This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json) Hash identifier: PG2cDGd1+io9YC/PrraZJPA+snEdldPb/jBx/23G6wY= Subject key identifier: A8:55:FA:19:29:C7:E9:90:62:B1:A6:FB:F9:07:95:88:AE:13:DC:C3 Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511 Certificate serial: 019BF651A89D9907DA84D3B2B9B101988C67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 18:01:45 +0000 Manifest this update: Sun 25 Jan 2026 18:01:45 +0000 Manifest next update: Mon 26 Jan 2026 18:01:45 +0000 Files and hashes: 1: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: DaVNTinFJaci3dW1ilkIi4Z01hOo0EBwxinQ3yrpaxc=) 2: mGlCacge7YnUjqIQY4CvKFnqpx4.roa (hash: AVo0MRQRTy6CdeGacGKP+5uMUkB7HT3z+0JrAGp0xWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:a8:9d:99:07:da:84:d3:b2:b9:b1:01:98:8c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511 Validity Not Before: Jan 25 18:01:45 2026 GMT Not After : Jan 26 18:01:45 2026 GMT Subject: CN=a855fa1929c7e99062b1a6fbf9079588ae13dcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:43:5f:17:5e:2e:ef:a5:6e:fa:d5:28:90: bb:2b:e2:93:40:60:5e:a7:66:12:d9:70:5d:89:1e: 46:4e:05:9b:4a:e9:19:35:ce:be:52:31:95:73:be: 2e:a2:c0:ec:1d:80:a5:a7:f8:12:0b:b5:53:a2:a8: c7:a2:9a:ff:ed:05:5b:f3:26:b4:5e:26:12:2b:fd: 1c:51:9a:36:c0:83:d6:01:65:65:19:be:9e:2b:e9: 03:b0:ba:12:34:1f:c7:aa:1c:55:96:13:7e:8a:14: b8:5d:d2:00:06:49:50:34:09:90:27:5e:5d:70:70: 94:d8:94:9c:0f:d3:84:2a:2e:50:bb:76:e9:9d:16: 4a:6c:9d:db:19:13:3f:1f:c0:8e:88:65:9c:e9:a7: c5:6b:42:18:d0:0c:43:b0:47:01:f3:2a:df:92:4e: a4:e2:d1:c4:55:04:fc:4a:42:6e:1c:cf:fe:9b:49: d4:de:69:6f:16:02:e0:7c:b2:09:23:b7:66:96:7f: ea:1b:c3:12:f5:05:f6:65:46:67:a3:6e:48:33:81: ef:28:b5:67:c9:83:ab:bd:4f:e5:11:82:b7:ee:7e: 47:37:0e:90:64:4d:77:82:ac:ad:8d:a7:88:83:05: d9:5d:7f:a8:97:be:f7:e9:dd:17:f2:67:2b:9d:7a: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:55:FA:19:29:C7:E9:90:62:B1:A6:FB:F9:07:95:88:AE:13:DC:C3 X509v3 Authority Key Identifier: keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:62:0d:5e:03:21:8f:03:fa:b8:83:4b:3a:11:42:20:4f:a8: 27:c3:de:d1:39:be:f0:18:d8:5e:23:65:88:d8:6d:47:6b:da: cc:56:26:a6:1c:bc:e4:5d:66:90:24:ab:41:1e:2d:bd:28:c2: 86:41:03:e1:9e:aa:f9:66:2c:e0:2b:85:10:0c:6c:e7:c1:d0: 63:ff:79:f7:78:bc:ae:61:12:e0:b8:4a:a0:89:9e:96:61:4b: 0e:85:fc:3d:1b:16:ff:76:43:a3:4d:37:31:ed:88:4f:4a:8f: ab:5c:d4:d8:76:22:be:7c:29:06:eb:f9:8d:2b:64:d6:39:1a: 56:3d:dc:0a:a1:ce:75:b4:8c:11:0f:65:31:d6:42:11:91:27: fa:86:94:18:4f:e5:11:04:44:e0:ea:c5:12:41:7d:7d:5d:a0: 3d:c7:f3:f2:16:1a:ed:e3:31:a8:0f:ab:bb:a5:8f:6a:10:2d: 74:c4:cc:84:7e:8a:1f:61:ed:26:83:54:22:9f:35:ea:cd:15: 09:79:11:f3:f1:6d:ed:ec:89:1d:2f:e9:12:53:73:48:8f:2b: 22:7b:d0:11:76:7c:ae:7c:da:f9:69:a6:cc:1d:6d:1d:00:33: 34:a5:2a:cb:79:aa:8d:88:14:b1:8e:d7:ac:33:44:54:b4:fd: 24:88:50:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UaidmQfahNOyubEBmIxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi ODQ1MTEwHhcNMjYwMTI1MTgwMTQ1WhcNMjYwMTI2MTgwMTQ1WjAzMTEwLwYDVQQD EyhhODU1ZmExOTI5YzdlOTkwNjJiMWE2ZmJmOTA3OTU4OGFlMTNkY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hRDXxdeLu+lbvrVKJC7K+KTQGBe p2YS2XBdiR5GTgWbSukZNc6+UjGVc74uosDsHYClp/gSC7VToqjHopr/7QVb8ya0 XiYSK/0cUZo2wIPWAWVlGb6eK+kDsLoSNB/HqhxVlhN+ihS4XdIABklQNAmQJ15d cHCU2JScD9OEKi5Qu3bpnRZKbJ3bGRM/H8COiGWc6afFa0IY0AxDsEcB8yrfkk6k 4tHEVQT8SkJuHM/+m0nU3mlvFgLgfLIJI7dmln/qG8MS9QX2ZUZno25IM4HvKLVn yYOrvU/lEYK37n5HNw6QZE13gqytjaeIgwXZXX+ol7736d0X8mcrnXpsVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhV+hkpx+mQYrGm+/kHlYiuE9zDMB8GA1UdIwQY MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2INXgMh jwP6uINLOhFCIE+oJ8Pe0Tm+8BjYXiNliNhtR2vazFYmphy85F1mkCSrQR4tvSjC hkED4Z6q+WYs4CuFEAxs58HQY/9593i8rmES4LhKoImelmFLDoX8PRsW/3ZDo003 Me2IT0qPq1zU2HYivnwpBuv5jStk1jkaVj3cCqHOdbSMEQ9lMdZCEZEn+oaUGE/l EQRE4OrFEkF9fV2gPcfz8hYa7eMxqA+ru6WPahAtdMTMhH6KH2HtJoNUIp816s0V CXkR8/Ft7eyJHS/pElNzSI8rInvQEXZ8rnza+WmmzB1tHQAzNKUqy3mqjYgUsY7X rDNEVLT9JIhQoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:48:21 2026 by rpki-client