This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft File: tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft (raw, json) Hash identifier: iQ5wWVrW04mPa4PUtD7agPElIE8kG10yREQp6UTHM8s= Subject key identifier: E9:6E:A6:04:7B:DA:53:25:2B:A0:15:C2:EE:5D:C7:7F:A9:7A:EB:CB Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45 Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845 Certificate serial: 019AF19B494639CC38921291298CB85CA594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl (hash: 5grRh3SVEomVdvuadHHoe8Pi29CysVQth+m4AJ0AKJM=) 2: y75cXyuDLpcYexdmkwYwYU3Mg-w.roa (hash: x/UMSX0QI4HQrUWQqpp/rIJY0lp7ztidnsmz2QLBnXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:49:46:39:cc:38:92:12:91:29:8c:b8:5c:a5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=e96ea6047bda53252ba015c2ee5dc77fa97aebcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:80:1c:f8:4e:e1:47:98:b4:5f:78:26:6d: 17:0a:63:41:54:02:dc:ee:a1:b6:96:13:31:9b:5e: 38:99:3a:10:d5:91:e5:a3:32:8f:90:af:02:8b:45: f8:31:fc:26:35:13:32:2d:da:54:f7:55:95:1c:dd: ff:f6:69:0f:17:4c:26:b2:ff:64:a9:76:82:63:27: 4d:3c:4a:f8:f4:19:e2:2d:61:bb:a8:21:82:bf:12: 49:a3:f4:b8:dc:01:55:77:a0:b9:2c:c8:ee:a6:70: 47:c8:63:5e:bf:bc:6a:5d:af:b0:7c:80:2c:da:1c: 04:5c:cc:c5:44:97:36:27:da:e9:75:ea:9d:15:72: 08:6a:86:9e:7f:46:d4:67:17:d4:8a:6f:4e:a7:94: 80:76:d9:d7:53:5a:93:63:44:0b:ec:49:c8:64:a6: b4:51:db:2a:55:3f:cb:8b:9e:6b:b2:f1:52:7c:0a: c8:79:75:aa:21:da:47:d6:79:62:be:f4:3b:e8:ae: 7f:1b:48:61:ad:3c:6c:6b:40:e8:67:e0:6e:33:c2: 61:bb:e4:74:a5:67:86:15:67:cd:10:9b:d8:ce:eb: 97:55:57:67:ae:e3:0d:66:df:b1:4e:a0:b0:65:60: 6b:3e:6a:a6:0f:0a:dd:d2:f0:db:15:74:09:20:ed: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6E:A6:04:7B:DA:53:25:2B:A0:15:C2:EE:5D:C7:7F:A9:7A:EB:CB X509v3 Authority Key Identifier: keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:55:c0:d2:8d:48:9a:c5:8b:d7:31:b2:54:aa:a1:5a:90:27: e7:68:e8:26:96:c6:9f:a6:94:e0:a9:be:88:bf:80:84:fa:af: 75:1b:91:7e:c7:80:90:5b:dd:62:3a:e4:19:56:47:00:a1:2a: ea:bd:a8:70:85:c6:ed:1b:25:b1:7c:7d:16:c8:3e:62:6c:cc: 86:1e:25:a6:31:e9:89:0d:3c:d5:5e:30:8c:3d:ed:94:41:08: 3e:c4:69:21:50:8a:0a:3d:51:6e:db:85:2e:5f:41:60:4c:71: 7a:87:dd:32:7b:06:c1:5b:81:3d:d0:8e:d6:d6:04:a2:31:f1: 08:1a:43:17:2d:4f:c8:d5:47:3a:60:8a:33:90:4d:9b:d0:19: eb:c7:b7:f2:43:96:ce:70:71:f9:06:41:24:37:62:31:14:a4: 6e:80:1b:65:6e:b2:37:4a:d9:78:2d:6d:6f:bd:b0:e3:df:69: 84:22:3e:db:89:16:03:04:00:53:2f:45:c8:5d:c2:b8:ec:34: 41:cc:f7:f4:40:e1:80:96:3d:e4:d4:e6:8d:d0:e7:9f:11:fb: b8:b2:99:b3:b1:f2:76:3c:0d:b4:af:81:9c:c6:ab:80:b6:b7: 1a:da:b9:95:ea:6c:cd:e5:d1:b8:12:0f:9e:28:7f:e1:a1:13: ec:5c:89:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0lGOcw4khKRKYy4XKWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjUzNzkxOGRkOTAyNTFlYjM2NTM4ZTcxODFjZTkzM2M3 ZWY4NDUwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD EyhlOTZlYTYwNDdiZGE1MzI1MmJhMDE1YzJlZTVkYzc3ZmE5N2FlYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp52AHPhO4UeYtF94Jm0XCmNBVALc 7qG2lhMxm144mToQ1ZHlozKPkK8Ci0X4MfwmNRMyLdpU91WVHN3/9mkPF0wmsv9k qXaCYydNPEr49BniLWG7qCGCvxJJo/S43AFVd6C5LMjupnBHyGNev7xqXa+wfIAs 2hwEXMzFRJc2J9rpdeqdFXIIaoaef0bUZxfUim9Op5SAdtnXU1qTY0QL7EnIZKa0 UdsqVT/Li55rsvFSfArIeXWqIdpH1nlivvQ76K5/G0hhrTxsa0DoZ+BuM8Jhu+R0 pWeGFWfNEJvYzuuXVVdnruMNZt+xTqCwZWBrPmqmDwrd0vDbFXQJIO3sawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlupgR72lMlK6AVwu5dx3+peuvLMB8GA1UdIwQY MBaAFLW1N5GN2QJR6zZTjnGBzpM8fvhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJVM2tZM1pBbEhyTmxPT2NZSE9rengtLUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83NDg2ZmQtM2Y4MS00NTQwLWFhYWEt MGIzZWQyNWY2NmU5LzEvdGJVM2tZM1pBbEhyTmxPT2NZSE9rengtLUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83NDg2ZmQtM2Y4MS00NTQwLWFhYWEtMGIzZWQyNWY2NmU5 LzEvdGJVM2tZM1pBbEhyTmxPT2NZSE9rengtLUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlXA0o1I msWL1zGyVKqhWpAn52joJpbGn6aU4Km+iL+AhPqvdRuRfseAkFvdYjrkGVZHAKEq 6r2ocIXG7RslsXx9Fsg+YmzMhh4lpjHpiQ081V4wjD3tlEEIPsRpIVCKCj1RbtuF Ll9BYExxeofdMnsGwVuBPdCO1tYEojHxCBpDFy1PyNVHOmCKM5BNm9AZ68e38kOW znBx+QZBJDdiMRSkboAbZW6yN0rZeC1tb72w499phCI+24kWAwQAUy9FyF3CuOw0 Qcz39EDhgJY95NTmjdDnnxH7uLKZs7HydjwNtK+BnMargLa3Gtq5lepszeXRuBIP nih/4aET7FyJTw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:56 2025 by rpki-client