This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft File: TLbePNkQ87_3_4Xe1FLEMbHopSA.mft (raw, json) Hash identifier: q53y2Y/TGdj7kH6fnmBo/a6+1aOf8WXpddlM51ULQFs= Subject key identifier: A8:5E:C0:17:D5:42:21:6A:A3:AE:DE:84:60:56:8C:51:4B:4F:3F:ED Authority key identifier: 4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 Certificate issuer: /CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Certificate serial: 019B1B04E96F62B462AE225C9322A9BFACC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 04:01:05 +0000 Manifest this update: Sun 14 Dec 2025 04:01:05 +0000 Manifest next update: Mon 15 Dec 2025 04:01:05 +0000 Files and hashes: 1: TLbePNkQ87_3_4Xe1FLEMbHopSA.crl (hash: 5k2NEfv7CJTJrpKT7n1LAL4McHMq613kEY98PxSYzyE=) 2: kE8LdGAFW614HUcjN1MoZxFokJs.roa (hash: XYMGtkKoA87TX5nzm+UQ3ylduTU9EvUGKlmdAtXqyu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:e9:6f:62:b4:62:ae:22:5c:93:22:a9:bf:ac:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb6de3cd910f3bff7ff85ded452c431b1e8a520 Validity Not Before: Dec 14 04:01:05 2025 GMT Not After : Dec 15 04:01:05 2025 GMT Subject: CN=a85ec017d542216aa3aede8460568c514b4f3fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:c1:15:3b:72:08:5b:93:9b:a7:15:e1:3d: 1c:22:6b:fa:ef:6c:19:91:06:ca:0d:34:c7:4c:cf: 9b:6a:c6:be:ef:ee:48:0a:41:6f:9b:0a:cb:0c:17: 56:78:99:98:ee:d4:3d:5b:3e:7d:58:34:95:4f:d1: 38:5e:3e:ef:c6:a0:b6:be:ce:4e:67:bd:b7:19:72: 02:a4:32:0e:c5:6a:29:31:4f:23:19:de:bb:a7:0e: 81:9b:95:0a:5a:cb:88:d8:10:57:90:81:01:8c:7f: cc:b3:e9:25:08:b0:a3:f0:7b:5d:cd:53:ef:e8:a6: c8:7a:a0:a1:0e:67:a4:1a:4c:7a:8c:2d:4e:b6:a3: 15:e7:fc:5c:1e:e4:5d:26:5f:a0:c0:33:bd:80:c0: 65:62:69:85:9a:61:55:8f:21:76:5d:23:9f:da:d2: d5:c2:69:86:0a:f2:a1:05:7f:32:87:c9:49:1b:be: 36:09:70:d0:17:1f:76:de:b3:2c:e0:20:a8:c0:31: 17:1d:fe:32:f1:f1:48:0c:8a:36:d3:60:6a:c6:8d: a7:c5:26:87:4b:49:05:c6:54:e9:90:5b:25:ae:ae: 12:ae:e0:ee:69:53:45:08:8e:a6:6d:1a:62:77:de: d9:97:2e:c4:93:bf:5c:d0:9e:65:e0:68:d9:db:53: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5E:C0:17:D5:42:21:6A:A3:AE:DE:84:60:56:8C:51:4B:4F:3F:ED X509v3 Authority Key Identifier: keyid:4C:B6:DE:3C:D9:10:F3:BF:F7:FF:85:DE:D4:52:C4:31:B1:E8:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLbePNkQ87_3_4Xe1FLEMbHopSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8fa354-4bd5-454d-b2d8-03f604324fcf/1/TLbePNkQ87_3_4Xe1FLEMbHopSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5c:38:46:62:d7:bf:a5:f2:23:1a:dc:50:24:a8:71:ff:68: