This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json) Hash identifier: XNYPv2iWsPnDawAzq9CEBclQVHLAgxzNQ8ZKH16fiPc= Subject key identifier: 1C:6C:BB:D4:92:D9:20:65:8D:DD:A7:E8:A3:90:BC:0F:5A:82:71:28 Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad Certificate serial: 019B0CDB9F600DF9409D3F0DBAB1FEACCD0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 10:01:18 +0000 Manifest this update: Thu 11 Dec 2025 10:01:18 +0000 Manifest next update: Fri 12 Dec 2025 10:01:18 +0000 Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=) 2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: 9XyrHtzKduLhPvumqc40dWmNXsKJhbqV00PaY2I5he4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:9f:60:0d:f9:40:9d:3f:0d:ba:b1:fe:ac:cd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad Validity Not Before: Dec 11 10:01:18 2025 GMT Not After : Dec 12 10:01:18 2025 GMT Subject: CN=1c6cbbd492d920658ddda7e8a390bc0f5a827128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:9b:11:16:20:54:de:58:9c:00:a9:a9:9b: 45:9f:f4:2f:f4:db:53:53:5c:ee:d6:3d:51:c5:ad: ba:ea:53:f9:25:58:ef:3c:74:62:ef:97:11:f4:1e: 59:3f:80:51:d9:a0:73:f7:a4:ab:1b:f0:ec:3c:cb: 69:c9:c1:58:44:ed:b7:e5:21:3e:13:03:ec:2e:ed: 7b:96:96:0c:fd:d1:f6:c7:6c:64:5f:6a:54:0d:6f: db:bf:5a:b7:0d:5a:51:dc:3d:e8:6a:48:4f:c1:65: d7:1c:b5:7f:2d:a4:54:7e:1f:a7:8c:58:d8:3a:30: fc:14:74:0b:57:6d:3e:5b:fc:29:34:78:61:ff:5c: 21:db:ee:1f:e6:cb:ea:eb:73:52:42:0c:cf:99:f1: ca:27:9b:a9:14:e0:ef:81:1e:77:d3:ad:e5:39:2a: f9:3b:1f:3b:aa:88:c5:68:8e:c0:f2:42:95:1b:d8: d2:9b:fd:43:9a:5b:39:4f:74:7d:8e:09:58:fb:7e: 0b:0f:18:2b:03:ca:9e:6d:f6:ec:ef:63:3e:94:ab: 68:47:b2:d5:8b:bc:bf:1f:f4:fe:20:48:52:23:85: 6f:e8:f4:bb:3e:1f:64:16:6f:e0:bc:34:ea:82:51: 00:69:d7:19:de:99:5e:02:8f:09:cf:31:3c:59:52: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6C:BB:D4:92:D9:20:65:8D:DD:A7:E8:A3:90:BC:0F:5A:82:71:28 X509v3 Authority Key Identifier: keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:af:ad:37:3c:09:c0:93:43:84:c8:0a:b7:66:01:ed:e8: ee:fb:19:8f:a7:c4:4e:02:d5:15:28:ea:8f:15:33:3d:4b:ce: ba:63:0d:3e:bd:ac:57:8a:aa:8f:3f:85:28:d1:ad:38:8d:8e: 54:8f:6d:c0:c1:94:91:9d:d3:73:16:83:2b:85:94:9a:9c:6b: 6a:77:15:70:ac:cd:44:66:25:b3:87:5b:70:81:b6:0d:4f:b6: 6e:2a:89:89:ac:0f:79:20:b0:7e:c3:5f:1a:de:c6:4e:c6:9e: ed:02:d1:0f:e6:19:70:fb:46:4e:92:6f:65:2b:12:a3:03:68: 08:f0:86:15:4f:01:e4:27:11:36:ae:8c:f3:5f:d6:e0:a0:66: f9:30:06:83:54:05:f6:e3:09:1d:e9:19:c0:c3:35:ce:28:a6: dc:38:1b:b3:3f:26:d4:93:f1:02:87:51:2e:53:4e:5d:80:b5: 88:9e:e1:99:c1:b7:1b:f2:23:c1:10:af:c5:d1:68:9a:c6:c6: 98:fd:5e:34:81:ef:d9:aa:bc:3f:47:26:05:d9:76:c7:c2:51: 66:c6:1c:73:8c:92:a0:c2:f0:58:ba:41:62:7b:c7:69:10:57: cd:e9:39:9b:12:28:7a:73:50:e7:ef:6a:cc:a3:f5:8e:39:70: 27:24:95:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM259gDflAnT8NurH+rM0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzU5NGIwMjE0MjY0ZjA2Njc3NjA5YmI0YWE0Nzc5ZWIx ZWVjYWQwHhcNMjUxMjExMTAwMTE4WhcNMjUxMjEyMTAwMTE4WjAzMTEwLwYDVQQD EygxYzZjYmJkNDkyZDkyMDY1OGRkZGE3ZThhMzkwYmMwZjVhODI3MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2imbERYgVN5YnACpqZtFn/Qv9NtT U1zu1j1Rxa266lP5JVjvPHRi75cR9B5ZP4BR2aBz96SrG/DsPMtpycFYRO235SE+ EwPsLu17lpYM/dH2x2xkX2pUDW/bv1q3DVpR3D3oakhPwWXXHLV/LaRUfh+njFjY OjD8FHQLV20+W/wpNHhh/1wh2+4f5svq63NSQgzPmfHKJ5upFODvgR53063lOSr5 Ox87qojFaI7A8kKVG9jSm/1Dmls5T3R9jglY+34LDxgrA8qebfbs72M+lKtoR7LV i7y/H/T+IEhSI4Vv6PS7Ph9kFm/gvDTqglEAadcZ3pleAo8JzzE8WVLnDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxsu9SS2SBljd2n6KOQvA9agnEoMB8GA1UdIwQY MBaAFEx1lLAhQmTwZndgm7SqR3nrHuytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYt YjEzMGJmNzZmZTEwLzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYtYjEzMGJmNzZmZTEw LzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcImvrTc8 CcCTQ4TICrdmAe3o7vsZj6fETgLVFSjqjxUzPUvOumMNPr2sV4qqjz+FKNGtOI2O VI9twMGUkZ3TcxaDK4WUmpxrancVcKzNRGYls4dbcIG2DU+2biqJiawPeSCwfsNf Gt7GTsae7QLRD+YZcPtGTpJvZSsSowNoCPCGFU8B5CcRNq6M81/W4KBm+TAGg1QF 9uMJHekZwMM1ziim3Dgbsz8m1JPxAodRLlNOXYC1iJ7hmcG3G/IjwRCvxdFomsbG mP1eNIHv2aq8P0cmBdl2x8JRZsYcc4ySoMLwWLpBYnvHaRBXzek5mxIoenNQ5+9q zKP1jjlwJySVcw== -----END CERTIFICATE-----Generated at Thu Dec 11 17:49:59 2025 by rpki-client