This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
File: trd-wiTAuY75edCwxeWH5MtB9sI.mft (raw, json)
Hash identifier: aEMNlOTAxoiBTU2TWTxReFu0Q9JXo64CfWMj6xJVa/8=
Subject key identifier: CE:4F:16:FE:6B:39:35:93:F8:D0:E5:BB:34:70:70:B8:08:06:DA:0B
Authority key identifier: B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2
Certificate issuer: /CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
Certificate serial: 019BFA2D5AABF6397CBA09A79B6205469A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
Manifest number: 4C
Signing time: Mon 26 Jan 2026 12:00:34 +0000
Manifest this update: Mon 26 Jan 2026 12:00:34 +0000
Manifest next update: Tue 27 Jan 2026 12:00:34 +0000
Files and hashes: 1: 73YyR5FHSrGikXmoFdt-u87EbLY.roa (hash: tDxXok8jabxviQSDV+iOxxhZu5aLP8xDqLw+KYO6rW8=)
2: trd-wiTAuY75edCwxeWH5MtB9sI.crl (hash: rY6XOdy5/fmrcjocjePaRijIgAWUfkNvKzEHJoS6d5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:2d:5a:ab:f6:39:7c:ba:09:a7:9b:62:05:46:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
Validity
Not Before: Jan 26 12:00:34 2026 GMT
Not After : Jan 27 12:00:34 2026 GMT
Subject: CN=ce4f16fe6b393593f8d0e5bb347070b80806da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:ff:c7:0e:0f:aa:15:2a:a9:a2:f3:88:5c:
27:26:65:1d:25:33:5a:2f:61:29:83:66:8d:65:9b:
8d:0e:de:ab:bb:7f:3b:c2:c6:6b:c1:e3:b0:1b:7a:
d5:ec:08:bd:02:ab:80:8d:28:c2:32:8f:8d:32:96:
37:06:6c:5b:a1:db:5c:4a:4b:cb:3d:c3:55:65:7d:
e3:38:81:8f:02:ca:5b:5b:a3:8e:cc:38:47:97:e7:
a5:34:9f:92:02:27:9c:ca:ec:98:85:f1:87:65:aa:
5c:5f:ad:71:db:65:4f:ae:9c:9a:18:b9:6d:8e:be:
dc:f7:96:1b:b1:01:c5:35:0f:2c:1c:66:22:86:05:
d7:a3:7d:25:14:25:4f:e8:69:cb:49:27:99:6c:8e:
6a:db:59:10:cd:d0:b6:ec:42:53:d2:9a:d7:74:8a:
88:0c:e0:fa:a0:dc:43:b7:3d:54:b1:60:01:3e:4b:
e3:6b:35:9b:c5:28:58:d5:d6:10:49:c6:bc:ac:d5:
a5:21:cb:26:aa:77:96:8d:ed:1e:4e:55:28:7d:ad:
8b:f3:5d:c7:70:4a:46:e7:77:8c:e0:c0:5c:bc:fe:
75:1b:0d:66:fc:c2:5c:33:57:5b:16:e5:05:b3:bc:
84:07:24:d0:0a:62:49:fd:19:3a:56:cb:4d:18:31:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:16:FE:6B:39:35:93:F8:D0:E5:BB:34:70:70:B8:08:06:DA:0B
X509v3 Authority Key Identifier:
keyid:B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8f:9c:c9:37:b9:ae:38:77:9e:90:c3:91:6c:6e:7b:4f:e9:
62:26:13:c8:54:f9:27:2e:82:b1:22:35:fd:d4:95:14:27:65:
