This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json) Hash identifier: 7RIw4N1LsRMgXH9WztOyXXYncfY/UiEhrs2Zl49e/b8= Subject key identifier: 87:5D:D8:80:32:4E:13:02:05:DC:9D:9F:77:84:56:64:09:5D:FC:CB Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Certificate serial: 019B3BA28435FB42687083406030CE485B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft Manifest number: 16E0 Signing time: Sat 20 Dec 2025 12:01:04 +0000 Manifest this update: Sat 20 Dec 2025 12:01:04 +0000 Manifest next update: Sun 21 Dec 2025 12:01:04 +0000 Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: nEMKjXq9ei8K4fLYkWWHMEbvdlwm+rGkkOdsa0BiFeY=) 2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:84:35:fb:42:68:70:83:40:60:30:ce:48:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Validity Not Before: Dec 20 12:01:04 2025 GMT Not After : Dec 21 12:01:04 2025 GMT Subject: CN=875dd880324e130205dc9d9f77845664095dfccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:2f:48:b5:b9:54:38:f3:bb:58:7f:5b:c0: 25:6a:fb:76:15:3a:30:46:47:b2:05:c7:d3:c0:e7: 95:06:e9:32:a8:61:f1:7f:ad:72:06:f4:42:d3:dd: 1a:7c:e7:dc:39:91:36:95:3c:fd:fa:81:cc:36:f1: fe:67:41:21:ee:2a:91:c6:88:91:58:3a:63:5a:b5: 0d:2b:90:f3:84:f9:12:d5:2a:a7:65:71:fd:9e:98: 3d:4e:f9:e1:b0:44:5f:a0:1f:61:d4:6c:b5:d5:46: 16:90:e1:f8:ea:da:c2:9b:dc:9b:46:8f:3f:ac:6b: 64:cc:3b:e6:ca:7e:95:e5:bc:13:52:1d:ff:93:8a: 1a:56:f1:bb:9c:8b:e5:f0:80:a6:2d:81:d2:78:c1: 17:2c:f0:e4:7d:75:46:89:25:4b:61:86:f8:4b:f0: 30:11:d7:c1:db:82:73:90:36:42:93:13:f1:68:4c: 7e:a7:18:db:45:17:ad:69:10:1d:13:34:37:b8:4b: 32:35:ac:67:12:d3:f3:57:57:f3:dc:66:c7:78:67: 80:c7:20:10:a6:37:68:89:ef:c5:99:c1:d0:dd:f8: 0c:de:22:8b:5c:64:c0:e5:70:82:c9:57:51:c1:00: 96:f5:ad:ab:41:36:ff:e2:46:3d:e9:77:50:75:9d: 17:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:D8:80:32:4E:13:02:05:DC:9D:9F:77:84:56:64:09:5D:FC:CB X509v3 Authority Key Identifier: keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:78:37:3a:5d:32:71:ba:a0:57:88:25:bf:9b:d9:95:0f:81: bf:b0:27:9c:52:27:96:2e:08:cb:01:bf:31:92:16:3c:ed:00: a9:77:02:76:10:44:81:dd:12:4b:bf:fa:1e:28:2b:b0:87:0b: 43:4d:fa:ef:05:0c:fd:aa:18:e0:2f:78:a7:dc:99:c2:d9:2a: 30:a4:98:fa:47:88:5e:04:b8:54:0e:34:a0:1e:82:c7:61:07: 51:0d:f7:11:c9:16:49:1a:60:a8:af:8c:ee:41:6e:76:0a:79: bb:6d:36:8a:7c:d0:f8:3b:f2:79:83:c0:b1:cc:a4:74:17:93: ff:59:2f:16:72:2e:cf:ba:d9:fd:8f:95:ac:ab:2f:7c:2c:b9: 76:29:1f:b3:27:d2:99:31:29:b4:00:ff:bd:0e:18:a6:c8:24: 68:9d:ab:85:16:ea:95:f6:14:75:0a:17:73:89:a5:75:38:ae: 33:2e:88:6a:ae:9a:8f:4a:fc:34:50:5f:86:7c:7d:df:2b:00: 73:fb:9a:1f:0c:2d:e7:27:89:0f:1e:39:e5:fb:30:c4:7c:03: f8:78:d9:3b:32:19:9b:8a:21:f4:41:0b:76:8d:72:e1:6a:75: c1:fd:2c:36:85:e8:ca:2d:e8:3f:95:ee:18:4c:50:9e:2e:67: 66:ec:03:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ooQ1+0JocINAYDDOSFtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjI3ODFjYTE0MzZkOTZkNjc3NWJhMjBjNWNmMmM3NWRm ZDEzZTkwHhcNMjUxMjIwMTIwMTA0WhcNMjUxMjIxMTIwMTA0WjAzMTEwLwYDVQQD Eyg4NzVkZDg4MDMyNGUxMzAyMDVkYzlkOWY3Nzg0NTY2NDA5NWRmY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB4vSLW5VDjzu1h/W8Alavt2FTow RkeyBcfTwOeVBukyqGHxf61yBvRC090afOfcOZE2lTz9+oHMNvH+Z0Eh7iqRxoiR WDpjWrUNK5DzhPkS1SqnZXH9npg9TvnhsERfoB9h1Gy11UYWkOH46trCm9ybRo8/ rGtkzDvmyn6V5bwTUh3/k4oaVvG7nIvl8ICmLYHSeMEXLPDkfXVGiSVLYYb4S/Aw EdfB24JzkDZCkxPxaEx+pxjbRRetaRAdEzQ3uEsyNaxnEtPzV1fz3GbHeGeAxyAQ pjdoie/FmcHQ3fgM3iKLXGTA5XCCyVdRwQCW9a2rQTb/4kY96XdQdZ0XhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdd2IAyThMCBdydn3eEVmQJXfzLMB8GA1UdIwQY MBaAFE1ieByhQ22W1ndbogxc8sdd/RPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUt OGUwYmRmZjIzN2Y4LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUtOGUwYmRmZjIzN2Y4 LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqng3Ol0y cbqgV4glv5vZlQ+Bv7AnnFInli4IywG/MZIWPO0AqXcCdhBEgd0SS7/6HigrsIcL Q0367wUM/aoY4C94p9yZwtkqMKSY+keIXgS4VA40oB6Cx2EHUQ33EckWSRpgqK+M 7kFudgp5u202inzQ+DvyeYPAscykdBeT/1kvFnIuz7rZ/Y+VrKsvfCy5dikfsyfS mTEptAD/vQ4YpsgkaJ2rhRbqlfYUdQoXc4mldTiuMy6Iaq6aj0r8NFBfhnx93ysA c/uaHwwt5yeJDx455fswxHwD+HjZOzIZm4oh9EELdo1y4Wp1wf0sNoXoyi3oP5Xu GExQni5nZuwDMQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:24:44 2025 by rpki-client