This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json) Hash identifier: FOYyWMcWXbRf+27nGwvZn/kBm14aghGonKrUTPy+z5s= Subject key identifier: 87:FD:4F:0D:05:C8:00:43:30:E1:86:60:F7:D6:30:CE:3D:AB:46:CF Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef Certificate serial: 019B59760E7E5A3E945429289F508E8DDCAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft Manifest number: 1356 Signing time: Fri 26 Dec 2025 07:01:07 +0000 Manifest this update: Fri 26 Dec 2025 07:01:07 +0000 Manifest next update: Sat 27 Dec 2025 07:01:07 +0000 Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: jFp3TFVRtB0pg7vUeO0sTS3QLnyrgiHPCh/STgsi0lU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:0e:7e:5a:3e:94:54:29:28:9f:50:8e:8d:dc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef Validity Not Before: Dec 26 07:01:07 2025 GMT Not After : Dec 27 07:01:07 2025 GMT Subject: CN=87fd4f0d05c8004330e18660f7d630ce3dab46cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:a7:bc:7d:f0:60:a3:5d:dc:5f:58:80:ef: 12:97:ad:36:0f:6c:e4:39:a3:d1:c0:7b:bb:74:20: 73:66:00:69:00:bc:a0:2f:41:b1:2a:a3:9e:53:b7: 7f:7d:64:a0:51:b4:53:40:85:d0:74:26:af:b3:7d: 1a:c8:17:5e:b0:43:35:9a:a6:98:e4:1e:d7:87:9c: 42:62:06:33:0c:70:68:df:75:0a:e1:e1:da:d4:25: 20:28:7e:0a:3b:9f:dd:1a:0d:7e:2c:ab:b2:cf:f3: 05:d7:91:db:95:53:fb:22:27:c1:34:0a:83:a2:00: ad:37:4c:cc:66:c1:4c:ff:25:a3:03:63:6f:72:4f: 10:18:15:75:83:d3:6d:93:d0:55:ed:39:b8:53:9a: 89:fd:f1:a3:5c:de:ee:e5:46:95:f0:75:97:fb:00: 5b:8f:0e:33:27:c1:a3:cb:0f:28:3a:60:af:53:f2: cb:07:1e:e8:4e:f9:d3:56:4e:28:63:7d:96:8f:cf: f2:5f:da:42:8b:95:3f:ac:23:ea:8c:1e:d7:a9:4c: 01:8c:2c:f5:14:94:64:ab:7a:d2:0d:4a:f8:40:20: af:c7:2d:ad:42:e2:5e:df:4d:e8:56:a2:8f:95:93: 71:a5:52:8d:b3:32:bf:6a:a1:0b:0b:da:7f:bf:3f: 7b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FD:4F:0D:05:C8:00:43:30:E1:86:60:F7:D6:30:CE:3D:AB:46:CF X509v3 Authority Key Identifier: keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:14:d6:8c:56:bb:58:66:33:49:fb:6b:08:2b:a9:52:42:8b: 59:17:6c:03:80:f1:c0:74:15:f8:39:ec:63:60:cf:ea:1f:05: 3e:e9:17:4a:60:78:31:54:7a:6d:dd:27:22:b6:bd:33:bc:3d: 16:06:f1:fc:78:62:64:f2:61:2d:15:31:36:7f:ce:d5:2a:a6: 0a:13:df:af:49:0c:0e:62:9e:99:5f:db:3f:0d:2d:83:75:4c: 6a:79:7d:01:1a:0a:49:ec:3b:af:aa:c3:14:f3:40:a6:ec:fd: 35:c3:e8:18:06:d0:1d:aa:79:3a:6d:e5:fc:36:14:5b:d8:71: b2:74:54:89:aa:a7:12:77:5c:c4:a6:d8:54:a5:ad:c8:7f:f2: fd:77:4e:73:0b:22:8f:ea:32:cf:68:f2:e3:62:05:15:48:5c: 9d:9d:97:04:07:2b:24:81:47:bd:47:29:a3:e3:67:90:26:9a: 8e:de:ad:d9:10:05:2b:19:90:3e:b0:6e:27:bd:55:00:83:2c: 77:5b:bc:39:03:46:29:22:83:9c:95:61:dc:41:40:ef:54:48: fd:05:ac:d3:fb:32:16:9b:46:b4:b7:61:6f:41:a2:10:65:0a: 4b:c6:a3:4c:45:09:f3:ad:90:9a:38:f6:b2:72:ca:17:0d:50: ec:84:28:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdg5+Wj6UVCkon1COjdytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDk1YzlmNzQ3YjFjOWU5YmRjNTcxN2E3MjVlODA1OTg3 NGNiZWYwHhcNMjUxMjI2MDcwMTA3WhcNMjUxMjI3MDcwMTA3WjAzMTEwLwYDVQQD Eyg4N2ZkNGYwZDA1YzgwMDQzMzBlMTg2NjBmN2Q2MzBjZTNkYWI0NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW+nvH3wYKNd3F9YgO8Sl602D2zk OaPRwHu7dCBzZgBpALygL0GxKqOeU7d/fWSgUbRTQIXQdCavs30ayBdesEM1mqaY 5B7Xh5xCYgYzDHBo33UK4eHa1CUgKH4KO5/dGg1+LKuyz/MF15HblVP7IifBNAqD ogCtN0zMZsFM/yWjA2Nvck8QGBV1g9Ntk9BV7Tm4U5qJ/fGjXN7u5UaV8HWX+wBb jw4zJ8Gjyw8oOmCvU/LLBx7oTvnTVk4oY32Wj8/yX9pCi5U/rCPqjB7XqUwBjCz1 FJRkq3rSDUr4QCCvxy2tQuJe303oVqKPlZNxpVKNszK/aqELC9p/vz97OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf9Tw0FyABDMOGGYPfWMM49q0bPMB8GA1UdIwQY MBaAFLYJXJ90exyem9xXF6cl6AWYdMvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMt YmRiOTNlYzAxNzllLzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMtYmRiOTNlYzAxNzll LzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghTWjFa7 WGYzSftrCCupUkKLWRdsA4DxwHQV+DnsY2DP6h8FPukXSmB4MVR6bd0nIra9M7w9 Fgbx/HhiZPJhLRUxNn/O1SqmChPfr0kMDmKemV/bPw0tg3VManl9ARoKSew7r6rD FPNApuz9NcPoGAbQHap5Om3l/DYUW9hxsnRUiaqnEndcxKbYVKWtyH/y/XdOcwsi j+oyz2jy42IFFUhcnZ2XBAcrJIFHvUcpo+NnkCaajt6t2RAFKxmQPrBuJ71VAIMs d1u8OQNGKSKDnJVh3EFA71RI/QWs0/syFptGtLdhb0GiEGUKS8ajTEUJ862Qmjj2 snLKFw1Q7IQokw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:21 2025 by rpki-client