This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json) Hash identifier: Vdouuq/DcrQLAWMAroCZBqSLuFAbwwkZl7Z86MBMS9k= Subject key identifier: 5B:36:0A:FB:6E:82:60:8A:19:DB:F1:26:52:BD:AA:5B:0C:FC:F4:A7 Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Certificate serial: 019B18DF85403FF1011695C9249E82F50730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft Manifest number: 16CE Signing time: Sat 13 Dec 2025 18:01:00 +0000 Manifest this update: Sat 13 Dec 2025 18:01:00 +0000 Manifest next update: Sun 14 Dec 2025 18:01:00 +0000 Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: RwULhIJZK2Un2ytwIJrWjDrufHspYZMSejqFGOhx82s=) 2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:85:40:3f:f1:01:16:95:c9:24:9e:82:f5:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Validity Not Before: Dec 13 18:01:00 2025 GMT Not After : Dec 14 18:01:00 2025 GMT Subject: CN=5b360afb6e82608a19dbf12652bdaa5b0cfcf4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:3a:a6:b9:26:d7:86:0e:0b:6f:3c:5b:48: 2b:33:4d:2d:2c:8c:ab:85:54:d3:e8:89:1e:92:9b: b5:7f:bb:88:2c:84:68:26:6a:ef:ee:ad:f6:76:c9: 80:e1:9b:2f:da:a7:be:0f:b2:65:a7:cf:83:b5:b5: 4c:18:93:1e:e9:c8:4d:74:15:89:3b:5b:2d:77:a7: ab:f2:77:8b:4c:fa:05:b3:88:f5:b2:3d:e2:86:95: 77:a8:14:85:6d:d3:3b:7c:61:54:fb:1c:f0:11:eb: c1:b2:ac:c8:ef:da:af:31:9f:b3:f7:5f:a8:54:5e: 6a:6e:7d:0b:c6:1e:a8:11:8d:3f:44:48:ee:dd:68: 65:28:4d:af:fc:da:c4:5a:96:0a:a4:e3:5c:17:0c: 99:3f:3e:f2:ac:9e:d5:23:af:59:31:b5:94:f3:e9: 53:9a:c0:65:e7:8d:8b:72:e7:26:bd:5d:a4:99:e7: 86:09:fd:11:37:56:2c:7e:14:24:f5:39:a6:0d:17: 82:bb:6a:8f:c7:06:b2:b6:e3:6d:c8:04:14:c3:8d: 3f:9a:a3:73:de:3a:1c:56:1d:6c:82:49:5a:7a:35: b1:67:56:ee:3a:41:43:8f:aa:54:81:54:dc:3a:5d: de:38:57:08:a7:9a:23:f7:46:d9:78:42:80:1b:b5: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:36:0A:FB:6E:82:60:8A:19:DB:F1:26:52:BD:AA:5B:0C:FC:F4:A7 X509v3 Authority Key Identifier: keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:95:45:56:00:fb:45:71:86:5c:a4:1d:4d:84:99:34:c9:ad: 47:9f:ef:32:55:c8:4f:cf:10:a4:17:ce:55:46:75:88:81:8e: 2b:90:d6:57:85:cd:0e:46:4e:ea:56:68:3b:60:e2:bb:9c:cf: 60:3d:cb:b2:d7:b9:09:85:20:df:fb:5e:c5:13:f6:25:59:4d: 14:36:47:ba:d9:8b:4d:de:4d:6b:dc:0f:4a:d1:79:c3:c8:f7: 59:8a:c7:93:99:ef:e6:0d:64:75:7a:77:4e:d0:9f:2b:5c:b9: bc:2b:55:78:e8:1b:3b:18:7e:71:df:66:7b:f9:99:05:da:27: 1a:2d:8f:de:17:77:62:a2:c3:f9:d9:a4:86:a6:98:09:03:35: f9:d5:9d:49:7e:1e:a5:35:dc:fa:c8:2e:8d:58:c7:1b:47:2b: 7c:89:22:92:35:d1:c1:76:9c:1e:3f:2d:ce:d2:d4:22:0f:27: 09:08:6d:64:b9:b1:b8:d6:e4:c7:72:45:e1:e5:36:a2:1c:00: 9b:3f:a1:f0:e0:2f:c2:c7:31:94:43:55:3d:53:4c:1b:98:77: b1:c8:e5:71:90:d1:b8:8c:f7:0d:ca:a5:3f:d2:8a:46:72:2d: 14:8c:4e:bc:5f:db:00:ca:df:c4:33:3e:18:08:df:a3:0c:31: c6:91:ff:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY34VAP/EBFpXJJJ6C9QcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjI3ODFjYTE0MzZkOTZkNjc3NWJhMjBjNWNmMmM3NWRm ZDEzZTkwHhcNMjUxMjEzMTgwMTAwWhcNMjUxMjE0MTgwMTAwWjAzMTEwLwYDVQQD Eyg1YjM2MGFmYjZlODI2MDhhMTlkYmYxMjY1MmJkYWE1YjBjZmNmNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozw6prkm14YOC288W0grM00tLIyr hVTT6Ikekpu1f7uILIRoJmrv7q32dsmA4Zsv2qe+D7Jlp8+DtbVMGJMe6chNdBWJ O1std6er8neLTPoFs4j1sj3ihpV3qBSFbdM7fGFU+xzwEevBsqzI79qvMZ+z91+o VF5qbn0Lxh6oEY0/REju3WhlKE2v/NrEWpYKpONcFwyZPz7yrJ7VI69ZMbWU8+lT msBl542LcucmvV2kmeeGCf0RN1YsfhQk9TmmDReCu2qPxwaytuNtyAQUw40/mqNz 3jocVh1sgklaejWxZ1buOkFDj6pUgVTcOl3eOFcIp5oj90bZeEKAG7XCPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs2CvtugmCKGdvxJlK9qlsM/PSnMB8GA1UdIwQY MBaAFE1ieByhQ22W1ndbogxc8sdd/RPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUt OGUwYmRmZjIzN2Y4LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUtOGUwYmRmZjIzN2Y4 LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5VFVgD7 RXGGXKQdTYSZNMmtR5/vMlXIT88QpBfOVUZ1iIGOK5DWV4XNDkZO6lZoO2Diu5zP YD3Lste5CYUg3/texRP2JVlNFDZHutmLTd5Na9wPStF5w8j3WYrHk5nv5g1kdXp3 TtCfK1y5vCtVeOgbOxh+cd9me/mZBdonGi2P3hd3YqLD+dmkhqaYCQM1+dWdSX4e pTXc+sgujVjHG0crfIkikjXRwXacHj8tztLUIg8nCQhtZLmxuNbkx3JF4eU2ohwA mz+h8OAvwscxlENVPVNMG5h3scjlcZDRuIz3DcqlP9KKRnItFIxOvF/bAMrfxDM+ GAjfowwxxpH/dw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:32:52 2025 by rpki-client