This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft File: E02_TBOroXoEwLLyRbb1iQyAUWM.mft (raw, json) Hash identifier: W1kymQxo8jLl55XSeaYApnRln+DD63Ndf6WoeEMK7Sc= Subject key identifier: 80:59:50:3F:B4:D1:BF:3A:E1:37:1D:98:C9:2C:40:26:FF:08:CC:75 Authority key identifier: 13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63 Certificate issuer: /CN=134dbf4c13aba17a04c0b2f245b6f5890c805163 Certificate serial: 019B40C97D733B11F77CED6962BCD06F4C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft Manifest number: 070B Signing time: Sun 21 Dec 2025 12:01:45 +0000 Manifest this update: Sun 21 Dec 2025 12:01:45 +0000 Manifest next update: Mon 22 Dec 2025 12:01:45 +0000 Files and hashes: 1: 5-Vfz-IQSTvzUAtK9wGd7zEsU_U.roa (hash: vXYBCiKDNQPitPz23Jn0ySE4Ex9vAmhZFSyQDy8eAqo=) 2: E02_TBOroXoEwLLyRbb1iQyAUWM.crl (hash: m/CESGvMKx0KMagM315ygtZP0d/vuPQveKCLUFxNLKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:7d:73:3b:11:f7:7c:ed:69:62:bc:d0:6f:4c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134dbf4c13aba17a04c0b2f245b6f5890c805163 Validity Not Before: Dec 21 12:01:45 2025 GMT Not After : Dec 22 12:01:45 2025 GMT Subject: CN=8059503fb4d1bf3ae1371d98c92c4026ff08cc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:13:80:34:49:01:c8:3f:e7:49:9a:96:9c: 19:49:8e:d6:2c:1c:f2:ab:d0:fb:c3:c8:ee:68:15: f9:fe:68:30:54:a8:00:75:3c:4e:f2:21:cb:af:2b: c6:25:e8:15:16:6c:22:a6:78:12:96:24:5f:4e:53: 88:f4:2f:c1:2c:4e:9a:6a:60:4d:98:59:eb:7b:bb: 8f:70:e5:d3:72:11:0e:f7:33:98:11:61:f1:93:e6: 04:21:e0:db:81:5a:70:0c:fd:df:19:a6:f7:d3:2c: d4:47:d4:36:fb:8d:09:c0:ba:07:2e:12:70:c1:82: 1e:ad:cc:cf:5a:d9:c6:d5:1c:e1:98:13:6e:7e:01: 1e:66:75:b1:af:69:6a:b9:59:5f:e4:d8:ef:3a:56: 2c:98:b2:20:63:a2:fd:69:81:42:42:b8:d9:14:9b: 01:cf:d1:60:0c:75:8e:9d:04:e6:56:99:22:ee:5d: 70:72:e4:c2:7f:87:e9:59:41:ff:85:22:8e:ac:c1: 4c:18:c0:26:2d:6d:ae:8b:44:2e:ac:95:dd:96:9b: 8a:e8:f8:c3:f5:15:d5:9b:f2:fe:cb:d4:0f:2c:fa: b9:85:98:5c:7b:c4:93:d5:28:e2:af:ff:92:2c:92: d8:1e:dd:45:86:e0:9d:68:db:a0:15:16:b0:e9:07: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:59:50:3F:B4:D1:BF:3A:E1:37:1D:98:C9:2C:40:26:FF:08:CC:75 X509v3 Authority Key Identifier: keyid:13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:04:e1:7e:2f:1e:a0:87:04:a3:87:bf:3a:86:1d:48:e5:da: 02:fe:83:00:f5:5b:a4:29:a7:93:d9:94:ce:8f:6c:bc:d0:95: 17:df:f8:7a:04:1c:89:53:dd:52:c7:eb:1c:fb:19:2d:29:2a: 6c:7b:f5:62:89:bd:75:70:c7:eb:dd:97:a4:08:bb:36:cc:c6: 77:32:ce:5b:11:0a:78:8e:98:2b:0e:e8:b9:f7:23:bd:87:10: 3f:79:d8:87:74:a2:14:32:58:f0:d7:0c:33:fc:2d:84:cb:63: 0a:3a:9e:c7:c5:8c:98:4c:22:b4:9c:0d:d9:f0:c8:d9:8f:e1: ce:1e:fa:5d:11:02:3c:b4:90:fb:2e:0f:da:61:02:94:79:5c: cc:0f:f1:8e:f4:7b:f3:25:47:4d:ea:5f:20:89:9c:a9:42:8e: 82:25:c2:ab:d9:a8:48:9a:cf:f0:db:d1:b1:59:e1:72:c4:58: 22:20:4c:fa:07:2b:c2:7d:3e:4d:7d:f5:2c:88:3f:ad:35:74: b1:61:84:8d:3e:54:c2:7c:3c:1e:60:2a:c8:95:76:89:42:ca: c7:95:db:2d:87:97:2b:f3:0e:e1:6d:2c:4d:67:f0:34:8c:46: 51:a9:1f:6c:a4:4d:86:ee:c8:d6:b9:66:90:8b:ed:b2:20:97: cd:f4:76:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyX1zOxH3fO1pYrzQb0xSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNGRiZjRjMTNhYmExN2EwNGMwYjJmMjQ1YjZmNTg5MGM4 MDUxNjMwHhcNMjUxMjIxMTIwMTQ1WhcNMjUxMjIyMTIwMTQ1WjAzMTEwLwYDVQQD Eyg4MDU5NTAzZmI0ZDFiZjNhZTEzNzFkOThjOTJjNDAyNmZmMDhjYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslITgDRJAcg/50malpwZSY7WLBzy q9D7w8juaBX5/mgwVKgAdTxO8iHLryvGJegVFmwipngSliRfTlOI9C/BLE6aamBN mFnre7uPcOXTchEO9zOYEWHxk+YEIeDbgVpwDP3fGab30yzUR9Q2+40JwLoHLhJw wYIerczPWtnG1RzhmBNufgEeZnWxr2lquVlf5NjvOlYsmLIgY6L9aYFCQrjZFJsB z9FgDHWOnQTmVpki7l1wcuTCf4fpWUH/hSKOrMFMGMAmLW2ui0QurJXdlpuK6PjD 9RXVm/L+y9QPLPq5hZhce8ST1Sjir/+SLJLYHt1FhuCdaNugFRaw6QdKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBZUD+00b864TcdmMksQCb/CMx1MB8GA1UdIwQY MBaAFBNNv0wTq6F6BMCy8kW29YkMgFFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YTIzZjUtN2Q4NC00NGFiLThmMzMt NTgzYTYwODIwZThjLzEvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80YTIzZjUtN2Q4NC00NGFiLThmMzMtNTgzYTYwODIwZThj LzEvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwThfi8e oIcEo4e/OoYdSOXaAv6DAPVbpCmnk9mUzo9svNCVF9/4egQciVPdUsfrHPsZLSkq bHv1Yom9dXDH692XpAi7NszGdzLOWxEKeI6YKw7oufcjvYcQP3nYh3SiFDJY8NcM M/wthMtjCjqex8WMmEwitJwN2fDI2Y/hzh76XRECPLSQ+y4P2mEClHlczA/xjvR7 8yVHTepfIImcqUKOgiXCq9moSJrP8NvRsVnhcsRYIiBM+gcrwn0+TX31LIg/rTV0 sWGEjT5Uwnw8HmAqyJV2iULKx5XbLYeXK/MO4W0sTWfwNIxGUakfbKRNhu7I1rlm kIvtsiCXzfR2bg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:12 2025 by rpki-client