This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json) Hash identifier: 9Y6TFwufUTs7LghjYAE4dQ/TyL5QeNhU8GHr4ohMWFc= Subject key identifier: 34:1B:1E:CA:1E:0D:7C:FC:80:3D:D6:DA:67:94:57:83:2E:6E:FC:93 Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae Certificate serial: 019AF42E08B3AECF069B6C8F78131E0DF7C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft Manifest number: 13F5 Signing time: Sat 06 Dec 2025 15:00:48 +0000 Manifest this update: Sat 06 Dec 2025 15:00:48 +0000 Manifest next update: Sun 07 Dec 2025 15:00:48 +0000 Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=) 2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: u4AVWucm+EseWGAzu7uDeCdwZWqGRHbxIlIwbvDHuAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:08:b3:ae:cf:06:9b:6c:8f:78:13:1e:0d:f7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae Validity Not Before: Dec 6 15:00:48 2025 GMT Not After : Dec 7 15:00:48 2025 GMT Subject: CN=341b1eca1e0d7cfc803dd6da679457832e6efc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:56:58:64:cb:b1:d8:c8:f9:40:0b:af:33: 0f:43:41:8e:a0:1d:14:4d:e7:90:bb:b1:e4:c9:b0: 44:00:ab:33:8e:72:c5:33:61:8a:99:43:2a:cc:50: 13:30:90:f2:05:d6:94:66:b5:b0:95:61:a2:5e:6b: 54:db:9f:62:7d:eb:ca:1a:22:2c:57:ec:64:c9:71: e0:44:4d:80:d5:35:04:ca:5e:2c:e5:33:ef:82:e4: bb:0c:6c:72:4b:8a:79:4a:03:a3:ef:75:64:be:41: 15:1d:65:fe:bc:4a:c6:1b:b8:03:e9:c3:61:a3:4c: 28:df:80:0b:38:59:f3:5f:22:30:b4:a0:99:95:c9: a3:a2:f4:6e:6d:ea:28:ff:2c:e5:3c:c2:c8:37:e1: 59:07:a4:88:b6:c8:ce:a4:cf:50:2b:b8:b3:33:eb: 20:57:2d:81:d8:16:07:b2:73:3b:db:24:9a:ef:62: fd:d7:0f:26:e5:b7:a9:2b:a9:ef:a7:ab:02:af:66: e7:e1:bf:18:a0:64:74:09:59:54:62:cc:45:05:94: 19:7d:77:8c:c4:44:2f:d6:df:a6:ff:8d:45:fd:18: 74:03:93:b7:12:ec:26:6b:d2:81:df:16:d9:f1:8a: f7:91:2c:4c:f7:36:ae:ea:ba:2d:9d:0f:9d:71:79: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1B:1E:CA:1E:0D:7C:FC:80:3D:D6:DA:67:94:57:83:2E:6E:FC:93 X509v3 Authority Key Identifier: keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:ff:78:b8:f0:29:c0:76:0b:a8:eb:98:6b:dd:75:06:96:c1: 3f:a3:17:03:fe:90:ef:04:70:c2:75:f8:7a:96:11:b1:c3:ec: 3d:e9:62:3e:fb:82:85:18:8b:0c:57:be:53:5c:b2:f9:65:b1: dc:60:ac:35:8e:7f:73:f9:6c:17:67:a5:55:bd:0e:fe:e9:84: 2a:b8:58:01:22:3d:97:13:32:e4:d0:45:49:aa:b6:07:45:0c: bb:5a:e6:4c:bb:44:4a:cc:d9:fc:0c:1e:79:f6:8c:24:49:c3: df:7b:f6:60:8f:74:57:ce:c1:aa:8c:8b:53:a6:73:1b:a4:4e: 80:11:9b:26:63:3f:e8:5c:48:2b:1c:14:8a:a1:e2:6d:fe:12: 91:d8:a3:ed:c8:fe:ec:46:df:58:46:b5:4a:6b:84:a7:2e:c0: 05:58:86:00:13:e3:21:b1:d8:06:c5:9e:58:c6:11:27:85:d6: 2b:ed:c4:02:3c:23:ce:29:46:46:ce:20:09:ac:60:6d:e8:b4: 01:6f:1a:20:93:89:6b:0c:f4:3c:d1:27:0c:c7:ad:11:04:71: 4b:ea:6f:7c:81:b1:28:4a:4e:d5:79:ea:1f:0d:7a:3c:fe:17: 44:85:b4:9f:b2:6d:17:3d:9a:06:f4:5a:62:41:ee:c2:6a:e3: 2f:11:c8:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lgizrs8Gm2yPeBMeDffGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YjI0OWEyYzU2MmM1ZWRiZGI3NTA1OGUyNmJkNzcwMTIz ZTk1YWUwHhcNMjUxMjA2MTUwMDQ4WhcNMjUxMjA3MTUwMDQ4WjAzMTEwLwYDVQQD EygzNDFiMWVjYTFlMGQ3Y2ZjODAzZGQ2ZGE2Nzk0NTc4MzJlNmVmYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFWWGTLsdjI+UALrzMPQ0GOoB0U TeeQu7HkybBEAKszjnLFM2GKmUMqzFATMJDyBdaUZrWwlWGiXmtU259ifevKGiIs V+xkyXHgRE2A1TUEyl4s5TPvguS7DGxyS4p5SgOj73VkvkEVHWX+vErGG7gD6cNh o0wo34ALOFnzXyIwtKCZlcmjovRubeoo/yzlPMLIN+FZB6SItsjOpM9QK7izM+sg Vy2B2BYHsnM72ySa72L91w8m5bepK6nvp6sCr2bn4b8YoGR0CVlUYsxFBZQZfXeM xEQv1t+m/41F/Rh0A5O3Euwma9KB3xbZ8Yr3kSxM9zau6rotnQ+dcXk0ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQbHsoeDXz8gD3W2meUV4MubvyTMB8GA1UdIwQY MBaAFLaySaLFYsXtvbdQWOJr13ASPpWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUt OWNlMzFjMjczMTA4LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUtOWNlMzFjMjczMTA4 LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtv94uPAp wHYLqOuYa911BpbBP6MXA/6Q7wRwwnX4epYRscPsPeliPvuChRiLDFe+U1yy+WWx 3GCsNY5/c/lsF2elVb0O/umEKrhYASI9lxMy5NBFSaq2B0UMu1rmTLtESszZ/Awe efaMJEnD33v2YI90V87BqoyLU6ZzG6ROgBGbJmM/6FxIKxwUiqHibf4Skdij7cj+ 7EbfWEa1SmuEpy7ABViGABPjIbHYBsWeWMYRJ4XWK+3EAjwjzilGRs4gCaxgbei0 AW8aIJOJawz0PNEnDMetEQRxS+pvfIGxKEpO1XnqHw16PP4XRIW0n7JtFz2aBvRa YkHuwmrjLxHIwg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:22:25 2025 by rpki-client