This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json) Hash identifier: r7Y/RJ8lOmx9ztgho8PfkBfTVH6ZfvgNIEBMGtiVzi4= Subject key identifier: DF:AE:5F:A2:BE:BB:34:69:A8:89:4C:0D:84:66:52:F2:CE:24:7D:F6 Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60 Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360 Certificate serial: 019B3F119409C48694E08459CA122A470817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 04:01:15 +0000 Manifest this update: Sun 21 Dec 2025 04:01:15 +0000 Manifest next update: Mon 22 Dec 2025 04:01:15 +0000 Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=) 2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: SfDyLy+Gv6e11C1ZnLORDkC+1JmU4xn8HgGDdAn5O+o=) 3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:94:09:c4:86:94:e0:84:59:ca:12:2a:47:08:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360 Validity Not Before: Dec 21 04:01:15 2025 GMT Not After : Dec 22 04:01:15 2025 GMT Subject: CN=dfae5fa2bebb3469a8894c0d846652f2ce247df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:d4:fd:bc:2b:f6:b4:06:2e:d7:33:c5:a2: 07:63:53:be:70:32:6f:5a:c7:0f:d9:74:7a:9d:2f: 99:c2:9b:89:ec:f5:c4:c1:4d:7f:cd:56:4d:99:74: 0a:b1:01:fc:f8:05:cf:4f:d8:eb:46:90:52:24:d5: bb:2e:95:a5:16:47:76:b5:9b:a7:98:0f:da:fa:11: 9c:fa:8c:d6:69:63:05:02:05:7e:c2:67:50:f4:6b: f0:eb:24:44:ef:c2:ac:0a:7b:c5:dc:8b:30:81:6c: 91:6c:ca:96:c1:36:70:86:42:71:ab:41:43:38:fd: c6:72:29:cd:c4:47:be:18:b2:2c:6d:9d:86:34:a7: 36:ca:63:83:da:8a:cb:7f:ee:bd:91:4b:56:2d:2c: 42:03:b2:d1:7f:b1:a5:c7:07:6b:b2:dc:8e:c0:d1: 09:8a:bf:e3:67:d6:81:86:a1:03:20:3f:44:ba:6e: 1a:01:af:5c:34:31:c0:c0:79:ba:8b:03:e6:1c:9a: 06:60:82:b4:e0:61:ae:bd:ef:73:11:2a:77:04:8b: 72:0d:23:cb:b5:b3:79:45:87:63:f6:19:78:43:cb: 36:7b:14:cd:63:68:88:f9:df:4e:88:30:c9:00:10: fd:e2:ed:0c:75:c6:fb:c9:d7:c3:08:aa:3a:ad:a0: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AE:5F:A2:BE:BB:34:69:A8:89:4C:0D:84:66:52:F2:CE:24:7D:F6 X509v3 Authority Key Identifier: keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:07:50:6b:b8:79:12:be:50:9b:d9:a7:27:22:b9:af:53:5a: 0e:55:1e:2f:a7:e9:20:ad:c5:41:69:a0:29:34:23:b7:49:8e: 07:2b:4b:24:6b:29:5e:8e:ed:62:e6:ef:9f:6f:b3:83:11:a0: 3e:e6:78:80:0e:f9:7c:9f:d1:e2:49:b9:3d:e3:2e:e9:bd:e3: f7:0a:29:ba:67:f2:b9:30:db:e0:41:7b:3a:08:c1:f8:18:83: 7e:20:e0:ab:f7:10:c9:f8:de:ef:f3:51:64:1b:5b:42:48:b3: e7:cf:e4:fa:90:0f:c5:00:ac:8d:6d:e0:e6:7f:96:cf:8d:29: 96:29:26:dc:0b:68:86:6e:ac:be:e7:48:bc:cb:5d:e7:66:56: d8:37:fe:e0:8a:c9:38:82:fe:00:54:ba:db:41:57:24:99:40: c5:61:0e:1b:ea:d6:62:39:dc:92:5a:60:5a:51:7a:65:c7:67: 6d:c1:4b:09:fb:42:d1:ba:ab:58:b9:05:8e:40:99:a2:2a:50: f7:d3:f7:33:af:98:d1:e8:8f:3e:40:ff:06:f9:f1:82:95:15: ed:5a:15:39:f1:62:3d:da:c7:35:9f:2e:fe:95:d4:71:4f:44: a4:83:61:7f:ca:f1:5d:76:8d:5d:e5:45:16:cf:8f:44:60:fc: 49:ad:73:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EZQJxIaU4IRZyhIqRwgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMDMwMjA1ZmEzNjVlOWY0OWZmNGVhNzUwNmRmOTEyZDVl ZDgzNjAwHhcNMjUxMjIxMDQwMTE1WhcNMjUxMjIyMDQwMTE1WjAzMTEwLwYDVQQD EyhkZmFlNWZhMmJlYmIzNDY5YTg4OTRjMGQ4NDY2NTJmMmNlMjQ3ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKTU/bwr9rQGLtczxaIHY1O+cDJv WscP2XR6nS+ZwpuJ7PXEwU1/zVZNmXQKsQH8+AXPT9jrRpBSJNW7LpWlFkd2tZun mA/a+hGc+ozWaWMFAgV+wmdQ9Gvw6yRE78KsCnvF3IswgWyRbMqWwTZwhkJxq0FD OP3GcinNxEe+GLIsbZ2GNKc2ymOD2orLf+69kUtWLSxCA7LRf7GlxwdrstyOwNEJ ir/jZ9aBhqEDID9Eum4aAa9cNDHAwHm6iwPmHJoGYIK04GGuve9zESp3BItyDSPL tbN5RYdj9hl4Q8s2exTNY2iI+d9OiDDJABD94u0Mdcb7ydfDCKo6raBWeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+uX6K+uzRpqIlMDYRmUvLOJH32MB8GA1UdIwQY MBaAFE8DAgX6Nl6fSf9Op1Bt+RLV7YNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgt M2NlNjExY2I2Nzk5LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgtM2NlNjExY2I2Nzk5 LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAdQa7h5 Er5Qm9mnJyK5r1NaDlUeL6fpIK3FQWmgKTQjt0mOBytLJGspXo7tYubvn2+zgxGg PuZ4gA75fJ/R4km5PeMu6b3j9wopumfyuTDb4EF7OgjB+BiDfiDgq/cQyfje7/NR ZBtbQkiz58/k+pAPxQCsjW3g5n+Wz40plikm3Atohm6svudIvMtd52ZW2Df+4IrJ OIL+AFS620FXJJlAxWEOG+rWYjncklpgWlF6ZcdnbcFLCftC0bqrWLkFjkCZoipQ 99P3M6+Y0eiPPkD/BvnxgpUV7VoVOfFiPdrHNZ8u/pXUcU9EpINhf8rxXXaNXeVF Fs+PRGD8Sa1zEg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:54:16 2025 by rpki-client