This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json) Hash identifier: jqVGvHQlpn1Z28K29mBJoy+vegfPws1FkTxcSTt7WM4= Subject key identifier: 44:77:50:90:1B:2E:69:DC:99:9F:3F:74:EB:FE:3F:C3:66:BA:F0:9A Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08 Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008 Certificate serial: 019B5D532F8FB68FB8385FF4FD26EC68AE04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft Manifest number: 1795 Signing time: Sat 27 Dec 2025 01:01:31 +0000 Manifest this update: Sat 27 Dec 2025 01:01:31 +0000 Manifest next update: Sun 28 Dec 2025 01:01:31 +0000 Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: jUK9iEkp+wzwQoIaU0Vy/hWmdNClI7aslJ5LwTWTQKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:2f:8f:b6:8f:b8:38:5f:f4:fd:26:ec:68:ae:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008 Validity Not Before: Dec 27 01:01:31 2025 GMT Not After : Dec 28 01:01:31 2025 GMT Subject: CN=447750901b2e69dc999f3f74ebfe3fc366baf09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:54:3a:63:51:e5:16:b6:87:59:5f:fa:97: f6:5e:81:d1:f4:7c:82:34:7b:ea:7d:0c:91:02:15: 9f:6a:fa:69:25:de:c6:69:45:26:21:de:62:ba:09: 99:c2:c6:0e:93:12:ab:15:63:a9:b4:76:be:b3:76: 3c:d2:88:27:43:5b:75:3d:bb:8d:ab:cb:8a:d3:36: 13:82:ce:d1:2a:25:49:dd:aa:4a:bf:77:f3:43:8e: 3e:5c:39:7f:1b:85:50:14:b6:d6:d0:0e:d1:04:f3: b8:f5:26:e6:1f:62:b6:f5:c6:2e:cd:f6:e9:54:ad: d0:7c:4a:29:a7:ef:fd:7e:8e:1f:59:df:be:4d:7b: 03:5f:c9:b3:ad:ea:b7:43:d1:de:1c:dc:13:69:44: ea:b5:f2:c0:bc:1a:e6:15:84:72:7e:d4:e7:fb:bd: 0d:73:62:4b:ee:d0:65:81:84:28:85:7d:c9:6b:15: bb:13:32:8f:59:b8:98:d8:a0:78:2c:e3:ab:17:2a: ad:a5:2a:cb:7f:1f:5f:50:d3:53:de:c6:da:20:4c: 0c:7b:8b:be:7f:66:ba:94:cf:64:8b:9e:0c:d6:15: 31:33:25:11:9f:de:d2:cd:67:6c:4e:a5:b4:be:c6: 68:55:78:75:54:1f:ce:04:f1:ac:8d:f0:19:7c:23: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:77:50:90:1B:2E:69:DC:99:9F:3F:74:EB:FE:3F:C3:66:BA:F0:9A X509v3 Authority Key Identifier: keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8c:5e:a0:eb:38:2f:93:86:38:33:d7:4a:0c:3b:ba:0e:ff: 02:2f:45:eb:2a:c6:c3:25:7e:b4:90:7b:1b:ec:19:c6:a1:58: e6:e4:da:0d:8e:eb:2b:ab:f1:b2:d2:92:12:58:25:30:13:b4: e8:46:47:41:93:68:4f:0b:0e:43:95:43:87:ce:9f:76:4c:ab: b8:db:47:01:09:2c:cf:fb:4f:1c:b5:8d:3f:63:fa:cc:ea:f6: 4b:55:1e:62:3d:dc:5d:49:d5:91:33:5d:6b:ce:59:12:1e:ec: 08:fd:c4:96:61:f5:6c:15:ab:86:5f:0d:89:f6:0d:58:c2:9f: 5a:bb:ea:c9:64:56:4c:16:aa:14:5f:29:8f:31:ff:98:55:91: 43:00:9a:b9:53:fe:32:d8:60:6e:a8:45:b0:9b:2e:52:26:b8: b4:51:e9:ed:43:36:e4:0f:78:46:3f:39:86:93:0c:6b:f9:fe: 4f:17:17:da:5e:4e:7a:69:fb:c7:4d:70:e9:7d:e6:40:cf:fa: 47:a0:51:f2:f5:bd:b1:c2:82:9d:17:cd:0e:43:76:c7:7f:52: 9e:70:f2:41:eb:35:2e:26:90:df:c8:bc:61:fa:a5:f9:76:0a: e8:d8:86:fc:ba:38:a9:17:94:82:46:45:cf:d3:91:28:65:05: f5:ea:0c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUy+Pto+4OF/0/SbsaK4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZWQ0Yzc4Njc0MjllZTAyZjVjZGMxYWZiZWFhNWJhNzEz MzYwMDgwHhcNMjUxMjI3MDEwMTMxWhcNMjUxMjI4MDEwMTMxWjAzMTEwLwYDVQQD Eyg0NDc3NTA5MDFiMmU2OWRjOTk5ZjNmNzRlYmZlM2ZjMzY2YmFmMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSpUOmNR5Ra2h1lf+pf2XoHR9HyC NHvqfQyRAhWfavppJd7GaUUmId5iugmZwsYOkxKrFWOptHa+s3Y80ognQ1t1PbuN q8uK0zYTgs7RKiVJ3apKv3fzQ44+XDl/G4VQFLbW0A7RBPO49SbmH2K29cYuzfbp VK3QfEopp+/9fo4fWd++TXsDX8mzreq3Q9HeHNwTaUTqtfLAvBrmFYRyftTn+70N c2JL7tBlgYQohX3JaxW7EzKPWbiY2KB4LOOrFyqtpSrLfx9fUNNT3sbaIEwMe4u+ f2a6lM9ki54M1hUxMyURn97SzWdsTqW0vsZoVXh1VB/OBPGsjfAZfCMAWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER3UJAbLmncmZ8/dOv+P8NmuvCaMB8GA1UdIwQY MBaAFEztTHhnQp7gL1zcGvvqpbpxM2AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAt MTYwY2RlODhlZDNmLzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAtMTYwY2RlODhlZDNm LzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoxeoOs4 L5OGODPXSgw7ug7/Ai9F6yrGwyV+tJB7G+wZxqFY5uTaDY7rK6vxstKSElglMBO0 6EZHQZNoTwsOQ5VDh86fdkyruNtHAQksz/tPHLWNP2P6zOr2S1UeYj3cXUnVkTNd a85ZEh7sCP3ElmH1bBWrhl8NifYNWMKfWrvqyWRWTBaqFF8pjzH/mFWRQwCauVP+ MthgbqhFsJsuUia4tFHp7UM25A94Rj85hpMMa/n+TxcX2l5Oemn7x01w6X3mQM/6 R6BR8vW9scKCnRfNDkN2x39SnnDyQes1LiaQ38i8Yfql+XYK6NiG/Lo4qReUgkZF z9ORKGUF9eoMnQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:30 2025 by rpki-client