This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json) Hash identifier: fiSKgX19yRmXmbU3vjM4M3T6PaeUvAiUavpL9lYJZpc= Subject key identifier: 7C:E0:14:DA:B9:45:EF:9B:AC:DD:CD:95:B2:71:48:34:4E:70:64:FA Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14 Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14 Certificate serial: 019B3D90D337AD93BD0A29EC49601C5CE4AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 21:00:59 +0000 Manifest this update: Sat 20 Dec 2025 21:00:59 +0000 Manifest next update: Sun 21 Dec 2025 21:00:59 +0000 Files and hashes: 1: qKf3kSwed1sQ8jIUt0CVeHwDYyo.roa (hash: JvCwYzHwZc3gc1jfWnqqm/e28zS68AlD89E8H1B2hTo=) 2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: 1SB1TtJJBxuhIUG98P/k1teRajNAQJ99hq7tIzIlVBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d3:37:ad:93:bd:0a:29:ec:49:60:1c:5c:e4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14 Validity Not Before: Dec 20 21:00:59 2025 GMT Not After : Dec 21 21:00:59 2025 GMT Subject: CN=7ce014dab945ef9bacddcd95b27148344e7064fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:74:d9:21:e2:d5:73:e1:48:ca:97:20:ba: 0a:ea:dc:cf:db:9c:6f:17:74:1b:0e:45:dd:26:ea: 5c:90:a6:8a:45:c4:63:8f:21:0b:cf:38:00:c2:ec: 3e:55:19:da:ef:48:fc:b1:0c:c9:47:d3:89:c2:35: fe:0c:e2:cd:d8:41:ed:26:75:90:2f:e4:84:e4:59: 83:e8:aa:9f:78:a8:fd:70:63:9b:96:e2:8f:3f:5f: 43:01:32:64:e3:d3:cc:03:3d:b7:da:a4:d6:28:4b: 19:21:f6:cb:4a:1c:67:2e:6e:bb:fd:34:bb:ab:45: 3b:83:da:54:49:4b:be:a1:ef:9e:0c:20:3a:53:d9: c0:70:cf:31:41:53:3c:b4:a8:eb:7b:e8:83:46:d4: df:c2:de:36:af:91:af:d7:3f:1c:32:0b:d7:70:95: f9:5e:d0:bb:98:ea:b5:57:30:0d:9a:c6:26:0d:d6: d9:6a:bf:81:26:9f:ce:da:51:7d:6b:33:04:cb:cd: 8f:ee:67:82:f4:97:26:4e:11:b0:06:32:c8:3b:90: 91:71:30:71:35:e6:b9:9e:22:51:d8:66:63:0f:1a: 2c:95:ac:8d:3a:32:30:28:2f:d1:b7:97:ee:94:5a: 7b:50:f4:f4:3c:0d:76:e6:87:a8:46:11:ae:85:77: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E0:14:DA:B9:45:EF:9B:AC:DD:CD:95:B2:71:48:34:4E:70:64:FA X509v3 Authority Key Identifier: keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a7:04:a0:c7:9d:12:6a:97:d9:60:a1:53:b6:76:aa:76:55: c4:8d:1a:01:62:7c:6e:49:25:e8:be:92:7d:eb:09:6a:4c:ce: be:04:d2:e3:b9:30:ae:8e:e3:09:5c:39:84:4a:ae:b7:c1:d2: fa:d8:9b:6d:9e:1b:c4:44:97:c4:fe:7f:80:b8:fa:55:88:9f: 66:c9:8e:31:7f:bd:39:31:9d:38:2c:a8:8a:54:c8:2e:8b:57: 75:b4:59:64:cf:1b:48:c8:12:0f:34:ea:e3:e1:e2:a7:61:ee: 27:e4:00:60:fd:fc:c6:e5:f2:1d:f5:94:8a:c8:50:5d:54:17: a7:8c:96:a6:66:29:38:a6:d3:04:14:64:d3:c0:f0:e8:5a:d4: e3:d3:a8:4c:25:40:9b:ec:58:c4:f0:99:2a:ca:e5:1f:f1:73: 79:2a:26:26:17:2b:18:18:d9:06:ce:7b:86:7e:db:f2:93:ae: 52:a3:a9:5c:ad:e6:0b:84:a7:93:e6:66:e8:cb:53:b9:19:91: ab:e8:7f:75:c0:96:8e:63:26:a8:02:79:17:a2:62:81:38:30: 24:ff:43:85:d8:f5:d3:2c:77:8c:86:01:2c:c3:b6:68:40:b8: f8:41:d7:de:53:43:c7:b5:77:6c:de:86:ac:65:75:51:98:bc: c9:60:4e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNM3rZO9CinsSWAcXOSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OGE5OTRlNDJlNjBkYTRmNGE1NDc1YjE1ZjVlMjc1MTZj N2NmMTQwHhcNMjUxMjIwMjEwMDU5WhcNMjUxMjIxMjEwMDU5WjAzMTEwLwYDVQQD Eyg3Y2UwMTRkYWI5NDVlZjliYWNkZGNkOTViMjcxNDgzNDRlNzA2NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstt02SHi1XPhSMqXILoK6tzP25xv F3QbDkXdJupckKaKRcRjjyELzzgAwuw+VRna70j8sQzJR9OJwjX+DOLN2EHtJnWQ L+SE5FmD6KqfeKj9cGObluKPP19DATJk49PMAz232qTWKEsZIfbLShxnLm67/TS7 q0U7g9pUSUu+oe+eDCA6U9nAcM8xQVM8tKjre+iDRtTfwt42r5Gv1z8cMgvXcJX5 XtC7mOq1VzANmsYmDdbZar+BJp/O2lF9azMEy82P7meC9JcmThGwBjLIO5CRcTBx Nea5niJR2GZjDxoslayNOjIwKC/Rt5fulFp7UPT0PA125oeoRhGuhXd1ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzgFNq5Re+brN3NlbJxSDROcGT6MB8GA1UdIwQY MBaAFLaKmU5C5g2k9KVHWxX14nUWx88UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUt YmQzYmViY2RkZWIzLzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUtYmQzYmViY2RkZWIz LzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAacEoMed EmqX2WChU7Z2qnZVxI0aAWJ8bkkl6L6SfesJakzOvgTS47kwro7jCVw5hEqut8HS +tibbZ4bxESXxP5/gLj6VYifZsmOMX+9OTGdOCyoilTILotXdbRZZM8bSMgSDzTq 4+Hip2HuJ+QAYP38xuXyHfWUishQXVQXp4yWpmYpOKbTBBRk08Dw6FrU49OoTCVA m+xYxPCZKsrlH/FzeSomJhcrGBjZBs57hn7b8pOuUqOpXK3mC4Snk+Zm6MtTuRmR q+h/dcCWjmMmqAJ5F6JigTgwJP9Dhdj10yx3jIYBLMO2aEC4+EHX3lNDx7V3bN6G rGV1UZi8yWBOmA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:08:26 2025 by rpki-client