This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json) Hash identifier: FwjpA1f/Bb6Xx4zm/ZHlX+eJ1EPwJsIZc6VSHzikqb8= Subject key identifier: 68:42:B6:25:12:FC:A2:F1:99:60:A0:1D:66:B9:71:C0:3D:B0:3C:50 Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Certificate serial: 019AF5E57FCEB748F23A068324E21A478E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft Manifest number: 0CC6 Signing time: Sat 06 Dec 2025 23:00:49 +0000 Manifest this update: Sat 06 Dec 2025 23:00:49 +0000 Manifest next update: Sun 07 Dec 2025 23:00:49 +0000 Files and hashes: 1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: GBMU5qD1inJP3HmpWpo1qJoFx0b3tzBJZsgH+JFHyWM=) 2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:7f:ce:b7:48:f2:3a:06:83:24:e2:1a:47:8e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825 Validity Not Before: Dec 6 23:00:49 2025 GMT Not After : Dec 7 23:00:49 2025 GMT Subject: CN=6842b62512fca2f19960a01d66b971c03db03c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:f0:87:b6:85:5c:34:3f:01:9a:f7:61:81: cf:ff:b4:c1:48:7f:8e:db:0f:10:90:06:9d:fb:44: e8:3b:bf:86:2c:be:f6:b4:ac:9c:fe:f3:86:86:18: 0b:60:36:7a:13:e6:4b:51:ba:ec:43:45:f8:99:3f: 7c:f8:49:fe:07:49:d2:e7:64:c8:52:24:8e:f8:c8: 22:7f:4c:11:20:a3:a6:9a:ca:ca:7d:43:eb:be:18: 51:0f:cc:93:5a:f0:67:aa:e2:c3:a9:40:c6:5d:c6: ac:4a:ea:f8:08:dd:4d:ad:ef:cf:78:87:32:92:14: 8a:3d:b3:6c:91:64:90:f1:8a:58:73:60:38:a2:06: 01:d3:55:12:05:71:05:97:4b:6a:4e:39:61:00:48: 45:44:be:da:10:5b:08:50:ca:3e:3a:cb:67:a2:c4: 5c:0f:08:b6:7b:01:15:71:5a:f4:48:37:0a:9b:8c: 11:3b:cc:10:52:68:b4:ed:90:18:1d:8b:7e:40:c7: 0d:55:31:f7:f5:e6:dc:fb:0a:d3:d4:1c:63:df:45: 5d:14:59:5f:aa:84:1a:f3:67:7d:a0:d0:11:9e:dc: 43:ac:ca:ea:c0:a8:6d:ed:65:96:b6:a9:c9:8e:78: 39:a5:a8:f0:d9:44:a7:57:a8:7f:d8:b9:5b:fa:8f: 30:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:42:B6:25:12:FC:A2:F1:99:60:A0:1D:66:B9:71:C0:3D:B0:3C:50 X509v3 Authority Key Identifier: keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:83:7f:c7:72:b6:09:37:5f:a8:76:12:62:f8:a4:ab:80:ef: d0:d5:dc:5c:7c:ee:af:a8:58:57:94:57:10:c8:e8:92:f0:9e: 72:b4:7f:bd:c6:10:a0:5b:e0:50:c1:5e:76:6e:8b:75:e2:e8: 97:24:73:7d:d2:9f:02:f1:3e:49:18:91:42:96:5f:0b:e1:6e: da:2f:21:8c:5a:2d:ac:ed:5c:36:c0:bc:c4:06:22:57:99:0f: 2a:29:48:26:e4:51:a1:75:4d:71:c9:7a:a6:99:d2:8e:f2:08: 3a:c6:7e:3c:67:9d:26:5b:be:11:f1:8f:23:69:2e:97:2c:d1: d7:e6:fa:f8:a5:aa:38:61:50:5d:96:2d:c0:76:a2:2b:39:e2: 0f:cc:3f:e3:c4:28:87:12:70:6a:c6:af:a7:c2:33:d4:a1:7c: b0:fc:10:d6:7c:ae:92:7b:8c:42:08:2d:43:95:dc:a0:e3:12: 2f:ce:d8:1e:c3:bc:38:84:32:44:8a:19:d1:d5:30:03:d0:3a: bb:94:62:80:8d:ae:84:d4:ed:aa:54:ff:b6:f0:9d:72:45:65: c9:f9:19:c0:b7:a4:3e:5a:66:be:5a:e9:10:cf:e2:62:2f:f7: cc:97:4e:03:ff:ba:48:70:cc:1b:db:f3:0b:a3:f3:96:44:ec: 3c:f9:6b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15X/Ot0jyOgaDJOIaR45PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5 Nzg4MjUwHhcNMjUxMjA2MjMwMDQ5WhcNMjUxMjA3MjMwMDQ5WjAzMTEwLwYDVQQD Eyg2ODQyYjYyNTEyZmNhMmYxOTk2MGEwMWQ2NmI5NzFjMDNkYjAzYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn7wh7aFXDQ/AZr3YYHP/7TBSH+O 2w8QkAad+0ToO7+GLL72tKyc/vOGhhgLYDZ6E+ZLUbrsQ0X4mT98+En+B0nS52TI UiSO+Mgif0wRIKOmmsrKfUPrvhhRD8yTWvBnquLDqUDGXcasSur4CN1Nre/PeIcy khSKPbNskWSQ8YpYc2A4ogYB01USBXEFl0tqTjlhAEhFRL7aEFsIUMo+OstnosRc Dwi2ewEVcVr0SDcKm4wRO8wQUmi07ZAYHYt+QMcNVTH39ebc+wrT1Bxj30VdFFlf qoQa82d9oNARntxDrMrqwKht7WWWtqnJjng5pajw2USnV6h/2Llb+o8wxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhCtiUS/KLxmWCgHWa5ccA9sDxQMB8GA1UdIwQY MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt ZDc4NTE0ZTllODEyLzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioN/x3K2 CTdfqHYSYvikq4Dv0NXcXHzur6hYV5RXEMjokvCecrR/vcYQoFvgUMFedm6LdeLo lyRzfdKfAvE+SRiRQpZfC+Fu2i8hjFotrO1cNsC8xAYiV5kPKilIJuRRoXVNccl6 ppnSjvIIOsZ+PGedJlu+EfGPI2kulyzR1+b6+KWqOGFQXZYtwHaiKzniD8w/48Qo hxJwasavp8Iz1KF8sPwQ1nyuknuMQggtQ5XcoOMSL87YHsO8OIQyRIoZ0dUwA9A6 u5RigI2uhNTtqlT/tvCdckVlyfkZwLekPlpmvlrpEM/iYi/3zJdOA/+6SHDMG9vz C6PzlkTsPPlrDw== -----END CERTIFICATE-----Generated at Sun Dec 7 09:24:27 2025 by rpki-client