This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json) Hash identifier: jugQKghvuCgwWH2oxcMxMZqu4okBGfUt4X2yVqBusKI= Subject key identifier: B5:FF:C7:75:1F:5A:E3:40:7B:2E:48:F5:D0:28:D8:40:56:21:98:86 Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Certificate serial: 019B59772194F5F1D19D1272345054CD6E8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft Manifest number: 17A6 Signing time: Fri 26 Dec 2025 07:02:18 +0000 Manifest this update: Fri 26 Dec 2025 07:02:18 +0000 Manifest next update: Sat 27 Dec 2025 07:02:18 +0000 Files and hashes: 1: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: oKay7W5DQI4SsEptgiuvyWBU5vlekAgItXbn3AQFV4s=) 2: fpKUqxxKUPc_O5n9wxHsQg8T_FY.roa (hash: OrgW5t1N1aQKAHTjeWlGlcEAJmvI2Q1WBkLpeJc3hPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:21:94:f5:f1:d1:9d:12:72:34:50:54:cd:6e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3 Validity Not Before: Dec 26 07:02:18 2025 GMT Not After : Dec 27 07:02:18 2025 GMT Subject: CN=b5ffc7751f5ae3407b2e48f5d028d84056219886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:5e:42:22:ea:63:e7:32:0d:25:04:31:dc: 82:b3:3d:de:fc:6c:62:16:ba:42:f9:38:cf:1f:35: e1:98:fe:60:df:07:82:b5:de:76:0a:d8:fc:e7:64: e6:6d:ad:2d:33:86:e6:79:02:82:32:9b:18:7c:5c: 3b:e9:4a:4c:0f:48:80:db:c5:c0:5d:6c:44:2d:d9: 90:64:91:7b:c0:9b:6a:10:08:ed:48:04:8a:2d:4a: e0:ba:43:1c:d8:c4:fd:44:fc:33:f8:be:88:07:89: e8:61:c8:27:84:b7:12:bd:b9:88:31:fa:aa:ca:4c: 7d:97:49:19:38:f7:52:f2:8d:7f:dc:89:8b:48:5b: 73:b6:59:12:c5:98:08:6e:8b:19:fc:35:1c:b7:20: 18:05:e8:38:c0:74:e1:2a:3f:fa:1c:50:42:b4:3a: a3:0e:25:33:34:e6:54:0b:fe:37:3e:39:9b:42:4c: 4a:23:f4:4f:3b:42:06:99:d7:23:e1:0e:83:d0:80: aa:5d:1c:f7:65:48:70:15:01:aa:29:46:4e:50:22: 48:aa:3d:a4:27:47:c8:b0:9f:87:5f:4e:c9:8a:5b: de:83:6b:7c:fb:49:aa:ab:a7:2b:bf:1c:70:00:8a: 9f:47:b4:a3:cc:80:e2:e8:dc:1a:97:e7:a6:3e:b8: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FF:C7:75:1F:5A:E3:40:7B:2E:48:F5:D0:28:D8:40:56:21:98:86 X509v3 Authority Key Identifier: keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c8:a3:f0:cd:f0:13:34:b8:40:da:81:c4:24:15:c7:88:1c: 12:c0:df:d6:c4:dc:6f:9d:bc:b2:80:4f:0e:6e:60:86:bf:d6: e4:0f:e7:de:77:c9:bd:45:93:01:00:01:83:39:d0:33:7f:11: b9:3b:7b:08:e2:d3:3f:c3:37:f3:32:a8:e0:6b:f6:de:38:b7: 99:d9:73:f1:2b:1d:1c:47:40:ef:f1:0d:9f:b9:97:2c:52:12: f2:91:33:41:ee:ca:5d:04:10:90:9a:0e:f5:8a:44:4b:22:0c: 75:8b:a6:80:f7:07:ca:9a:87:c4:2f:c3:4d:a5:2b:60:5c:12: c1:fc:36:10:d9:f5:47:c8:46:ba:54:26:c1:eb:2a:ae:16:84: ae:fd:68:ef:4a:21:82:bc:58:0a:53:85:a8:06:62:6a:5f:3f: 48:cd:19:b7:82:51:b2:11:5c:ea:55:56:52:61:12:2d:dd:be: f6:3a:db:3d:81:74:18:07:b2:61:25:5e:f3:5a:0b:3d:3e:0d: 3e:34:6c:af:e0:10:8f:9c:2d:5e:75:a2:7d:36:d0:dd:c7:42: aa:e1:95:f5:97:3b:7f:8f:d2:45:86:ab:08:68:d2:23:6d:cc: fb:ea:3e:0d:70:c5:99:70:4a:f4:44:cc:e4:59:02:bf:42:43: 3a:f3:8b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdyGU9fHRnRJyNFBUzW6NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNTE0NmJiNGUyMTk3NDRmNThjMjY4ZTllYzYyMWMxOGRk MjI5YzMwHhcNMjUxMjI2MDcwMjE4WhcNMjUxMjI3MDcwMjE4WjAzMTEwLwYDVQQD EyhiNWZmYzc3NTFmNWFlMzQwN2IyZTQ4ZjVkMDI4ZDg0MDU2MjE5ODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvheQiLqY+cyDSUEMdyCsz3e/Gxi FrpC+TjPHzXhmP5g3weCtd52Ctj852Tmba0tM4bmeQKCMpsYfFw76UpMD0iA28XA XWxELdmQZJF7wJtqEAjtSASKLUrgukMc2MT9RPwz+L6IB4noYcgnhLcSvbmIMfqq ykx9l0kZOPdS8o1/3ImLSFtztlkSxZgIbosZ/DUctyAYBeg4wHThKj/6HFBCtDqj DiUzNOZUC/43PjmbQkxKI/RPO0IGmdcj4Q6D0ICqXRz3ZUhwFQGqKUZOUCJIqj2k J0fIsJ+HX07Jilveg2t8+0mqq6crvxxwAIqfR7SjzIDi6Nwal+emPriudwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLX/x3UfWuNAey5I9dAo2EBWIZiGMB8GA1UdIwQY MBaAFE5RRrtOIZdE9Ywmjp7GIcGN0inDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQt YzkyMGM1MTdkNjAwLzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yNWI1NGEtZTc3MC00NGFiLWEwMDQtYzkyMGM1MTdkNjAw LzEvVGxGR3UwNGhsMFQxakNhT25zWWh3WTNTS2NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8ij8M3w EzS4QNqBxCQVx4gcEsDf1sTcb528soBPDm5ghr/W5A/n3nfJvUWTAQABgznQM38R uTt7COLTP8M38zKo4Gv23ji3mdlz8SsdHEdA7/ENn7mXLFIS8pEzQe7KXQQQkJoO 9YpESyIMdYumgPcHypqHxC/DTaUrYFwSwfw2ENn1R8hGulQmwesqrhaErv1o70oh grxYClOFqAZial8/SM0Zt4JRshFc6lVWUmESLd2+9jrbPYF0GAeyYSVe81oLPT4N PjRsr+AQj5wtXnWifTbQ3cdCquGV9Zc7f4/SRYarCGjSI23M++o+DXDFmXBK9ETM 5FkCv0JDOvOLcA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:13 2025 by rpki-client