This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json) Hash identifier: c+PYKmq/pbsT4Z0M1FdLZjcjcyIs/aeS2ppnUyQecTw= Subject key identifier: 73:7D:5A:66:FF:30:C5:C8:59:D1:5B:44:8E:7A:0B:97:63:85:96:D4 Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511 Certificate serial: 019AF38990339F032AB6DF5D7FE3647DD109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=) 2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: ds44FwinUSPCBECXW3zIDod15dtLFO13Vw4y7VCr1Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:90:33:9f:03:2a:b6:df:5d:7f:e3:64:7d:d1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511 Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=737d5a66ff30c5c859d15b448e7a0b97638596d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:af:da:db:22:27:e4:59:ee:08:25:6c:8a: a6:8a:41:50:dc:32:6f:a1:49:c9:9e:11:50:b3:ae: 17:0c:be:94:70:61:51:64:46:4f:cb:4a:21:b6:d2: 9a:21:86:14:7d:15:c5:5b:92:41:1e:af:e8:cb:03: 67:67:29:02:98:e7:67:7f:7b:2d:e0:3a:13:1d:94: 53:cb:bb:e2:6b:55:69:f1:78:52:70:ea:3b:92:d5: 60:7f:c9:b8:1e:8f:cc:d9:19:70:cc:ad:58:5a:12: ef:07:16:9f:70:3d:6e:52:01:5b:c9:dc:14:96:fb: 4b:90:5e:30:21:d0:a4:06:be:3e:c1:aa:81:d0:38: 27:09:03:05:d0:61:3b:86:df:4e:98:14:5e:bb:d8: 77:99:b2:b9:61:39:89:46:16:a7:e8:a6:0f:b7:5d: ea:06:8d:06:41:6d:a4:a3:28:63:0b:88:1a:4a:46: 56:44:9a:4e:69:e1:97:0c:96:ea:fa:d7:c7:e8:c3: b3:8f:06:0b:27:84:7b:9f:e2:10:34:c4:0f:9d:e4: 3d:ba:ab:03:8d:b7:02:43:ca:34:55:16:93:9c:37: 58:7e:53:6b:e3:1b:b7:1a:cc:32:76:a9:33:e3:b9: c5:05:e0:b4:1b:d4:e7:d9:21:c5:86:63:c9:30:dd: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7D:5A:66:FF:30:C5:C8:59:D1:5B:44:8E:7A:0B:97:63:85:96:D4 X509v3 Authority Key Identifier: keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:94:07:90:57:ec:9a:2e:f3:7a:85:cd:0f:93:e0:c6:bf:bc: a0:41:c0:1b:1a:50:f0:34:b4:cc:b9:3e:21:b5:9b:28:e2:29: e7:33:04:d7:2d:e7:f6:06:be:73:e8:57:2e:ef:58:e5:cb:05: a0:79:ff:ba:e7:18:e6:50:ca:f7:ac:88:30:eb:7e:53:2a:38: 71:1d:0f:c9:a6:2c:ad:4b:f0:11:24:8e:33:9d:a7:71:dc:be: 84:3f:4f:b2:a8:35:0e:31:8e:4a:2b:75:55:2f:0d:c7:8a:10: 6e:6b:9a:00:9c:ad:a7:83:3b:e0:74:e4:8c:60:ea:7d:5c:75: e6:81:c6:70:b2:92:89:8c:b7:4e:f5:22:4e:33:bb:96:1f:ca: 52:3e:3c:33:fb:60:59:6f:28:f4:9f:89:c3:7a:61:e3:ec:4f: f2:34:52:38:de:09:49:47:e8:d7:f5:ba:05:00:44:51:90:c6: d2:64:74:1b:cb:86:4e:c8:79:ac:cf:4d:47:93:8f:1c:06:a7: f2:7b:be:91:2c:e8:33:e6:08:7e:3b:40:07:6d:a5:4c:72:08: 3e:08:ab:de:db:bc:ca:55:37:71:be:2b:6e:07:6f:83:04:d8: 37:a3:a3:1a:d5:49:14:c2:ce:ae:86:3d:4c:5a:f2:cf:1c:b2: cc:52:9a:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZAznwMqtt9df+NkfdEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi ODQ1MTEwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD Eyg3MzdkNWE2NmZmMzBjNWM4NTlkMTViNDQ4ZTdhMGI5NzYzODU5NmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo2v2tsiJ+RZ7gglbIqmikFQ3DJv oUnJnhFQs64XDL6UcGFRZEZPy0ohttKaIYYUfRXFW5JBHq/oywNnZykCmOdnf3st 4DoTHZRTy7via1Vp8XhScOo7ktVgf8m4Ho/M2RlwzK1YWhLvBxafcD1uUgFbydwU lvtLkF4wIdCkBr4+waqB0DgnCQMF0GE7ht9OmBReu9h3mbK5YTmJRhan6KYPt13q Bo0GQW2koyhjC4gaSkZWRJpOaeGXDJbq+tfH6MOzjwYLJ4R7n+IQNMQPneQ9uqsD jbcCQ8o0VRaTnDdYflNr4xu3Gswydqkz47nFBeC0G9Tn2SHFhmPJMN1vwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN9Wmb/MMXIWdFbRI56C5djhZbUMB8GA1UdIwQY MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5QHkFfs mi7zeoXND5Pgxr+8oEHAGxpQ8DS0zLk+IbWbKOIp5zME1y3n9ga+c+hXLu9Y5csF oHn/uucY5lDK96yIMOt+Uyo4cR0PyaYsrUvwESSOM52ncdy+hD9Psqg1DjGOSit1 VS8Nx4oQbmuaAJytp4M74HTkjGDqfVx15oHGcLKSiYy3TvUiTjO7lh/KUj48M/tg WW8o9J+Jw3ph4+xP8jRSON4JSUfo1/W6BQBEUZDG0mR0G8uGTsh5rM9NR5OPHAan 8nu+kSzoM+YIfjtAB22lTHIIPgir3tu8ylU3cb4rbgdvgwTYN6OjGtVJFMLOroY9 TFryzxyyzFKaPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:36:51 2025 by rpki-client