This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json) Hash identifier: 8s1UMAus7EudRgSgqM5MAb4td/q63jtFO3giJQvYQtQ= Subject key identifier: D0:9A:F2:54:56:AE:58:2F:0C:0B:60:A2:79:F3:98:CE:AA:9D:1F:58 Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Certificate serial: 019AF23F6679E8B5FFA98D36E156DCEC1C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft Manifest number: 16BA Signing time: Sat 06 Dec 2025 06:00:32 +0000 Manifest this update: Sat 06 Dec 2025 06:00:32 +0000 Manifest next update: Sun 07 Dec 2025 06:00:32 +0000 Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: RXcPc1LVwR29TWj8Djmp3o431yA4IOXD2nD+Tj6iO6c=) 2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:66:79:e8:b5:ff:a9:8d:36:e1:56:dc:ec:1c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9 Validity Not Before: Dec 6 06:00:32 2025 GMT Not After : Dec 7 06:00:32 2025 GMT Subject: CN=d09af25456ae582f0c0b60a279f398ceaa9d1f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:ae:f9:16:6e:43:07:4d:ba:1b:19:4c:68: fe:ff:a2:8a:70:30:de:2b:93:f7:b9:9b:d0:47:37: a5:85:9b:a5:44:a4:07:00:3f:2f:a6:9f:3d:92:cf: 55:75:fa:97:85:e6:b6:97:75:24:b3:4e:17:45:f5: bb:20:98:95:09:97:c3:39:97:c4:85:44:e0:a6:e1: 45:59:2b:f0:42:ab:e4:06:9e:2d:97:ee:d2:b6:09: 28:eb:1f:09:55:91:b4:46:9d:5e:53:44:89:a5:be: 29:22:d8:3c:12:48:32:64:45:f9:27:77:b7:8f:02: 5e:e5:ad:f4:fb:b1:76:80:3d:1e:d9:d4:fa:a1:d4: 4b:2d:f3:2a:6c:44:05:9d:73:4c:a1:1a:a4:ed:ad: 2a:79:1d:d6:41:46:12:de:f0:25:d8:16:ed:31:ab: 0f:33:06:0e:e9:88:33:cd:da:ba:b1:7f:00:d3:cc: dd:6a:e0:3a:cf:6f:11:9c:99:2d:70:28:f2:1a:e6: b1:41:12:71:45:44:85:45:92:4e:1b:35:05:e4:a3: 31:e0:b7:8a:c7:d8:50:ae:5c:7f:61:f5:a9:52:f7: 63:bb:fd:8f:72:2c:61:52:11:46:0d:2e:cb:a0:7c: 6b:7f:6c:c3:e1:7c:81:5a:5a:15:ce:d7:7a:cc:14: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:F2:54:56:AE:58:2F:0C:0B:60:A2:79:F3:98:CE:AA:9D:1F:58 X509v3 Authority Key Identifier: keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:28:92:62:e2:f0:44:77:f9:fc:2a:6d:9d:fb:e2:e9:32:90: 60:c4:e1:50:c9:bc:61:fc:60:13:6b:bc:31:b0:79:4e:ed:61: df:98:21:4c:7b:8a:5f:af:f7:ca:ba:40:0a:9e:16:ab:26:57: 49:ea:df:a4:86:36:84:bf:28:cd:97:7e:ff:34:86:a8:35:91: e7:57:09:d1:a2:3d:76:b4:53:27:36:bf:6b:03:84:6b:91:03: 16:7f:79:e1:ed:52:3d:cb:26:0d:ba:a1:7e:4f:8e:38:e1:02: 27:ef:e1:f8:01:0f:64:8a:a6:38:8e:5d:58:90:c3:4f:38:3f: 3c:e6:c4:a5:7e:85:3a:32:8e:2d:fb:38:cc:1f:83:e1:61:4e: 9c:78:39:2a:8f:95:9f:b0:f4:00:a1:4a:c3:79:e8:49:07:3c: 25:69:0c:6d:46:58:b5:84:08:d2:c1:11:ad:21:4f:bb:a1:6a: 40:0d:f3:4e:8e:e5:4f:8e:b8:c9:e9:ad:a4:9f:58:c6:d1:e4: b4:73:8e:22:78:1a:62:22:68:c8:6e:ee:0d:b3:07:d2:35:68: 25:fb:e9:60:2c:21:8c:1e:c5:81:82:7a:df:2a:65:c8:35:da: aa:55:50:fc:38:14:a8:c2:fa:06:19:7b:91:77:1c:3e:06:1e: 9a:06:25:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2Z56LX/qY024Vbc7ByDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNjI3ODFjYTE0MzZkOTZkNjc3NWJhMjBjNWNmMmM3NWRm ZDEzZTkwHhcNMjUxMjA2MDYwMDMyWhcNMjUxMjA3MDYwMDMyWjAzMTEwLwYDVQQD EyhkMDlhZjI1NDU2YWU1ODJmMGMwYjYwYTI3OWYzOThjZWFhOWQxZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKu+RZuQwdNuhsZTGj+/6KKcDDe K5P3uZvQRzelhZulRKQHAD8vpp89ks9VdfqXhea2l3Uks04XRfW7IJiVCZfDOZfE hUTgpuFFWSvwQqvkBp4tl+7Stgko6x8JVZG0Rp1eU0SJpb4pItg8EkgyZEX5J3e3 jwJe5a30+7F2gD0e2dT6odRLLfMqbEQFnXNMoRqk7a0qeR3WQUYS3vAl2BbtMasP MwYO6Ygzzdq6sX8A08zdauA6z28RnJktcCjyGuaxQRJxRUSFRZJOGzUF5KMx4LeK x9hQrlx/YfWpUvdju/2PcixhUhFGDS7LoHxrf2zD4XyBWloVztd6zBQuYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCa8lRWrlgvDAtgonnzmM6qnR9YMB8GA1UdIwQY MBaAFE1ieByhQ22W1ndbogxc8sdd/RPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUt OGUwYmRmZjIzN2Y4LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mZTYzNjMtNmVkNS00NjdkLWI5NmUtOGUwYmRmZjIzN2Y4 LzEvVFdKNEhLRkRiWmJXZDF1aURGenl4MTM5RS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSiSYuLw RHf5/Cptnfvi6TKQYMThUMm8YfxgE2u8MbB5Tu1h35ghTHuKX6/3yrpACp4WqyZX SerfpIY2hL8ozZd+/zSGqDWR51cJ0aI9drRTJza/awOEa5EDFn954e1SPcsmDbqh fk+OOOECJ+/h+AEPZIqmOI5dWJDDTzg/PObEpX6FOjKOLfs4zB+D4WFOnHg5Ko+V n7D0AKFKw3noSQc8JWkMbUZYtYQI0sERrSFPu6FqQA3zTo7lT464yemtpJ9YxtHk tHOOIngaYiJoyG7uDbMH0jVoJfvpYCwhjB7FgYJ63yplyDXaqlVQ/DgUqML6Bhl7 kXccPgYemgYlYw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:19 2025 by rpki-client