f9:84:8d:89:55:4d:83:8f:82:01:0f:6d:5f:1c:9b:62:36:d5: ad:35:e8:eb:3f:41:a3:ba:8f:53:1c:d0:97:ef:99:34:04:00: ce:77:ba:d0:86:fc:b4:8b:9f:cc:7b:6b:e0:c7:76:61:57:2b: b4:34:a1:be:3a:ed:aa:ff:b2:f8:f7:bb:f0:7c:34:1c:a3:7d: d6:b0:fe:02:be:cf:54:6f:ca:8c:64:e2:d4:de:94:de:d1:4f: 58:26:dc:1c:d9:59:99:35:12:41:fd:dd:78:34:a2:b4:54:7e: 90:d8:b4:ac:52:6b:71:4f:3e:f0:52:4f:0b:d3:12:21:d5:83: ec:f9:d5:9f:17:f3:f9:f4:d9:a0:b8:7b:1d:55:e2:40:64:54: 67:23:a8:6d:0e:10:a1:8c:b4:72:ed:32:22:31:a5:b9:e8:40: 91:ed:d2:76:fe:93:c1:8f:a3:29:bf:f6:03:f8:69:16:01:18: 6c:25:b2:e8:9a:08:bc:e0:aa:16:f8:61:1d:6b:1d:95:39:0d: 0a:f3:77:06:0e:cd:03:1f:ac:32:1e:9f:6b:c4:f5:56:c4:54: b6:df:03:d0:d7:53:93:7e:1f:14:f2:b2:77:ed:e1:2d:e8:39: 0d:c2:fe:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBOlvYrRiriJckyKpv6zFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjZkZTNjZDkxMGYzYmZmN2ZmODVkZWQ0NTJjNDMxYjFl OGE1MjAwHhcNMjUxMjE0MDQwMTA1WhcNMjUxMjE1MDQwMTA1WjAzMTEwLwYDVQQD EyhhODVlYzAxN2Q1NDIyMTZhYTNhZWRlODQ2MDU2OGM1MTRiNGYzZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QDBFTtyCFuTm6cV4T0cImv672wZ kQbKDTTHTM+basa+7+5ICkFvmwrLDBdWeJmY7tQ9Wz59WDSVT9E4Xj7vxqC2vs5O Z723GXICpDIOxWopMU8jGd67pw6Bm5UKWsuI2BBXkIEBjH/Ms+klCLCj8HtdzVPv 6KbIeqChDmekGkx6jC1OtqMV5/xcHuRdJl+gwDO9gMBlYmmFmmFVjyF2XSOf2tLV wmmGCvKhBX8yh8lJG742CXDQFx923rMs4CCowDEXHf4y8fFIDIo202Bqxo2nxSaH S0kFxlTpkFslrq4SruDuaVNFCI6mbRpid97Zly7Ek79c0J5l4GjZ21OgywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhewBfVQiFqo67ehGBWjFFLTz/tMB8GA1UdIwQY MBaAFEy23jzZEPO/9/+F3tRSxDGx6KUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgt MDNmNjA0MzI0ZmNmLzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84ZmEzNTQtNGJkNS00NTRkLWIyZDgtMDNmNjA0MzI0ZmNm LzEvVExiZVBOa1E4N18zXzRYZTFGTEVNYkhvcFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlw4RmLX v6XyIxrcUCSocf9o+YSNiVVNg4+CAQ9tXxybYjbVrTXo6z9Bo7qPUxzQl++ZNAQA zne60Ib8tIufzHtr4Md2YVcrtDShvjrtqv+y+Pe78Hw0HKN91rD+Ar7PVG/KjGTi 1N6U3tFPWCbcHNlZmTUSQf3deDSitFR+kNi0rFJrcU8+8FJPC9MSIdWD7PnVnxfz +fTZoLh7HVXiQGRUZyOobQ4QoYy0cu0yIjGluehAke3Sdv6TwY+jKb/2A/hpFgEY bCWy6JoIvOCqFvhhHWsdlTkNCvN3Bg7NAx+sMh6fa8T1VsRUtt8D0NdTk34fFPKy d+3hLeg5DcL+MQ== -----END CERTIFICATE-----Generated at Sun Dec 14 09:14:32 2025 by rpki-client