This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json) Hash identifier: C4XsH/7TIZH90p78QbM0b0TJiiSp+qu0oiVlQoKq8Qo= Subject key identifier: 35:40:E6:E6:25:34:DC:8D:51:30:4D:D1:80:D0:1B:64:F9:CB:E4:85 Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Certificate serial: 019AF12D26DE7007F6A0517E27221A2D8F63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 2ZeJ8r6ZOzf8qufz1x8FXTJ353qW9PC4xeTsSifx6Dg=) 2: fpKUqxxKUPc_O5n9wxHsQg8T_FY.roa (hash: OrgW5t1N1aQKAHTjeWlGlcEAJmvI2Q1WBkLpeJc3hPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:26:de:70:07:f6:a0:51:7e:27:22:1a:2d:8f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=3540e6e62534dc8d51304dd180d01b64f9cbe485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:cf:ff:c4:f9:01:e9:c8:39:ce:e4:d1:2e: d5:74:e2:de:03:94:c5:9f:9b:9b:d0:a2:bf:4b:fd: 6e:2b:b1:eb:b8:6c:c1:a6:65:9d:fe:5b:db:6f:f2: 48:14:ca:87:59:de:5b:8d:02:6d:f4:9c:7e:94:60: ce:af:fa:03:dd:67:d1:6a:61:d0:5e:c5:4f:87:2f: 9e:07:07:5d:25:c1:af:e1:46:4b:b4:d6:35:0f:e5: 1e:c5:a5:4a:57:ed:6a:b5:fc:3f:b6:23:f3:6e:df: c7:3c:6c:a0:1c:3b:b5:9f:f5:be:18:8c:70:74:17: 6e:06:46:6b:a6:54:06:30:e7:a1:3c:b4:30:aa:a2: 88:97:bb:33:1c:8b:ac:15:b9:7b:ee:fa:d6:eb:bf: ce:5e:5e:b2:f8:51:da:2c:63:55:7e:fe:27:73:b6: a2:21:ae:d5:4f:30:c4:70:3e:90:82:24:dd:16:05: 89:0b:49:fa:89:cc:74:8a:a2:71:c6:8a:42:a0:c1: 0e:ae:f7:37:3f:a4:68:db:12:00:2e:b6:db:be:18: 2f:6d:7e:01:db:86:8e:ff:d9:26:c9:76:fb:2d:96: 55:82:45:c7:9b:28:18:ac:e9:7e:ee:3b:17:77:ce: e2:a9:e4:a7:47:eb:da:19:aa:90:20:42:ff:03:14: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:40:E6:E6:25:34:DC:8D:51:30:4D:D1:80:D0:1B:64:F9:CB:E4:85 X509v3 Authority Key Identifier: keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:11:2d:e4:c2:99:fb:c9:ac:59:f8:24:e1:ae:63:e4:b5:c1: 42:dc:57:c9:d3:22:35:bc:a4:2f:61:7c:09:35:7c:dc:d6:b2: a0:a0:0a:66:2e:16:31:11:65:2a:1f:2c:aa:a8:f7:fa:e2:03: ef:05:53:68:0f:96:28:9d:12:e4:90:7e:b3:e3:4a:04:df:7c: e6:5b:54:09:34:97:30:a8:6e:c7:80:72:57:66:23:f2:f5:d9: b4:ef:99:bb:c3:bc:b7:c4:7e:03:45:bd:75:b8:ff:18:1a:c0: 61:58:b6:d5:30:ee:01:93:6d:9c:18:0a:84:36:34:a7:07:c3: 0e:15:8e:3f:ba:8d:38:64:d2:a9:d8:ea:90:15:2e:60:95:5c: c1:01:a2:cd:14:ee:bd:c8:93:34:30:b2:2c:23:81:ee:ad:77: e9:98:ae:aa:f8:fa:94:aa:8b:77:7e:f1:bd:a6:ec:56:ee:5b: 7f:64:03:54:2a:b4:c2:0c:b5:ef:da:f0:99:0a:47:89:16:d8: 3c:13:e9:6b:8b:37:57:d0:83:4b:49:9f:a4:4a:f9:fb:e9:37: 98:a2:34:9d:be:31:e6:4a:08:e8:d7:b7:63:ca:25:48:b3:61: 3b:f4:7e:06:d5:1f:b7:be:bc:57:1a:d1:ab:65:f0:79:ac:6e: 50:2f:38:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSbecAf2oFF+JyIaLY9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk MjI5YzMwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD EygzNTQwZTZlNjI1MzRkYzhkNTEzMDRkZDE4MGQwMWI2NGY5Y2JlNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusHP/8T5AenIOc7k0S7VdOLeA5TF n5ub0KK/S/1uK7HruGzBpmWd/lvbb/JIFMqHWd5bjQJt9Jx+lGDOr/oD3WfRamHQ XsVPhy+eBwddJcGv4UZLtNY1D+UexaVKV+1qtfw/tiPzbt/HPGygHDu1n/W+GIxw dBduBkZrplQGMOehPLQwqqKIl7szHIusFbl77vrW67/OXl6y+FHaLGNVfv4nc7ai Ia7VTzDEcD6QgiTdFgWJC0n6icx0iqJxxopCoMEOrvc3P6Ro2xIALrbbvhgvbX4B 24aO/9kmyXb7LZZVgkXHmygYrOl+7jsXd87iqeSnR+vaGaqQIEL/AxQs9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVA5uYlNNyNUTBN0YDQG2T5y+SFMB8GA1UdIwQY MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBEt5MKZ +8msWfgk4a5j5LXBQtxXydMiNbykL2F8CTV83NayoKAKZi4WMRFlKh8sqqj3+uID 7wVTaA+WKJ0S5JB+s+NKBN985ltUCTSXMKhux4ByV2Yj8vXZtO+Zu8O8t8R+A0W9 dbj/GBrAYVi21TDuAZNtnBgKhDY0pwfDDhWOP7qNOGTSqdjqkBUuYJVcwQGizRTu vciTNDCyLCOB7q136Ziuqvj6lKqLd37xvabsVu5bf2QDVCq0wgy179rwmQpHiRbY PBPpa4s3V9CDS0mfpEr5++k3mKI0nb4x5koI6Ne3Y8olSLNhO/R+BtUft768VxrR q2XweaxuUC84yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:22 2025 by rpki-client