This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json) Hash identifier: Bzw9qpZXwoMGkADyEdstVLkXJVm3S3qz38JUGrMFeP8= Subject key identifier: 0A:4F:8F:8A:F8:98:80:0F:F3:24:B5:4F:03:2A:7E:CD:4D:5C:7E:A3 Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34 Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34 Certificate serial: 019AF12EF64DA7FC75C1EBEA4A3B8BEECD4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft Manifest number: 0A4F Signing time: Sat 06 Dec 2025 01:02:57 +0000 Manifest this update: Sat 06 Dec 2025 01:02:57 +0000 Manifest next update: Sun 07 Dec 2025 01:02:57 +0000 Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: Dkh0AKJ2E/YQDowUvpi02EDqVwEvIgqLCNQENioE/WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f6:4d:a7:fc:75:c1:eb:ea:4a:3b:8b:ee:cd:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34 Validity Not Before: Dec 6 01:02:57 2025 GMT Not After : Dec 7 01:02:57 2025 GMT Subject: CN=0a4f8f8af898800ff324b54f032a7ecd4d5c7ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:fe:e1:bf:89:10:60:74:53:5f:d4:1b:6d: 4f:5b:31:0b:0f:82:50:c1:85:93:57:6a:a5:78:4c: 00:e5:c0:bf:b6:3f:97:98:e6:58:ce:11:8d:39:5f: c8:78:ea:ae:48:ba:c8:4a:fc:b4:e1:61:8b:de:ac: 15:b9:21:d3:6c:2c:28:06:b1:b9:c7:32:68:17:23: d6:0b:5a:d0:26:f4:70:5d:ea:c0:0e:ca:4d:95:71: ab:82:8c:ec:4f:99:c3:cd:a9:b1:ee:1f:cc:96:76: 96:50:57:34:51:0c:80:14:41:a1:10:f5:ac:ac:d9: 89:fc:dd:10:0c:0c:f3:64:0b:14:15:f1:78:fe:05: c3:71:d4:ba:af:4c:1a:4b:1d:5c:7d:d6:aa:5f:92: d8:ce:ea:f1:b9:e0:74:62:b9:b5:88:56:88:75:89: 85:84:fc:6c:40:d8:0c:5a:e5:df:76:3d:2a:e9:c7: 47:77:e0:c4:e9:25:08:cb:14:a2:9e:1a:2c:77:84: f4:52:12:f6:c8:c7:d1:32:3e:4d:e5:50:95:9a:d9: a1:96:66:1f:15:a4:63:50:63:27:2f:ad:4c:98:1f: 04:3f:e0:78:0d:1b:0f:51:9a:9e:38:03:fb:9b:09: db:5e:5e:f0:4e:61:4a:1e:78:ae:ea:30:25:db:dd: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4F:8F:8A:F8:98:80:0F:F3:24:B5:4F:03:2A:7E:CD:4D:5C:7E:A3 X509v3 Authority Key Identifier: keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:0a:94:c2:a9:d2:40:67:64:90:bf:79:6e:e9:8e:e4:a4: 1e:f7:b0:1d:78:c9:a5:01:8e:09:e9:ed:9b:20:26:db:95:cd: 5d:06:e5:ed:5b:5e:fc:70:3e:4d:03:73:6d:60:3f:2d:c8:37: 9c:0d:64:16:ce:c7:c3:fb:09:79:30:c1:93:14:b7:f2:fc:e0: 2a:14:71:72:d4:a5:42:bf:44:a4:99:cd:1d:9a:e7:57:54:ff: 8c:b4:9d:21:14:3c:6c:f0:79:56:66:8f:0b:c1:ce:f0:ca:dd: ad:a9:a2:f6:6c:6c:06:a5:98:e0:cd:58:e5:e2:9c:11:9c:d2: 58:77:6a:71:1f:3e:50:f3:1b:83:69:c7:f1:c8:d7:f8:14:a9: f2:d1:b9:af:ff:09:e9:29:80:b1:35:1a:e1:75:40:a0:cf:ab: 88:07:c8:c1:8f:40:c8:90:50:36:25:39:97:d4:87:c8:77:65: 38:34:56:7e:12:39:56:fc:58:64:46:dc:0c:4c:75:63:da:4a: 1f:7d:7d:c1:0a:a6:8b:43:23:0e:08:32:d6:64:f6:03:b3:a0: e3:3e:93:7b:d6:a0:7c:65:a5:6c:66:00:73:73:33:dc:0c:0c: e9:56:6b:1b:63:dd:15:82:5a:cc:ce:f2:9c:c1:4d:cd:b5:c6: 52:7f:fc:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvZNp/x1wevqSjuL7s1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMDEzMzNmODZjYTk3MDcxYTBmOTYxMjZiYTM4ZTIyNTJl NzBhMzQwHhcNMjUxMjA2MDEwMjU3WhcNMjUxMjA3MDEwMjU3WjAzMTEwLwYDVQQD EygwYTRmOGY4YWY4OTg4MDBmZjMyNGI1NGYwMzJhN2VjZDRkNWM3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4n+4b+JEGB0U1/UG21PWzELD4JQ wYWTV2qleEwA5cC/tj+XmOZYzhGNOV/IeOquSLrISvy04WGL3qwVuSHTbCwoBrG5 xzJoFyPWC1rQJvRwXerADspNlXGrgozsT5nDzamx7h/MlnaWUFc0UQyAFEGhEPWs rNmJ/N0QDAzzZAsUFfF4/gXDcdS6r0waSx1cfdaqX5LYzurxueB0Yrm1iFaIdYmF hPxsQNgMWuXfdj0q6cdHd+DE6SUIyxSinhosd4T0UhL2yMfRMj5N5VCVmtmhlmYf FaRjUGMnL61MmB8EP+B4DRsPUZqeOAP7mwnbXl7wTmFKHniu6jAl291K4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApPj4r4mIAP8yS1TwMqfs1NXH6jMB8GA1UdIwQY MBaAFE8BMz+GypcHGg+WEmujjiJS5wo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzIt YjQwNTY5MTZiMThiLzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzItYjQwNTY5MTZiMThi LzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARq4KlMKp 0kBnZJC/eW7pjuSkHvewHXjJpQGOCentmyAm25XNXQbl7Vte/HA+TQNzbWA/Lcg3 nA1kFs7Hw/sJeTDBkxS38vzgKhRxctSlQr9EpJnNHZrnV1T/jLSdIRQ8bPB5VmaP C8HO8Mrdrami9mxsBqWY4M1Y5eKcEZzSWHdqcR8+UPMbg2nH8cjX+BSp8tG5r/8J 6SmAsTUa4XVAoM+riAfIwY9AyJBQNiU5l9SHyHdlODRWfhI5VvxYZEbcDEx1Y9pK H319wQqmi0MjDggy1mT2A7Og4z6Te9agfGWlbGYAc3Mz3AwM6VZrG2PdFYJazM7y nMFNzbXGUn/8kA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:27 2025 by rpki-client