This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json) Hash identifier: rMp++JJRTwuuYHjTqc0Sy0RnABWThlcJShFwGdZtVas= Subject key identifier: 08:D1:DF:70:6E:F3:8F:6E:7C:F6:9D:97:E8:61:D9:D5:B1:C4:1B:4F Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb Certificate serial: 019B35A035061CDE61864454ED613136761F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 08:00:50 +0000 Manifest this update: Fri 19 Dec 2025 08:00:50 +0000 Manifest next update: Sat 20 Dec 2025 08:00:50 +0000 Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: rXNC3yw6TlMLbrRmHDRi21T+J5PM2yHyVNrUxNtl9Xg=) 2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:35:06:1c:de:61:86:44:54:ed:61:31:36:76:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb Validity Not Before: Dec 19 08:00:50 2025 GMT Not After : Dec 20 08:00:50 2025 GMT Subject: CN=08d1df706ef38f6e7cf69d97e861d9d5b1c41b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:62:64:06:7d:9b:79:34:f6:69:97:6e:0b: 0f:10:d0:2f:27:1f:5d:26:cd:24:70:20:df:96:05: 4d:74:00:e1:c8:01:f8:d6:0d:46:88:eb:fa:3c:df: e9:1f:1d:dc:f2:9f:06:0e:b6:25:35:36:2c:2f:14: ce:33:d3:b6:46:41:b8:d7:57:11:c2:38:3d:73:f6: d2:dd:22:37:20:98:00:c6:36:35:0d:be:a9:17:80: 99:da:31:5a:89:d3:e2:46:d4:56:48:d3:b8:40:c5: 28:c4:37:0b:48:20:23:f0:39:9d:07:b8:1d:06:7c: 16:57:0b:e3:9e:0f:4d:55:cc:c5:07:fc:bd:3a:51: cd:0b:62:10:03:61:ea:32:65:93:1b:e2:2a:c2:09: 99:a1:56:88:e5:c1:2b:16:d8:2b:01:f5:ca:b9:7a: 1f:8c:b3:1d:45:27:bf:01:65:39:e3:09:9b:4e:f0: 2f:d6:b9:cb:5c:44:eb:ed:4b:76:de:b1:4f:cd:f7: 71:9e:a5:2d:a0:b7:e1:37:bf:b4:01:cf:6f:3f:f3: 4d:57:4e:22:d1:5f:34:ee:9e:9d:f5:5d:08:d1:28: 7f:22:52:d5:39:d7:2c:86:65:8a:9e:65:5f:87:37: 97:02:c9:45:8f:49:f9:5c:66:67:05:d0:a4:7c:ce: b4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D1:DF:70:6E:F3:8F:6E:7C:F6:9D:97:E8:61:D9:D5:B1:C4:1B:4F X509v3 Authority Key Identifier: keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f0:85:7b:e9:9d:2b:c9:5f:d6:dd:05:62:c8:ff:0e:dd:2b: 21:a2:6b:a3:d2:7e:55:44:fe:4c:f1:49:cd:db:91:c1:f7:3f: f3:a4:e0:db:ba:b2:3b:83:f8:97:0f:b7:28:fa:c0:7d:97:16: ca:3b:de:a1:f3:c1:62:67:d6:7f:d5:71:70:24:d8:6e:5f:9c: 3e:b1:b3:53:f9:35:36:43:7d:2e:82:dc:c5:1e:9d:38:56:a7: 8d:9e:5e:2a:9b:f3:c2:8c:1d:53:27:26:78:d7:2b:ff:db:18: 0a:b9:e0:ca:94:4a:fd:e5:56:90:32:55:2e:d8:fb:7c:b6:93: 2b:04:f3:4a:23:89:68:1f:68:94:b2:17:88:f6:76:e0:08:74: 9f:f9:2f:7c:57:22:bf:5d:e9:35:ed:fd:83:09:83:2d:15:7f: 1d:b5:b9:54:b2:8c:aa:d6:57:42:73:52:63:85:1e:5c:b4:d8: 52:c6:bc:ae:60:58:88:ab:6d:69:d0:70:06:2b:05:6a:34:1e: 01:c4:61:28:fe:a2:9a:cd:21:4f:40:d6:f7:d0:e6:45:d2:85: 10:05:e6:92:c1:50:7a:64:31:ae:2a:97:98:53:e3:30:d2:5d: 43:cf:e9:aa:fa:b7:10:41:8b:c0:d0:c9:19:ee:1f:8b:bb:20: 26:9a:a3:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oDUGHN5hhkRU7WExNnYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy OGE1ZWIwHhcNMjUxMjE5MDgwMDUwWhcNMjUxMjIwMDgwMDUwWjAzMTEwLwYDVQQD EygwOGQxZGY3MDZlZjM4ZjZlN2NmNjlkOTdlODYxZDlkNWIxYzQxYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN9iZAZ9m3k09mmXbgsPENAvJx9d Js0kcCDflgVNdADhyAH41g1GiOv6PN/pHx3c8p8GDrYlNTYsLxTOM9O2RkG411cR wjg9c/bS3SI3IJgAxjY1Db6pF4CZ2jFaidPiRtRWSNO4QMUoxDcLSCAj8DmdB7gd BnwWVwvjng9NVczFB/y9OlHNC2IQA2HqMmWTG+IqwgmZoVaI5cErFtgrAfXKuXof jLMdRSe/AWU54wmbTvAv1rnLXETr7Ut23rFPzfdxnqUtoLfhN7+0Ac9vP/NNV04i 0V807p6d9V0I0Sh/IlLVOdcshmWKnmVfhzeXAslFj0n5XGZnBdCkfM60CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjR33Bu849ufPadl+hh2dWxxBtPMB8GA1UdIwQY MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfCFe+md K8lf1t0FYsj/Dt0rIaJro9J+VUT+TPFJzduRwfc/86Tg27qyO4P4lw+3KPrAfZcW yjveofPBYmfWf9VxcCTYbl+cPrGzU/k1NkN9LoLcxR6dOFanjZ5eKpvzwowdUycm eNcr/9sYCrngypRK/eVWkDJVLtj7fLaTKwTzSiOJaB9olLIXiPZ24Ah0n/kvfFci v13pNe39gwmDLRV/HbW5VLKMqtZXQnNSY4UeXLTYUsa8rmBYiKttadBwBisFajQe AcRhKP6ims0hT0DW99DmRdKFEAXmksFQemQxriqXmFPjMNJdQ8/pqvq3EEGLwNDJ Ge4fi7sgJpqjaw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:32:04 2025 by rpki-client