This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json) Hash identifier: Of2AaLuHOMU1KIhVhnfcrBbKtKTPCYKFEaFVs0aE9+Q= Subject key identifier: 49:D0:CE:C2:BC:C5:8B:D5:0A:49:48:15:14:F8:6D:09:8C:BB:EC:7D Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Certificate serial: 019B2C667E2DB4CB93DA2E8C5C056395DB6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 13:01:13 +0000 Manifest this update: Wed 17 Dec 2025 13:01:13 +0000 Manifest next update: Thu 18 Dec 2025 13:01:13 +0000 Files and hashes: 1: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: X/JZNhLS+bIY/tqPiaANdsz+t90E7aB8U/wk8pKJcZE=) 2: kE8LdGAFW614HUcjN1MoZxFokJs.roa (hash: XYMGtkKoA87TX5nzm+UQ3ylduTU9EvUGKlmdAtXqyu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:7e:2d:b4:cb:93:da:2e:8c:5c:05:63:95:db:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Validity Not Before: Dec 17 13:01:13 2025 GMT Not After : Dec 18 13:01:13 2025 GMT Subject: CN=49d0cec2bcc58bd50a49481514f86d098cbbec7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:a1:16:ed:41:70:55:d3:a9:22:b9:1b:c5: 87:10:f0:a0:98:0a:12:17:54:3f:9a:d6:0d:a7:99: 93:d1:90:40:a1:7d:66:50:e2:ac:1d:1f:b0:7f:cc: aa:41:4b:1e:86:1d:c6:b0:ec:08:b3:42:4d:56:ca: 9c:74:17:7b:bd:ec:ac:00:aa:83:6f:8a:b8:a0:83: 42:74:92:39:8d:2e:c7:62:71:35:32:11:bc:6e:3e: 91:0d:36:54:6f:3c:5a:30:e0:e2:df:02:5f:6f:4c: 9e:e4:2a:20:24:08:bc:91:4b:16:b3:d1:19:7e:7e: 94:77:d4:d6:ab:76:04:95:36:d1:b5:ef:cd:5c:41: 2b:f4:b4:56:e0:90:e3:33:75:0d:d3:31:83:85:ae: e8:26:98:a7:a2:6d:df:c6:ae:8b:6f:9d:df:ed:55: 03:1e:32:fc:ea:2e:15:93:02:0b:ce:ff:11:3d:71: b5:91:07:8b:89:7e:82:18:82:d5:32:2c:95:c6:c3: 1e:50:b8:a0:75:fe:58:e2:f0:fb:ad:0b:a5:3f:f3: ac:36:a3:23:eb:94:e1:d7:66:e0:5f:95:fd:b3:bb: 25:67:6a:01:25:af:d7:94:90:ab:0d:7f:5e:7a:f4: 1c:fb:5c:f9:00:79:33:a7:80:2e:a5:13:4d:5c:24: 1f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D0:CE:C2:BC:C5:8B:D5:0A:49:48:15:14:F8:6D:09:8C:BB:EC:7D X509v3 Authority Key Identifier: keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c5:87:e1:0a:83:36:26:27:ab:8c:39:2d:19:b3:55:fc:4e: a6:bf:4c:7c:b0:53:1a:9e:c1:66:fd:0a:ad:df:da:70:c6:ba: 06:bd:0f:db:4b:f5:2a:94:1b:4b:12:e9:ef:25:20:10:8a:91: 56:3c:1d:2a:d8:03:32:21:8f:df:07:4e:1d:56:88:9b:87:95: 43:cd:a8:1c:cd:a8:fa:0a:3a:29:f4:15:79:6b:c1:be:bc:34: 61:e5:b7:e3:1d:8f:94:ec:7c:6e:f4:c4:06:d2:58:74:8d:22: 3a:84:ca:e8:90:aa:26:73:c1:66:7d:fc:bc:20:b8:e5:3d:f5: 07:23:c9:08:2d:8e:43:f1:17:61:ec:8a:1e:f1:48:7f:1a:63: 78:72:ac:4f:11:f8:66:07:09:b4:9f:f7:7b:cc:d0:f4:42:e9: c9:93:10:a2:d1:07:c4:5e:42:52:6c:59:ab:97:3f:9f:34:31: 00:d0:37:3e:1c:95:9d:65:2f:c6:bf:d3:75:87:b6:bd:77:21: 2b:89:83:c3:32:b1:15:3e:d8:c2:9f:85:c7:9f:84:f7:b2:b8: bd:ff:ee:51:25:07:6d:20:3c:f3:07:69:79:16:ba:fc:a3:77: 2a:bb:c3:25:8f:96:ad:c3:d4:06:24:75:4b:ab:93:cf:1e:8c: 2e:45:02:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZn4ttMuT2i6MXAVjldtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjZkZTNjZDkxMGYzYmZmN2ZmODVkZWQ0NTJjNDMxYjFl OGE1MjAwHhcNMjUxMjE3MTMwMTEzWhcNMjUxMjE4MTMwMTEzWjAzMTEwLwYDVQQD Eyg0OWQwY2VjMmJjYzU4YmQ1MGE0OTQ4MTUxNGY4NmQwOThjYmJlYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseKhFu1BcFXTqSK5G8WHEPCgmAoS F1Q/mtYNp5mT0ZBAoX1mUOKsHR+wf8yqQUsehh3GsOwIs0JNVsqcdBd7veysAKqD b4q4oINCdJI5jS7HYnE1MhG8bj6RDTZUbzxaMODi3wJfb0ye5CogJAi8kUsWs9EZ fn6Ud9TWq3YElTbRte/NXEEr9LRW4JDjM3UN0zGDha7oJpinom3fxq6Lb53f7VUD HjL86i4VkwILzv8RPXG1kQeLiX6CGILVMiyVxsMeULigdf5Y4vD7rQulP/OsNqMj 65Th12bgX5X9s7slZ2oBJa/XlJCrDX9eevQc+1z5AHkzp4AupRNNXCQfNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnQzsK8xYvVCklIFRT4bQmMu+x9MB8GA1UdIwQY MBaAFEy23jzZEPO/9/+F3tRSxDGx6KUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgt MDNmNjA0MzI0ZmNmLzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgtMDNmNjA0MzI0ZmNm LzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMWH4QqD NiYnq4w5LRmzVfxOpr9MfLBTGp7BZv0Krd/acMa6Br0P20v1KpQbSxLp7yUgEIqR VjwdKtgDMiGP3wdOHVaIm4eVQ82oHM2o+go6KfQVeWvBvrw0YeW34x2PlOx8bvTE BtJYdI0iOoTK6JCqJnPBZn38vCC45T31ByPJCC2OQ/EXYeyKHvFIfxpjeHKsTxH4 ZgcJtJ/3e8zQ9ELpyZMQotEHxF5CUmxZq5c/nzQxANA3PhyVnWUvxr/TdYe2vXch K4mDwzKxFT7Ywp+Fx5+E97K4vf/uUSUHbSA88wdpeRa6/KN3KrvDJY+WrcPUBiR1 S6uTzx6MLkUC8Q== -----END CERTIFICATE-----Generated at Wed Dec 17 20:13:03 2025 by rpki-client