This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft File: F84IIXrG5mPAjdFhj0mtpOvk_tw.mft (raw, json) Hash identifier: zLcZvBnezfrcKyG6WYB9LNHgAwAVZPVfU5J63D+P/bs= Subject key identifier: 80:71:BE:E8:BB:58:56:FF:22:4C:8B:76:C6:36:5B:2C:DF:5E:CB:70 Authority key identifier: 17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC Certificate issuer: /CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc Certificate serial: 019B5976A3EC0A6B2E03FEEF185EC2DDEA16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft Manifest number: 0EE6 Signing time: Fri 26 Dec 2025 07:01:45 +0000 Manifest this update: Fri 26 Dec 2025 07:01:45 +0000 Manifest next update: Sat 27 Dec 2025 07:01:45 +0000 Files and hashes: 1: F84IIXrG5mPAjdFhj0mtpOvk_tw.crl (hash: a282ABDfD661lGWunP7BrvBzJgaEAGsOGlX+TzdZfCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:a3:ec:0a:6b:2e:03:fe:ef:18:5e:c2:dd:ea:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ce08217ac6e663c08dd1618f49ada4ebe4fedc Validity Not Before: Dec 26 07:01:45 2025 GMT Not After : Dec 27 07:01:45 2025 GMT Subject: CN=8071bee8bb5856ff224c8b76c6365b2cdf5ecb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:7b:14:db:e6:9a:5d:af:ad:c0:2b:9d:f7: a7:c4:2b:47:be:9b:b5:25:f5:2e:42:fb:4f:da:6d: ab:48:95:5e:32:ad:0c:d4:97:ff:58:3c:60:8c:c4: a8:7c:e5:6c:a6:b7:a5:88:2b:7a:d0:fe:e2:7f:6f: b5:b4:92:10:8f:44:fd:d4:cf:74:e5:4f:c8:f4:1d: 82:f5:ce:52:18:d4:83:91:fc:84:ce:08:36:28:3f: 0e:ca:c0:d6:6e:db:8c:44:a9:c9:a2:6e:5a:82:b2: 64:e5:58:da:54:3e:7c:b3:f8:1a:93:05:54:25:75: ba:5e:ca:53:3f:87:e8:29:a1:54:60:42:00:9e:85: ac:d8:4b:97:62:a2:9d:d3:b8:71:be:6a:75:36:41: a9:fc:e8:34:3e:6c:33:e4:b1:58:0f:e5:99:75:d3: 9f:15:e0:e6:0f:50:66:a3:50:8a:64:05:2c:42:6f: d3:61:2b:77:8d:8c:08:47:c3:b2:55:12:cf:22:17: 3e:bf:a8:36:42:90:fd:cd:90:61:4b:9b:fc:49:a1: e2:24:75:1c:35:d1:5e:20:c1:06:0f:6f:c7:15:e2: cf:45:7e:3f:78:2d:1a:57:f1:d1:ff:62:50:64:05: dc:25:b8:47:f6:88:06:4c:06:9c:7e:e8:fc:90:32: c2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:71:BE:E8:BB:58:56:FF:22:4C:8B:76:C6:36:5B:2C:DF:5E:CB:70 X509v3 Authority Key Identifier: keyid:17:CE:08:21:7A:C6:E6:63:C0:8D:D1:61:8F:49:AD:A4:EB:E4:FE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F84IIXrG5mPAjdFhj0mtpOvk_tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d70e92-b0cd-48b7-a30d-a8117387ea34/1/F84IIXrG5mPAjdFhj0mtpOvk_tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c9:48:f2:eb:cf:03:50:66:34:ea:b1:71:cf:91:cc:2c:0f: