:51:81:9C:F5:4E:45:46 X509v3 Authority Key Identifier: keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:59:11:b9:8f:e9:fa:7a:68:14:31:b6:72:b8:ac:fb:17:e7: b2:1c:56:fd:40:b5:76:d6:f9:a2:03:0e:e5:db:24:d9:57:92: 9d:33:2f:4b:61:af:e3:f3:33:c1:55:19:d5:4b:7a:5a:99:e2: d0:52:13:90:5a:12:54:06:b3:a1:1b:7e:93:3b:ee:49:00:a7: 0f:6a:9e:48:26:af:1b:0b:56:82:db:f4:a8:1e:f3:06:5a:b0: 74:26:a3:c1:87:0b:b1:74:77:d2:1c:82:27:f5:ed:32:2f:90: a4:d9:b5:bf:6b:76:79:2c:7d:1d:21:f4:81:66:00:59:b1:68: d0:29:f5:97:52:bd:88:fe:5b:be:3e:a7:e2:12:f8:3a:a0:cf: 15:88:b0:de:f8:8b:5a:fd:59:fb:9b:19:26:08:08:0e:13:6d: 35:8f:22:d5:18:cb:dc:1a:37:5c:6c:9d:0f:2d:41:c4:78:1f: 0c:c9:61:11:5c:a1:20:1e:3c:cd:2f:f0:3f:23:6e:4a:10:35: 2e:62:ce:b7:76:85:8e:c6:5e:20:70:36:13:4b:65:26:e8:10: 94:28:0b:75:8b:3c:d4:32:92:50:b1:25:41:d4:da:34:0c:f0: 97:58:41:45:52:cd:a6:09:ec:8e:e1:64:9c:a5:f1:7a:4a:ee: 55:27:8e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsRliaN/lsxIBMhNZ1dBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkM2ExZTg0NjViZmM0ZGY3MDA4OTQzNzJkMGI5ODA4ZThi NjI5ZWEwHhcNMjUxMjI4MTYwMTAzWhcNMjUxMjI5MTYwMTAzWjAzMTEwLwYDVQQD EygxZmUxNGY0MmRiNTFiMGYyZDI2MGMxYzRhNTUxODE5Y2Y1NGU0NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp8jYNoecZfU9iWLAbmG7UySRy3j SIcu1SEXCrKHgRDLv8RpN9ZPNLWR7bKZISy6/NxJyvO6oop8es1W6NNKFLPd1ZCI SG5Len/wXc4R7VdPcQ2aXCkYV5NpMNMC+GPzvfrZc4wI8eoLCt/Oi9AsJlOilotn FrGYHA/EchyyfWUoIUv29sDV0toEk0aYswp9/04yNIdIW4pzteJeBLAmzmKZsCeg LI9pj5M+KYuXRPlxD5AAmp/T+Ydaj+WoEcP0VLvbLodROF9VQJu/DSMcZnzmaZ4C PiwzBxQ174JyVX6Yfd5TZb8X3vzAA1T3IXcujlYNYYRgKVfq2LDj5Mx3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/hT0LbUbDy0mDBxKVRgZz1TkVGMB8GA1UdIwQY MBaAFP06HoRlv8TfcAiUNy0LmAjotinqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYt OTU1NWQzMGY2ZjhmLzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS81MTM3MzQtYTQ4NS00YzI4LThhYTYtOTU1NWQzMGY2Zjhm LzEvX1RvZWhHV194Tjl3Q0pRM0xRdVlDT2kyS2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVkRuY/p +npoFDG2cris+xfnshxW/UC1dtb5ogMO5dsk2VeSnTMvS2Gv4/MzwVUZ1Ut6Wpni 0FITkFoSVAazoRt+kzvuSQCnD2qeSCavGwtWgtv0qB7zBlqwdCajwYcLsXR30hyC J/XtMi+QpNm1v2t2eSx9HSH0gWYAWbFo0Cn1l1K9iP5bvj6n4hL4OqDPFYiw3viL Wv1Z+5sZJggIDhNtNY8i1RjL3Bo3XGydDy1BxHgfDMlhEVyhIB48zS/wPyNuShA1 LmLOt3aFjsZeIHA2E0tlJugQlCgLdYs81DKSULElQdTaNAzwl1hBRVLNpgnsjuFk nKXxekruVSeOYQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:19:03 2025 by rpki-client