This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json) Hash identifier: mTcHpykvPnmr1hJakh1AgCM73agZ8nvrLpgLolgtjjM= Subject key identifier: 1B:98:D4:F1:86:B7:45:56:C7:A6:CE:43:24:0A:C5:F0:5F:1C:0F:37 Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb Certificate serial: 019AF208C910C573DF6A2FFFC359D1D53A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: myBdB/sejqKNu5nNgz2/yxg9eNFVOQKuWUbbCujRg9w=) 2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c9:10:c5:73:df:6a:2f:ff:c3:59:d1:d5:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=1b98d4f186b74556c7a6ce43240ac5f05f1c0f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:b2:96:b0:bb:38:0c:a4:41:fe:02:14:25: 14:7a:6b:66:89:94:87:71:7f:08:7c:58:6b:1a:4f: 83:8d:38:9c:ef:5a:9a:b7:0b:48:3d:8e:6c:4c:7a: 2a:35:f7:e8:51:5d:31:12:7a:9c:16:2e:61:80:e5: f6:2e:f8:c6:07:79:ba:26:73:b9:80:df:f7:b5:d2: 95:48:aa:a7:5b:d3:f8:2a:1d:3b:97:8a:c9:6e:c4: 8a:ac:62:de:87:29:cd:e2:f3:b5:b5:67:24:2f:ae: b7:06:da:62:11:b1:51:d8:c7:b2:e1:c6:d1:d8:1e: 07:22:70:47:48:b8:e6:29:90:48:a4:63:21:68:99: 93:8c:1b:9f:d4:c7:49:7a:d9:0d:75:df:85:d7:88: e8:a3:7b:88:de:18:5d:66:63:62:d3:0e:66:55:d9: 13:b3:a5:1a:f2:44:6f:f9:8e:5b:b5:af:ba:13:2d: ba:77:34:a7:8f:e4:8a:bf:bf:95:dd:4a:26:7b:ad: 08:b9:d7:d1:6e:1f:87:0f:56:2a:14:8d:03:06:06: 46:c5:37:fa:8c:3f:ed:c0:8b:f0:d4:6a:29:70:83: d2:d6:1c:48:69:d4:e1:52:a2:11:a0:87:f9:11:cc: 2e:03:fd:fc:db:b8:cb:67:d5:6f:5d:6c:b4:cd:c4: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:98:D4:F1:86:B7:45:56:C7:A6:CE:43:24:0A:C5:F0:5F:1C:0F:37 X509v3 Authority Key Identifier: keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:a0:c0:71:b0:27:3c:97:27:c2:49:78:7f:d1:3a:eb:2c: d2:2c:a9:50:29:f7:bd:7d:40:a4:0b:99:13:7c:af:79:5c:17: 2f:32:f3:7e:03:67:65:fd:1e:82:12:72:77:7d:14:d0:67:74: d7:95:3f:c4:ff:d6:18:e5:7b:ce:5d:eb:61:8a:12:0a:5b:71: 39:d9:96:d3:87:0a:d2:07:26:87:f9:f7:9b:f7:66:cc:8e:0c: ac:18:e4:aa:99:46:63:c7:0d:48:dc:db:db:31:2f:f8:b7:a1: 0b:b7:a1:96:c8:dd:85:c0:d1:28:57:f4:98:33:56:82:58:62: 45:4a:dc:e6:28:d6:5d:79:4b:a8:4d:f1:ed:4c:63:7f:1b:fe: 04:17:de:36:4f:8a:3e:42:d0:00:83:b6:65:ce:1f:79:14:60: 9a:fe:5b:93:5f:ac:14:65:1b:79:be:91:85:a9:6e:2a:bd:03: 8a:34:65:7b:8d:84:04:55:d1:d3:9c:de:ab:81:7f:7d:3d:5e: bc:90:c1:55:cb:81:e7:e2:57:63:fe:83:6b:a8:45:77:9c:a1: d8:64:1b:9e:ba:5a:f5:9d:d6:d3:41:9b:f1:eb:1a:20:08:d7: 07:a2:7c:d9:d9:79:5f:2c:22:b9:00:2e:e1:41:10:d2:69:3f: 4a:35:84:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMkQxXPfai//w1nR1TogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy OGE1ZWIwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EygxYjk4ZDRmMTg2Yjc0NTU2YzdhNmNlNDMyNDBhYzVmMDVmMWMwZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuceylrC7OAykQf4CFCUUemtmiZSH cX8IfFhrGk+DjTic71qatwtIPY5sTHoqNffoUV0xEnqcFi5hgOX2LvjGB3m6JnO5 gN/3tdKVSKqnW9P4Kh07l4rJbsSKrGLehynN4vO1tWckL663BtpiEbFR2Mey4cbR 2B4HInBHSLjmKZBIpGMhaJmTjBuf1MdJetkNdd+F14joo3uI3hhdZmNi0w5mVdkT s6Ua8kRv+Y5bta+6Ey26dzSnj+SKv7+V3Uome60IudfRbh+HD1YqFI0DBgZGxTf6 jD/twIvw1GopcIPS1hxIadThUqIRoIf5EcwuA/3827jLZ9VvXWy0zcR0RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuY1PGGt0VWx6bOQyQKxfBfHA83MB8GA1UdIwQY MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj+gwHGw JzyXJ8JJeH/ROuss0iypUCn3vX1ApAuZE3yveVwXLzLzfgNnZf0eghJyd30U0Gd0 15U/xP/WGOV7zl3rYYoSCltxOdmW04cK0gcmh/n3m/dmzI4MrBjkqplGY8cNSNzb 2zEv+LehC7ehlsjdhcDRKFf0mDNWglhiRUrc5ijWXXlLqE3x7Uxjfxv+BBfeNk+K PkLQAIO2Zc4feRRgmv5bk1+sFGUbeb6RhaluKr0DijRle42EBFXR05zeq4F/fT1e vJDBVcuB5+JXY/6Da6hFd5yh2GQbnrpa9Z3W00Gb8esaIAjXB6J82dl5XywiuQAu 4UEQ0mk/SjWEgA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:57 2025 by rpki-client