This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json) Hash identifier: hNQNXpU1i1FbzOJ3O8PsKa9DC8Ion2plRjrxr8jZhRk= Subject key identifier: A8:BA:65:0B:D5:A7:38:B0:16:0C:0B:D2:8E:79:E6:AE:75:3F:A3:1E Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57 Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957 Certificate serial: 019B46CB179A9E1E7F77976E6A66CE5BCFFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft Manifest number: 13A3 Signing time: Mon 22 Dec 2025 16:01:13 +0000 Manifest this update: Mon 22 Dec 2025 16:01:13 +0000 Manifest next update: Tue 23 Dec 2025 16:01:13 +0000 Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: OOHHurbslXl1Vf3aPtL4nj9ENFURtZZNUbg/8rNGum8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:17:9a:9e:1e:7f:77:97:6e:6a:66:ce:5b:cf:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957 Validity Not Before: Dec 22 16:01:13 2025 GMT Not After : Dec 23 16:01:13 2025 GMT Subject: CN=a8ba650bd5a738b0160c0bd28e79e6ae753fa31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:41:92:8b:d3:cb:07:b7:b7:d5:68:52:57: e3:62:b4:e2:76:a3:68:fc:ae:0c:80:d0:85:a7:40: 6e:2d:30:43:f2:49:b8:e9:66:64:f8:51:a8:67:b1: cb:ca:36:1d:97:41:97:72:7c:2a:84:81:f7:d6:a3: e3:04:83:2a:3b:01:dc:af:aa:3f:06:f4:6d:81:59: ae:6a:c9:9c:0e:bc:76:e9:45:d6:30:f9:2b:53:1f: 73:c6:b4:e3:d1:45:47:30:bb:8b:e4:bb:58:54:dc: 78:42:de:0c:0f:d9:1d:82:4a:77:63:ee:4b:32:4b: b2:90:e6:9b:20:e2:e3:c5:70:1b:f5:fb:b7:4f:54: f2:e7:e0:0b:a0:14:8c:cb:33:ee:a8:c1:d5:90:3c: 92:74:22:d3:31:f4:5a:9c:6c:5d:cc:94:30:80:c4: 46:21:5d:c8:24:9e:73:aa:41:bd:6f:4b:e0:68:fe: cd:b1:db:7f:5c:34:a9:5d:6e:c5:11:df:70:b9:1e: 86:9d:70:a5:69:09:ed:ce:ab:05:c8:71:2b:00:f7: 6d:70:84:e4:53:c1:7c:5a:3b:a0:70:a8:44:0f:6d: 78:39:f4:1f:1b:d1:85:42:ad:0a:0e:a3:34:07:87: a2:cd:af:6d:79:bf:57:6b:5a:e4:d6:5f:32:85:a4: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BA:65:0B:D5:A7:38:B0:16:0C:0B:D2:8E:79:E6:AE:75:3F:A3:1E X509v3 Authority Key Identifier: keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d9:cb:a3:b3:e8:85:bf:69:8f:d0:50:82:3f:b5:96:b8:52: df:49:f7:26:67:0f:21:44:85:e8:2b:55:d7:3b:05:d5:20:05: 25:02:f6:90:bd:99:ca:b3:77:48:57:6e:df:e9:1c:13:69:2f: af:b0:6b:3d:41:0e:7e:ce:b7:66:59:ab:db:34:30:36:6b:a7: e5:a3:ad:db:13:83:b9:29:e7:de:09:1c:76:c5:65:b7:bc:b1: 25:7b:8a:cc:1d:a6:ca:b9:b3:ff:46:de:04:ec:d2:c4:09:95: f6:7c:cc:ed:a8:52:25:5e:f2:a5:16:8f:c6:56:82:cd:56:14: 7a:d0:c0:fd:3b:7e:39:51:79:46:78:39:54:ab:61:a3:a6:93: 42:8a:f6:c6:30:bb:a6:13:79:2d:03:26:37:4f:66:8d:4e:22: f7:77:58:61:96:9c:c8:3a:56:3a:97:a0:e4:24:02:47:f2:7f: 91:95:9d:c7:a9:c7:07:c8:0b:23:5c:18:52:4a:2a:b7:8d:6f: 1a:77:3e:08:ca:0d:a6:1f:ef:c2:33:47:6a:40:a3:a9:e7:9a: 85:74:ce:98:a7:35:3a:8a:48:13:f9:23:4b:86:20:66:36:2c: 1e:26:d6:48:22:eb:5f:56:be:c5:a0:06:75:3d:eb:2a:05:05: 38:7d:cd:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyxeanh5/d5duambOW8//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMDc4OGFhZDIyYWM0MzcwZDUxOGNiN2ZiOWRmZTcyNGI0 MWY5NTcwHhcNMjUxMjIyMTYwMTEzWhcNMjUxMjIzMTYwMTEzWjAzMTEwLwYDVQQD EyhhOGJhNjUwYmQ1YTczOGIwMTYwYzBiZDI4ZTc5ZTZhZTc1M2ZhMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ZBkovTywe3t9VoUlfjYrTidqNo /K4MgNCFp0BuLTBD8km46WZk+FGoZ7HLyjYdl0GXcnwqhIH31qPjBIMqOwHcr6o/ BvRtgVmuasmcDrx26UXWMPkrUx9zxrTj0UVHMLuL5LtYVNx4Qt4MD9kdgkp3Y+5L MkuykOabIOLjxXAb9fu3T1Ty5+ALoBSMyzPuqMHVkDySdCLTMfRanGxdzJQwgMRG IV3IJJ5zqkG9b0vgaP7Nsdt/XDSpXW7FEd9wuR6GnXClaQntzqsFyHErAPdtcITk U8F8WjugcKhED214OfQfG9GFQq0KDqM0B4eiza9teb9Xa1rk1l8yhaQ8BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKi6ZQvVpziwFgwL0o555q51P6MeMB8GA1UdIwQY MBaAFE8HiKrSKsQ3DVGMt/ud/nJLQflXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAt ZTExYWIyNjFjYTdiLzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAtZTExYWIyNjFjYTdi LzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9nLo7Po hb9pj9BQgj+1lrhS30n3JmcPIUSF6CtV1zsF1SAFJQL2kL2ZyrN3SFdu3+kcE2kv r7BrPUEOfs63Zlmr2zQwNmun5aOt2xODuSnn3gkcdsVlt7yxJXuKzB2myrmz/0be BOzSxAmV9nzM7ahSJV7ypRaPxlaCzVYUetDA/Tt+OVF5Rng5VKtho6aTQor2xjC7 phN5LQMmN09mjU4i93dYYZacyDpWOpeg5CQCR/J/kZWdx6nHB8gLI1wYUkoqt41v Gnc+CMoNph/vwjNHakCjqeeahXTOmKc1OopIE/kjS4YgZjYsHibWSCLrX1a+xaAG dT3rKgUFOH3Nug== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:24 2025 by rpki-client