This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json) Hash identifier: 6e9l0UXUKAR0xXQNI29Bp8pzhrrrl01TLIu3G+r7izY= Subject key identifier: F8:B5:27:0D:01:30:AC:7A:96:55:5B:B5:04:49:29:EE:F3:BF:74:26 Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9 Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9 Certificate serial: 019AF088348B3348BC3B4CAEEB57AAC03EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 22:00:49 +0000 Manifest this update: Fri 05 Dec 2025 22:00:49 +0000 Manifest next update: Sat 06 Dec 2025 22:00:49 +0000 Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: iceKSSR5CtN9ru0bjxy8D8r899D2ZQruUwP3Haba0vM=) 2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:34:8b:33:48:bc:3b:4c:ae:eb:57:aa:c0:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9 Validity Not Before: Dec 5 22:00:49 2025 GMT Not After : Dec 6 22:00:49 2025 GMT Subject: CN=f8b5270d0130ac7a96555bb5044929eef3bf7426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:6b:d6:65:cb:b2:3c:f3:5e:dd:67:f2:b0: c5:3f:ab:08:e2:3f:ff:a2:e4:99:f3:65:cb:f6:04: 29:8c:01:ff:d9:ee:f2:07:ed:a5:03:63:73:bc:5f: a0:4d:c2:53:45:b5:81:51:9b:10:2b:61:75:ce:e7: a3:14:66:b7:ce:14:38:18:26:aa:d4:8b:53:ac:96: e3:f4:ab:61:04:13:24:32:5a:b8:0d:7d:b2:8a:9b: d2:e1:68:6d:8c:54:9f:74:6a:83:47:4b:4c:b8:fd: a5:a6:ae:bf:63:41:bc:02:b8:20:57:5b:db:6c:8b: c1:68:05:d9:82:c6:df:2b:96:1e:6a:2a:c5:1d:88: c5:58:b5:bb:37:8a:ff:a8:30:dd:7c:22:75:b6:1e: 33:14:b6:5a:1b:62:cb:d5:70:85:df:02:c7:a2:1a: ab:8e:01:a5:4c:13:f9:69:48:9f:da:c1:72:2c:0e: 37:f2:ef:0b:9a:4e:6f:e7:29:76:44:58:88:6f:85: 5e:d9:80:b1:e2:3f:f1:0b:4d:18:2d:69:fc:b5:dd: f6:78:21:5f:d5:da:ea:b8:5e:da:41:c6:29:d0:89: 3d:75:fc:c1:a5:72:3e:77:8c:b1:5c:71:18:4f:6e: 54:66:39:c5:01:63:0f:ee:54:b9:fc:23:87:b2:78: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:27:0D:01:30:AC:7A:96:55:5B:B5:04:49:29:EE:F3:BF:74:26 X509v3 Authority Key Identifier: keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2d:42:c3:3f:a9:fa:2a:0d:bd:e1:0b:f0:19:12:c6:b6:55: 70:fb:7d:28:31:5c:6b:33:6f:a7:b9:1c:62:62:41:70:c1:b5: 89:1f:dd:fd:85:ca:82:12:06:da:7f:e7:41:ce:1b:fd:57:80: 7d:af:78:72:99:1d:d7:12:2e:2c:3a:40:a1:45:51:8a:ad:0e: 71:5d:ea:c3:3b:23:a3:67:e3:a7:93:f2:fc:f7:28:91:78:9e: f5:0e:ce:3c:7d:3b:7f:f4:91:3f:de:2d:5a:c3:ec:7c:9a:31: 26:55:c4:c6:1c:c0:04:47:bf:f4:78:07:bb:02:7a:4e:26:25: 49:b9:de:8a:f3:57:c6:cc:c9:bb:82:8a:07:50:22:f7:0d:34: b1:38:16:65:a4:2a:59:13:94:b4:14:54:55:b6:99:18:a5:44: d1:b2:21:24:8b:3d:79:87:f0:12:19:1a:9b:c3:13:93:ae:cc: c4:be:c7:e0:74:14:bf:c6:1f:73:2c:9e:3e:5b:a3:a8:dd:a6: 2b:44:02:61:5e:50:1d:03:61:23:df:48:7f:39:ba:74:d9:76: 24:96:d3:9f:d2:08:6c:b8:7f:7a:30:e2:d6:c4:e0:8e:21:b0: 38:47:0c:63:fe:14:63:6f:61:ad:12:02:f6:8f:26:bf:75:b9: 0b:08:e8:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDSLM0i8O0yu61eqwD6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjJjNmZhNTRhOGNjMmRjNzFlODAyY2Y4M2Y1Yzc3NmNl OTc0YzkwHhcNMjUxMjA1MjIwMDQ5WhcNMjUxMjA2MjIwMDQ5WjAzMTEwLwYDVQQD EyhmOGI1MjcwZDAxMzBhYzdhOTY1NTViYjUwNDQ5MjllZWYzYmY3NDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq39r1mXLsjzzXt1n8rDFP6sI4j// ouSZ82XL9gQpjAH/2e7yB+2lA2NzvF+gTcJTRbWBUZsQK2F1zuejFGa3zhQ4GCaq 1ItTrJbj9KthBBMkMlq4DX2yipvS4WhtjFSfdGqDR0tMuP2lpq6/Y0G8ArggV1vb bIvBaAXZgsbfK5YeairFHYjFWLW7N4r/qDDdfCJ1th4zFLZaG2LL1XCF3wLHohqr jgGlTBP5aUif2sFyLA438u8Lmk5v5yl2RFiIb4Ve2YCx4j/xC00YLWn8td32eCFf 1drquF7aQcYp0Ik9dfzBpXI+d4yxXHEYT25UZjnFAWMP7lS5/COHsnjaxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi1Jw0BMKx6llVbtQRJKe7zv3QmMB8GA1UdIwQY MBaAFE3yxvpUqMwtxx6ALPg/XHds6XTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQt OWUyNDNjMmQ4ODIxLzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQtOWUyNDNjMmQ4ODIx LzEvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy1Cwz+p +ioNveEL8BkSxrZVcPt9KDFcazNvp7kcYmJBcMG1iR/d/YXKghIG2n/nQc4b/VeA fa94cpkd1xIuLDpAoUVRiq0OcV3qwzsjo2fjp5Py/PcokXie9Q7OPH07f/SRP94t WsPsfJoxJlXExhzABEe/9HgHuwJ6TiYlSbneivNXxszJu4KKB1Ai9w00sTgWZaQq WROUtBRUVbaZGKVE0bIhJIs9eYfwEhkam8MTk67MxL7H4HQUv8YfcyyePlujqN2m K0QCYV5QHQNhI99Ifzm6dNl2JJbTn9IIbLh/ejDi1sTgjiGwOEcMY/4UY29hrRIC 9o8mv3W5CwjozQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:33 2025 by rpki-client