This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json) Hash identifier: b719wsm1AafgSjYK2uBW9v2lZA3lc0c9CdnYksnvVqw= Subject key identifier: 7B:8F:19:73:1F:1E:64:E5:B4:AE:CD:DA:F2:C2:37:F7:27:AC:0B:E8 Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Certificate serial: 019B1ACD7E61040EB4D8D55C37FD616899EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft Manifest number: 16CF Signing time: Sun 14 Dec 2025 03:00:33 +0000 Manifest this update: Sun 14 Dec 2025 03:00:33 +0000 Manifest next update: Mon 15 Dec 2025 03:00:33 +0000 Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: uBR1Cy3riE6eD3Y9QGPQW8+ofdV5DfRVNBessIMqmNA=) 2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:7e:61:04:0e:b4:d8:d5:5c:37:fd:61:68:99:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Validity Not Before: Dec 14 03:00:33 2025 GMT Not After : Dec 15 03:00:33 2025 GMT Subject: CN=7b8f19731f1e64e5b4aecddaf2c237f727ac0be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:b8:f2:e1:99:3a:01:6f:5f:a4:05:6e:73: 05:c1:1f:ec:80:4a:a6:55:af:94:a2:5b:86:58:64: be:2a:1d:44:80:5e:18:e5:47:6e:c1:92:3f:4c:1f: 95:27:b8:05:c7:b3:cc:3f:9b:38:e4:e9:1d:86:8b: 88:d4:3b:3b:7f:7d:b7:d0:77:de:fd:e6:76:b3:13: c4:db:92:91:97:a1:cc:03:9f:9c:9d:70:95:0b:ec: 2d:a6:d4:91:88:04:46:77:3f:43:93:35:e3:4e:10: 39:3e:5e:c0:11:6e:34:dc:9c:fc:2d:76:54:bd:ec: cd:20:b4:7a:01:4b:d3:b4:7e:bd:6b:fa:1b:db:4b: 53:cc:9b:22:7f:d5:6b:c9:90:36:d0:a4:4b:2d:fe: 89:be:d5:5e:e0:b4:15:3a:0b:e9:79:5d:69:85:18: 38:a3:eb:e9:7d:a9:74:11:89:0d:65:ce:54:08:55: d0:50:10:e0:71:a0:98:59:2a:95:3c:34:27:00:b3: 5e:31:5f:95:ec:07:c1:b5:54:bf:ba:54:21:57:75: 5d:53:65:bd:68:a4:f8:76:b8:4d:b3:b9:96:69:8f: 5a:bd:3d:52:af:10:13:f2:f0:9b:df:c7:ee:77:47: 4d:ae:61:1d:dd:22:f3:4d:3f:a1:34:26:f5:9f:68: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8F:19:73:1F:1E:64:E5:B4:AE:CD:DA:F2:C2:37:F7:27:AC:0B:E8 X509v3 Authority Key Identifier: keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9a:1e:95:3c:a6:2a:db:15:01:f7:24:3f:28:2f:5a:1c:cc: 81:e0:c2:c8:f7:03:1e:fa:68:2e:f7:79:7a:23:fd:3a:6e:7f: 80:6d:aa:6c:6b:ce:51:bc:e7:bd:fc:44:60:3c:e5:58:92:e6: 69:47:37:8d:49:9a:40:10:6d:79:30:c0:7b:55:80:4c:c5:55: 5f:94:2c:07:2c:c4:17:a3:d9:e7:8d:49:fd:94:1d:5a:53:84: 21:37:46:32:7e:0c:84:62:96:ff:f1:d2:36:0e:da:f2:c9:31: 2b:81:c5:8d:1d:7b:5f:07:88:39:11:f9:b1:0d:79:b5:69:77: 9b:e6:78:fd:58:5b:74:34:30:69:e9:e1:ed:c0:40:c2:34:fe: 4e:be:dc:82:70:06:a6:45:60:86:f6:b4:ec:9a:30:ee:9b:28: 0f:21:1d:9c:dd:e4:02:3d:16:88:22:78:e1:ee:1b:65:5e:9d: 1d:3c:9e:54:7a:c2:3d:e7:9d:4a:34:a2:f6:6a:35:67:3c:00: ad:48:cb:71:b8:bf:c6:24:00:73:c1:e9:12:1a:29:a1:22:a0: 8a:67:95:3b:d6:3a:5b:75:85:01:a0:ab:62:61:db:ee:ec:51: 3c:9f:ec:5e:1e:d5:fd:13:66:4b:50:04:1e:04:29:a3:4c:ed: dd:cf:63:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazX5hBA602NVcN/1haJnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjI3ODFjYTE0MzZkOTZkNjc3NWJhMjBjNWNmMmM3NWRm ZDEzZTkwHhcNMjUxMjE0MDMwMDMzWhcNMjUxMjE1MDMwMDMzWjAzMTEwLwYDVQQD Eyg3YjhmMTk3MzFmMWU2NGU1YjRhZWNkZGFmMmMyMzdmNzI3YWMwYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8+48uGZOgFvX6QFbnMFwR/sgEqm Va+UoluGWGS+Kh1EgF4Y5UduwZI/TB+VJ7gFx7PMP5s45OkdhouI1Ds7f3230Hfe /eZ2sxPE25KRl6HMA5+cnXCVC+wtptSRiARGdz9DkzXjThA5Pl7AEW403Jz8LXZU vezNILR6AUvTtH69a/ob20tTzJsif9VryZA20KRLLf6JvtVe4LQVOgvpeV1phRg4 o+vpfal0EYkNZc5UCFXQUBDgcaCYWSqVPDQnALNeMV+V7AfBtVS/ulQhV3VdU2W9 aKT4drhNs7mWaY9avT1SrxAT8vCb38fud0dNrmEd3SLzTT+hNCb1n2jJhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuPGXMfHmTltK7N2vLCN/cnrAvoMB8GA1UdIwQY MBaAFE1ieByhQ22W1ndbogxc8sdd/RPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUt OGUwYmRmZjIzN2Y4LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUtOGUwYmRmZjIzN2Y4 LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJoelTym KtsVAfckPygvWhzMgeDCyPcDHvpoLvd5eiP9Om5/gG2qbGvOUbznvfxEYDzlWJLm aUc3jUmaQBBteTDAe1WATMVVX5QsByzEF6PZ541J/ZQdWlOEITdGMn4MhGKW//HS Ng7a8skxK4HFjR17XweIORH5sQ15tWl3m+Z4/VhbdDQwaenh7cBAwjT+Tr7cgnAG pkVghva07Jow7psoDyEdnN3kAj0WiCJ44e4bZV6dHTyeVHrCPeedSjSi9mo1ZzwA rUjLcbi/xiQAc8HpEhopoSKgimeVO9Y6W3WFAaCrYmHb7uxRPJ/sXh7V/RNmS1AE HgQpo0zt3c9jiQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:39 2025 by rpki-client