This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft File: TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json) Hash identifier: vBN1EDufP/m4LeTL4HTuVbrPCST1TD6vhoYxsgb/V5I= Subject key identifier: B0:08:A1:98:0B:14:D1:D7:7A:49:A4:5B:98:04:FD:90:DC:B4:FD:28 Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B Certificate issuer: /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Certificate serial: 019B0E25560DCE40310BD598B2FFC9AF43F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 16:01:26 +0000 Manifest this update: Thu 11 Dec 2025 16:01:26 +0000 Manifest next update: Fri 12 Dec 2025 16:01:26 +0000 Files and hashes: 1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=) 2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: pWbRUh/blur5x8RLrqvP0tt540WhC371wyazlX/P+XI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:56:0d:ce:40:31:0b:d5:98:b2:ff:c9:af:43:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Validity Not Before: Dec 11 16:01:26 2025 GMT Not After : Dec 12 16:01:26 2025 GMT Subject: CN=b008a1980b14d1d77a49a45b9804fd90dcb4fd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7d:a6:b0:81:d6:3c:d2:34:14:47:21:c4:43: fc:bb:ac:b6:46:90:a2:40:a3:8d:c4:b1:8c:33:3b: b8:a2:36:4e:7c:33:0a:89:4b:26:85:c3:b4:fc:e1: 16:e2:b6:50:66:29:de:2a:c9:ea:12:41:70:7f:1f: 75:63:9c:af:aa:ad:6e:af:f2:e5:38:55:c8:cf:0c: 5c:86:80:ff:85:54:2f:a0:be:93:05:2d:a8:49:67: 13:b8:d2:d2:bb:b7:21:9c:63:c6:84:45:6e:97:90: 4f:dd:a8:83:71:03:1a:8d:2c:2b:f7:71:cb:6d:a6: b5:2c:3c:94:70:ea:c1:f3:91:09:3b:5f:a8:51:ce: 84:8a:5d:ab:63:20:09:10:90:e2:74:93:d6:f6:c4: f8:7e:4c:a2:49:bd:64:4b:dc:ea:d6:35:6d:f1:85: 1e:31:e0:7f:0f:11:33:4d:bf:55:fb:d2:86:49:b4: bb:a8:93:31:66:b7:a0:43:0a:c1:4a:e6:31:90:a9: 20:fc:d2:7e:57:06:d1:2e:55:cd:bf:8b:9d:5d:f1: 66:8d:55:6c:de:e5:a0:7d:64:0a:d9:7f:b8:4d:48: 6e:51:29:c7:2f:6e:22:b0:55:94:04:fd:b4:9e:dc: 66:48:82:e1:b4:4c:b6:d3:60:c8:fa:74:10:d6:ec: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:08:A1:98:0B:14:D1:D7:7A:49:A4:5B:98:04:FD:90:DC:B4:FD:28 X509v3 Authority Key Identifier: keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:42:3a:10:08:2c:87:a3:ab:88:cb:be:f1:94:8e:d0:ae:20: a4:93:39:45:86:f0:51:51:04:1f:88:6d:04:aa:da:53:16:eb: 30:ba:33:74:50:e0:b3:b1:11:6f:ab:5f:1a:e4:e2:d9:ce:3e: c0:5b:95:78:fd:36:d6:5d:c8:50:82:cf:e2:81:9b:90:57:ff: 19:80:7f:e9:f6:d3:f9:90:ba:0e:8e:30:37:ed:38:b7:46:a1: 29:43:f3:61:c6:25:4d:8a:cd:f7:40:0f:63:2b:11:5e:e7:24: 04:e6:3b:44:a5:c0:3f:63:98:b6:11:4f:84:cd:ac:0b:f2:42: 53:04:1d:ae:52:6f:e2:76:a2:a4:b4:8c:8b:14:f8:c5:19:a9: 70:09:9c:7e:57:eb:5e:1f:e3:66:a7:93:8e:ff:fb:17:dc:37: 83:c0:0b:10:9e:5a:59:f2:b2:93:5e:53:9e:0e:6e:ce:38:11: e1:30:af:bf:49:dd:0c:6a:ee:c6:f3:68:0e:42:37:b1:96:92: 82:bc:d9:84:51:2e:e0:30:e3:67:cd:e1:5e:51:60:fd:34:1f: 8d:66:e6:d9:67:bc:d9:30:1a:12:c0:92:bd:7c:2c:23:4b:19: 8b:e7:a4:45:49:4b:a3:eb:dd:cb:52:65:bc:30:85:46:38:0f: f2:9c:97:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJVYNzkAxC9WYsv/Jr0P0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi ZDhjOWIwHhcNMjUxMjExMTYwMTI2WhcNMjUxMjEyMTYwMTI2WjAzMTEwLwYDVQQD EyhiMDA4YTE5ODBiMTRkMWQ3N2E0OWE0NWI5ODA0ZmQ5MGRjYjRmZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA232msIHWPNI0FEchxEP8u6y2RpCi QKONxLGMMzu4ojZOfDMKiUsmhcO0/OEW4rZQZineKsnqEkFwfx91Y5yvqq1ur/Ll OFXIzwxchoD/hVQvoL6TBS2oSWcTuNLSu7chnGPGhEVul5BP3aiDcQMajSwr93HL baa1LDyUcOrB85EJO1+oUc6Eil2rYyAJEJDidJPW9sT4fkyiSb1kS9zq1jVt8YUe MeB/DxEzTb9V+9KGSbS7qJMxZregQwrBSuYxkKkg/NJ+VwbRLlXNv4udXfFmjVVs 3uWgfWQK2X+4TUhuUSnHL24isFWUBP20ntxmSILhtEy202DI+nQQ1uxwTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAIoZgLFNHXekmkW5gE/ZDctP0oMB8GA1UdIwQY MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4 LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkI6EAgs h6OriMu+8ZSO0K4gpJM5RYbwUVEEH4htBKraUxbrMLozdFDgs7ERb6tfGuTi2c4+ wFuVeP021l3IUILP4oGbkFf/GYB/6fbT+ZC6Do4wN+04t0ahKUPzYcYlTYrN90AP YysRXuckBOY7RKXAP2OYthFPhM2sC/JCUwQdrlJv4naipLSMixT4xRmpcAmcflfr Xh/jZqeTjv/7F9w3g8ALEJ5aWfKyk15Tng5uzjgR4TCvv0ndDGruxvNoDkI3sZaS grzZhFEu4DDjZ83hXlFg/TQfjWbm2We82TAaEsCSvXwsI0sZi+ekRUlLo+vdy1Jl vDCFRjgP8pyXFQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:23 2025 by rpki-client