This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft File: TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json) Hash identifier: btrkFrAw5x/cQmCegIeYEyWsCvurDjXsE+7eOYxI8n8= Subject key identifier: 57:55:19:6F:BA:4F:C3:0B:B1:4E:1D:E7:45:D2:B4:8F:B8:EB:8C:5F Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B Certificate issuer: /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b Certificate serial: 019B30E91799B924F58CAD8CC4161647D5D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft Manifest number: 0A37 Signing time: Thu 18 Dec 2025 10:02:20 +0000 Manifest this update: Thu 18 Dec 2025 10:02:20 +0000 Manifest next update: Fri 19 Dec 2025 10:02:20 +0000 Files and hashes: 1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: rgjwxDSqIBb7QopulHob4ZizFq4P8t/YsFn+/v/hQRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:17:99:b9:24:f5:8c:ad:8c:c4:16:16:47:d5:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b Validity Not Before: Dec 18 10:02:20 2025 GMT Not After : Dec 19 10:02:20 2025 GMT Subject: CN=5755196fba4fc30bb14e1de745d2b48fb8eb8c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:34:e5:fc:08:79:4e:f2:d2:7d:3e:25:3d: 33:f7:2e:1d:08:72:31:92:2a:ab:59:60:07:d5:e4: d9:6e:74:5a:81:cd:79:60:9d:a5:c0:f9:99:09:4c: 06:c6:3f:ec:d8:3f:65:47:af:ac:bf:d8:58:f3:e3: 00:39:57:8b:0a:43:55:f0:be:d1:42:82:67:2d:b1: 49:6a:f1:38:ec:34:08:42:05:c7:76:01:69:31:b7: 58:b1:bc:e3:9b:55:39:4a:ae:ec:af:cc:24:71:e5: 8e:dc:56:23:66:6e:70:3a:31:78:e7:3d:04:8a:0d: 1b:6e:4e:5f:e8:18:7a:23:35:08:9e:79:77:92:f1: 52:43:4d:36:b8:a0:3f:8a:9c:f8:d9:38:33:69:01: 7c:48:b5:a3:67:7b:38:a6:14:3b:e8:44:b0:b5:7f: 67:bb:32:64:5d:35:3a:cf:00:39:78:6f:02:cf:b9: 2d:83:e3:50:d9:5c:da:e2:3e:9d:6b:98:1a:dd:b5: de:84:63:57:90:79:a9:cc:44:79:47:5d:f9:26:f3: dd:8c:75:c3:3e:57:f0:dc:9a:56:3e:b2:3a:b3:e4: f1:58:72:32:e9:47:14:92:09:9c:51:92:19:ae:3a: 35:19:f7:28:94:85:4d:a4:ac:f2:a5:bf:03:d5:1c: f1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:55:19:6F:BA:4F:C3:0B:B1:4E:1D:E7:45:D2:B4:8F:B8:EB:8C:5F X509v3 Authority Key Identifier: keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:29:18:61:2c:13:b0:55:dd:1a:54:36:2e:ff:97:77:0e:02: cf:aa:cb:76:b3:92:76:10:38:09:35:56:47:15:34:a2:43:5f: cc:09:cf:fc:2b:e7:86:40:a0:f4:a6:a6:d9:72:da:b0:6b:d2: 33:53:8c:c9:c7:ee:bb:fb:7a:80:d2:fd:a9:ae:42:c6:c4:9b: be:b9:96:fa:6e:42:19:e5:ed:e5:a1:27:50:d3:9c:89:87:36: 0c:e5:7a:19:71:29:77:9e:f0:93:f5:73:c7:d0:15:c4:0b:2a: da:9a:9a:16:f3:41:35:60:08:38:35:77:11:8a:fa:ff:b0:66: 72:9c:d9:ec:33:f6:39:76:b2:9a:fb:36:be:52:1e:a8:2c:04: 44:6f:06:53:02:6e:1b:9b:4f:c2:58:c7:8c:d0:15:90:91:f4: a5:62:1b:7c:34:f0:ae:8c:7e:12:eb:db:11:84:a2:9f:85:ac: 03:2e:3e:a0:e9:d2:d4:31:ed:e1:36:66:dd:3b:ac:d0:15:b4: 81:f0:67:33:41:40:c0:13:1d:e0:9c:f5:b3:d7:66:66:76:43: d7:25:c0:8d:83:81:21:75:f4:27:25:b2:ca:01:65:63:66:05: ae:9e:31:98:1f:d0:33:be:4f:98:45:d2:82:26:05:75:8a:8f: 4d:d2:98:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ReZuST1jK2MxBYWR9XZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNmYwZTQ0YTdmNmYwYzg4Y2NlOWM0NmRiYThlYzcyZWM2 MTc1MmIwHhcNMjUxMjE4MTAwMjIwWhcNMjUxMjE5MTAwMjIwWjAzMTEwLwYDVQQD Eyg1NzU1MTk2ZmJhNGZjMzBiYjE0ZTFkZTc0NWQyYjQ4ZmI4ZWI4YzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz005fwIeU7y0n0+JT0z9y4dCHIx kiqrWWAH1eTZbnRagc15YJ2lwPmZCUwGxj/s2D9lR6+sv9hY8+MAOVeLCkNV8L7R QoJnLbFJavE47DQIQgXHdgFpMbdYsbzjm1U5Sq7sr8wkceWO3FYjZm5wOjF45z0E ig0bbk5f6Bh6IzUInnl3kvFSQ002uKA/ipz42TgzaQF8SLWjZ3s4phQ76ESwtX9n uzJkXTU6zwA5eG8Cz7ktg+NQ2Vza4j6da5ga3bXehGNXkHmpzER5R135JvPdjHXD Plfw3JpWPrI6s+TxWHIy6UcUkgmcUZIZrjo1GfcolIVNpKzypb8D1RzxwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdVGW+6T8MLsU4d50XStI+464xfMB8GA1UdIwQY MBaAFE1vDkSn9vDIjM6cRtuo7HLsYXUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xMzNiYjUtMTFmYi00Zjk0LThmMjkt YWNhM2I4MjgzZmUzLzEvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xMzNiYjUtMTFmYi00Zjk0LThmMjktYWNhM2I4MjgzZmUz LzEvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyikYYSwT sFXdGlQ2Lv+Xdw4Cz6rLdrOSdhA4CTVWRxU0okNfzAnP/CvnhkCg9Kam2XLasGvS M1OMycfuu/t6gNL9qa5CxsSbvrmW+m5CGeXt5aEnUNOciYc2DOV6GXEpd57wk/Vz x9AVxAsq2pqaFvNBNWAIODV3EYr6/7BmcpzZ7DP2OXaymvs2vlIeqCwERG8GUwJu G5tPwljHjNAVkJH0pWIbfDTwrox+EuvbEYSin4WsAy4+oOnS1DHt4TZm3Tus0BW0 gfBnM0FAwBMd4Jz1s9dmZnZD1yXAjYOBIXX0JyWyygFlY2YFrp4xmB/QM75PmEXS giYFdYqPTdKYpw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:34:57 2025 by rpki-client