This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json) Hash identifier: zAnTEa18XAWPhzAojmq0K/JiexBP3gCUbrb0XlmgBDs= Subject key identifier: F8:87:F7:86:FC:83:DD:39:06:08:37:1A:93:91:22:DC:79:42:22:B8 Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511 Certificate serial: 019B23D1025FDA5CD6FB03F2B64321C9133E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 21:00:58 +0000 Manifest this update: Mon 15 Dec 2025 21:00:58 +0000 Manifest next update: Tue 16 Dec 2025 21:00:58 +0000 Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=) 2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: vrd7F7xkczbph8M2R2bJ7QICbgx26quIGVq++vbmC0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:02:5f:da:5c:d6:fb:03:f2:b6:43:21:c9:13:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511 Validity Not Before: Dec 15 21:00:58 2025 GMT Not After : Dec 16 21:00:58 2025 GMT Subject: CN=f887f786fc83dd390608371a939122dc794222b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:26:8b:ba:4e:67:f0:8e:86:21:15:b9:de:fd: 66:8b:48:13:bc:65:ab:a6:da:f8:24:7d:7a:38:a6: a5:ba:2a:5e:4d:95:a7:5d:52:02:e5:e4:88:62:75: 62:c4:b1:85:9c:fb:81:29:80:2e:fb:1a:68:41:9f: ef:72:7c:8b:c1:84:68:dc:57:a7:53:b8:ef:31:6e: be:e0:c7:9e:df:74:da:98:8d:09:0b:68:9e:66:08: 4b:07:e8:17:80:f3:90:22:7f:cf:cd:9b:ff:f7:87: 4d:fc:17:83:32:d4:c8:58:32:2d:d8:28:15:c0:53: 58:9d:22:b2:28:35:b8:6e:82:8c:30:3e:67:f7:42: 5f:b0:f2:0a:3d:25:26:78:6d:a0:55:44:24:60:9b: 29:76:e0:62:5b:dc:3d:48:4f:7e:09:44:33:66:40: e2:08:92:49:56:7e:89:5a:68:30:3e:0a:30:bb:f1: 79:cd:3b:75:83:f5:1b:08:f4:62:e2:f1:16:a3:a8: 35:76:b8:9d:a3:92:06:61:90:bc:ce:a7:50:d7:fc: 5c:ad:9f:d1:d0:bd:e9:18:9b:96:43:f1:14:27:1e: 9d:1d:7d:e0:83:c7:4f:75:e1:65:54:53:21:cb:6c: b4:04:ce:40:a2:9f:9f:2f:e0:44:07:ff:d2:84:6d: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:F7:86:FC:83:DD:39:06:08:37:1A:93:91:22:DC:79:42:22:B8 X509v3 Authority Key Identifier: keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:10:8d:b2:5d:07:52:2d:1b:d1:52:65:bf:96:86:54:f2:1c: 15:e9:e2:8b:fd:21:7a:59:ba:cc:33:38:b6:53:47:3e:f9:87: e4:95:88:be:e8:ca:20:d3:67:c7:fb:05:ab:a8:ae:c7:6b:85: bb:b9:75:87:52:0e:c0:e3:1b:be:88:72:e0:68:95:da:e7:7b: eb:d0:10:43:85:04:91:c2:ea:1c:64:25:e9:82:a3:da:a5:a5: 4b:68:ab:f2:98:60:60:0c:23:aa:dc:06:9b:33:0c:27:ed:1c: 96:6e:dd:f9:7a:db:79:bf:9f:c1:4e:7b:07:31:5c:99:2c:49: 23:2c:62:12:d5:8a:53:a4:1f:ab:70:e4:58:c2:86:62:ca:a2: b2:b5:eb:5e:2b:07:b4:2b:59:73:cf:d5:5f:77:7d:2b:b9:c6: c6:25:2f:30:b0:19:8f:e9:c4:09:fa:5a:3d:59:65:38:0c:b0: 7b:42:5c:08:10:9d:fc:91:01:d5:37:bf:22:d5:25:35:bd:0b: ac:f9:04:c1:78:88:b0:e5:e6:27:e8:74:b0:2c:98:64:2b:56: 30:e6:2d:62:44:85:47:c3:27:c3:cd:6e:64:1b:3a:a1:52:9a: b4:98:6a:4c:b2:c0:bc:55:f6:11:cd:6b:cc:ae:62:20:96:c9: 80:93:16:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0QJf2lzW+wPytkMhyRM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi ODQ1MTEwHhcNMjUxMjE1MjEwMDU4WhcNMjUxMjE2MjEwMDU4WjAzMTEwLwYDVQQD EyhmODg3Zjc4NmZjODNkZDM5MDYwODM3MWE5MzkxMjJkYzc5NDIyMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyaLuk5n8I6GIRW53v1mi0gTvGWr ptr4JH16OKaluipeTZWnXVIC5eSIYnVixLGFnPuBKYAu+xpoQZ/vcnyLwYRo3Fen U7jvMW6+4Mee33TamI0JC2ieZghLB+gXgPOQIn/PzZv/94dN/BeDMtTIWDIt2CgV wFNYnSKyKDW4boKMMD5n90JfsPIKPSUmeG2gVUQkYJspduBiW9w9SE9+CUQzZkDi CJJJVn6JWmgwPgowu/F5zTt1g/UbCPRi4vEWo6g1drido5IGYZC8zqdQ1/xcrZ/R 0L3pGJuWQ/EUJx6dHX3gg8dPdeFlVFMhy2y0BM5Aop+fL+BEB//ShG3fNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiH94b8g905Bgg3GpORItx5QiK4MB8GA1UdIwQY MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBCNsl0H Ui0b0VJlv5aGVPIcFenii/0helm6zDM4tlNHPvmH5JWIvujKINNnx/sFq6iux2uF u7l1h1IOwOMbvohy4GiV2ud769AQQ4UEkcLqHGQl6YKj2qWlS2ir8phgYAwjqtwG mzMMJ+0clm7d+Xrbeb+fwU57BzFcmSxJIyxiEtWKU6Qfq3DkWMKGYsqisrXrXisH tCtZc8/VX3d9K7nGxiUvMLAZj+nECfpaPVllOAywe0JcCBCd/JEB1Te/ItUlNb0L rPkEwXiIsOXmJ+h0sCyYZCtWMOYtYkSFR8Mnw81uZBs6oVKatJhqTLLAvFX2Ec1r zK5iIJbJgJMWgA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:33:29 2025 by rpki-client