This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft File: ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json) Hash identifier: MV9zpP/IHIpQK1sCJmbtolh9+aUHKznhic0BfNalNdw= Subject key identifier: C0:7E:91:69:C2:6B:09:3C:C5:17:FC:86:AC:C2:CC:BC:F7:21:EC:3A Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC Certificate issuer: /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Certificate serial: 019B2E1D74C7FB7D1157F81A4897D04CD81B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft Manifest number: 0623 Signing time: Wed 17 Dec 2025 21:00:40 +0000 Manifest this update: Wed 17 Dec 2025 21:00:40 +0000 Manifest next update: Thu 18 Dec 2025 21:00:40 +0000 Files and hashes: 1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=) 2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: w5A2P1KJuov7IpDZ5eSQQgd11ylyso2MovAfU+HN858=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:74:c7:fb:7d:11:57:f8:1a:48:97:d0:4c:d8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc Validity Not Before: Dec 17 21:00:40 2025 GMT Not After : Dec 18 21:00:40 2025 GMT Subject: CN=c07e9169c26b093cc517fc86acc2ccbcf721ec3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:76:18:16:c2:9c:8b:67:dd:04:9a:dc:71:3b: f1:20:cd:d7:68:c9:df:bc:94:ff:bb:0c:0e:d6:4e: c2:ba:e7:a2:89:f9:26:58:46:f2:14:fc:c8:0d:17: 1f:3f:bc:f1:1b:e5:22:b9:2d:9a:8f:f8:e0:ec:41: 64:e2:e0:65:67:45:2d:e1:62:93:06:20:20:fd:ab: 74:37:f0:fb:30:8f:23:33:50:de:69:f7:75:9a:a4: 7b:eb:29:33:76:a4:f1:5f:d9:ea:2c:3f:25:d6:ae: 68:d5:9f:56:5e:09:c6:fe:67:7a:96:42:2c:ad:8e: 0b:b6:06:c0:8f:a1:77:32:7d:30:03:0b:f4:f7:45: e0:70:ed:09:ab:09:df:c7:ce:df:42:7a:36:eb:0c: 58:98:3e:dc:53:94:58:18:0b:43:df:e0:8f:25:77: c5:fd:b8:67:bd:fe:bb:c2:82:76:86:79:2a:42:50: 8b:64:fa:ae:99:78:99:5f:26:83:f4:8a:2b:f3:46: 4c:1f:5f:71:de:ce:4a:e2:a5:0f:31:c4:3a:de:c3: 96:44:86:95:7c:32:c3:c4:42:89:4f:e3:26:e2:ba: 2e:7d:b6:82:80:2c:a2:f4:a1:a4:9b:93:0a:0f:0c: 5a:0d:89:9c:8e:42:95:c7:2a:97:66:74:38:9e:78: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:91:69:C2:6B:09:3C:C5:17:FC:86:AC:C2:CC:BC:F7:21:EC:3A X509v3 Authority Key Identifier: keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e0:c8:b0:75:7b:3b:71:00:ab:8b:4a:3d:2f:80:de:1f:50: 60:39:87:f5:d4:42:42:6e:03:ce:91:1a:48:64:4d:95:c0:34: 51:46:45:d4:96:d1:ae:89:fa:72:ec:ac:36:17:5d:67:3c:bc: f0:bf:84:1e:06:60:62:5e:8f:eb:e3:17:7e:50:32:ea:77:e2: d2:b9:39:09:bf:32:23:81:45:eb:27:f0:e0:50:38:fd:df:d5: bc:ce:89:48:fa:c4:b4:57:37:e6:ea:85:9c:6a:58:cb:38:0e: 6c:3c:1c:60:e6:a1:fb:73:bc:85:a4:ce:01:e8:4b:69:84:bb: 7b:bd:68:ab:0d:13:b5:cb:a1:b0:03:23:64:91:12:55:d2:50: 21:1c:af:18:8a:53:e3:8c:e0:3f:2c:0a:55:d9:3a:97:27:65: 5c:3c:ed:ef:02:07:3b:24:33:f0:42:1d:f0:4c:24:33:56:ea: 99:52:f0:3b:75:af:fc:a8:40:5e:fc:e5:81:52:16:5b:03:e6: 3b:f7:b0:55:29:7d:7a:bb:d0:98:d1:9a:fa:95:f1:cd:24:4f: db:c4:ce:5b:db:f5:f7:b2:11:91:84:25:d1:6f:b8:e8:00:ed: 75:f5:84:46:0c:99:52:f7:2d:18:03:3e:f9:d7:a2:98:02:fb: 72:7b:bd:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHXTH+30RV/gaSJfQTNgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlODU5NGViZGM3ZDdjZjdkYTJlMDAzYzg0ZDg2YTdjMWFm ODcxYmMwHhcNMjUxMjE3MjEwMDQwWhcNMjUxMjE4MjEwMDQwWjAzMTEwLwYDVQQD EyhjMDdlOTE2OWMyNmIwOTNjYzUxN2ZjODZhY2MyY2NiY2Y3MjFlYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXYYFsKci2fdBJrccTvxIM3XaMnf vJT/uwwO1k7CuueiifkmWEbyFPzIDRcfP7zxG+UiuS2aj/jg7EFk4uBlZ0Ut4WKT BiAg/at0N/D7MI8jM1Deafd1mqR76ykzdqTxX9nqLD8l1q5o1Z9WXgnG/md6lkIs rY4LtgbAj6F3Mn0wAwv090XgcO0Jqwnfx87fQno26wxYmD7cU5RYGAtD3+CPJXfF /bhnvf67woJ2hnkqQlCLZPqumXiZXyaD9Ior80ZMH19x3s5K4qUPMcQ63sOWRIaV fDLDxEKJT+Mm4roufbaCgCyi9KGkm5MKDwxaDYmcjkKVxyqXZnQ4nni0MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB+kWnCawk8xRf8hqzCzLz3Iew6MB8GA1UdIwQY MBaAFE6FlOvcfXz32i4APITYanwa+HG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUt Y2U5NGUzOGU4MmQ2LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUtY2U5NGUzOGU4MmQ2 LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeDIsHV7 O3EAq4tKPS+A3h9QYDmH9dRCQm4DzpEaSGRNlcA0UUZF1JbRron6cuysNhddZzy8 8L+EHgZgYl6P6+MXflAy6nfi0rk5Cb8yI4FF6yfw4FA4/d/VvM6JSPrEtFc35uqF nGpYyzgObDwcYOah+3O8haTOAehLaYS7e71oqw0TtcuhsAMjZJESVdJQIRyvGIpT 44zgPywKVdk6lydlXDzt7wIHOyQz8EId8EwkM1bqmVLwO3Wv/KhAXvzlgVIWWwPm O/ewVSl9ervQmNGa+pXxzSRP28TOW9v197IRkYQl0W+46ADtdfWERgyZUvctGAM+ +deimAL7cnu9Jw== -----END CERTIFICATE-----Generated at Thu Dec 18 03:52:53 2025 by rpki-client