This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json) Hash identifier: YsbMYLM9+T+ElmeSNPgkfqJYOKuaGLGfxfGk3cyZcEQ= Subject key identifier: 2B:8E:08:AC:34:18:D6:29:87:16:A7:5C:96:87:47:CD:A4:B1:16:A8 Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Certificate serial: 019B0F0059A489C480F2B4D8EB67723CCB2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft Manifest number: 0CD3 Signing time: Thu 11 Dec 2025 20:00:39 +0000 Manifest this update: Thu 11 Dec 2025 20:00:39 +0000 Manifest next update: Fri 12 Dec 2025 20:00:39 +0000 Files and hashes: 1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: /rlZ79u6WITgAaHTQqgtoFuQljIP77opUmLezEIxMFU=) 2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:59:a4:89:c4:80:f2:b4:d8:eb:67:72:3c:cb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Validity Not Before: Dec 11 20:00:39 2025 GMT Not After : Dec 12 20:00:39 2025 GMT Subject: CN=2b8e08ac3418d6298716a75c968747cda4b116a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:47:13:f9:5b:fe:9e:be:92:81:22:c9:d3: 01:36:ef:9d:c6:0e:cc:d6:4b:90:ad:5d:50:6c:52: d1:2b:19:57:4d:28:fa:7a:46:a4:80:07:51:26:cb: d0:82:84:f1:7d:5b:96:7e:12:8b:57:f1:00:6d:b9: a9:59:d4:6d:1e:c8:ae:c2:4f:09:86:a6:08:36:a1: 5f:96:85:6d:19:f9:87:b0:30:e2:68:68:9c:46:f0: 7a:8e:4f:d0:2f:7d:82:2c:94:cb:56:8e:59:4c:31: 62:5b:03:0b:e9:36:a1:b9:8b:b5:99:e4:ea:3b:11: f5:c8:91:a5:7d:59:c0:d3:44:d0:9c:47:18:6e:aa: 0f:0b:44:71:b1:26:7b:ad:57:ea:1a:14:2d:7a:26: 7e:84:3b:fc:56:c3:1d:ca:24:b0:71:69:58:88:c0: f3:76:eb:5d:23:ed:9a:9d:ae:7c:24:8c:eb:71:79: dd:67:51:d9:b9:25:1e:ec:d7:21:de:e4:90:a9:fe: 90:69:3d:f9:32:2f:42:f2:5c:61:66:e9:a5:f6:9c: 82:3f:5c:30:ee:18:ae:21:50:dc:7c:4f:b7:74:ec: 25:7a:d6:ab:f4:4f:ae:c1:38:6b:a5:b2:b1:28:d5: 7f:37:90:bf:e2:07:4c:4b:a0:db:f2:d2:65:96:56: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8E:08:AC:34:18:D6:29:87:16:A7:5C:96:87:47:CD:A4:B1:16:A8 X509v3 Authority Key Identifier: keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cd:9c:b7:68:54:2b:04:13:37:dd:b6:19:f6:7d:48:d3:dd: c9:70:1a:da:45:1d:cc:c5:86:9f:bf:4d:be:16:49:77:ea:59: f9:0e:4d:f5:92:3d:ce:09:19:70:7b:c3:66:78:a7:4d:fd:05: f0:c8:2e:07:ce:65:d2:f9:44:8d:f8:6f:2b:3d:3b:a7:f9:a8: 32:3a:a2:f9:97:df:44:48:47:e8:db:f7:8a:b9:b5:85:97:5a: 9c:23:72:62:23:1d:c2:52:de:73:a0:d7:8e:b5:45:27:fc:16: 44:83:a9:3e:c4:bd:23:a7:05:28:9a:27:50:cb:f7:be:35:16: 44:11:d9:53:be:f7:cf:62:11:a9:47:bb:57:8b:17:66:e6:d1: 8f:4d:2b:4e:b8:56:0a:9e:f8:bd:cc:d4:8d:2e:73:ce:26:73: b8:91:45:45:1d:21:5a:50:36:40:81:18:45:0f:f1:69:7f:2b: 73:44:5c:36:48:82:c2:1e:be:4a:2e:0f:5b:55:e5:df:cf:ef: ff:40:ba:7e:e6:2c:9e:f0:a7:5a:04:11:c9:1f:7c:7f:b5:05: 2b:e3:d0:ef:7b:2a:dc:59:d9:26:d2:31:2f:c1:bd:df:79:5a: 1b:c2:42:68:73:87:9c:1f:14:ae:11:cb:62:de:2c:ea:2a:b2: 2e:e3:d1:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAFmkicSA8rTY62dyPMsvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5 Nzg4MjUwHhcNMjUxMjExMjAwMDM5WhcNMjUxMjEyMjAwMDM5WjAzMTEwLwYDVQQD EygyYjhlMDhhYzM0MThkNjI5ODcxNmE3NWM5Njg3NDdjZGE0YjExNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyxHE/lb/p6+koEiydMBNu+dxg7M 1kuQrV1QbFLRKxlXTSj6ekakgAdRJsvQgoTxfVuWfhKLV/EAbbmpWdRtHsiuwk8J hqYINqFfloVtGfmHsDDiaGicRvB6jk/QL32CLJTLVo5ZTDFiWwML6TahuYu1meTq OxH1yJGlfVnA00TQnEcYbqoPC0RxsSZ7rVfqGhQteiZ+hDv8VsMdyiSwcWlYiMDz dutdI+2ana58JIzrcXndZ1HZuSUe7Nch3uSQqf6QaT35Mi9C8lxhZuml9pyCP1ww 7hiuIVDcfE+3dOwletar9E+uwThrpbKxKNV/N5C/4gdMS6Db8tJlllbXywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuOCKw0GNYphxanXJaHR82ksRaoMB8GA1UdIwQY MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt ZDc4NTE0ZTllODEyLzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM2ct2hU KwQTN922GfZ9SNPdyXAa2kUdzMWGn79NvhZJd+pZ+Q5N9ZI9zgkZcHvDZninTf0F 8MguB85l0vlEjfhvKz07p/moMjqi+ZffREhH6Nv3irm1hZdanCNyYiMdwlLec6DX jrVFJ/wWRIOpPsS9I6cFKJonUMv3vjUWRBHZU773z2IRqUe7V4sXZubRj00rTrhW Cp74vczUjS5zziZzuJFFRR0hWlA2QIEYRQ/xaX8rc0RcNkiCwh6+Si4PW1Xl38/v /0C6fuYsnvCnWgQRyR98f7UFK+PQ73sq3FnZJtIxL8G933laG8JCaHOHnB8UrhHL Yt4s6iqyLuPRZg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:20 2025 by rpki-client