b2:dd:cf:91:1c:39:8b:73:b9:f3:25:6f:1b:a4:82:18:70:be: 42:ef:6c:2d:d6:bc:bf:a9:70:1a:8f:1f:a0:bf:85:97:40:06: fc:88:b1:23:cf:a6:36:a8:c7:f1:89:e6:a5:30:3c:dd:d2:1f: 36:a6:9e:fd:e0:24:04:15:a2:7a:d3:37:b7:79:5e:fc:07:73: 9f:d7:f4:4b:9b:a9:54:34:a4:5a:69:b8:a5:2e:07:a3:d1:80: 7a:4d:9b:5d:96:47:cd:2d:79:25:a3:28:a6:28:c6:dd:63:ce: 8d:e7:38:58:df:6c:fb:47:28:9f:33:bc:9d:4b:5d:aa:37:59: 96:db:29:09:59:d5:0a:a4:8b:fb:7c:b2:22:64:aa:59:7b:96: 5d:11:1c:d0:af:93:a0:03:1f:e9:35:f7:80:df:4e:52:5c:66: 8e:3f:29:3d:93:6c:f1:e7:bf:1b:48:3c:2d:be:67:f7:d6:71: 1b:d4:2e:33:64:d8:8e:e1:79:35:6a:40:10:57:4a:0a:54:c1: 98:fc:76:a9:1e:5d:a0:cb:69:4f:4b:10:f9:84:de:49:80:d6: b4:0c:b3:f3:c3:5a:c6:15:d6:b5:a3:81:21:0f:50:af:a6:eb: 7e:3d:60:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdqPsCmsuA/7vGF7C3eoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2UwODIxN2FjNmU2NjNjMDhkZDE2MThmNDlhZGE0ZWJl NGZlZGMwHhcNMjUxMjI2MDcwMTQ1WhcNMjUxMjI3MDcwMTQ1WjAzMTEwLwYDVQQD Eyg4MDcxYmVlOGJiNTg1NmZmMjI0YzhiNzZjNjM2NWIyY2RmNWVjYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy17FNvmml2vrcArnfenxCtHvpu1 JfUuQvtP2m2rSJVeMq0M1Jf/WDxgjMSofOVspreliCt60P7if2+1tJIQj0T91M90 5U/I9B2C9c5SGNSDkfyEzgg2KD8OysDWbtuMRKnJom5agrJk5VjaVD58s/gakwVU JXW6XspTP4foKaFUYEIAnoWs2EuXYqKd07hxvmp1NkGp/Og0Pmwz5LFYD+WZddOf FeDmD1Bmo1CKZAUsQm/TYSt3jYwIR8OyVRLPIhc+v6g2QpD9zZBhS5v8SaHiJHUc NdFeIMEGD2/HFeLPRX4/eC0aV/HR/2JQZAXcJbhH9ogGTAacfuj8kDLCXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBxvui7WFb/IkyLdsY2WyzfXstwMB8GA1UdIwQY MBaAFBfOCCF6xuZjwI3RYY9JraTr5P7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNzBlOTItYjBjZC00OGI3LWEzMGQt YTgxMTczODdlYTM0LzEvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNzBlOTItYjBjZC00OGI3LWEzMGQtYTgxMTczODdlYTM0 LzEvRjg0SUlYckc1bVBBamRGaGowbXRwT3ZrX3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMlI8uvP A1BmNOqxcc+RzCwPst3PkRw5i3O58yVvG6SCGHC+Qu9sLda8v6lwGo8foL+Fl0AG /IixI8+mNqjH8YnmpTA83dIfNqae/eAkBBWietM3t3le/Adzn9f0S5upVDSkWmm4 pS4Ho9GAek2bXZZHzS15JaMopijG3WPOjec4WN9s+0conzO8nUtdqjdZltspCVnV CqSL+3yyImSqWXuWXREc0K+ToAMf6TX3gN9OUlxmjj8pPZNs8ee/G0g8Lb5n99Zx G9QuM2TYjuF5NWpAEFdKClTBmPx2qR5doMtpT0sQ+YTeSYDWtAyz88NaxhXWtaOB IQ9Qr6brfj1gmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:50 2025 by rpki-client