This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: 5hkiEz7vk6ipwObKpt77H53DI7MGPVJsashIq4Q2gaw=
Subject key identifier: AB:6A:17:53:FF:32:B9:87:C8:3D:28:F7:DE:A8:58:09:78:41:77:D5
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019AF61C65B1038F1F97B736D1B3AD2EB363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 13F6
Signing time: Sun 07 Dec 2025 00:00:47 +0000
Manifest this update: Sun 07 Dec 2025 00:00:47 +0000
Manifest next update: Mon 08 Dec 2025 00:00:47 +0000
Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: j39h8vdvoV94aTRV6amDa0I+1p1gCf5KZndDHhUqAF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:1c:65:b1:03:8f:1f:97:b7:36:d1:b3:ad:2e:b3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Dec 7 00:00:47 2025 GMT
Not After : Dec 8 00:00:47 2025 GMT
Subject: CN=ab6a1753ff32b987c83d28f7dea85809784177d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:6e:22:19:b6:16:22:9a:f8:ab:ae:cb:f3:
aa:ca:1d:c8:87:84:b7:61:0a:24:dd:9e:2a:c8:3f:
6c:72:78:43:50:92:5e:28:7b:5c:a4:64:be:a5:e0:
65:43:8b:bd:fe:10:23:ad:1a:2b:07:0e:a5:9b:d1:
e1:a3:87:7c:0c:61:3a:38:68:47:fe:9d:9b:c1:40:
1d:ab:7b:ff:68:37:ea:ac:b9:bd:cb:8a:b8:9e:e2:
56:09:44:d8:9a:41:ac:6a:44:26:5f:ce:b2:04:1a:
5f:49:95:7a:00:6d:6b:b4:01:94:fe:e3:09:e3:08:
5d:e1:cb:b1:e1:32:b9:68:80:b9:20:03:99:69:d3:
67:5e:6d:75:23:8e:f8:77:a6:8c:13:b2:8f:77:4e:
5c:1c:67:52:fe:18:b6:cd:21:f8:e7:c5:2b:a5:6e:
e7:5f:ae:10:3e:05:57:be:1c:c8:44:35:c9:50:d1:
66:45:1e:cb:a3:ab:8c:13:fd:70:c0:e1:84:57:e6:
63:07:72:00:8e:f9:fe:cf:43:a9:6e:a8:2a:1d:74:
39:17:e7:62:14:0f:81:87:2d:50:41:4f:ce:a0:d9:
17:8c:66:3f:56:9b:9c:50:c7:44:61:75:1d:6f:92:
3c:23:65:e9:ce:43:11:70:59:2f:d8:5d:34:3a:16:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:17:53:FF:32:B9:87:C8:3D:28:F7:DE:A8:58:09:78:41:77:D5
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:4b:e7:1b:0a:6d:3d:8e:76:70:ca:47:e8:72:dc:c3:7c:
19:b9:d0:1a:1c:fd:2c:17:2e:40:f8:27:8d:39:16:2f:f8:f9:
55:13:93:84:6c:06:2a:18:66:01:09:ab:52:bd:49:de:28:8e:
17:10:96:15:78:f0:60:c3:94:ab:60:64:3c:b9:eb:31:2c:40:
8c:ff:be:72:1e:46:46:9a:53:ae:3c:5e:3f:37:4f:e6:79:b2:
e8:6e:72:9a:0f:86:1c:7e:32:49:41:a7:f8:0e:28:ed:73:af:
35:72:a7:03:8b:72:b2:eb:54:6e:fc:d8:5f:5f:d6:ee:0c:7f:
1d:8f:f8:bd:72:63:8e:f1:37:86:65:c8:1e:a0:b3:73:b5:1c:
f0:67:2e:ba:8b:a6:d5:40:3c:46:9f:46:10:4d:a1:1c:03:6c:
7e:e8:95:ec:65:f9:0b:51:14:62:47:18:8a:5c:ba:d3:60:06:
ea:fe:52:b0:83:ba:d7:ad:6e:e0:99:dd:41:5d:a2:c8:54:50:
9b:4e:c1:3a:59:41:81:cb:43:7f:42:ea:3b:e1:c1:7f:0f:54:
3e:a2:4d:fd:04:81:e3:d1:0a:ed:e1:f7:94:7f:98:b5:ab:f0:
92:43:e6:1f:4e:9f:7e:31:63:75:24:14:1a:f3:0f:a6:06:43:
f2:51:14:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2HGWxA48fl7c20bOtLrNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjI0OWEyYzU2MmM1ZWRiZGI3NTA1OGUyNmJkNzcwMTIz
ZTk1YWUwHhcNMjUxMjA3MDAwMDQ3WhcNMjUxMjA4MDAwMDQ3WjAzMTEwLwYDVQQD
EyhhYjZhMTc1M2ZmMzJiOTg3YzgzZDI4ZjdkZWE4NTgwOTc4NDE3N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhhuIhm2FiKa+Kuuy/Oqyh3Ih4S3
YQok3Z4qyD9scnhDUJJeKHtcpGS+peBlQ4u9/hAjrRorBw6lm9Hho4d8DGE6OGhH
/p2bwUAdq3v/aDfqrLm9y4q4nuJWCUTYmkGsakQmX86yBBpfSZV6AG1rtAGU/uMJ
4whd4cux4TK5aIC5IAOZadNnXm11I474d6aME7KPd05cHGdS/hi2zSH458UrpW7n
X64QPgVXvhzIRDXJUNFmRR7Lo6uME/1wwOGEV+ZjB3IAjvn+z0OpbqgqHXQ5F+di
FA+Bhy1QQU/OoNkXjGY/VpucUMdEYXUdb5I8I2XpzkMRcFkv2F00Oha1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtqF1P/MrmHyD0o996oWAl4QXfVMB8GA1UdIwQY
MBaAFLaySaLFYsXtvbdQWOJr13ASPpWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUt
OWNlMzFjMjczMTA4LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUtOWNlMzFjMjczMTA4
LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJ1L5xsK
bT2OdnDKR+hy3MN8GbnQGhz9LBcuQPgnjTkWL/j5VROThGwGKhhmAQmrUr1J3iiO
FxCWFXjwYMOUq2BkPLnrMSxAjP++ch5GRppTrjxePzdP5nmy6G5ymg+GHH4ySUGn
+A4o7XOvNXKnA4tysutUbvzYX1/W7gx/HY/4vXJjjvE3hmXIHqCzc7Uc8Gcuuoum
1UA8Rp9GEE2hHANsfuiV7GX5C1EUYkcYily602AG6v5SsIO6161u4JndQV2iyFRQ
m07BOllBgctDf0LqO+HBfw9UPqJN/QSB49EK7eH3lH+YtavwkkPmH06ffjFjdSQU
GvMPpgZD8lEUEw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:37:48 2025 by rpki-client