This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
File: travTd-DFvvxAck2ROZZQUZXB2I.mft (raw, json)
Hash identifier: pFcrj+ZtkfrlcmIChsaCVvliht1EHF4U96QlLPhOGTU=
Subject key identifier: 21:46:E3:D5:C3:9E:DF:61:77:70:F6:D7:71:8C:41:FB:4B:2E:E4:02
Authority key identifier: B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
Certificate issuer: /CN=b6b6af4ddf8316fbf101c93644e6594146570762
Certificate serial: 019AF19B766076212B0686C7A292235A19B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
Manifest number: 0517
Signing time: Sat 06 Dec 2025 03:01:28 +0000
Manifest this update: Sat 06 Dec 2025 03:01:28 +0000
Manifest next update: Sun 07 Dec 2025 03:01:28 +0000
Files and hashes: 1: XuO7mhRFAxWWJf3a_uruRMjL2IE.roa (hash: RQDFwJe4JCe2zZylFuaxaBjfCKElGwq/EnTU4HdBtkk=)
2: travTd-DFvvxAck2ROZZQUZXB2I.crl (hash: oufZAtH1/NAw34LznJRkgAMVOysEu46hcTuXQ7weoaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:76:60:76:21:2b:06:86:c7:a2:92:23:5a:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b6af4ddf8316fbf101c93644e6594146570762
Validity
Not Before: Dec 6 03:01:28 2025 GMT
Not After : Dec 7 03:01:28 2025 GMT
Subject: CN=2146e3d5c39edf617770f6d7718c41fb4b2ee402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:22:0f:0e:7d:90:13:67:d1:34:6e:90:39:
b8:06:e6:f9:01:bd:71:43:ad:ca:6b:a1:ed:15:9e:
98:7b:c1:d4:45:5c:87:5f:b5:54:13:db:30:c3:81:
bb:08:39:29:79:53:aa:0f:2b:62:ae:74:8f:57:84:
f2:be:fd:1f:de:93:f0:00:1c:f2:13:8b:6a:7e:c2:
9c:6b:42:70:14:d8:be:c7:6c:ff:b5:39:87:a3:27:
9d:23:55:a4:45:e0:cc:1c:09:ff:18:8e:04:6c:c8:
d0:db:ef:e8:d3:66:93:50:66:c8:2d:ce:10:f8:f3:
c6:e1:7a:15:d1:34:8b:cd:f0:10:88:f9:8b:22:09:
48:35:12:62:0a:cb:3e:8d:1b:67:b3:ac:26:52:da:
e2:14:36:0c:34:04:8f:a3:77:c4:51:35:ad:85:dc:
5d:26:92:c7:be:d0:bd:6d:19:57:ff:36:04:dd:5f:
ee:3d:48:9a:5f:13:82:b9:6b:39:d6:97:db:59:8b:
f0:ee:26:66:50:d4:78:a5:eb:fa:79:75:94:9a:75:
4d:0e:c8:22:84:75:7b:b7:4f:36:84:c7:93:07:c2:
21:e2:40:90:f0:f0:54:26:04:2b:f7:e4:66:b1:52:
da:fd:5b:73:2a:b3:77:ff:15:c8:ff:d6:df:1c:1f:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:E3:D5:C3:9E:DF:61:77:70:F6:D7:71:8C:41:FB:4B:2E:E4:02
X509v3 Authority Key Identifier:
keyid:B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b6:0d:71:a5:a9:f5:4c:c5:25:f5:2f:d0:75:b9:2a:e7:19:
7b:da:68:4a:c6:06:19:32:62:ce:03:8b:b3:da:5f:03:e9:c9:
63:7f:a7:2f:1b:8b:9e:2d:49:83:c9:02:7d:6f:4c:3a:7d:a1:
68:96:eb:39:91:be:c9:82:f2:99:c9:ed:f8:a1:82:01:e1:d3:
c6:81:02:4e:cf:ba:b2:be:f0:b8:5e:a2:84:09:fe:a9:61:fd:
79:5c:06:6f:e2:2e:90:26:d8:e8:ab:4d:1b:d6:59:02:4a:77:
85:8d:f6:27:c9:19:2d:fc:7c:c0:ba:67:f8:0d:06:db:35:52:
22:f4:49:c6:11:14:ca:74:42:75:1c:51:15:ee:74:f5:94:5b:
b5:81:59:f8:e1:5c:8e:f5:41:db:95:0a:4a:03:9b:c1:06:dd:
15:e6:b6:1f:2c:f9:42:12:3b:4e:ab:26:fc:5d:f4:ef:ca:1c:
78:6e:95:6a:18:9d:37:7c:d5:a7:86:9c:c0:08:d8:e1:bb:b1:
56:65:71:c2:0f:a3:b1:6d:41:da:25:e5:c4:e4:0d:01:4a:45:
56:a7:82:9c:81:e6:0b:99:0e:10:ae:62:ab:d1:64:22:07:2b:
9d:68:f7:69:bc:98:ad:ec:bb:8d:52:83:e8:70:f5:d6:7c:c7:
9f:1c:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:18 2025 by rpki-client