This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json) Hash identifier: 7c4CQpJFzV5mwd1KUPPma9MgwqxEshVdcmuVNux55UU= Subject key identifier: D5:BB:A8:FE:1C:CD:46:22:9D:A2:12:6F:96:61:45:B3:A6:AE:C5:4C Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE Certificate issuer: /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be Certificate serial: 019AF3890222FFC50C0EB3670CC6869AD6AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft Manifest number: 0BF6 Signing time: Sat 06 Dec 2025 12:00:33 +0000 Manifest this update: Sat 06 Dec 2025 12:00:33 +0000 Manifest next update: Sun 07 Dec 2025 12:00:33 +0000 Files and hashes: 1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: qqnEj8tGZLTxXVIrTvr43zi0egKIFjV5XGtspSmZRKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:02:22:ff:c5:0c:0e:b3:67:0c:c6:86:9a:d6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be Validity Not Before: Dec 6 12:00:33 2025 GMT Not After : Dec 7 12:00:33 2025 GMT Subject: CN=d5bba8fe1ccd46229da2126f966145b3a6aec54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:27:ef:ac:d4:b6:5a:02:3a:fe:eb:9c:32: 26:d7:dc:b8:8a:56:27:6a:33:f6:65:e6:b7:df:26: f6:ac:dd:3d:08:2e:f5:66:37:72:ea:dd:9e:9b:f5: aa:f0:4a:f5:00:f9:70:79:15:cf:ea:a6:8c:40:e6: 9f:96:2e:80:c8:93:b7:f2:08:4c:bb:80:fc:54:79: c7:ec:39:3a:b8:3d:ec:a3:a4:dd:68:cf:a0:4d:e8: 80:45:c2:4c:9a:77:d5:f6:81:d0:ae:a0:a6:0c:1f: b1:14:55:e3:82:29:5b:2f:70:ae:12:de:9b:f1:95: 71:dd:fc:de:2e:3a:d0:bb:a5:3d:bf:5c:0a:ed:d8: 5f:56:ea:ad:7a:07:af:be:4d:6a:6c:e9:c1:69:84: 5d:c2:19:e2:b1:e3:17:1b:10:f2:c7:d5:fb:5a:4b: 17:20:06:da:27:39:77:45:e6:29:98:62:e2:34:ca: 38:a1:21:4d:fd:0d:0e:6e:6b:80:9f:26:2d:10:62: 52:bf:4b:23:55:7b:2b:9e:0d:5e:f8:c1:75:c1:a3: 4d:32:11:d0:bb:c9:e5:c0:7b:75:1d:b3:2f:f4:c3: 73:73:32:19:0d:80:42:e1:c7:a0:94:c0:09:67:7e: 5c:f1:9f:a7:c8:f2:ca:4d:2c:ee:d9:b9:88:01:6f: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BB:A8:FE:1C:CD:46:22:9D:A2:12:6F:96:61:45:B3:A6:AE:C5:4C X509v3 Authority Key Identifier: keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c8:7d:fd:f0:cc:b9:6a:e6:07:2b:6c:22:8f:42:f9:6d:13: dd:5e:19:31:78:33:85:c4:98:3f:fe:99:bc:d6:69:d6:0c:a4: ef:72:51:27:e0:eb:96:1d:c4:5c:e2:cc:c7:ee:e6:f6:5c:a3: a2:19:9a:86:10:57:df:05:16:6e:bd:14:78:9a:45:b6:40:bb: fa:cc:bb:51:da:a1:27:e2:b4:df:08:1e:b8:f4:43:e7:87:0a: 0b:03:ff:98:85:ca:cb:d4:03:df:5e:b4:a1:91:3e:2a:4d:93: 56:5b:00:fa:6f:48:fd:4a:fe:4f:cd:79:fd:e0:65:c4:e8:d2: d8:f2:cb:7d:dd:96:7a:28:9a:4b:75:77:a7:c5:6f:68:3b:31: d0:b9:6e:98:bf:be:fb:ff:e1:62:9e:96:1c:33:df:b2:a8:53: 56:be:1c:fc:8f:58:e8:15:34:c8:fd:fe:33:18:9d:9e:53:92: 5f:c1:00:e5:37:af:b2:85:a1:31:99:00:8d:d6:36:37:d1:9f: 0e:85:f0:57:35:54:76:89:72:3f:f2:e0:29:ca:30:f1:3a:a8: d4:1d:a7:8b:69:a5:ae:59:7a:be:ed:4a:cd:5c:fd:36:8b:cf: 33:70:10:00:ce:17:d2:18:cc:f2:7e:10:be:3e:37:e0:b0:5f: 4e:0d:d4:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQIi/8UMDrNnDMaGmtavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMDQ2ZGZkZWU4ZmNjOTJkNzQwZTBiYjhjOGI4MjkzMTU1 YTE0YmUwHhcNMjUxMjA2MTIwMDMzWhcNMjUxMjA3MTIwMDMzWjAzMTEwLwYDVQQD EyhkNWJiYThmZTFjY2Q0NjIyOWRhMjEyNmY5NjYxNDViM2E2YWVjNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHMn76zUtloCOv7rnDIm19y4ilYn ajP2Zea33yb2rN09CC71Zjdy6t2em/Wq8Er1APlweRXP6qaMQOafli6AyJO38ghM u4D8VHnH7Dk6uD3so6TdaM+gTeiARcJMmnfV9oHQrqCmDB+xFFXjgilbL3CuEt6b 8ZVx3fzeLjrQu6U9v1wK7dhfVuqtegevvk1qbOnBaYRdwhniseMXGxDyx9X7WksX IAbaJzl3ReYpmGLiNMo4oSFN/Q0ObmuAnyYtEGJSv0sjVXsrng1e+MF1waNNMhHQ u8nlwHt1HbMv9MNzczIZDYBC4ceglMAJZ35c8Z+nyPLKTSzu2bmIAW8ijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW7qP4czUYinaISb5ZhRbOmrsVMMB8GA1UdIwQY MBaAFE8Ebf3uj8yS10Dgu4yLgpMVWhS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMt MTEzZjRmNmQ1NWUzLzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMtMTEzZjRmNmQ1NWUz LzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsh9/fDM uWrmBytsIo9C+W0T3V4ZMXgzhcSYP/6ZvNZp1gyk73JRJ+Drlh3EXOLMx+7m9lyj ohmahhBX3wUWbr0UeJpFtkC7+sy7UdqhJ+K03wgeuPRD54cKCwP/mIXKy9QD3160 oZE+Kk2TVlsA+m9I/Ur+T815/eBlxOjS2PLLfd2WeiiaS3V3p8VvaDsx0LlumL++ +//hYp6WHDPfsqhTVr4c/I9Y6BU0yP3+MxidnlOSX8EA5TevsoWhMZkAjdY2N9Gf DoXwVzVUdolyP/LgKcow8Tqo1B2ni2mlrll6vu1KzVz9NovPM3AQAM4X0hjM8n4Q vj434LBfTg3U2g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:19:40 2025 by rpki-client