This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json) Hash identifier: 38164aeoxuhHS07IpQ0udn+9uauAxLN3ii2WPH9IsiI= Subject key identifier: A4:E9:38:E2:AF:21:F7:D4:15:8C:15:CB:65:84:34:A0:5B:F5:7D:D1 Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Certificate serial: 019B3B6B945E540525AFD92BCD2EC01839D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft Manifest number: 131B Signing time: Sat 20 Dec 2025 11:01:04 +0000 Manifest this update: Sat 20 Dec 2025 11:01:04 +0000 Manifest next update: Sun 21 Dec 2025 11:01:04 +0000 Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=) 2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=) 3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=) 4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: oE+OnTpPiuMRteb5sKZrq3OOLeTTezbJOJ1fcYPD3a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:94:5e:54:05:25:af:d9:2b:cd:2e:c0:18:39:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Validity Not Before: Dec 20 11:01:04 2025 GMT Not After : Dec 21 11:01:04 2025 GMT Subject: CN=a4e938e2af21f7d4158c15cb658434a05bf57dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:5e:fc:74:53:80:24:0b:1f:40:32:63:d5: 4b:c4:43:30:ac:c5:b4:0e:26:6e:5c:10:1b:7f:80: 11:34:8a:d8:0f:d5:c8:6d:44:bb:55:44:76:6c:10: f2:9a:6e:32:c1:f5:2c:a9:8b:ff:a1:e3:98:6c:c8: 58:91:e5:20:8d:32:13:4b:d4:d0:f8:62:8f:65:fd: 85:b8:c3:a1:0a:54:de:80:5a:6b:88:b6:ee:0e:de: a8:d0:19:7b:9f:c8:5f:1f:59:a5:85:df:d1:4a:a7: 68:13:ef:a4:25:7c:60:89:7c:d5:d2:aa:b6:7d:e4: 9f:5f:0d:d4:cd:72:aa:f4:80:02:da:04:34:55:58: e0:54:8a:c2:71:05:22:08:cd:2c:73:9a:11:96:14: 61:6d:5a:d9:38:59:3f:01:66:7a:72:34:b7:32:a6: a3:21:53:78:67:47:f1:cb:02:00:de:3e:38:72:6a: db:00:dd:d7:80:67:53:6d:e8:24:85:15:e6:e9:d4: 65:f6:29:8a:93:44:cc:d4:b0:d7:b0:4d:6a:06:97: bc:b4:d4:9a:74:0b:2b:46:43:7f:d6:17:d1:6a:57: af:3c:55:56:1a:9f:3d:08:66:18:c7:e7:5b:14:98: c4:17:c7:eb:66:cd:1f:ca:62:95:26:94:14:e8:20: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E9:38:E2:AF:21:F7:D4:15:8C:15:CB:65:84:34:A0:5B:F5:7D:D1 X509v3 Authority Key Identifier: keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:29:6d:72:40:31:a5:05:f3:19:e4:1c:e5:e4:db:05:09:12: 77:80:a9:0b:5d:52:19:1a:1a:11:6c:68:95:4e:14:13:df:7c: 0b:88:a2:89:af:60:97:1e:d9:6d:dc:bc:10:03:46:61:23:5c: 07:91:e7:d0:83:8a:76:e1:39:f6:2c:72:3f:37:3d:5c:6d:2e: 9f:9a:8f:2b:35:f7:7b:15:c3:c0:e2:e2:f4:bc:4c:54:6a:c4: 3b:d5:9e:0b:c6:0c:e1:ea:22:81:61:fb:a6:2d:42:71:f2:ad: 69:69:43:0c:ef:e0:96:74:a9:75:9d:37:03:de:e0:28:ad:42: f1:4c:d7:4e:e8:b6:07:22:a8:df:fb:ee:03:e8:04:b0:5e:32: 0b:d1:1d:37:a4:0b:b5:f3:01:a3:19:70:45:57:58:4e:d4:32: e8:d8:47:fd:3a:4e:c0:e5:74:75:78:83:ff:97:21:3c:0d:ab: e2:41:7d:66:57:ce:03:17:8f:da:12:49:42:15:38:68:f3:82: 09:64:0c:91:53:b8:f8:c5:1d:40:b2:e6:90:33:72:76:0d:a2: c0:69:99:45:1e:20:f4:b4:72:ad:20:6c:0f:12:c8:3b:da:12: 73:32:2f:e7:29:32:13:37:26:54:5b:49:32:7d:1c:79:d8:ba: ac:5f:3a:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5ReVAUlr9krzS7AGDnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh YWEwZmQwHhcNMjUxMjIwMTEwMTA0WhcNMjUxMjIxMTEwMTA0WjAzMTEwLwYDVQQD EyhhNGU5MzhlMmFmMjFmN2Q0MTU4YzE1Y2I2NTg0MzRhMDViZjU3ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbde/HRTgCQLH0AyY9VLxEMwrMW0 DiZuXBAbf4ARNIrYD9XIbUS7VUR2bBDymm4ywfUsqYv/oeOYbMhYkeUgjTITS9TQ +GKPZf2FuMOhClTegFpriLbuDt6o0Bl7n8hfH1mlhd/RSqdoE++kJXxgiXzV0qq2 feSfXw3UzXKq9IAC2gQ0VVjgVIrCcQUiCM0sc5oRlhRhbVrZOFk/AWZ6cjS3Mqaj IVN4Z0fxywIA3j44cmrbAN3XgGdTbegkhRXm6dRl9imKk0TM1LDXsE1qBpe8tNSa dAsrRkN/1hfRalevPFVWGp89CGYYx+dbFJjEF8frZs0fymKVJpQU6CAOTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTpOOKvIffUFYwVy2WENKBb9X3RMB8GA1UdIwQY MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyltckAx pQXzGeQc5eTbBQkSd4CpC11SGRoaEWxolU4UE998C4iiia9glx7Zbdy8EANGYSNc B5Hn0IOKduE59ixyPzc9XG0un5qPKzX3exXDwOLi9LxMVGrEO9WeC8YM4eoigWH7 pi1CcfKtaWlDDO/glnSpdZ03A97gKK1C8UzXTui2ByKo3/vuA+gEsF4yC9EdN6QL tfMBoxlwRVdYTtQy6NhH/TpOwOV0dXiD/5chPA2r4kF9ZlfOAxeP2hJJQhU4aPOC CWQMkVO4+MUdQLLmkDNydg2iwGmZRR4g9LRyrSBsDxLIO9oSczIv5ykyEzcmVFtJ Mn0cedi6rF86WA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:59:24 2025 by rpki-client