This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json) Hash identifier: BkZWGehCUUyZhoCdZsC6FlU2zE/56XvJzizCQG1T9lU= Subject key identifier: 8C:37:E0:2E:F4:25:DB:E7:F2:95:96:E5:2B:A9:D1:48:57:32:63:DD Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Certificate serial: 019B3E6C91C3490532F447E2BCA19A270C70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft Manifest number: 1798 Signing time: Sun 21 Dec 2025 01:01:01 +0000 Manifest this update: Sun 21 Dec 2025 01:01:01 +0000 Manifest next update: Mon 22 Dec 2025 01:01:01 +0000 Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 92KYfbqPmhJqHtZjX1G+OA20OFCNTDymlKGUA5coXAI=) 2: fpKUqxxKUPc_O5n9wxHsQg8T_FY.roa (hash: OrgW5t1N1aQKAHTjeWlGlcEAJmvI2Q1WBkLpeJc3hPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:91:c3:49:05:32:f4:47:e2:bc:a1:9a:27:0c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Validity Not Before: Dec 21 01:01:01 2025 GMT Not After : Dec 22 01:01:01 2025 GMT Subject: CN=8c37e02ef425dbe7f29596e52ba9d148573263dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:8f:9d:93:f5:cb:05:e6:7f:b9:d7:b9:ae: 77:84:44:a8:cf:6f:b7:0d:0c:31:50:06:b2:bb:aa: 38:66:80:91:ce:e2:46:c6:aa:14:90:81:5f:f0:bd: 10:3a:98:51:25:21:b6:89:36:1a:3a:35:5b:cd:e3: 43:72:92:f9:ad:2c:0e:3e:35:30:26:7b:6b:cb:6a: 19:58:50:48:bf:48:c4:e6:35:92:49:a3:a3:ac:eb: 69:3a:0f:e7:e4:ac:da:53:1f:5a:98:66:0b:d7:c9: 4a:31:73:1c:65:3c:48:fc:b8:2c:ea:f5:d9:ae:4f: ab:a9:85:c8:9d:9c:ac:49:2c:c2:0f:50:65:0e:44: db:28:12:dc:85:c6:13:95:eb:9c:96:92:7e:18:d4: 08:22:90:5c:f6:60:46:48:a5:f8:b7:ec:91:c0:ce: 4a:f6:61:0d:99:06:9f:e2:c2:4c:08:f5:46:97:44: 58:be:06:7d:d6:99:7d:84:a5:4d:0a:94:ad:f0:d7: 63:db:e9:30:f5:86:e6:01:52:04:03:ed:78:28:b2: d1:08:c6:3b:ed:01:82:fe:74:e7:de:1c:7c:7a:d3: 89:6e:a2:9e:57:4d:96:97:11:fa:4f:ef:86:a2:19: 55:b6:99:c6:99:5f:41:03:ca:05:28:52:fc:c2:b1: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:37:E0:2E:F4:25:DB:E7:F2:95:96:E5:2B:A9:D1:48:57:32:63:DD X509v3 Authority Key Identifier: keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:81:0d:2f:83:83:15:a5:14:27:5b:73:91:a6:97:f1:c0:0c: c8:e7:15:34:be:78:03:fa:19:ad:d9:47:2b:05:b3:68:f8:30: db:c5:12:43:9c:bf:41:fd:33:6f:eb:ab:c2:81:b5:a8:18:f8: 0c:b3:f1:69:65:0b:cd:2e:22:b5:0d:ea:ee:93:dc:48:fd:11: 59:ca:17:9e:79:e6:c2:f2:35:a7:7b:80:e5:1e:22:b2:fb:0d: d3:fe:d8:03:37:56:46:0a:b1:35:95:fd:3d:10:5f:b4:7c:af: 62:ec:6f:64:5f:b1:45:07:0e:9f:b0:38:a3:9e:96:e2:dd:06: 7c:43:7e:e7:ef:d2:14:bd:47:bb:b1:f0:4d:60:64:7e:df:cc: 1d:05:83:96:22:de:75:5b:c0:57:8d:51:fc:bf:48:5c:16:91: 71:d6:dd:f0:c2:30:37:7f:2c:c8:93:de:39:c1:3a:af:33:c4: fb:c5:aa:99:11:dd:15:d5:40:64:a5:70:9b:d8:da:0d:ae:55: 2e:06:85:32:86:5b:3d:14:b7:79:fb:61:f6:85:08:ae:8c:a8: 64:c5:b4:21:1e:f6:0f:fa:85:13:cc:b5:33:47:6d:bd:be:a0: 0f:01:97:5b:3a:a8:dd:6e:f2:fb:dd:64:9b:99:63:ef:29:91: 2b:d8:48:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJHDSQUy9EfivKGaJwxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk MjI5YzMwHhcNMjUxMjIxMDEwMTAxWhcNMjUxMjIyMDEwMTAxWjAzMTEwLwYDVQQD Eyg4YzM3ZTAyZWY0MjVkYmU3ZjI5NTk2ZTUyYmE5ZDE0ODU3MzI2M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIyPnZP1ywXmf7nXua53hESoz2+3 DQwxUAayu6o4ZoCRzuJGxqoUkIFf8L0QOphRJSG2iTYaOjVbzeNDcpL5rSwOPjUw Jntry2oZWFBIv0jE5jWSSaOjrOtpOg/n5KzaUx9amGYL18lKMXMcZTxI/Lgs6vXZ rk+rqYXInZysSSzCD1BlDkTbKBLchcYTleuclpJ+GNQIIpBc9mBGSKX4t+yRwM5K 9mENmQaf4sJMCPVGl0RYvgZ91pl9hKVNCpSt8Ndj2+kw9YbmAVIEA+14KLLRCMY7 7QGC/nTn3hx8etOJbqKeV02WlxH6T++GohlVtpnGmV9BA8oFKFL8wrEwTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw34C70Jdvn8pWW5Sup0UhXMmPdMB8GA1UdIwQY MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYENL4OD FaUUJ1tzkaaX8cAMyOcVNL54A/oZrdlHKwWzaPgw28USQ5y/Qf0zb+urwoG1qBj4 DLPxaWULzS4itQ3q7pPcSP0RWcoXnnnmwvI1p3uA5R4isvsN0/7YAzdWRgqxNZX9 PRBftHyvYuxvZF+xRQcOn7A4o56W4t0GfEN+5+/SFL1Hu7HwTWBkft/MHQWDliLe dVvAV41R/L9IXBaRcdbd8MIwN38syJPeOcE6rzPE+8WqmRHdFdVAZKVwm9jaDa5V LgaFMoZbPRS3efth9oUIroyoZMW0IR72D/qFE8y1M0dtvb6gDwGXWzqo3W7y+91k m5lj7ymRK9hIgQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:33:20 2025 by rpki-client