This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
File:                     O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft (raw, json)
Hash identifier:          7vpoCbaid4fyEoeYrm1SJAhhRaXOXuyQYwitA9ZZajw=
Subject key identifier:   DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24
Authority key identifier: 3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90
Certificate issuer:       /CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
Certificate serial:       0DF6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
Manifest number:          0DE5
Signing time:             Thu 12 Feb 2026 10:19:42 +0000
Manifest this update:     Thu 12 Feb 2026 10:19:42 +0000
Manifest next update:     Sat 14 Feb 2026 10:19:42 +0000
Files and hashes:         1: 9Earbhkqa-LgKS3Zg9gzfEBE5p0.roa (hash: Yro1LcI6Kqx48UAAj4bjWnwW3ENJmLQLiXoZ5hUTbAI=)
                          2: FXF0lO6EKMfGFrxa8tlZrvsmlqU.roa (hash: ffe3eFzQZ5bTVer3tI679pLNLQMpKZnEK747Ju2K6Qk=)
                          3: O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl (hash: ux2+XssXevSTITJRyz02ERD6hvk+LsHPn3z5GCfbcNk=)
                          4: aoCWMpsnJlxGVgYTo5eKVxrONMw.roa (hash: fnlUiKyutHjmzMA5ysK7pd75qboQLdU1ymUxPVf3zqA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3574 (0xdf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B49B87A3FF389634C7D090D76DAEAA96FEEFD90
        Validity
            Not Before: Feb 12 10:19:42 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=DD9126B198369AE7D7CDD8B2326B111CB450F324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:72:54:60:7a:c1:b6:26:3c:af:58:7d:ac:
                    c7:97:9d:37:73:7e:38:36:58:16:51:a1:e1:1c:f4:
                    f1:17:59:29:bb:bc:34:76:44:94:e6:46:34:e5:96:
                    d0:6e:d0:47:6a:3e:01:14:51:cc:fd:7c:d9:b5:f9:
                    fc:60:bd:c7:b0:a5:a3:cb:d7:e2:65:34:9f:88:82:
                    31:64:8b:3d:80:91:b6:92:53:3f:61:89:f9:82:f0:
                    64:ad:53:08:b9:45:45:69:fc:a7:8e:66:df:2a:4c:
                    10:77:b0:b1:3b:4a:a4:24:26:db:33:00:0d:1c:b0:
                    af:a7:4d:43:f0:84:6a:48:3c:e0:91:19:51:40:12:
                    1b:43:7d:ae:28:df:33:e0:3a:20:ea:66:c9:6a:f2:
                    f5:b0:c2:2f:0f:26:7c:97:e0:6d:f7:db:40:8d:a6:
                    09:f8:b7:f4:38:51:8a:f5:7f:c6:3f:a6:2f:83:cc:
                    72:3a:8b:c4:eb:9d:90:df:16:fb:71:7c:19:ef:7b:
                    da:f6:a7:2e:ff:a7:6c:19:59:c9:09:79:ec:6d:8b:
                    ef:36:c9:d6:de:19:68:c1:05:4e:fe:94:4e:c7:15:
                    12:58:ec:b5:b6:5d:2b:78:db:fb:23:7a:17:d5:0f:
                    15:2f:45:df:74:03:2e:77:b3:c8:45:2a:bb:79:03:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:26:B1:98:36:9A:E7:D7:CD:D8:B2:32:6B:11:1C:B4:50:F3:24
            X509v3 Authority Key Identifier:
                keyid:3B:49:B8:7A:3F:F3:89:63:4C:7D:09:0D:76:DA:EA:A9:6F:EE:FD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCREE/O0m4ej_ziWNMfQkNdtrqqW_u_ZA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:2b:41:79:f4:5f:da:bf:f7:09:b0:d8:20:60:43:e5:0d:1d:
         50:59:f3:5e:29:0d:5e:7b:21:e8:21:96:50:97:48:71:dd:37:
         27:f3:2c:4e:d5:1f:f9:3c:8a:cb:8c:64:8b:57:a0:27:f7:07:
         37:18:7d:47:31:38:69:f0:b1:df:15:fe:63:98:df:20:0f:a0:
         e9:b8:0e:ca:16:d5:fd:60:91:f1:e4:7b:83:15:99:56:49:cd:
         79:ad:04:19:a6:e8:5e:4d:30:25:70:73:1e:88:31:9c:50:9c:
         68:e9:5e:97:6c:4c:5e:14:de:5d:23:55:2e:96:38:ff:40:c9:
         bd:76:1a:c7:fa:bf:c7:d2:00:36:9e:4b:ec:67:65:2e:9e:a6:
         bd:bb:de:8d:48:c1:ad:52:a2:55:e4:d3:de:a6:0c:47:22:c7:
         65:24:1c:45:1a:36:20:03:e3:ec:a4:91:b7:1e:19:34:bb:54:
         b2:f3:ca:bb:87:ac:06:0e:86:2d:33:cd:82:a6:c6:62:87:12:
         bf:e4:3e:9d:f6:8c:4f:fb:cf:86:c4:9f:82:62:91:e2:cf:92:
         60:2a:4b:28:de:04:44:f8:35:6f:39:57:4c:dc:b9:a6:af:be:
         65:27:22:26:8a:be:10:28:61:fb:ed:0a:0a:a2:3a:9b:f1:f1:
         9b:f8:7a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:27:34 2026 by rpki-client