0f:ca:3f:1c:52:93:5d:b0:63:89:fb:1c:da:0e:31:e0:50:a6:
5b:26:1b:7b:01:49:71:28:38:6d:6d:51:99:8b:b8:84:2b:07:
43:04:8f:e8:b5:cc:cb:29:1f:7a:fb:3d:72:54:69:12:12:e9:
db:7e:1c:02:34:9a:a8:21:8c:3d:9c:70:0e:28:b7:3c:ee:16:
a3:e7:78:d2:a9:27:a6:5d:d3:42:55:d0:be:40:7d:13:8e:cc:
71:fc:7d:65:ba:6c:bd:fe:3e:bb:6a:86:bd:14:4e:d0:d8:9f:
92:a3:76:f3:a5:ec:c7:73:b0:fd:8b:6a:77:84:ce:22:91:ee:
b7:15:9d:61:9c:45:13:09:06:db:07:d3:f8:33:87:bc:28:27:
59:42:90:56:9b:79:bd:3a:2b:c4:7f:63:1f:77:14:55:4f:63:
3a:4b:c1:bb:dc:c7:40:36:cf:8b:50:94:a0:ca:5a:d4:6c:ea:
cf:8c:cb:b0:31:b6:ed:2a:e4:a3:79:99:7b:79:f4:65:cb:6b:
d5:0c:69:be:a2:4b:80:f6:eb:3c:3a:92:36:dc:21:4a:d4:30:
49:74:a1:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6LVqr9jl8ugmnm2IFRpomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Yjc3ZWMyMjRjMGI5OGVmOTc5ZDBiMGM1ZTU4N2U0Y2I0
MWY2YzIwHhcNMjYwMTI2MTIwMDM0WhcNMjYwMTI3MTIwMDM0WjAzMTEwLwYDVQQD
EyhjZTRmMTZmZTZiMzkzNTkzZjhkMGU1YmIzNDcwNzBiODA4MDZkYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAf/xw4PqhUqqaLziFwnJmUdJTNa
L2Epg2aNZZuNDt6ru387wsZrweOwG3rV7Ai9AquAjSjCMo+NMpY3BmxbodtcSkvL
PcNVZX3jOIGPAspbW6OOzDhHl+elNJ+SAiecyuyYhfGHZapcX61x22VPrpyaGLlt
jr7c95YbsQHFNQ8sHGYihgXXo30lFCVP6GnLSSeZbI5q21kQzdC27EJT0prXdIqI
DOD6oNxDtz1UsWABPkvjazWbxShY1dYQSca8rNWlIcsmqneWje0eTlUofa2L813H
cEpG53eM4MBcvP51Gw1m/MJcM1dbFuUFs7yEByTQCmJJ/Rk6VstNGDGlowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5PFv5rOTWT+NDluzRwcLgIBtoLMB8GA1UdIwQY
MBaAFLa3fsIkwLmO+XnQsMXlh+TLQfbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJkLXdpVEF1WTc1ZWRDd3hlV0g1TXRCOXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MDRhNTMtYzY1OC00ZWYyLThjZWIt
ZDdhODI5Y2U3NmU3LzEvdHJkLXdpVEF1WTc1ZWRDd3hlV0g1TXRCOXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82MDRhNTMtYzY1OC00ZWYyLThjZWItZDdhODI5Y2U3NmU3
LzEvdHJkLXdpVEF1WTc1ZWRDd3hlV0g1TXRCOXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOI+cyTe5
rjh3npDDkWxue0/pYiYTyFT5Jy6CsSI1/dSVFCdlD8o/HFKTXbBjifsc2g4x4FCm
WyYbewFJcSg4bW1RmYu4hCsHQwSP6LXMyykfevs9clRpEhLp234cAjSaqCGMPZxw
Dii3PO4Wo+d40qknpl3TQlXQvkB9E47Mcfx9Zbpsvf4+u2qGvRRO0NifkqN286Xs
x3Ow/Ytqd4TOIpHutxWdYZxFEwkG2wfT+DOHvCgnWUKQVpt5vTorxH9jH3cUVU9j
OkvBu9zHQDbPi1CUoMpa1Gzqz4zLsDG27Srko3mZe3n0Zctr1QxpvqJLgPbrPDqS
NtwhStQwSXShJA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 20:41:34 2026 by rpki-client