This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft File: TRNilffzLmS-ePs5nrbRWuPpJjI.mft (raw, json) Hash identifier: Q+JtJ01ThtbVKV9xtSxYKybpDSHp7T6Z49V+FZpVVwQ= Subject key identifier: 9B:AC:2C:9F:A6:0B:67:43:94:D8:19:37:34:82:E1:0D:10:3A:DF:48 Authority key identifier: 4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32 Certificate issuer: /CN=4d136295f7f32e64be78fb399eb6d15ae3e92632 Certificate serial: 019B066C3A44E55CC0DA83F651AD4D40586E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 04:01:54 +0000 Manifest this update: Wed 10 Dec 2025 04:01:54 +0000 Manifest next update: Thu 11 Dec 2025 04:01:54 +0000 Files and hashes: 1: 0w6euFTp3UzxouPKJPAlF0GR1yI.roa (hash: alEYIZXZwAXSB7arGqSdzzPit/FWLiAkOyabJR5JGf8=) 2: 5ekL_VnxtRm7-caJUH4OelBy7bQ.roa (hash: C2pbDFwPGGpQ/WwmXSA+V7qxwJXZjh78LiDnuEJr7qo=) 3: TRNilffzLmS-ePs5nrbRWuPpJjI.crl (hash: usSpiCBt6EPtfIv0W02XDJc6eLUnvKnxHlGF9cscAUI=) 4: m0L9XQnYVY6caI4raS3KgfN4us0.roa (hash: N3sU1FEe5n17DZBnmA+WMg+GZywEKpUuatIib1ejKHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:3a:44:e5:5c:c0:da:83:f6:51:ad:4d:40:58:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d136295f7f32e64be78fb399eb6d15ae3e92632 Validity Not Before: Dec 10 04:01:54 2025 GMT Not After : Dec 11 04:01:54 2025 GMT Subject: CN=9bac2c9fa60b674394d819373482e10d103adf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:8e:3c:62:e9:af:a6:dd:50:ee:d0:47:d3: e7:84:55:fb:95:45:95:dd:82:11:ce:3d:6e:97:f3: 4e:f6:47:a7:4f:f7:a6:5b:ec:bb:eb:91:31:8d:19: e8:a8:d5:7c:3d:0a:4d:f1:8d:ef:68:c0:63:f3:9f: 01:1d:a3:ca:43:df:9a:ea:1f:8c:74:45:42:31:93: ff:df:e1:b4:f8:64:46:86:1e:1f:5e:d8:6a:7d:7e: 7a:1b:da:4b:b6:6c:7e:ec:4c:f3:64:2e:29:6e:87: e5:1d:ab:96:a5:b1:e4:3e:9f:70:88:11:56:5c:0b: 49:e2:c9:59:5b:11:72:0c:70:ff:8f:b3:03:c9:68: 60:43:10:f0:0d:85:00:37:41:9c:5b:96:93:8f:ce: 10:a2:4e:ec:e2:ff:50:56:c9:de:7a:20:fc:bd:05: 9d:b9:82:42:97:38:69:d2:8a:8b:0f:3c:b1:c3:44: 32:42:ae:b5:3b:b7:6d:ca:8e:c1:da:e8:86:40:f4: c6:62:f3:09:c9:d7:31:61:10:67:b2:f3:de:d3:1a: 36:05:2e:ed:89:30:e3:ce:72:68:d2:f7:68:89:be: bf:6f:1e:0a:2c:31:88:41:eb:f0:e7:af:a2:fd:bd: dd:47:f3:09:a9:ca:35:35:aa:55:dc:eb:96:b5:27: 1b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AC:2C:9F:A6:0B:67:43:94:D8:19:37:34:82:E1:0D:10:3A:DF:48 X509v3 Authority Key Identifier: