This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft File: E02_TBOroXoEwLLyRbb1iQyAUWM.mft (raw, json) Hash identifier: V9hbKDUezLe8aboP35GvnaYWcn4Gh943g4cQia8eRxo= Subject key identifier: F5:E4:D8:AF:D2:2B:48:B4:38:4C:6A:A4:9D:77:EF:A1:28:52:00:94 Authority key identifier: 13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63 Certificate issuer: /CN=134dbf4c13aba17a04c0b2f245b6f5890c805163 Certificate serial: 019B59E40166B97426E9D4CDB4790223164A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft Manifest number: 0718 Signing time: Fri 26 Dec 2025 09:01:13 +0000 Manifest this update: Fri 26 Dec 2025 09:01:13 +0000 Manifest next update: Sat 27 Dec 2025 09:01:13 +0000 Files and hashes: 1: 5-Vfz-IQSTvzUAtK9wGd7zEsU_U.roa (hash: vXYBCiKDNQPitPz23Jn0ySE4Ex9vAmhZFSyQDy8eAqo=) 2: E02_TBOroXoEwLLyRbb1iQyAUWM.crl (hash: SdJ+bY/uTmDg+l7/YaoUYgMCziqhzk1KO3aeajY9TwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:01:66:b9:74:26:e9:d4:cd:b4:79:02:23:16:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134dbf4c13aba17a04c0b2f245b6f5890c805163 Validity Not Before: Dec 26 09:01:13 2025 GMT Not After : Dec 27 09:01:13 2025 GMT Subject: CN=f5e4d8afd22b48b4384c6aa49d77efa128520094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:01:38:f0:51:78:a9:fe:8f:8f:dd:f2:22: bd:5f:09:c7:b1:31:54:1c:ff:e6:88:70:e6:29:69: 4a:35:25:d8:35:2b:60:84:40:da:0e:86:ad:cb:d6: 56:e2:ce:26:45:66:e8:cb:c3:26:09:49:d2:18:27: 25:1e:99:cb:18:71:16:bc:73:24:7f:4b:48:dd:19: a1:ba:71:b5:19:c9:c5:1b:eb:ef:3e:43:00:d4:ed: 93:af:34:2d:b6:15:2e:6e:99:8e:72:80:c1:a1:6d: 78:43:66:0c:8d:c7:2b:77:8f:06:8d:62:b2:b7:91: 72:84:ab:5b:c0:5b:02:c5:8b:a8:8c:29:1a:46:7a: 4a:4e:3d:b3:c5:19:0a:a5:46:93:ac:87:d0:86:7c: 86:87:e9:ce:c4:32:47:56:17:98:a7:a3:16:c5:be: 5f:85:e8:83:f9:6a:40:b1:4a:a9:7d:10:3a:ea:8f: b7:8c:39:53:ca:3f:4c:69:2e:7b:43:a0:c5:19:5d: 10:a0:8a:de:a6:3b:29:96:43:ef:d9:c9:54:af:e4: 6d:7f:90:f8:90:47:e8:51:b8:6d:47:06:9c:f6:38: a4:84:35:ec:4d:8e:1c:a4:36:7e:55:1b:7b:cf:28: e6:fb:24:44:e3:84:47:5a:95:21:c0:d6:7a:fa:da: 78:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E4:D8:AF:D2:2B:48:B4:38:4C:6A:A4:9D:77:EF:A1:28:52:00:94 X509v3 Authority Key Identifier: keyid:13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:fd:f5:cd:6d:19:75:df:78:16:73:c4:7f:96:5b:70:de: a7:1d:1a:1a:13:97:ec:4a:01:f5:f8:0a:c3:a4:51:8a:8e:db: d7:53:f4:ee:7b:c3:5f:38:80:8b:6f:e1:fe:aa:92:38:d4:b6: 37:e1:96:95:2c:69:c5:5a:a1:5d:12:ad:bd:85:ac:ed:b2:55: c0:6a:5f:67:8d:24:b4:80:39:de:4a:f2:ea:a2:e0:cb:58:5c: d2:75:49:99:16:8b:55:d6:6a:bc:69:d3:d5:82:99:3d:30:2c: 4a:de:80:7f:55:16:dd:fe:39:49:88:57:8e:4f:21:da:0b:46: 3b:bc:ce:05:e5:03:12:36:70:62:14:e9:4b:6a:17:75:b3:03: da:5b:b9:db:2b:8a:b1:c6:e8:13:35:c5:7d:2b:3e:1d:35:41: 48:a6:cd:1f:85:cc:a6:74:c8:82:16:5a:5f:ec:b6:b0:a9:50: 6b:d4:ea:56:b8:04:25:4d:aa:72:b5:87:e5:1e:ff:ea:55:43: 21:e8:af:ca:51:ff:13:b9:f7:f0:b4:d1:84:c5:4a:4f:c6:1b: 28:aa:d5:10:a9:99:f5:47:f0:a2:65:b4:65:ea:fd:46:c6:31: 3a:eb:a1:1d:cd:eb:d0:4a:55:95:b0:17:91:82:08:cc:41:a2: c4:63:1f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5AFmuXQm6dTNtHkCIxZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNGRiZjRjMTNhYmExN2EwNGMwYjJmMjQ1YjZmNTg5MGM4 MDUxNjMwHhcNMjUxMjI2MDkwMTEzWhcNMjUxMjI3MDkwMTEzWjAzMTEwLwYDVQQD EyhmNWU0ZDhhZmQyMmI0OGI0Mzg0YzZhYTQ5ZDc3ZWZhMTI4NTIwMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX0BOPBReKn+j4/d8iK9XwnHsTFU HP/miHDmKWlKNSXYNStghEDaDoaty9ZW4s4mRWboy8MmCUnSGCclHpnLGHEWvHMk f0tI3RmhunG1GcnFG+vvPkMA1O2TrzQtthUubpmOcoDBoW14Q2YMjccrd48GjWKy t5FyhKtbwFsCxYuojCkaRnpKTj2zxRkKpUaTrIfQhnyGh+nOxDJHVheYp6MWxb5f heiD+WpAsUqpfRA66o+3jDlTyj9MaS57Q6DFGV0QoIrepjsplkPv2clUr+Rtf5D4 kEfoUbhtRwac9jikhDXsTY4cpDZ+VRt7zyjm+yRE44RHWpUhwNZ6+tp4eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXk2K/SK0i0OExqpJ1376EoUgCUMB8GA1UdIwQY MBaAFBNNv0wTq6F6BMCy8kW29YkMgFFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YTIzZjUtN2Q4NC00NGFiLThmMzMt NTgzYTYwODIwZThjLzEvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80YTIzZjUtN2Q4NC00NGFiLThmMzMtNTgzYTYwODIwZThj LzEvRTAyX1RCT3JvWG9Fd0xMeVJiYjFpUXlBVVdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7H99c1t GXXfeBZzxH+WW3Depx0aGhOX7EoB9fgKw6RRio7b11P07nvDXziAi2/h/qqSONS2 N+GWlSxpxVqhXRKtvYWs7bJVwGpfZ40ktIA53kry6qLgy1hc0nVJmRaLVdZqvGnT 1YKZPTAsSt6Af1UW3f45SYhXjk8h2gtGO7zOBeUDEjZwYhTpS2oXdbMD2lu52yuK scboEzXFfSs+HTVBSKbNH4XMpnTIghZaX+y2sKlQa9TqVrgEJU2qcrWH5R7/6lVD IeivylH/E7n38LTRhMVKT8YbKKrVEKmZ9UfwomW0Zer9RsYxOuuhHc3r0EpVlbAX kYIIzEGixGMflw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client