This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json) Hash identifier: dAZ5WLy1xm1S9bsd4fmmdWwBp1oprnbC3kMt5XjGMnE= Subject key identifier: EA:74:3E:91:BC:8C:66:0B:EB:A0:A7:5D:1F:B3:A3:FD:B7:9F:54:BE Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34 Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34 Certificate serial: 019B38A300ED2ADAE126F9259732960A44F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft Manifest number: 0A74 Signing time: Fri 19 Dec 2025 22:02:45 +0000 Manifest this update: Fri 19 Dec 2025 22:02:45 +0000 Manifest next update: Sat 20 Dec 2025 22:02:45 +0000 Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: khe9qVn1T3Z5t25w0cdn6lgVG4VmATfQeE7TIxLJjZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a3:00:ed:2a:da:e1:26:f9:25:97:32:96:0a:44:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34 Validity Not Before: Dec 19 22:02:45 2025 GMT Not After : Dec 20 22:02:45 2025 GMT Subject: CN=ea743e91bc8c660beba0a75d1fb3a3fdb79f54be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:89:45:cd:b9:49:59:ab:b5:da:9d:93:e0: 17:f1:01:76:a6:61:bf:60:f2:ac:96:b0:d4:51:32: ab:c2:a5:27:37:c2:68:0f:64:75:ff:24:54:b0:42: e7:06:31:89:93:64:80:99:77:3d:b2:b3:d1:6a:5a: 11:8b:ad:29:6e:0b:4b:5c:e9:43:ec:55:35:a4:12: cc:d0:7f:06:87:fe:8e:ef:5d:c3:9d:e4:66:4c:81: a5:df:59:23:99:0f:9f:c3:20:39:7d:23:66:fb:35: 80:83:d7:7f:cf:3c:da:25:fc:03:e9:d2:6d:f1:80: 18:27:a0:fb:cb:ec:42:58:de:0f:02:89:19:d0:d9: 75:39:68:78:ba:1d:ed:2e:8b:92:81:75:85:ab:05: 08:46:2e:98:7d:4b:25:2b:03:fd:d4:6b:4d:20:c9: 96:cb:36:c6:4d:fb:4e:03:61:bb:4f:6f:97:33:6a: 9f:38:67:cb:1e:10:39:b9:92:df:e4:c0:85:8f:59: bb:dd:22:f6:76:d3:88:34:64:17:45:6c:37:58:b6: 9a:5a:4e:e3:f6:c3:8a:d6:f0:dd:ad:11:85:ed:30: 96:eb:c9:31:57:65:c9:7d:d1:24:0e:5c:e4:53:f3: 7e:74:a2:3a:c9:5c:c3:9d:55:0e:d0:f3:0b:97:02: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:74:3E:91:BC:8C:66:0B:EB:A0:A7:5D:1F:B3:A3:FD:B7:9F:54:BE X509v3 Authority Key Identifier: keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:43:c8:13:ae:50:6b:22:86:e7:49:05:ce:de:b0:60:d5:cb: 74:12:73:23:a8:59:c7:93:53:aa:9a:dc:0a:4e:22:6b:67:5a: d9:5d:65:1d:c3:ae:94:8e:b0:c5:34:24:4c:5c:d0:81:67:03: 48:36:cb:ec:a1:27:90:b3:45:00:b5:cd:c3:82:84:21:c4:a6: 09:76:60:d3:09:44:b9:69:ea:f4:71:4f:db:cc:1d:bb:69:bf: 2c:e4:99:4e:8e:40:53:64:6e:56:d8:9c:aa:da:22:db:c3:65: 96:99:92:19:89:f9:1f:73:a7:b5:23:5a:f0:47:3a:c4:24:f6: b0:f1:bc:7c:d5:75:b0:33:54:48:d5:47:af:af:4f:df:9a:30: 21:c8:f4:49:b1:26:7e:11:69:9f:db:37:3e:33:70:bf:91:9e: 39:ad:35:6b:cb:7e:09:f0:35:15:1e:b4:95:d0:0d:c7:06:c1: b8:3c:f2:db:0e:3b:28:4f:5a:b5:3a:2f:c4:c7:17:af:81:95: 3a:e5:d7:8d:f8:0e:ff:41:8e:cc:98:99:28:37:59:ef:dc:fc: 7b:1e:d8:2f:8f:e9:12:43:a4:85:bc:e0:a8:78:03:46:d7:f8: 91:5c:fd:b2:8e:ac:ae:74:88:f6:ac:1a:89:46:6d:49:a4:53: 0d:e5:e8:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4owDtKtrhJvkllzKWCkTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMDEzMzNmODZjYTk3MDcxYTBmOTYxMjZiYTM4ZTIyNTJl NzBhMzQwHhcNMjUxMjE5MjIwMjQ1WhcNMjUxMjIwMjIwMjQ1WjAzMTEwLwYDVQQD EyhlYTc0M2U5MWJjOGM2NjBiZWJhMGE3NWQxZmIzYTNmZGI3OWY1NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfWJRc25SVmrtdqdk+AX8QF2pmG/ YPKslrDUUTKrwqUnN8JoD2R1/yRUsELnBjGJk2SAmXc9srPRaloRi60pbgtLXOlD 7FU1pBLM0H8Gh/6O713DneRmTIGl31kjmQ+fwyA5fSNm+zWAg9d/zzzaJfwD6dJt 8YAYJ6D7y+xCWN4PAokZ0Nl1OWh4uh3tLouSgXWFqwUIRi6YfUslKwP91GtNIMmW yzbGTftOA2G7T2+XM2qfOGfLHhA5uZLf5MCFj1m73SL2dtOINGQXRWw3WLaaWk7j 9sOK1vDdrRGF7TCW68kxV2XJfdEkDlzkU/N+dKI6yVzDnVUO0PMLlwLleQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp0PpG8jGYL66CnXR+zo/23n1S+MB8GA1UdIwQY MBaAFE8BMz+GypcHGg+WEmujjiJS5wo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzIt YjQwNTY5MTZiMThiLzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzItYjQwNTY5MTZiMThi LzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUPIE65Q ayKG50kFzt6wYNXLdBJzI6hZx5NTqprcCk4ia2da2V1lHcOulI6wxTQkTFzQgWcD SDbL7KEnkLNFALXNw4KEIcSmCXZg0wlEuWnq9HFP28wdu2m/LOSZTo5AU2RuVtic qtoi28NllpmSGYn5H3OntSNa8Ec6xCT2sPG8fNV1sDNUSNVHr69P35owIcj0SbEm fhFpn9s3PjNwv5GeOa01a8t+CfA1FR60ldANxwbBuDzy2w47KE9atTovxMcXr4GV OuXXjfgO/0GOzJiZKDdZ79z8ex7YL4/pEkOkhbzgqHgDRtf4kVz9so6srnSI9qwa iUZtSaRTDeXoXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:52:41 2025 by rpki-client