This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft File: TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json) Hash identifier: NjmchYRfQH1T1pbTHlm13O0WtshEkjHnbHqIf3Td+rw= Subject key identifier: 08:4D:93:CC:30:F6:C8:BC:57:F5:D4:4D:37:8F:C0:FA:66:A6:EC:A0 Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B Certificate issuer: /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Certificate serial: 019BFD2E9719190CACB083CA4809AFBF5D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 02:00:47 +0000 Manifest this update: Tue 27 Jan 2026 02:00:47 +0000 Manifest next update: Wed 28 Jan 2026 02:00:47 +0000 Files and hashes: 1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: TacCVLILiqlzl0bQMLMpABXtMCCfRQbYIaFDFAzpSGY=) 2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:97:19:19:0c:ac:b0:83:ca:48:09:af:bf:5d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Validity Not Before: Jan 27 02:00:47 2026 GMT Not After : Jan 28 02:00:47 2026 GMT Subject: CN=084d93cc30f6c8bc57f5d44d378fc0fa66a6eca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:23:9f:a2:ec:c8:ff:5a:a3:f6:a2:e4:eb:d8: 19:eb:17:3d:82:76:d4:9d:69:78:9a:f2:b2:46:a4: bd:e0:14:94:77:0a:74:1a:d0:d5:b9:89:34:0b:6d: 8d:14:78:1d:74:51:7a:7e:7c:a5:6f:e8:db:34:52: 05:b1:a5:80:ad:ee:51:e9:6a:a6:51:1d:55:c2:4d: cc:a1:58:ad:06:32:d7:f8:ef:a2:14:34:7f:01:21: 8d:9b:50:6f:90:aa:60:d8:c2:32:2d:08:dc:03:5f: 92:4e:15:d7:1c:c1:9e:ca:e9:aa:6f:4e:59:2e:af: 78:e1:c0:87:7f:ce:c6:be:88:ad:e8:db:e2:7e:17: 93:03:1b:23:e9:0a:ad:f4:1d:89:d3:0b:30:5a:5a: 12:f5:a4:92:34:e6:b2:0f:4c:e1:db:dc:e6:ab:35: c5:9d:8a:27:cf:2b:33:c4:b6:a7:76:ff:e0:bd:12: f3:eb:ea:1c:e7:c7:d1:d2:38:26:cb:21:e8:9f:41: 1c:d9:4b:3b:36:d6:fe:2f:01:bc:a9:a1:de:a5:b8: 4e:14:96:0d:59:67:f2:44:a3:6d:21:3a:7c:4a:78: d5:f6:10:13:c9:5f:39:0a:7f:a4:96:18:d0:57:e2: 63:9a:cc:e1:4a:93:7f:01:57:e9:bb:7f:d6:1e:4e: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4D:93:CC:30:F6:C8:BC:57:F5:D4:4D:37:8F:C0:FA:66:A6:EC:A0 X509v3 Authority Key Identifier: keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ed:05:3f:f6:08:e6:4e:23:ba:5f:3b:18:06:c2:e3:27:5f: bb:56:2c:8f:5d:bb:f3:66:0f:ab:d5:94:cc:94:1c:12:58:23: f1:19:dd:8c:2e:40:5a:04:4e:6c:e3:bf:4e:7f:26:d0:3f:0f: 44:52:4e:12:6f:c7:c3:eb:09:96:8e:94:58:42:cb:e2:5a:5d: fb:52:81:f3:54:79:51:e5:79:99:eb:10:16:eb:bf:20:a9:b7: 09:fd:a4:4c:62:ab:c6:d5:c0:a9:ae:c1:6c:c5:ed:96:ec:1a: bf:29:88:b8:ef:c8:61:fc:ea:e9:b6:74:71:38:6b:ad:d8:ff: 33:2b:fd:41:20:76:46:e1:bb:ac:f5:64:36:82:3a:74:ed:bf: 9b:ac:ef:67:69:7a:18:56:59:57:57:59:c1:ed:90:7c:00:db: e9:97:48:33:a8:81:eb:84:14:db:82:51:8b:c2:10:cf:8e:13: e0:1c:41:cc:62:6b:ce:a6:32:f5:f9:cf:ef:e7:f9:2c:8d:e2: 5d:59:bd:fe:85:58:0f:75:c0:f6:67:b5:0f:aa:eb:56:fb:21: b4:a0:c0:da:a7:77:4c:32:7c:55:80:05:61:41:e6:5e:89:e4: bd:2b:f0:c1:86:32:59:5b:eb:b1:bd:f6:b4:09:4f:37:3b:1e: b2:e1:2e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LpcZGQyssIPKSAmvv11TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi ZDhjOWIwHhcNMjYwMTI3MDIwMDQ3WhcNMjYwMTI4MDIwMDQ3WjAzMTEwLwYDVQQD EygwODRkOTNjYzMwZjZjOGJjNTdmNWQ0NGQzNzhmYzBmYTY2YTZlY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSOfouzI/1qj9qLk69gZ6xc9gnbU nWl4mvKyRqS94BSUdwp0GtDVuYk0C22NFHgddFF6fnylb+jbNFIFsaWAre5R6Wqm UR1Vwk3MoVitBjLX+O+iFDR/ASGNm1BvkKpg2MIyLQjcA1+SThXXHMGeyumqb05Z Lq944cCHf87Gvoit6NvifheTAxsj6Qqt9B2J0wswWloS9aSSNOayD0zh29zmqzXF nYonzyszxLandv/gvRLz6+oc58fR0jgmyyHon0Ec2Us7Ntb+LwG8qaHepbhOFJYN WWfyRKNtITp8SnjV9hATyV85Cn+klhjQV+JjmszhSpN/AVfpu3/WHk4zQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhNk8ww9si8V/XUTTePwPpmpuygMB8GA1UdIwQY MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4 LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+0FP/YI 5k4jul87GAbC4ydfu1Ysj12782YPq9WUzJQcElgj8RndjC5AWgRObOO/Tn8m0D8P RFJOEm/Hw+sJlo6UWELL4lpd+1KB81R5UeV5mesQFuu/IKm3Cf2kTGKrxtXAqa7B bMXtluwavymIuO/IYfzq6bZ0cThrrdj/Myv9QSB2RuG7rPVkNoI6dO2/m6zvZ2l6 GFZZV1dZwe2QfADb6ZdIM6iB64QU24JRi8IQz44T4BxBzGJrzqYy9fnP7+f5LI3i XVm9/oVYD3XA9me1D6rrVvshtKDA2qd3TDJ8VYAFYUHmXonkvSvwwYYyWVvrsb32 tAlPNzsesuEukg== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:38 2026 by rpki-client