This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft File: TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json) Hash identifier: TyVeTv/JdAhUgRpV696shbxzG1srOKfqMazHSlmHolc= Subject key identifier: 8F:AE:D8:82:D6:15:54:5A:B0:C6:03:4B:C1:99:F6:4D:DB:CF:54:24 Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B Certificate issuer: /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Certificate serial: 019BF7637EB020C9664F61662CFBD2927039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 23:00:51 +0000 Manifest this update: Sun 25 Jan 2026 23:00:51 +0000 Manifest next update: Mon 26 Jan 2026 23:00:51 +0000 Files and hashes: 1: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: +tCiyMEibawV7KQnNaUicPlIC/q7+gelUHTrkjm7U2s=) 2: d0gc-bfZVZ_wvr1zHWcpz3THoUw.roa (hash: omEL790d2ktapnfeuHtd9b9rxp1D6UXPaEs4yrE6gFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:7e:b0:20:c9:66:4f:61:66:2c:fb:d2:92:70:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Validity Not Before: Jan 25 23:00:51 2026 GMT Not After : Jan 26 23:00:51 2026 GMT Subject: CN=8faed882d615545ab0c6034bc199f64ddbcf5424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:b2:b9:5c:38:bb:b2:93:fb:4f:47:67:54: 3b:34:72:ab:c3:94:6a:7c:94:29:00:0c:f2:ca:dd: 42:ab:2d:90:8c:04:df:c6:ac:8c:6b:3c:c7:9c:c6: 55:d6:20:9f:d4:40:ca:03:f3:e1:b2:02:01:89:8b: 06:0c:d6:3a:63:ac:43:c3:20:68:19:54:7c:a2:f3: f2:62:86:ee:b4:67:7a:1c:36:b7:15:74:8e:9b:4a: aa:f4:31:7a:cb:15:d8:1e:97:f6:fb:ce:bc:01:9f: 5d:5a:4f:61:2c:df:c9:e7:51:3f:a4:69:20:e5:4e: b4:33:d6:1e:7d:56:61:6e:fc:66:28:ab:34:81:fe: 1c:a2:59:6b:f9:e8:cf:c9:54:b6:ac:32:89:e7:6b: d7:d1:ff:4c:32:a8:19:fd:6e:f6:da:59:20:ee:45: 7b:b6:79:3a:4f:39:11:f6:9e:aa:d2:43:ed:3c:37: 9d:d8:a8:4d:fe:35:88:ab:a5:34:0c:2e:d2:fa:b4: 6d:fb:bd:90:3a:4a:0a:6e:0b:71:15:f2:7b:7d:65: de:5f:bd:df:dc:e0:ab:60:e7:8e:d1:e8:d5:72:6b: 3c:f7:49:f6:05:c4:bd:53:69:78:ce:46:30:de:95: 93:27:b5:be:29:ef:05:e0:12:a8:fe:1d:6a:eb:95: bb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AE:D8:82:D6:15:54:5A:B0:C6:03:4B:C1:99:F6:4D:DB:CF:54:24 X509v3 Authority Key Identifier: keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4d:7e:1f:e9:49:e4:eb:7e:e3:c3:a6:d9:b6:ba:fb:a2:f4: 0b:09:5c:90:0c:56:31:7f:6a:9e:99:56:c4:df:89:03:1d:00: 89:7e:aa:1e:09:f5:07:e8:0b:2e:5b:6a:cf:ca:a1:49:c1:ca: 20:7c:7e:11:14:9d:56:42:b8:5e:5a:9e:5a:32:70:cc:a3:6f: ba:cb:a3:70:41:e7:05:84:01:ec:c4:b3:17:de:55:d5:42:dc: c4:f9:2b:65:9b:0a:3c:e4:89:3d:f4:34:89:8b:27:f7:e0:0f: 3f:14:2c:df:a0:c5:37:7c:de:65:6b:af:ea:df:75:58:a3:20: e9:3a:b2:19:ce:26:43:a8:b5:89:2f:d0:da:d4:d1:b0:14:bb: 20:4f:e6:2d:91:da:ce:d0:70:c0:f6:ec:89:a7:03:1e:62:71: da:99:3e:6d:e3:a1:42:9b:2e:26:74:16:d4:24:fc:54:7f:b5: 7d:de:4e:75:d9:83:a0:dc:28:dd:d9:c6:35:d7:9c:82:b6:21: c8:4a:c5:4e:dd:eb:f8:10:54:85:a0:14:53:59:ba:a9:24:41: 1e:1c:66:97:d9:ad:f1:9f:cb:aa:ad:70:8e:4a:32:37:52:f9: 18:2e:90:7a:35:8d:74:01:44:22:7e:f0:f2:b5:aa:c8:d8:2e: bf:3b:c0:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y36wIMlmT2FmLPvSknA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi ZDhjOWIwHhcNMjYwMTI1MjMwMDUxWhcNMjYwMTI2MjMwMDUxWjAzMTEwLwYDVQQD Eyg4ZmFlZDg4MmQ2MTU1NDVhYjBjNjAzNGJjMTk5ZjY0ZGRiY2Y1NDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZqyuVw4u7KT+09HZ1Q7NHKrw5Rq fJQpAAzyyt1Cqy2QjATfxqyMazzHnMZV1iCf1EDKA/PhsgIBiYsGDNY6Y6xDwyBo GVR8ovPyYobutGd6HDa3FXSOm0qq9DF6yxXYHpf2+868AZ9dWk9hLN/J51E/pGkg 5U60M9YefVZhbvxmKKs0gf4collr+ejPyVS2rDKJ52vX0f9MMqgZ/W722lkg7kV7 tnk6TzkR9p6q0kPtPDed2KhN/jWIq6U0DC7S+rRt+72QOkoKbgtxFfJ7fWXeX73f 3OCrYOeO0ejVcms890n2BcS9U2l4zkYw3pWTJ7W+Ke8F4BKo/h1q65W7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+u2ILWFVRasMYDS8GZ9k3bz1QkMB8GA1UdIwQY MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4 LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR01+H+lJ 5Ot+48Om2ba6+6L0CwlckAxWMX9qnplWxN+JAx0AiX6qHgn1B+gLLltqz8qhScHK IHx+ERSdVkK4XlqeWjJwzKNvusujcEHnBYQB7MSzF95V1ULcxPkrZZsKPOSJPfQ0 iYsn9+APPxQs36DFN3zeZWuv6t91WKMg6TqyGc4mQ6i1iS/Q2tTRsBS7IE/mLZHa ztBwwPbsiacDHmJx2pk+beOhQpsuJnQW1CT8VH+1fd5OddmDoNwo3dnGNdecgrYh yErFTt3r+BBUhaAUU1m6qSRBHhxml9mt8Z/Lqq1wjkoyN1L5GC6QejWNdAFEIn7w 8rWqyNguvzvAYw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:35 2026 by rpki-client