This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft File: TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json) Hash identifier: IiuVwhVQ9F6+0i6wF6UVx2fbwpXXB5COcd17ptAtPzA= Subject key identifier: B1:C6:A3:13:28:F0:9B:48:2C:3E:58:F0:6F:21:29:77:08:4D:25:48 Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca Certificate serial: 019B3A9016CA09FFDB63B0F9EBBB94C8F7F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft Manifest number: 0531 Signing time: Sat 20 Dec 2025 07:01:20 +0000 Manifest this update: Sat 20 Dec 2025 07:01:20 +0000 Manifest next update: Sun 21 Dec 2025 07:01:20 +0000 Files and hashes: 1: DzOZLqQUulch0tfN19TPMP7l7NI.asa (hash: A7v4BAlqHExbGP1jRQY/Od094IwgACqCwokxSz1iOtQ=) 2: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: rWUJiaImgO9btVrcjvS7QjIeZSLvUSltYnimdFSPHtI=) 3: wqDhS7gdeGbdKyK4P2B2xid5RCk.roa (hash: pzt+fKb4dYAAFu+QRte1CXzAs8gCt6ejAy8RnTWXAJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:16:ca:09:ff:db:63:b0:f9:eb:bb:94:c8:f7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca Validity Not Before: Dec 20 07:01:20 2025 GMT Not After : Dec 21 07:01:20 2025 GMT Subject: CN=b1c6a31328f09b482c3e58f06f212977084d2548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:80:13:31:77:59:24:a7:20:39:55:c6:5b:5b: f8:4f:c8:e0:98:96:2a:6b:fd:30:f9:8e:09:c1:65: 01:3b:06:64:77:d1:d7:00:a4:39:2c:28:60:36:4d: 5b:aa:bb:82:58:92:e7:01:b6:7e:cd:12:5c:0c:2a: a0:93:37:17:a2:ec:9a:68:a5:70:7e:ff:8c:2f:c9: ee:77:cb:29:bb:ac:e4:5a:8c:c2:69:e8:e3:06:70: 23:18:33:df:35:2b:02:c2:86:b2:95:55:58:17:a2: fe:bb:47:95:9d:7c:ff:44:45:bd:27:3b:e5:ff:f1: 27:54:59:c5:d9:c3:6f:da:40:bc:9a:98:90:e9:8d: 21:a3:50:11:3f:b5:ce:d4:8c:0e:2e:7b:4b:e1:0e: 4f:b0:09:c3:ff:f1:31:23:a2:b2:08:06:f3:f0:83: 33:c2:9c:36:a6:4a:a8:90:75:8b:49:7c:0f:13:35: c3:5d:36:c1:77:e3:be:9f:22:6d:73:97:0e:aa:41: 2b:47:a2:82:a5:fd:81:ed:46:44:be:8d:c6:82:ad: 50:bc:39:51:98:64:d1:27:64:b5:49:80:b8:8b:db: df:b1:4f:ab:b3:fb:94:65:a0:ca:17:13:d6:a5:ad: a7:79:7b:a0:a8:07:e3:46:b4:6b:42:80:fd:03:03: 7c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C6:A3:13:28:F0:9B:48:2C:3E:58:F0:6F:21:29:77:08:4D:25:48 X509v3 Authority Key Identifier: keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:13:0c:3c:1a:95:67:ab:04:cb:d0:b7:0a:bc:ee:64:a8:fb: 3d:36:2f:02:21:aa:08:61:ed:ac:ed:14:6b:bc:f9:10:ce:70: cb:d1:f5:58:69:71:8f:9f:b6:a3:fa:b9:a3:dd:83:46:e6:b4: 9b:d3:ac:fc:48:b1:93:d5:32:00:9f:c1:a0:41:d4:20:b4:57: 71:19:41:26:a8:53:49:d9:b6:dc:09:92:b4:22:05:4e:69:f4: 90:35:15:e1:df:8c:1b:bc:23:fa:91:3e:e8:18:88:f5:23:97: 02:3d:0d:3a:c5:92:53:65:70:e2:10:94:db:31:c2:af:48:95: 3b:76:fd:e1:6d:32:16:5d:9b:01:0e:9d:e5:ab:4e:6a:18:66: 68:13:4d:11:1b:fb:14:90:f5:77:5d:c3:26:69:d7:62:83:11: 7b:3c:43:9d:0a:bb:6c:f9:69:9c:38:2c:8f:ad:50:c0:32:eb: 90:03:c7:05:0e:b3:47:68:27:34:c6:e0:85:b4:53:0d:c8:14: 17:14:12:aa:7e:57:bb:02:e3:43:28:b8:25:76:67:0e:41:95: 46:ae:8c:9c:36:64:f2:30:41:f2:c4:51:a8:cb:fc:83:12:bd: d1:89:86:38:53:81:37:5e:7f:ec:6b:38:e5:dd:aa:95:d3:03: ed:a4:6f:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kBbKCf/bY7D567uUyPf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZWY3ODA4MmMwNzI5MmFhYWUyNDBmNmVjZmQzYWZkYmE3 OGI4Y2EwHhcNMjUxMjIwMDcwMTIwWhcNMjUxMjIxMDcwMTIwWjAzMTEwLwYDVQQD EyhiMWM2YTMxMzI4ZjA5YjQ4MmMzZTU4ZjA2ZjIxMjk3NzA4NGQyNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YATMXdZJKcgOVXGW1v4T8jgmJYq a/0w+Y4JwWUBOwZkd9HXAKQ5LChgNk1bqruCWJLnAbZ+zRJcDCqgkzcXouyaaKVw fv+ML8nud8spu6zkWozCaejjBnAjGDPfNSsCwoaylVVYF6L+u0eVnXz/REW9Jzvl //EnVFnF2cNv2kC8mpiQ6Y0ho1ARP7XO1IwOLntL4Q5PsAnD//ExI6KyCAbz8IMz wpw2pkqokHWLSXwPEzXDXTbBd+O+nyJtc5cOqkErR6KCpf2B7UZEvo3Ggq1QvDlR mGTRJ2S1SYC4i9vfsU+rs/uUZaDKFxPWpa2neXugqAfjRrRrQoD9AwN84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHGoxMo8JtILD5Y8G8hKXcITSVIMB8GA1UdIwQY MBaAFEzveAgsBykqquJA9uz9Ov26eLjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEt ODgzYjkwY2QxMzRhLzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEtODgzYjkwY2QxMzRh LzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRMMPBqV Z6sEy9C3CrzuZKj7PTYvAiGqCGHtrO0Ua7z5EM5wy9H1WGlxj5+2o/q5o92DRua0 m9Os/Eixk9UyAJ/BoEHUILRXcRlBJqhTSdm23AmStCIFTmn0kDUV4d+MG7wj+pE+ 6BiI9SOXAj0NOsWSU2Vw4hCU2zHCr0iVO3b94W0yFl2bAQ6d5atOahhmaBNNERv7 FJD1d13DJmnXYoMRezxDnQq7bPlpnDgsj61QwDLrkAPHBQ6zR2gnNMbghbRTDcgU FxQSqn5XuwLjQyi4JXZnDkGVRq6MnDZk8jBB8sRRqMv8gxK90YmGOFOBN15/7Gs4 5d2qldMD7aRvQQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:56 2025 by rpki-client