This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json) Hash identifier: NsetgxM5HCqJKsYN4v33LBO66+//uanFXnVBAYRBOqk= Subject key identifier: 72:11:FA:07:A5:D7:D8:E3:77:81:33:5A:B7:57:76:6D:F3:8D:15:4C Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad Certificate serial: 019AF1D215F96716256697010D29E3DF3061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=) 2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: Af2nxerG6u1dNBSvZ1PuP4V2wAazqlsQTXELWTEloAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:15:f9:67:16:25:66:97:01:0d:29:e3:df:30:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=7211fa07a5d7d8e37781335ab757766df38d154c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b7:f6:62:b3:5f:b9:b0:14:a5:37:09:09:3c: c3:72:0f:8a:6e:d4:93:ec:a9:48:81:b4:e0:fe:f7: cd:0d:fc:94:9d:03:05:fa:d3:f1:df:5a:c7:e4:89: d9:23:4c:3a:46:70:91:69:f2:dc:4b:f0:5f:b0:ed: a3:7f:d2:d8:c0:f9:c4:b7:6a:4a:8f:9d:23:69:e4: 6e:4b:67:18:02:ad:f2:c4:25:2e:63:e7:26:8b:e7: 81:d2:44:bd:8b:ab:57:7e:35:ef:d8:c1:17:77:c4: e0:9f:08:c9:a2:ea:cc:ac:ee:d0:08:77:71:d7:93: 18:6d:d1:5f:84:21:68:48:65:6b:8a:55:01:09:61: 7c:83:c9:4b:c6:bf:76:2b:be:b3:27:9c:52:30:4d: 51:82:4d:a7:25:10:1e:49:5e:f6:6c:f0:22:20:bd: 86:d5:5a:24:f2:56:c1:90:b9:cc:be:13:a8:a8:9e: 7a:e7:f9:f1:a9:d7:11:65:b7:6a:72:15:00:c5:38: e2:4f:84:6c:9d:f1:04:9b:34:3d:70:cc:8c:db:b2: 06:28:55:c1:9e:3e:46:e3:64:11:7f:dc:a3:2a:96: cd:7e:aa:ea:e1:da:6b:ba:df:35:97:8d:38:17:57: c8:54:79:06:fe:3b:1d:dd:3c:df:c4:1b:08:ec:80: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:11:FA:07:A5:D7:D8:E3:77:81:33:5A:B7:57:76:6D:F3:8D:15:4C X509v3 Authority Key Identifier: keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:19:78:a2:41:34:65:81:0f:7f:12:e9:f0:28:c2:75:17:a2: 19:58:6a:c7:da:8e:c2:80:36:00:5f:1a:1b:30:14:d4:4c:4b: 8d:12:58:e6:74:05:f4:28:7d:50:37:10:fb:ef:e2:26:51:67: 49:ef:78:b6:d4:e5:bf:64:87:89:f1:2f:c0:6c:d7:d3:96:8c: c1:24:66:52:33:d6:ec:57:9e:d5:c0:cf:10:b7:08:97:b3:64: b3:ef:c4:33:21:b8:0e:cc:56:cc:4a:b9:8f:a2:de:44:64:c0: 5d:24:69:0a:7f:f7:a9:66:8b:b9:ac:4d:7b:b6:7c:5e:84:7e: ce:41:a0:de:9e:72:6f:68:30:e9:76:4a:e1:7a:f2:06:e6:cb: 7a:ab:7e:85:19:ea:1c:de:e1:87:48:ec:f2:c6:e7:35:47:c0: 74:b9:77:b4:37:db:72:de:bb:15:66:0e:09:85:16:5b:0e:c1: 4d:aa:50:3c:97:9d:cf:ba:04:ae:d3:9b:91:3c:d9:c9:8e:59: 31:49:db:c5:e4:e0:f5:34:24:34:b2:29:8d:35:b1:c0:12:29: 86:c0:8d:61:63:d0:fe:14:1e:33:42:25:2e:f7:39:0a:7f:04: 65:bd:f8:c9:29:5c:da:c8:20:71:07:f5:c6:36:5a:73:c2:ef: 62:30:e4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hX5ZxYlZpcBDSnj3zBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzU5NGIwMjE0MjY0ZjA2Njc3NjA5YmI0YWE0Nzc5ZWIx ZWVjYWQwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD Eyg3MjExZmEwN2E1ZDdkOGUzNzc4MTMzNWFiNzU3NzY2ZGYzOGQxNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7f2YrNfubAUpTcJCTzDcg+KbtST 7KlIgbTg/vfNDfyUnQMF+tPx31rH5InZI0w6RnCRafLcS/BfsO2jf9LYwPnEt2pK j50jaeRuS2cYAq3yxCUuY+cmi+eB0kS9i6tXfjXv2MEXd8TgnwjJourMrO7QCHdx 15MYbdFfhCFoSGVrilUBCWF8g8lLxr92K76zJ5xSME1Rgk2nJRAeSV72bPAiIL2G 1Vok8lbBkLnMvhOoqJ565/nxqdcRZbdqchUAxTjiT4RsnfEEmzQ9cMyM27IGKFXB nj5G42QRf9yjKpbNfqrq4dprut81l404F1fIVHkG/jsd3TzfxBsI7IDnHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIR+gel19jjd4EzWrdXdm3zjRVMMB8GA1UdIwQY MBaAFEx1lLAhQmTwZndgm7SqR3nrHuytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYt YjEzMGJmNzZmZTEwLzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iODBiNDctYTdiYy00ZWI0LThiZTYtYjEzMGJmNzZmZTEw LzEvVEhXVXNDRkNaUEJtZDJDYnRLcEhlZXNlN0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhl4okE0 ZYEPfxLp8CjCdReiGVhqx9qOwoA2AF8aGzAU1ExLjRJY5nQF9Ch9UDcQ++/iJlFn Se94ttTlv2SHifEvwGzX05aMwSRmUjPW7Fee1cDPELcIl7Nks+/EMyG4DsxWzEq5 j6LeRGTAXSRpCn/3qWaLuaxNe7Z8XoR+zkGg3p5yb2gw6XZK4XryBubLeqt+hRnq HN7hh0js8sbnNUfAdLl3tDfbct67FWYOCYUWWw7BTapQPJedz7oErtObkTzZyY5Z MUnbxeTg9TQkNLIpjTWxwBIphsCNYWPQ/hQeM0IlLvc5Cn8EZb34ySlc2sggcQf1 xjZac8LvYjDktw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:14 2025 by rpki-client