keyid:4D:13:62:95:F7:F3:2E:64:BE:78:FB:39:9E:B6:D1:5A:E3:E9:26:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRNilffzLmS-ePs5nrbRWuPpJjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b44330-5d3b-4479-8b10-2bb7fdd5f728/1/TRNilffzLmS-ePs5nrbRWuPpJjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ba:4e:41:98:59:76:59:ca:ae:6e:9d:5e:c8:21:ea:df:71: 36:7c:e2:e8:0f:1c:89:cc:54:98:4b:14:fd:eb:32:ca:c9:fd: 80:85:f9:dd:a8:3e:4e:99:0e:6c:1c:80:7d:aa:4a:56:e1:70: 5e:55:2c:4b:61:8b:6b:da:9e:1c:84:c7:2f:d2:1c:a2:77:e0: 2d:d3:02:dc:ac:4e:58:56:5b:a7:64:0c:8e:1c:92:3d:6d:6e: 40:1a:ca:79:9e:fc:ff:23:2f:2d:02:2b:68:b8:37:4f:50:19: 1d:0f:9e:c2:c9:50:83:b3:26:2d:e5:32:a8:37:02:85:2b:06: b9:55:13:57:44:41:92:81:54:b4:43:f2:22:e3:15:54:6a:67: a2:85:7f:cb:90:98:ce:8a:dc:36:6a:4a:8f:21:c4:d0:5d:0f: 0e:90:6d:71:0b:59:d9:56:6b:42:8e:9d:e6:6c:6d:dc:32:11: 49:40:ef:7b:f5:b5:89:38:8a:4f:9f:37:2b:5e:ea:d5:12:2f: 68:5f:76:50:74:6d:60:6e:66:08:1e:d7:35:6c:13:95:47:be: 97:b8:15:d4:b8:71:97:3c:7d:00:9b:7e:8d:d2:56:91:83:65: 25:50:b5:c8:a4:da:9f:4f:93:f3:af:9e:94:bd:8c:21:90:c9: 42:61:4c:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbDpE5VzA2oP2Ua1NQFhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTM2Mjk1ZjdmMzJlNjRiZTc4ZmIzOTllYjZkMTVhZTNl OTI2MzIwHhcNMjUxMjEwMDQwMTU0WhcNMjUxMjExMDQwMTU0WjAzMTEwLwYDVQQD Eyg5YmFjMmM5ZmE2MGI2NzQzOTRkODE5MzczNDgyZTEwZDEwM2FkZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0qOPGLpr6bdUO7QR9PnhFX7lUWV 3YIRzj1ul/NO9kenT/emW+y765ExjRnoqNV8PQpN8Y3vaMBj858BHaPKQ9+a6h+M dEVCMZP/3+G0+GRGhh4fXthqfX56G9pLtmx+7EzzZC4pboflHauWpbHkPp9wiBFW XAtJ4slZWxFyDHD/j7MDyWhgQxDwDYUAN0GcW5aTj84Qok7s4v9QVsneeiD8vQWd uYJClzhp0oqLDzyxw0QyQq61O7dtyo7B2uiGQPTGYvMJydcxYRBnsvPe0xo2BS7t iTDjznJo0vdoib6/bx4KLDGIQevw56+i/b3dR/MJqco1NapV3OuWtScbsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJusLJ+mC2dDlNgZNzSC4Q0QOt9IMB8GA1UdIwQY MBaAFE0TYpX38y5kvnj7OZ620Vrj6SYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAt MmJiN2ZkZDVmNzI4LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNDQzMzAtNWQzYi00NDc5LThiMTAtMmJiN2ZkZDVmNzI4 LzEvVFJOaWxmZnpMbVMtZVBzNW5yYlJXdVBwSmpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrpOQZhZ dlnKrm6dXsgh6t9xNnzi6A8cicxUmEsU/esyysn9gIX53ag+TpkObByAfapKVuFw XlUsS2GLa9qeHITHL9IconfgLdMC3KxOWFZbp2QMjhySPW1uQBrKeZ78/yMvLQIr aLg3T1AZHQ+ewslQg7MmLeUyqDcChSsGuVUTV0RBkoFUtEPyIuMVVGpnooV/y5CY zorcNmpKjyHE0F0PDpBtcQtZ2VZrQo6d5mxt3DIRSUDve/W1iTiKT583K17q1RIv aF92UHRtYG5mCB7XNWwTlUe+l7gV1Lhxlzx9AJt+jdJWkYNlJVC1yKTan0+T86+e lL2MIZDJQmFMcA== -----END CERTIFICATE-----Generated at Wed Dec 10 11:40:12 2025 by rpki-client