This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
File:                     trd-wiTAuY75edCwxeWH5MtB9sI.mft (raw, json)
Hash identifier:          aEMNlOTAxoiBTU2TWTxReFu0Q9JXo64CfWMj6xJVa/8=
Subject key identifier:   CE:4F:16:FE:6B:39:35:93:F8:D0:E5:BB:34:70:70:B8:08:06:DA:0B
Authority key identifier: B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2
Certificate issuer:       /CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
Certificate serial:       019BFA2D5AABF6397CBA09A79B6205469A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
Manifest number:          4C
Signing time:             Mon 26 Jan 2026 12:00:34 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:34 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:34 +0000
Files and hashes:         1: 73YyR5FHSrGikXmoFdt-u87EbLY.roa (hash: tDxXok8jabxviQSDV+iOxxhZu5aLP8xDqLw+KYO6rW8=)
                          2: trd-wiTAuY75edCwxeWH5MtB9sI.crl (hash: rY6XOdy5/fmrcjocjePaRijIgAWUfkNvKzEHJoS6d5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:5a:ab:f6:39:7c:ba:09:a7:9b:62:05:46:9a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
        Validity
            Not Before: Jan 26 12:00:34 2026 GMT
            Not After : Jan 27 12:00:34 2026 GMT
        Subject: CN=ce4f16fe6b393593f8d0e5bb347070b80806da0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:ff:c7:0e:0f:aa:15:2a:a9:a2:f3:88:5c:
                    27:26:65:1d:25:33:5a:2f:61:29:83:66:8d:65:9b:
                    8d:0e:de:ab:bb:7f:3b:c2:c6:6b:c1:e3:b0:1b:7a:
                    d5:ec:08:bd:02:ab:80:8d:28:c2:32:8f:8d:32:96:
                    37:06:6c:5b:a1:db:5c:4a:4b:cb:3d:c3:55:65:7d:
                    e3:38:81:8f:02:ca:5b:5b:a3:8e:cc:38:47:97:e7:
                    a5:34:9f:92:02:27:9c:ca:ec:98:85:f1:87:65:aa:
                    5c:5f:ad:71:db:65:4f:ae:9c:9a:18:b9:6d:8e:be:
                    dc:f7:96:1b:b1:01:c5:35:0f:2c:1c:66:22:86:05:
                    d7:a3:7d:25:14:25:4f:e8:69:cb:49:27:99:6c:8e:
                    6a:db:59:10:cd:d0:b6:ec:42:53:d2:9a:d7:74:8a:
                    88:0c:e0:fa:a0:dc:43:b7:3d:54:b1:60:01:3e:4b:
                    e3:6b:35:9b:c5:28:58:d5:d6:10:49:c6:bc:ac:d5:
                    a5:21:cb:26:aa:77:96:8d:ed:1e:4e:55:28:7d:ad:
                    8b:f3:5d:c7:70:4a:46:e7:77:8c:e0:c0:5c:bc:fe:
                    75:1b:0d:66:fc:c2:5c:33:57:5b:16:e5:05:b3:bc:
                    84:07:24:d0:0a:62:49:fd:19:3a:56:cb:4d:18:31:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:16:FE:6B:39:35:93:F8:D0:E5:BB:34:70:70:B8:08:06:DA:0B
            X509v3 Authority Key Identifier:
                keyid:B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:9c:c9:37:b9:ae:38:77:9e:90:c3:91:6c:6e:7b:4f:e9:
         62:26:13:c8:54:f9:27:2e:82:b1:22:35:fd:d4:95:14:27:65:
         0f:ca:3f:1c:52:93:5d:b0:63:89:fb:1c:da:0e:31:e0:50:a6:
         5b:26:1b:7b:01:49:71:28:38:6d:6d:51:99:8b:b8:84:2b:07:
         43:04:8f:e8:b5:cc:cb:29:1f:7a:fb:3d:72:54:69:12:12:e9:
         db:7e:1c:02:34:9a:a8:21:8c:3d:9c:70:0e:28:b7:3c:ee:16:
         a3:e7:78:d2:a9:27:a6:5d:d3:42:55:d0:be:40:7d:13:8e:cc:
         71:fc:7d:65:ba:6c:bd:fe:3e:bb:6a:86:bd:14:4e:d0:d8:9f:
         92:a3:76:f3:a5:ec:c7:73:b0:fd:8b:6a:77:84:ce:22:91:ee:
         b7:15:9d:61:9c:45:13:09:06:db:07:d3:f8:33:87:bc:28:27:
         59:42:90:56:9b:79:bd:3a:2b:c4:7f:63:1f:77:14:55:4f:63:
         3a:4b:c1:bb:dc:c7:40:36:cf:8b:50:94:a0:ca:5a:d4:6c:ea:
         cf:8c:cb:b0:31:b6:ed:2a:e4:a3:79:99:7b:79:f4:65:cb:6b:
         d5:0c:69:be:a2:4b:80:f6:eb:3c:3a:92:36:dc:21:4a:d4:30:
         49:74:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:41:34 2026 by rpki-client