This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft File: TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json) Hash identifier: Vc7PKlPzhvNZcnGdxTGUInBimdr0IClbN2x8+Vlc+jw= Subject key identifier: 78:E2:CD:34:57:F5:CE:09:0D:DD:47:0D:83:DB:49:F7:7A:D2:17:C2 Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B Certificate issuer: /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Certificate serial: 019B3C7F5D98A9EC8262BF41492FCCD34A34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:18 +0000 Manifest this update: Sat 20 Dec 2025 16:02:18 +0000 Manifest next update: Sun 21 Dec 2025 16:02:18 +0000 Files and hashes: 1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=) 2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: zRNYeQKjkgmp5HkFbY/jPZ80ZqaSWkUe7CrfQarPtRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:5d:98:a9:ec:82:62:bf:41:49:2f:cc:d3:4a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Validity Not Before: Dec 20 16:02:18 2025 GMT Not After : Dec 21 16:02:18 2025 GMT Subject: CN=78e2cd3457f5ce090ddd470d83db49f77ad217c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:78:46:f6:50:47:16:6c:bc:e6:d8:4f:95: c1:1e:7e:4e:0a:ad:bc:86:6b:5d:56:e5:6f:77:2b: 48:a1:32:fe:36:20:ed:35:ec:46:7e:c0:49:f7:36: a2:a6:91:e5:da:12:cd:8f:a9:4b:a3:00:4b:57:74: 22:83:12:2c:df:0b:9b:8f:9e:d6:af:d1:ee:9b:0f: 10:13:61:02:56:8e:c1:9a:15:fb:d9:99:84:65:75: 38:f0:2c:c8:ff:60:b9:b5:8b:96:2a:60:41:1e:63: 91:49:7a:c0:5d:e8:19:e7:d1:9a:10:5f:53:f0:25: 15:26:b9:64:d0:f2:7c:e6:6f:9e:65:0d:51:f9:c1: 96:c1:ce:a4:4e:ed:78:3d:b1:73:31:f6:18:7c:c5: 5c:31:c9:d3:5c:e8:da:10:50:7c:a4:9a:cb:7f:0e: 9e:5a:97:f7:b2:c9:65:17:cb:19:d8:07:3a:78:11: e0:53:9e:a2:b8:58:b7:a7:16:d6:82:f1:d3:0d:2a: a1:a8:99:0e:1e:eb:34:6e:96:c3:9a:8d:da:e1:15: 53:3a:25:1b:3f:a2:4d:8a:1f:72:5c:c0:dc:9a:ad: 20:87:26:1f:c9:77:08:e4:e7:8f:05:ea:cf:70:96: 3c:02:ce:0d:b8:b0:b3:42:f3:55:37:30:ea:c0:df: ca:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E2:CD:34:57:F5:CE:09:0D:DD:47:0D:83:DB:49:F7:7A:D2:17:C2 X509v3 Authority Key Identifier: keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:9a:c1:bc:43:6c:3c:85:7a:cd:0d:fa:65:fa:68:59:33:15: 24:8d:d1:59:ab:f4:19:a6:1b:fd:79:f4:72:67:15:1a:bb:f1: 39:a8:67:40:2c:0b:c8:f5:07:b3:15:2e:b1:5b:e7:00:a3:fc: 24:8e:34:c1:f9:ee:19:e6:13:a7:d3:a7:a0:c4:29:cd:bb:15: 48:6d:b1:86:7b:ab:82:b9:1f:c2:f3:28:c2:cd:e0:b6:cc:d5: 05:af:ad:97:37:08:fd:41:2d:ee:9f:8d:a7:3b:52:c4:50:c5: 0d:b9:ff:da:87:e6:79:eb:21:79:e3:0e:dc:b4:a2:a6:66:e7: f2:22:9f:6f:0e:cf:dc:6c:24:aa:ec:8c:31:6d:14:9f:4c:93: 24:f5:37:7e:9b:aa:e0:9f:a5:09:77:a8:2a:c9:36:0a:55:e9: be:36:8b:96:3f:e7:22:17:56:3f:f9:28:12:91:b1:f0:ad:c0: 01:af:ad:72:8b:c2:ce:31:e3:29:79:bd:90:d9:59:ad:16:d1: 41:0a:06:c5:c9:14:1b:8f:1b:34:a4:67:7d:4f:65:3c:f5:0a: d9:91:25:79:b6:2f:b4:be:3e:99:e6:b3:b3:d3:90:08:55:ff: 32:12:55:fe:47:df:78:fc:b8:b1:07:49:c4:6b:81:c4:4b:52: f4:f7:f3:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f12YqeyCYr9BSS/M00o0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi ZDhjOWIwHhcNMjUxMjIwMTYwMjE4WhcNMjUxMjIxMTYwMjE4WjAzMTEwLwYDVQQD Eyg3OGUyY2QzNDU3ZjVjZTA5MGRkZDQ3MGQ4M2RiNDlmNzdhZDIxN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp094RvZQRxZsvObYT5XBHn5OCq28 hmtdVuVvdytIoTL+NiDtNexGfsBJ9zaippHl2hLNj6lLowBLV3QigxIs3wubj57W r9Humw8QE2ECVo7BmhX72ZmEZXU48CzI/2C5tYuWKmBBHmORSXrAXegZ59GaEF9T 8CUVJrlk0PJ85m+eZQ1R+cGWwc6kTu14PbFzMfYYfMVcMcnTXOjaEFB8pJrLfw6e Wpf3ssllF8sZ2Ac6eBHgU56iuFi3pxbWgvHTDSqhqJkOHus0bpbDmo3a4RVTOiUb P6JNih9yXMDcmq0ghyYfyXcI5OePBerPcJY8As4NuLCzQvNVNzDqwN/KrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjizTRX9c4JDd1HDYPbSfd60hfCMB8GA1UdIwQY MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4 LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqprBvENs PIV6zQ36ZfpoWTMVJI3RWav0GaYb/Xn0cmcVGrvxOahnQCwLyPUHsxUusVvnAKP8 JI40wfnuGeYTp9OnoMQpzbsVSG2xhnurgrkfwvMows3gtszVBa+tlzcI/UEt7p+N pztSxFDFDbn/2ofmeesheeMO3LSipmbn8iKfbw7P3GwkquyMMW0Un0yTJPU3fpuq 4J+lCXeoKsk2ClXpvjaLlj/nIhdWP/koEpGx8K3AAa+tcovCzjHjKXm9kNlZrRbR QQoGxckUG48bNKRnfU9lPPUK2ZElebYvtL4+meazs9OQCFX/MhJV/kffePy4sQdJ xGuBxEtS9PfzjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:57 2025 by rpki-client