This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json) Hash identifier: yVHDacA/AgrNd8klgc7FXmJnIi+AjZgEjfnEzuKtil8= Subject key identifier: 03:DB:86:59:12:34:20:E8:F6:39:58:1F:C1:68:B8:47:69:89:EE:A8 Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511 Certificate serial: 019C3BD732DE673569CAC974012C519A75E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft Manifest number: 1810 Signing time: Sun 08 Feb 2026 06:01:24 +0000 Manifest this update: Sun 08 Feb 2026 06:01:24 +0000 Manifest next update: Mon 09 Feb 2026 06:01:24 +0000 Files and hashes: 1: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: N3o/fSMhQorJeQXf1JrJMItTjO3G3oDPbhmHk8uErGk=) 2: mGlCacge7YnUjqIQY4CvKFnqpx4.roa (hash: AVo0MRQRTy6CdeGacGKP+5uMUkB7HT3z+0JrAGp0xWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3b:d7:32:de:67:35:69:ca:c9:74:01:2c:51:9a:75:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511 Validity Not Before: Feb 8 06:01:24 2026 GMT Not After : Feb 9 06:01:24 2026 GMT Subject: CN=03db8659123420e8f639581fc168b8476989eea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:f5:b9:cb:db:0c:cb:2c:40:f6:8b:d4:42: 3d:03:ea:af:e8:df:96:64:cf:78:1d:be:71:c1:a8: 2d:8c:44:86:53:45:e0:ee:f1:6b:a8:55:46:47:ff: 17:f2:d4:09:32:ab:08:a0:41:5f:fd:41:f2:8d:f0: 46:19:83:d4:63:19:d1:81:f7:e1:0b:a9:84:ea:9c: 39:72:e8:e6:39:e7:ca:93:25:63:3c:2a:63:3f:46: 56:fd:2a:c8:9f:3f:30:24:34:c3:52:44:98:63:79: 30:a8:40:e0:cb:49:96:ab:14:fe:c6:ee:2f:de:37: a7:83:e3:6e:b8:c7:de:00:d6:58:c1:85:6b:61:7c: 78:c3:db:4a:0e:18:71:59:e3:54:6f:aa:32:6a:8b: 52:86:a0:38:25:7b:c2:e3:fa:38:17:74:7e:1c:87: 7c:d6:0a:ba:54:b4:f2:0b:6d:d2:d6:ac:16:11:58: ad:a7:36:03:92:c3:e5:6b:93:6a:34:8f:28:12:2a: 32:7e:96:b4:0c:1b:74:90:c7:55:cb:69:e4:90:08: 49:f0:4a:46:05:ae:6d:7d:02:d5:ec:08:ee:5f:0f: c4:5a:64:07:f4:7b:7b:ab:9f:35:60:f2:91:fe:5c: 2e:08:50:38:6c:65:f3:a5:75:49:dd:de:42:74:67: a4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DB:86:59:12:34:20:E8:F6:39:58:1F:C1:68:B8:47:69:89:EE:A8 X509v3 Authority Key Identifier: keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ce:07:bb:fb:f6:d0:c1:b2:56:09:07:5b:38:4a:98:9e:26: 58:69:37:09:e8:e4:b4:a7:1c:91:b5:23:e2:aa:d0:cd:28:ab: a9:49:1e:ea:0c:d8:b1:b9:a4:b0:ab:5a:f1:59:be:c8:b1:1e: 1e:df:99:34:d7:77:6f:ec:5c:9a:2d:de:ca:99:08:ad:69:2f: d0:18:38:49:45:b2:40:70:33:b1:25:05:31:5e:67:b3:c7:06: 7b:e0:ad:50:cb:cd:10:70:5c:7a:bd:2d:df:89:fd:d8:e4:57: cb:17:9a:33:ee:bf:61:7e:87:7b:91:4f:7e:78:10:78:d6:64: a5:7f:36:a8:7b:2c:f0:dc:ff:4e:45:b1:8a:b1:e1:da:de:f0: 08:88:15:5b:50:2b:58:b1:12:6b:22:38:f1:2a:2a:56:1b:49: 75:2a:ac:50:9e:53:58:8b:8d:a5:7c:32:2c:10:6d:1c:67:fb: 2f:44:35:9c:de:04:7f:05:88:18:cc:0f:57:e5:72:d4:08:5c: ce:d2:ad:6c:9d:fd:86:75:07:0d:b6:99:71:39:58:1a:f2:9d: 34:82:d3:6a:66:6e:c5:ec:d2:dc:54:5c:5e:43:e8:69:ae:44: 2b:b8:a6:9a:ef:b2:b6:02:1c:f5:66:be:10:9e:72:71:36:f6: 0f:fb:04:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw71zLeZzVpysl0ASxRmnXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi ODQ1MTEwHhcNMjYwMjA4MDYwMTI0WhcNMjYwMjA5MDYwMTI0WjAzMTEwLwYDVQQD EygwM2RiODY1OTEyMzQyMGU4ZjYzOTU4MWZjMTY4Yjg0NzY5ODllZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsX1ucvbDMssQPaL1EI9A+qv6N+W ZM94Hb5xwagtjESGU0Xg7vFrqFVGR/8X8tQJMqsIoEFf/UHyjfBGGYPUYxnRgffh C6mE6pw5cujmOefKkyVjPCpjP0ZW/SrInz8wJDTDUkSYY3kwqEDgy0mWqxT+xu4v 3jeng+NuuMfeANZYwYVrYXx4w9tKDhhxWeNUb6oyaotShqA4JXvC4/o4F3R+HId8 1gq6VLTyC23S1qwWEVitpzYDksPla5NqNI8oEioyfpa0DBt0kMdVy2nkkAhJ8EpG Ba5tfQLV7AjuXw/EWmQH9Ht7q581YPKR/lwuCFA4bGXzpXVJ3d5CdGekqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPbhlkSNCDo9jlYH8FouEdpie6oMB8GA1UdIwQY MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALc4Hu/v2 0MGyVgkHWzhKmJ4mWGk3CejktKcckbUj4qrQzSirqUke6gzYsbmksKta8Vm+yLEe Ht+ZNNd3b+xcmi3eypkIrWkv0Bg4SUWyQHAzsSUFMV5ns8cGe+CtUMvNEHBcer0t 34n92ORXyxeaM+6/YX6He5FPfngQeNZkpX82qHss8Nz/TkWxirHh2t7wCIgVW1Ar WLESayI48SoqVhtJdSqsUJ5TWIuNpXwyLBBtHGf7L0Q1nN4EfwWIGMwPV+Vy1Ahc ztKtbJ39hnUHDbaZcTlYGvKdNILTamZuxezS3FRcXkPoaa5EK7immu+ytgIc9Wa+ EJ5ycTb2D/sEHA== -----END CERTIFICATE-----Generated at Sun Feb 8 13:00:20 2026 by rpki-client