This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json) Hash identifier: q7tcEi5CqIb5QIqHSVcv5R6TibMEol5AE8EnIAyhz8M= Subject key identifier: A4:B7:7B:D5:49:C1:D9:F0:F0:52:74:D3:28:B8:EF:24:0F:8E:51:2F Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3 Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3 Certificate serial: 019AF1D1B30FA65582CE3B6E1F15B62ACD53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: spQ2POqszX3k9mxNJ3+4qn/N8Rnqz3/J4PrJslm7ytg=) 2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b3:0f:a6:55:82:ce:3b:6e:1f:15:b6:2a:cd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=a4b77bd549c1d9f0f05274d328b8ef240f8e512f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:9f:f8:be:f8:4a:38:f3:b0:ac:db:7b:c4: 74:3e:e1:13:15:a0:c3:6f:e8:c6:1b:b0:99:84:03: ab:ff:9f:6d:a0:63:cb:87:dc:a5:3c:bc:06:21:e2: 98:a9:95:d4:28:ed:c0:1a:6d:00:ab:b5:44:dd:9e: 5b:f6:04:67:45:5e:f3:74:0a:c7:76:52:3e:b5:5a: 0c:38:ca:30:7b:0e:3f:3d:3e:fd:19:d7:d2:aa:e3: 0f:d4:f6:74:77:02:d3:6c:f7:9a:f5:d3:1c:25:02: 58:42:b0:b0:35:91:b7:af:e4:7b:ac:ef:51:1b:ee: b9:3c:64:1e:12:d7:ad:d1:ff:51:20:9a:9c:9a:dd: e4:17:e5:ed:21:cb:4b:a2:3a:b7:db:32:19:79:56: 1f:41:82:d6:45:18:85:fd:14:44:7c:fb:5f:dc:46: e6:c9:aa:ef:e5:c9:8e:a3:67:0e:51:3b:a8:53:f8: 64:47:f6:5b:a4:9a:02:c2:e0:18:f0:ae:50:70:8b: 7d:22:48:89:62:ca:82:a3:44:92:bd:ce:9e:62:50: c6:00:52:d1:01:49:2e:24:58:e3:9f:ba:e5:a0:b9: a8:f1:2a:71:09:87:92:84:a6:e2:34:8c:4b:e9:6c: c4:b4:16:c1:dd:e5:ee:1f:42:25:08:93:2a:08:b5: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B7:7B:D5:49:C1:D9:F0:F0:52:74:D3:28:B8:EF:24:0F:8E:51:2F X509v3 Authority Key Identifier: keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:04:17:eb:fb:0d:92:60:23:d5:24:79:df:85:57:49:e3:5b: b9:8f:f0:59:ff:ff:00:f4:ce:4c:31:e5:d7:ef:60:0d:77:45: bf:8c:d1:c9:e5:4e:d2:f8:3f:b9:e6:0e:8c:4b:41:57:73:63: f9:77:66:91:4f:7e:c8:d1:01:73:4d:67:4a:64:17:77:dd:08: b3:71:ca:5f:96:05:20:1f:a5:0f:c6:b7:f2:ee:d2:24:3b:e0: 0f:70:7a:47:77:a8:79:ac:84:4a:00:24:5c:fa:1b:e0:ee:27: b9:58:04:39:f1:e8:3e:27:db:d0:50:8c:a6:52:c8:85:f0:c7: f0:1b:7f:9c:f3:6c:98:0f:71:89:51:24:28:9f:f2:04:f0:e2: 0b:0b:14:89:71:8b:20:29:78:f2:ca:47:67:9f:f3:ef:d6:da: b7:d4:ec:f5:b6:b8:17:20:1a:fa:5b:f1:56:36:cf:4c:0c:0a: 59:10:30:6f:be:0f:0a:5d:67:4b:e2:93:33:46:fb:c2:cf:bf: 27:c8:3f:18:f5:30:76:9f:71:ed:12:c8:24:1a:f2:ce:de:d5: 64:57:22:d4:13:43:d6:bf:f3:25:77:72:a3:38:c7:1e:e7:f3: b7:cc:77:f5:5d:6f:a9:ab:1f:f5:10:5d:6b:6b:2d:12:90:7c: f7:23:23:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bMPplWCzjtuHxW2Ks1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjg3ZDg2MjgwODIyNWI0NTlmYTM5OWU2NWY4YTA2OTQ2 OWFiYTMwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhhNGI3N2JkNTQ5YzFkOWYwZjA1Mjc0ZDMyOGI4ZWYyNDBmOGU1MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXif+L74SjjzsKzbe8R0PuETFaDD b+jGG7CZhAOr/59toGPLh9ylPLwGIeKYqZXUKO3AGm0Aq7VE3Z5b9gRnRV7zdArH dlI+tVoMOMowew4/PT79GdfSquMP1PZ0dwLTbPea9dMcJQJYQrCwNZG3r+R7rO9R G+65PGQeEtet0f9RIJqcmt3kF+XtIctLojq32zIZeVYfQYLWRRiF/RREfPtf3Ebm yarv5cmOo2cOUTuoU/hkR/ZbpJoCwuAY8K5QcIt9IkiJYsqCo0SSvc6eYlDGAFLR AUkuJFjjn7rloLmo8SpxCYeShKbiNIxL6WzEtBbB3eXuH0IlCJMqCLW1TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKS3e9VJwdnw8FJ00yi47yQPjlEvMB8GA1UdIwQY MBaAFE1ofYYoCCJbRZ+jmeZfigaUaaujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQt NTg0N2IxNDY5MzI2LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZDNiMmUtZjBmZS00NDYwLTg1MGQtNTg0N2IxNDY5MzI2 LzEvVFdoOWhpZ0lJbHRGbjZPWjVsLUtCcFJwcTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegQX6/sN kmAj1SR534VXSeNbuY/wWf//APTOTDHl1+9gDXdFv4zRyeVO0vg/ueYOjEtBV3Nj +XdmkU9+yNEBc01nSmQXd90Is3HKX5YFIB+lD8a38u7SJDvgD3B6R3eoeayESgAk XPob4O4nuVgEOfHoPifb0FCMplLIhfDH8Bt/nPNsmA9xiVEkKJ/yBPDiCwsUiXGL ICl48spHZ5/z79bat9Ts9ba4FyAa+lvxVjbPTAwKWRAwb74PCl1nS+KTM0b7ws+/ J8g/GPUwdp9x7RLIJBryzt7VZFci1BND1r/zJXdyozjHHufzt8x39V1vqasf9RBd a2stEpB89yMjKA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:43 2025 by rpki-client