This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json) Hash identifier: VmKkp0lRzSlCMDY19eGpi7Q+drmMOy/up8H3jOVKvqQ= Subject key identifier: D4:FE:B1:02:81:11:0D:97:21:70:CE:84:60:E6:0F:E6:62:F3:B6:BB Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d Certificate serial: 019BA7C850C68EEC6082FC54A9EBEFEF6349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft Manifest number: 0B00 Signing time: Sat 10 Jan 2026 12:01:21 +0000 Manifest this update: Sat 10 Jan 2026 12:01:21 +0000 Manifest next update: Sun 11 Jan 2026 12:01:21 +0000 Files and hashes: 1: BgaIoZwQRt2oZC2BzablBd309Sk.roa (hash: 0smh/WGipg6DXsx63DMVAp+gWZ9HDNa2kEwq3ysrdfQ=) 2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: U9Qq0zswTf8PZugxR/LzVnJ27uPgJL/dFQr7AN9/PyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:c8:50:c6:8e:ec:60:82:fc:54:a9:eb:ef:ef:63:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d Validity Not Before: Jan 10 12:01:21 2026 GMT Not After : Jan 11 12:01:21 2026 GMT Subject: CN=d4feb10281110d972170ce8460e60fe662f3b6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:35:72:a7:0a:6a:0b:84:13:84:f4:7d:2d:d3: 99:1e:be:95:8a:2e:e6:e3:26:e9:08:01:00:ea:db: e2:6e:32:10:4f:b6:3e:07:0c:3c:34:3f:d6:f8:72: c0:13:45:6a:16:21:84:ea:a8:da:83:4e:3f:8e:13: 4a:3f:3a:e2:ad:07:fd:7d:49:05:4c:d9:89:6b:7e: 3e:4c:b6:89:b5:45:15:7d:9a:d3:86:ee:04:21:b4: 89:4a:0a:f5:fa:61:b3:62:59:a8:a8:5c:16:2c:f0: 71:49:b0:cb:65:6b:e6:37:cb:8d:11:7e:f0:85:8e: 35:c5:64:42:6c:2d:a8:73:39:0d:6d:b8:e1:4d:c4: 94:ec:7a:fb:56:94:8a:ea:07:5c:b9:b7:64:b3:a9: e0:7b:07:94:d9:c3:9f:fb:e8:99:be:61:27:00:74: 45:5a:5c:0a:f5:f9:df:44:09:23:c7:2e:f1:6f:a0: 5e:46:5c:04:d4:d5:e6:29:34:fb:8c:dc:ad:3b:5a: 39:58:b8:c0:8e:53:8f:4d:6f:c6:69:53:cb:63:ee: 6a:f2:44:4a:3c:06:63:f0:e2:8a:b2:72:65:4d:d7: 2d:1a:21:02:95:30:87:29:e1:2e:de:90:00:51:0b: 3e:ac:05:67:c3:47:fe:d4:13:e2:85:22:b2:39:bc: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FE:B1:02:81:11:0D:97:21:70:CE:84:60:E6:0F:E6:62:F3:B6:BB X509v3 Authority Key Identifier: keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5d:2c:b6:71:4a:cc:0a:d3:30:a8:a7:02:dd:60:80:74:07: 6b:28:93:02:ce:bd:7d:9d:12:e0:e7:a3:1c:74:b0:e9:0a:00: 77:19:d0:06:37:05:da:58:d8:99:4c:d3:8a:70:64:18:9d:66: 84:b8:bf:30:02:3a:0a:92:8c:e2:de:f9:79:e5:90:70:fe:49: 11:6b:c7:99:94:64:e5:ca:3e:e8:67:0f:b4:d9:76:ee:57:8d: 02:26:61:cf:e7:2f:f3:5c:5d:84:f6:97:d0:76:12:7f:7c:c8: ac:16:b3:f0:d8:4b:b5:3c:67:38:12:d4:63:d0:b2:63:b7:b2: 5d:a6:8b:3b:c8:92:fa:d1:00:d9:26:4f:38:3c:12:00:e6:12: 0f:4d:4c:e1:7a:8e:7b:31:78:da:03:e7:ae:02:e5:5d:8c:e7: f3:91:1b:26:e0:0a:64:19:74:b0:53:69:e2:fd:42:c5:68:c9: 4b:12:6e:16:78:73:28:d2:5b:93:fb:fc:18:5c:9f:d4:11:e8: 5a:de:4d:5f:78:88:b8:ff:30:39:28:2c:02:f7:b8:c1:e0:50: c8:b3:91:56:25:53:63:c0:6d:c7:2e:51:21:c4:07:b5:da:09: 51:88:80:d3:f1:ce:ed:16:80:c9:c7:92:c8:0c:65:9d:e4:20: 9e:4c:42:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZunyFDGjuxggvxUqevv72NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YjcyNmYwNTkyYjUwNGU3MjMzMDVmNjdiYWI1MTQ3ZDRl YTY5NmQwHhcNMjYwMTEwMTIwMTIxWhcNMjYwMTExMTIwMTIxWjAzMTEwLwYDVQQD EyhkNGZlYjEwMjgxMTEwZDk3MjE3MGNlODQ2MGU2MGZlNjYyZjNiNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljVypwpqC4QThPR9LdOZHr6Vii7m 4ybpCAEA6tvibjIQT7Y+Bww8ND/W+HLAE0VqFiGE6qjag04/jhNKPzrirQf9fUkF TNmJa34+TLaJtUUVfZrThu4EIbSJSgr1+mGzYlmoqFwWLPBxSbDLZWvmN8uNEX7w hY41xWRCbC2oczkNbbjhTcSU7Hr7VpSK6gdcubdks6ngeweU2cOf++iZvmEnAHRF WlwK9fnfRAkjxy7xb6BeRlwE1NXmKTT7jNytO1o5WLjAjlOPTW/GaVPLY+5q8kRK PAZj8OKKsnJlTdctGiEClTCHKeEu3pAAUQs+rAVnw0f+1BPihSKyObzkPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNT+sQKBEQ2XIXDOhGDmD+Zi87a7MB8GA1UdIwQY MBaAFLa3JvBZK1BOcjMF9nurUUfU6mltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJjbThGa3JVRTV5TXdYMmU2dFJSOVRxYVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hNWMzZGQtOWY5OC00YzdmLWFmNDMt NGNlYzcxMjEwNzM0LzEvdHJjbThGa3JVRTV5TXdYMmU2dFJSOVRxYVcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hNWMzZGQtOWY5OC00YzdmLWFmNDMtNGNlYzcxMjEwNzM0 LzEvdHJjbThGa3JVRTV5TXdYMmU2dFJSOVRxYVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB10stnFK zArTMKinAt1ggHQHayiTAs69fZ0S4OejHHSw6QoAdxnQBjcF2ljYmUzTinBkGJ1m hLi/MAI6CpKM4t75eeWQcP5JEWvHmZRk5co+6GcPtNl27leNAiZhz+cv81xdhPaX 0HYSf3zIrBaz8NhLtTxnOBLUY9CyY7eyXaaLO8iS+tEA2SZPODwSAOYSD01M4XqO ezF42gPnrgLlXYzn85EbJuAKZBl0sFNp4v1CxWjJSxJuFnhzKNJbk/v8GFyf1BHo Wt5NX3iIuP8wOSgsAve4weBQyLORViVTY8Btxy5RIcQHtdoJUYiA0/HO7RaAyceS yAxlneQgnkxCjw== -----END CERTIFICATE-----Generated at Sat Jan 10 21:26:20 2026 by rpki-client