This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft File: TuBDL1Qp2GHXdDv8MdetAZYopes.mft (raw, json) Hash identifier: eeA4c2VRWmYdm+AOmc1qICc1Yhg8tQsLGWaYVvWoTaI= Subject key identifier: 02:BC:D5:E0:73:D1:73:3A:0F:27:78:3D:4F:30:85:9D:6C:4C:FA:BC Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb Certificate serial: 019B4324BA9E0496FB5CCC378E0E731DEDA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 23:00:39 +0000 Manifest this update: Sun 21 Dec 2025 23:00:39 +0000 Manifest next update: Mon 22 Dec 2025 23:00:39 +0000 Files and hashes: 1: TuBDL1Qp2GHXdDv8MdetAZYopes.crl (hash: elfE+0nnLltgoqSLZQeI35CZhcybH5ukBKmnr9LTdQM=) 2: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (hash: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:ba:9e:04:96:fb:5c:cc:37:8e:0e:73:1d:ed:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb Validity Not Before: Dec 21 23:00:39 2025 GMT Not After : Dec 22 23:00:39 2025 GMT Subject: CN=02bcd5e073d1733a0f27783d4f30859d6c4cfabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:f0:b3:ce:a7:f1:99:54:c1:d3:1d:d2:bd: a8:5d:6d:56:c4:90:c5:4b:d8:58:d9:76:75:e3:e9: 0b:2c:e8:2e:89:aa:df:90:00:c8:fd:aa:29:74:d7: 0a:be:f4:9b:27:e2:1a:15:13:55:27:d5:14:f8:df: d4:5d:00:08:d5:ec:d9:0f:26:d2:09:2d:7d:f2:be: 5c:00:2d:97:f9:16:9c:f4:5e:25:1e:5f:96:d7:c0: 6d:b4:49:6e:ef:34:5d:51:2f:aa:95:28:fc:3d:37: ee:a1:73:fc:32:28:77:9a:81:cf:3d:11:d6:10:02: 00:9f:23:82:d2:ad:90:71:1e:39:00:a0:a1:3e:11: 03:60:44:ca:c8:7b:a2:ef:07:41:a2:c1:22:ca:c5: b2:35:c5:28:f1:03:91:b2:82:9c:45:f4:56:1a:bd: 9d:0a:e8:9c:56:4a:0c:ff:d6:be:c5:16:b9:7d:9b: e6:84:84:51:72:10:09:ad:2c:02:6c:7c:ee:90:61: 72:b0:5e:f0:21:77:bb:f8:90:8b:70:7e:6e:3d:7e: 69:a3:e8:72:4b:b4:f8:04:ff:f6:29:4e:e0:0c:54: ac:f6:2c:f0:e1:06:9e:6b:00:7c:c3:b3:05:94:26: 44:b5:b6:03:b8:fc:8a:5b:f7:e9:ff:3c:10:a0:6e: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:D5:E0:73:D1:73:3A:0F:27:78:3D:4F:30:85:9D:6C:4C:FA:BC X509v3 Authority Key Identifier: keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:eb:7e:97:92:0d:1b:6d:93:55:f3:4d:01:6c:cf:92:e6:64: 58:c8:3a:8c:ef:4e:e6:1b:65:4f:7a:3f:d6:a1:ed:ea:7f:8d: ac:99:56:20:cd:12:43:4c:04:d6:68:06:40:a4:2d:85:15:f8: 27:f5:b2:0f:01:46:db:62:dd:b3:79:df:dd:6a:74:72:96:65: 9f:23:58:3f:4d:d4:fd:bc:57:9d:2d:61:5c:30:53:dc:af:79: ec:ba:c5:91:66:51:91:f8:04:c1:8e:ec:1b:86:67:e1:4b:09: eb:b4:e2:0d:7c:d2:18:fb:2b:e2:ab:d2:1e:c9:8e:aa:98:13: 83:86:7a:d6:83:91:31:77:46:3a:ee:3b:eb:9a:67:42:55:d4: b4:06:47:48:07:1c:44:03:9d:cb:14:eb:91:dc:c3:1b:f2:e2: 0c:52:e8:3f:58:d3:8a:4d:49:c4:c4:94:57:7b:d1:fa:bf:41: f3:36:73:70:a3:8f:71:46:f9:08:95:c1:25:5d:76:66:74:4d: 91:df:f0:0f:e0:0b:9d:4b:d6:4b:dc:d9:89:6b:d7:f3:26:2b: be:ae:47:c5:9f:55:81:a3:c3:4e:77:93:67:bd:7e:3b:c3:b2: ce:43:a4:0e:26:eb:96:c5:de:b5:16:31:30:88:66:2d:91:82: a9:fb:b1:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLqeBJb7XMw3jg5zHe2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTA0MzJmNTQyOWQ4NjFkNzc0M2JmYzMxZDdhZDAxOTYy OGE1ZWIwHhcNMjUxMjIxMjMwMDM5WhcNMjUxMjIyMjMwMDM5WjAzMTEwLwYDVQQD EygwMmJjZDVlMDczZDE3MzNhMGYyNzc4M2Q0ZjMwODU5ZDZjNGNmYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Lws86n8ZlUwdMd0r2oXW1WxJDF S9hY2XZ14+kLLOguiarfkADI/aopdNcKvvSbJ+IaFRNVJ9UU+N/UXQAI1ezZDybS CS198r5cAC2X+Rac9F4lHl+W18BttElu7zRdUS+qlSj8PTfuoXP8Mih3moHPPRHW EAIAnyOC0q2QcR45AKChPhEDYETKyHui7wdBosEiysWyNcUo8QORsoKcRfRWGr2d CuicVkoM/9a+xRa5fZvmhIRRchAJrSwCbHzukGFysF7wIXe7+JCLcH5uPX5po+hy S7T4BP/2KU7gDFSs9izw4QaeawB8w7MFlCZEtbYDuPyKW/fp/zwQoG5fswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK81eBz0XM6Dyd4PU8whZ1sTPq8MB8GA1UdIwQY MBaAFE7gQy9UKdhh13Q7/DHXrQGWKKXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUt NzcyNTdlMDQ3NjVmLzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMTdjYTQtMmUyZS00MTVhLWFkZGUtNzcyNTdlMDQ3NjVm LzEvVHVCREwxUXAyR0hYZER2OE1kZXRBWllvcGVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtet+l5IN G22TVfNNAWzPkuZkWMg6jO9O5htlT3o/1qHt6n+NrJlWIM0SQ0wE1mgGQKQthRX4 J/WyDwFG22Lds3nf3Wp0cpZlnyNYP03U/bxXnS1hXDBT3K957LrFkWZRkfgEwY7s G4Zn4UsJ67TiDXzSGPsr4qvSHsmOqpgTg4Z61oORMXdGOu4765pnQlXUtAZHSAcc RAOdyxTrkdzDG/LiDFLoP1jTik1JxMSUV3vR+r9B8zZzcKOPcUb5CJXBJV12ZnRN kd/wD+ALnUvWS9zZiWvX8yYrvq5HxZ9VgaPDTneTZ71+O8OyzkOkDibrlsXetRYx MIhmLZGCqfuxdA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:18 2025 by rpki-client