This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
File:                     tungBTS_H0IC0C5WhBB_A66kYNA.mft (raw, json)
Hash identifier:          4fqC7SOoz0PZjgokaU3eUrP5mocJ6U4RaCA1WDDVycE=
Subject key identifier:   31:3F:8B:2B:FC:D7:63:27:3D:C9:CA:1F:09:37:0C:E6:28:28:9F:65
Authority key identifier: B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0
Certificate issuer:       /CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
Certificate serial:       019AF49BF307D0D26DA2D3E6AAE9AFF08000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
Manifest number:          106F
Signing time:             Sat 06 Dec 2025 17:00:52 +0000
Manifest this update:     Sat 06 Dec 2025 17:00:52 +0000
Manifest next update:     Sun 07 Dec 2025 17:00:52 +0000
Files and hashes:         1: 2tjpWqYFbsp3PJ7j0a8LgZv9o-k.roa (hash: yc1LwHgvBHnrFxChVc9lBWOHj/dQfTKRBxylI9liBwA=)
                          2: tungBTS_H0IC0C5WhBB_A66kYNA.crl (hash: lWLAQpPsMeUoanJuA5QYN9rIuZtnwDMACwN/5rPrpq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f4:9b:f3:07:d0:d2:6d:a2:d3:e6:aa:e9:af:f0:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
        Validity
            Not Before: Dec  6 17:00:52 2025 GMT
            Not After : Dec  7 17:00:52 2025 GMT
        Subject: CN=313f8b2bfcd763273dc9ca1f09370ce628289f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:d9:d7:02:8b:12:31:36:21:29:40:88:87:
                    d2:43:8e:e6:25:15:87:09:64:28:25:9c:5e:43:c6:
                    d2:bb:b8:b5:b8:b1:cf:d7:11:a7:60:7e:ec:68:75:
                    4d:d2:26:fc:01:48:d4:49:1a:a2:ed:c7:d7:6c:32:
                    f4:10:3f:b1:4b:b5:e3:b8:98:25:57:55:77:5b:1d:
                    ec:c0:ce:2c:ca:3a:50:5d:7b:62:dd:ee:e1:c5:e2:
                    09:b5:a6:4c:dc:2e:c2:12:71:33:d7:96:5d:4a:2c:
                    7a:70:7c:cb:88:2d:33:33:c9:61:a1:bd:ab:5f:59:
                    57:78:66:41:40:03:6c:a4:0c:b2:d4:ab:c0:fc:0d:
                    a3:63:27:81:5e:11:f7:7c:4f:a1:fb:ec:0f:c1:12:
                    18:43:c6:11:33:92:0f:13:04:51:83:04:61:f9:54:
                    a3:4a:1c:7a:37:d6:21:d4:16:ea:1d:02:67:63:0e:
                    7e:20:11:e1:10:36:09:f9:73:1f:0e:c3:a5:92:53:
                    10:13:c4:d8:03:9f:96:98:ad:bb:3b:99:05:88:ff:
                    23:23:21:51:9f:ab:43:07:7f:83:94:90:28:b9:49:
                    4b:31:4d:f6:bc:b8:68:86:04:d1:43:c6:3b:ab:b8:
                    2e:50:1c:05:f7:48:ea:8c:c6:8e:ba:0b:dc:e0:75:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3F:8B:2B:FC:D7:63:27:3D:C9:CA:1F:09:37:0C:E6:28:28:9F:65
            X509v3 Authority Key Identifier:
                keyid:B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:df:f4:d2:1e:e0:67:d1:b2:7c:39:79:ee:50:d6:b2:23:83:
         b6:88:f9:0f:97:36:48:63:9e:e5:a6:53:5c:0b:58:7c:be:8a:
         75:d4:54:21:e5:c0:c3:c9:b1:79:ef:cf:f7:9d:9a:69:6f:37:
         4f:50:25:06:1d:60:e1:58:21:2c:ba:45:56:fe:5d:bc:48:c3:
         bc:dd:14:e7:32:d1:26:b5:16:43:c0:6d:c4:f5:17:1d:8a:f2:
         39:4d:3e:9d:d7:7f:99:d9:a4:7a:67:35:69:48:af:7f:45:06:
         04:90:b7:63:1c:d0:0c:28:7d:08:96:b2:ca:8d:34:30:0c:e8:
         7a:cd:36:39:eb:ec:8b:67:d1:d9:6e:85:2d:60:d7:a4:3e:4e:
         de:f3:88:a9:da:33:e3:7c:2b:08:22:08:55:12:55:4c:19:64:
         77:53:d3:7d:8c:72:04:33:53:10:ce:9c:e0:05:88:e2:bf:18:
         18:73:03:24:ce:be:88:95:8a:3e:1b:64:ab:fb:41:2c:df:26:
         18:1c:37:5e:e9:7e:87:66:14:e8:ea:1a:e1:c7:c9:8f:77:1c:
         ac:c0:22:55:d7:0d:1b:a7:65:e6:e2:8b:5a:c4:66:15:3e:0f:
         9b:20:c3:1a:17:a5:4a:3d:a1:87:3a:69:8d:18:ac:79:9d:b0:
         52:cf:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:41:58 2025 by rpki-client