This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json) Hash identifier: QDu0YRVCtlH8SxUsDFDA70Csh1dVtpPggUN3yW9UKp0= Subject key identifier: 42:D5:32:53:20:54:59:A4:D1:B1:76:1D:78:46:0E:74:CA:61:12:78 Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52 Certificate serial: 019AF2097E6287E45B4C0F7F5487E96609C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft Manifest number: 03D7 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=) 2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: h/uFMyQRA1gsQqlnYKWHX8fmOIwtR4rFrabMu9oZfnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7e:62:87:e4:5b:4c:0f:7f:54:87:e9:66:09:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=42d53253205459a4d1b1761d78460e74ca611278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:6f:dd:82:27:fd:f3:80:49:e8:9c:30:7d: f7:bd:cc:31:e4:5a:df:3f:f6:3e:8f:bb:17:fe:9c: 1a:17:45:98:d3:40:a7:27:1e:d1:31:9a:c0:ec:eb: 91:5f:d6:73:1d:2a:28:05:9f:80:07:da:9b:a3:0b: 5e:b6:a2:ec:2c:90:26:b1:aa:23:ec:89:23:7d:6a: a7:93:a6:60:7d:71:62:0a:b5:bc:3f:a9:2a:b7:98: 1b:1b:d9:69:1f:61:91:ba:d2:81:76:f5:26:82:e7: 54:42:37:3c:ae:f0:3a:83:23:fa:b1:d2:fd:9b:31: 61:0d:95:64:5e:2a:ad:77:15:c0:24:75:3c:7f:21: e5:30:9f:cc:6f:a1:fa:fa:89:0b:64:96:44:49:65: 77:f5:f0:8f:5e:b8:e4:32:12:bc:9d:0f:d3:f8:e5: 06:01:af:8f:09:62:23:0e:85:b1:3a:bd:ad:e9:c7: 58:90:f6:15:17:c7:c0:40:8b:53:22:5b:7c:85:26: 28:e7:5f:b0:16:b3:0c:bd:49:c5:17:55:5f:29:e5: 87:be:64:6b:b3:52:53:e2:11:6b:fc:2b:ad:44:8a: 08:64:fa:c7:19:06:d3:1c:fc:f0:2d:92:e2:e9:2a: 4e:64:c7:48:b4:76:de:89:bf:d9:fa:cc:a7:2f:3a: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D5:32:53:20:54:59:A4:D1:B1:76:1D:78:46:0E:74:CA:61:12:78 X509v3 Authority Key Identifier: keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:24:9d:13:4f:1d:c5:8d:75:e7:8c:a4:73:13:5d:bb:7d:be: 74:cb:fe:55:a3:15:c6:10:af:64:d2:67:4e:a7:36:8a:f7:ea: 64:f9:41:fb:e1:38:f9:14:8a:5a:b1:ab:b0:61:d6:0b:58:e5: ef:23:c3:fc:5e:cd:15:d7:c4:47:a5:a3:08:27:7f:5b:50:f0: 9b:72:69:39:26:bd:1b:8c:f5:43:34:af:f5:02:55:1f:58:28: 47:39:e5:2c:e6:81:eb:9a:d3:05:73:05:8c:2f:6f:39:a3:11: 32:c1:83:af:85:21:78:c0:55:3c:68:31:10:2a:04:75:f0:43: 9c:13:ae:ed:47:1f:38:86:85:a5:d3:9e:79:1e:d8:29:e4:38: 79:3a:00:bb:50:b2:18:1a:8e:66:a7:d0:c6:73:44:91:7a:96: c6:3d:1b:87:ee:da:19:38:69:a9:a8:fe:56:16:ae:b8:b1:0a: fb:ea:4f:76:60:05:f5:74:a0:91:7a:c4:68:42:fe:6f:08:c0: 41:70:9f:ec:f7:73:94:fb:9d:04:39:ab:dc:c9:f1:e9:fc:d6: b8:af:31:ab:5f:81:1e:dc:10:d9:b7:c9:e9:78:23:2d:5b:45: 77:f8:15:cd:e6:61:10:58:5f:80:81:f9:27:06:11:c4:aa:24: 1b:b5:79:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX5ih+RbTA9/VIfpZgnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5 ODliNTIwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD Eyg0MmQ1MzI1MzIwNTQ1OWE0ZDFiMTc2MWQ3ODQ2MGU3NGNhNjExMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRxv3YIn/fOASeicMH33vcwx5Frf P/Y+j7sX/pwaF0WY00CnJx7RMZrA7OuRX9ZzHSooBZ+AB9qbowtetqLsLJAmsaoj 7IkjfWqnk6ZgfXFiCrW8P6kqt5gbG9lpH2GRutKBdvUmgudUQjc8rvA6gyP6sdL9 mzFhDZVkXiqtdxXAJHU8fyHlMJ/Mb6H6+okLZJZESWV39fCPXrjkMhK8nQ/T+OUG Aa+PCWIjDoWxOr2t6cdYkPYVF8fAQItTIlt8hSYo51+wFrMMvUnFF1VfKeWHvmRr s1JT4hFr/CutRIoIZPrHGQbTHPzwLZLi6SpOZMdItHbeib/Z+synLzr56wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELVMlMgVFmk0bF2HXhGDnTKYRJ4MB8GA1UdIwQY MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt NTAwNDMyNTAxNzQzLzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtySdE08d xY1154ykcxNdu32+dMv+VaMVxhCvZNJnTqc2ivfqZPlB++E4+RSKWrGrsGHWC1jl 7yPD/F7NFdfER6WjCCd/W1Dwm3JpOSa9G4z1QzSv9QJVH1goRznlLOaB65rTBXMF jC9vOaMRMsGDr4UheMBVPGgxECoEdfBDnBOu7UcfOIaFpdOeeR7YKeQ4eToAu1Cy GBqOZqfQxnNEkXqWxj0bh+7aGThpqaj+VhauuLEK++pPdmAF9XSgkXrEaEL+bwjA QXCf7PdzlPudBDmr3Mnx6fzWuK8xq1+BHtwQ2bfJ6XgjLVtFd/gVzeZhEFhfgIH5 JwYRxKokG7V5nA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:46 2025 by rpki-client