This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft File: TWn-EboAGxKm-9GJYpo_sYG9jJs.mft (raw, json) Hash identifier: p/HOglazny7bBHUYbwHuzC1waneT8o3OMSjG4ZNWBq0= Subject key identifier: 7A:94:02:CE:72:87:CA:03:90:A4:A2:92:4F:CE:96:13:79:BB:D5:70 Authority key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B Certificate issuer: /CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Certificate serial: 019AF50BC749248829A4773D4385E668F451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:03:01 +0000 Manifest this update: Sat 06 Dec 2025 19:03:01 +0000 Manifest next update: Sun 07 Dec 2025 19:03:01 +0000 Files and hashes: 1: I72vD4clErn-KyL3Il94C9_-wtk.roa (hash: JxiFx7TuP4vOP+SWIC89SDMzWOz23TjJ939/vZhx0JU=) 2: TWn-EboAGxKm-9GJYpo_sYG9jJs.crl (hash: ThwutHf0jey7uvXopXbeyIh9Xl6B1nr3QRNinTvO26c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c7:49:24:88:29:a4:77:3d:43:85:e6:68:f4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Validity Not Before: Dec 6 19:03:01 2025 GMT Not After : Dec 7 19:03:01 2025 GMT Subject: CN=7a9402ce7287ca0390a4a2924fce961379bbd570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:48:3d:9e:43:f7:e4:e3:a2:3a:84:42:4c: 79:75:bc:9d:97:b7:be:9a:0f:c1:0e:a8:d2:b9:0e: ff:d9:84:b5:fa:1a:81:1e:c8:ad:33:0e:cd:a9:f4: 17:3b:0d:dd:aa:57:c8:95:6d:2c:61:cf:1f:6b:24: 01:44:13:bf:b5:1a:26:b5:65:a9:f7:8a:9f:02:26: 97:fd:91:9c:eb:05:36:68:dd:bf:b4:e8:dd:ca:91: 88:ae:be:1f:b9:85:78:70:eb:68:23:74:be:6f:c2: 2a:d5:67:27:9b:0f:7f:f9:02:6a:c2:5f:65:a7:27: db:f3:d6:4d:ab:87:09:6d:66:f6:d0:94:c6:ca:2d: fa:4b:02:ce:6e:c3:0b:e3:32:ee:e9:36:c5:93:1a: 32:ee:e1:98:a6:71:17:fa:2e:f5:81:11:a2:c7:be: 36:a9:50:c1:8f:da:01:66:3e:99:20:4f:1e:ad:64: 0e:b6:6b:b2:fd:5f:8e:8b:7b:04:e2:9e:6d:80:ae: 9b:21:56:c5:c2:59:7a:9a:4b:5f:4c:d8:59:f9:cf: 81:82:d8:e7:26:1c:a0:87:60:81:54:18:d3:c3:2b: 87:8c:a2:66:b1:25:d0:7c:0e:78:75:a5:8a:69:2a: 4c:e3:11:7a:28:bf:a3:1b:c1:69:30:bb:b2:42:0a: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:02:CE:72:87:CA:03:90:A4:A2:92:4F:CE:96:13:79:BB:D5:70 X509v3 Authority Key Identifier: keyid:4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:55:a1:b2:cd:c0:3f:e2:26:ab:a5:b3:e0:d8:9e:32:fd:05: d5:c0:cd:d7:6a:52:93:ba:e6:49:d3:42:90:e4:28:ea:7a:46: f6:24:5b:63:4a:09:c7:28:98:c9:44:47:7a:2c:83:e3:d1:1b: c7:67:50:38:a3:a9:ce:e8:2b:41:66:89:52:ab:c6:7e:65:d9: 22:4a:b6:d6:42:a8:76:d6:6a:ba:9d:f4:a5:21:f2:71:3b:81: 60:4a:cd:de:df:1c:74:3d:f4:71:79:e3:58:0f:79:46:4c:cf: 51:2f:f6:28:95:4b:df:6c:f5:42:32:c8:ba:e1:88:35:19:55: 5a:83:0e:8c:44:7b:35:99:2c:bd:54:d3:96:a5:bd:dd:5c:fd: 66:9a:c8:14:d7:af:17:5e:61:a4:3c:7c:10:ef:a0:70:e5:3c: 2e:e9:a4:35:d6:0a:bf:27:e3:6a:10:b7:c9:18:2e:bd:0f:33: 98:a9:e9:53:83:22:20:8c:13:35:67:3c:53:9e:34:41:b9:7f: 76:37:39:16:b1:49:cd:0c:f0:3d:6b:fb:5e:3d:e0:03:7d:75: 7a:e8:21:33:f2:f8:0c:90:d3:da:80:2a:73:67:5d:2a:dc:93: 3e:c5:33:ab:6f:84:2b:4e:75:98:04:25:aa:0a:08:c5:41:10: 46:5a:aa:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8dJJIgppHc9Q4XmaPRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjlmZTExYmEwMDFiMTJhNmZiZDE4OTYyOWEzZmIxODFi ZDhjOWIwHhcNMjUxMjA2MTkwMzAxWhcNMjUxMjA3MTkwMzAxWjAzMTEwLwYDVQQD Eyg3YTk0MDJjZTcyODdjYTAzOTBhNGEyOTI0ZmNlOTYxMzc5YmJkNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hhIPZ5D9+TjojqEQkx5dbydl7e+ mg/BDqjSuQ7/2YS1+hqBHsitMw7NqfQXOw3dqlfIlW0sYc8fayQBRBO/tRomtWWp 94qfAiaX/ZGc6wU2aN2/tOjdypGIrr4fuYV4cOtoI3S+b8Iq1Wcnmw9/+QJqwl9l pyfb89ZNq4cJbWb20JTGyi36SwLObsML4zLu6TbFkxoy7uGYpnEX+i71gRGix742 qVDBj9oBZj6ZIE8erWQOtmuy/V+Oi3sE4p5tgK6bIVbFwll6mktfTNhZ+c+Bgtjn Jhygh2CBVBjTwyuHjKJmsSXQfA54daWKaSpM4xF6KL+jG8FpMLuyQgpdsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqUAs5yh8oDkKSikk/OlhN5u9VwMB8GA1UdIwQY MBaAFE1p/hG6ABsSpvvRiWKaP7GBvYybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQt M2I2OGE4NGNkMmI4LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8zMjZhZTctZWQ5Zi00MTA1LThiNWQtM2I2OGE4NGNkMmI4 LzEvVFduLUVib0FHeEttLTlHSllwb19zWUc5akpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFWhss3A P+Imq6Wz4NieMv0F1cDN12pSk7rmSdNCkOQo6npG9iRbY0oJxyiYyURHeiyD49Eb x2dQOKOpzugrQWaJUqvGfmXZIkq21kKodtZqup30pSHycTuBYErN3t8cdD30cXnj WA95RkzPUS/2KJVL32z1QjLIuuGINRlVWoMOjER7NZksvVTTlqW93Vz9ZprIFNev F15hpDx8EO+gcOU8LumkNdYKvyfjahC3yRguvQ8zmKnpU4MiIIwTNWc8U540Qbl/ djc5FrFJzQzwPWv7Xj3gA311eughM/L4DJDT2oAqc2ddKtyTPsUzq2+EK051mAQl qgoIxUEQRlqqSw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:22 2025 by rpki-client