This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json) Hash identifier: aTwY8ZUNjRNBTMIsOAcgZOHMI2H2Wpyupc3niA0sFyg= Subject key identifier: 61:BC:CD:2B:60:55:BC:34:FD:12:E6:E5:DA:51:BE:67:B5:F0:68:8D Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Certificate serial: 019B4CCD4A6515C2C80B7E7E2EAEBCDEBD34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft Manifest number: 0CF3 Signing time: Tue 23 Dec 2025 20:01:20 +0000 Manifest this update: Tue 23 Dec 2025 20:01:20 +0000 Manifest next update: Wed 24 Dec 2025 20:01:20 +0000 Files and hashes: 1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: MyYKWB8vn8ZCABxFI/k2GiMacf06InNFAUoCrs5xx1U=) 2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:4a:65:15:c2:c8:0b:7e:7e:2e:ae:bc:de:bd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Validity Not Before: Dec 23 20:01:20 2025 GMT Not After : Dec 24 20:01:20 2025 GMT Subject: CN=61bccd2b6055bc34fd12e6e5da51be67b5f0688d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fb:89:08:57:40:94:fb:1b:70:0f:de:79:27: 89:7d:6a:d0:75:85:0b:e8:7a:37:15:3a:d0:bd:d9: c8:78:a7:86:70:40:a5:f4:fa:14:9a:7b:32:9f:24: 2d:15:4f:8d:6f:42:d0:51:ed:03:0a:5a:3e:05:e9: aa:7f:a3:9d:b5:b7:47:03:b2:8a:bc:df:fa:6d:1c: c5:e7:f1:2e:18:be:a1:35:b4:25:8a:31:aa:cf:93: 50:05:6b:e3:10:be:10:b6:e2:96:02:ea:84:73:22: ac:cc:0a:4d:d0:c5:43:4a:25:c3:63:25:1e:4d:fe: 51:13:88:d5:e3:e2:80:3a:bb:85:90:e4:1f:34:fd: 56:bc:13:74:a4:2f:90:d1:7f:3c:88:24:2e:ee:c8: 63:e0:4e:fe:c1:d3:d3:76:c3:ca:b8:20:c5:1f:e9: 52:55:8e:fa:24:04:18:b7:39:3d:26:28:60:76:d6: 88:ed:f5:6c:4a:2c:58:26:b7:89:c0:32:f7:80:78: dc:45:82:36:29:74:a6:74:ae:61:64:b4:bc:aa:6c: 62:91:1e:ce:98:2f:30:ef:a1:82:c1:14:75:60:8f: 07:ea:af:04:b2:7f:47:a9:ec:bd:3f:ee:bf:82:f3: 2e:a2:7b:c7:58:21:21:98:2a:76:44:39:56:57:7b: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BC:CD:2B:60:55:BC:34:FD:12:E6:E5:DA:51:BE:67:B5:F0:68:8D X509v3 Authority Key Identifier: keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:58:55:72:16:40:91:5a:f1:76:c2:1c:37:1c:bf:ea:fc:53: 54:ea:e0:df:68:19:e5:d4:d4:39:51:1e:ae:7b:35:2e:e7:a6: 6f:ee:50:5f:c8:b4:fb:52:9e:b1:04:21:db:9f:af:90:89:08: 17:99:a1:c1:de:fc:3e:7b:5b:32:47:e8:52:d2:66:ce:19:8b: 2d:7b:57:96:15:58:ea:f8:79:7a:a3:c8:55:34:9e:06:17:84: 3e:0a:e3:28:55:69:11:e6:83:40:ce:84:f6:cb:0a:51:71:69: ab:16:76:d4:0b:77:f5:fa:cd:67:41:e7:ce:7d:9a:ef:cc:64: 3f:e7:58:0b:26:97:93:57:ee:b0:79:f5:c9:41:29:12:f9:20: 70:90:80:2b:f7:c9:ba:c4:28:01:a4:e8:df:37:d5:58:ad:1b: 71:2d:75:99:82:13:28:8c:59:b3:54:40:73:52:e5:28:ef:89: 57:ca:1d:1c:1f:62:20:93:be:86:ad:98:a6:5e:74:06:2d:25: 9a:94:48:78:4c:28:22:6e:2a:c0:78:d3:b1:6b:64:34:73:13: ef:47:f0:cc:a3:89:4e:04:db:c4:bf:d7:3d:2c:c2:1c:63:45: 9a:c3:a9:47:47:59:f7:8c:54:16:30:54:dc:0d:a5:87:1a:5a: b1:3a:00:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzUplFcLIC35+Lq683r00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5 Nzg4MjUwHhcNMjUxMjIzMjAwMTIwWhcNMjUxMjI0MjAwMTIwWjAzMTEwLwYDVQQD Eyg2MWJjY2QyYjYwNTViYzM0ZmQxMmU2ZTVkYTUxYmU2N2I1ZjA2ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifuJCFdAlPsbcA/eeSeJfWrQdYUL 6Ho3FTrQvdnIeKeGcECl9PoUmnsynyQtFU+Nb0LQUe0DClo+Bemqf6OdtbdHA7KK vN/6bRzF5/EuGL6hNbQlijGqz5NQBWvjEL4QtuKWAuqEcyKszApN0MVDSiXDYyUe Tf5RE4jV4+KAOruFkOQfNP1WvBN0pC+Q0X88iCQu7shj4E7+wdPTdsPKuCDFH+lS VY76JAQYtzk9JihgdtaI7fVsSixYJreJwDL3gHjcRYI2KXSmdK5hZLS8qmxikR7O mC8w76GCwRR1YI8H6q8Esn9Hqey9P+6/gvMuonvHWCEhmCp2RDlWV3u/fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG8zStgVbw0/RLm5dpRvme18GiNMB8GA1UdIwQY MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt ZDc4NTE0ZTllODEyLzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlhVchZA kVrxdsIcNxy/6vxTVOrg32gZ5dTUOVEerns1Luemb+5QX8i0+1KesQQh25+vkIkI F5mhwd78PntbMkfoUtJmzhmLLXtXlhVY6vh5eqPIVTSeBheEPgrjKFVpEeaDQM6E 9ssKUXFpqxZ21At39frNZ0Hnzn2a78xkP+dYCyaXk1fusHn1yUEpEvkgcJCAK/fJ usQoAaTo3zfVWK0bcS11mYITKIxZs1RAc1LlKO+JV8odHB9iIJO+hq2Ypl50Bi0l mpRIeEwoIm4qwHjTsWtkNHMT70fwzKOJTgTbxL/XPSzCHGNFmsOpR0dZ94xUFjBU 3A2lhxpasToAbg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:47:56 2025 by rpki-client