This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json) Hash identifier: pUt3aTL8Lu8jTpEDnnVMxqjWhXn0Zdg7rGv0kdDcMRE= Subject key identifier: 49:0B:CA:5A:F2:41:9F:CF:92:3A:67:83:D2:44:5A:47:BD:E2:B1:FC Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52 Certificate serial: 019B4EBBB290720215845D56884BC3833D07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft Manifest number: 0407 Signing time: Wed 24 Dec 2025 05:01:22 +0000 Manifest this update: Wed 24 Dec 2025 05:01:22 +0000 Manifest next update: Thu 25 Dec 2025 05:01:22 +0000 Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=) 2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: anKuiLCVg8uXEpA0jvnX0S7Cr8znnwl2Dx8CbHEGxes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:b2:90:72:02:15:84:5d:56:88:4b:c3:83:3d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52 Validity Not Before: Dec 24 05:01:22 2025 GMT Not After : Dec 25 05:01:22 2025 GMT Subject: CN=490bca5af2419fcf923a6783d2445a47bde2b1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c1:9f:8d:0a:f9:7c:61:b6:73:19:81:37:7f: 5e:a8:c6:fa:17:46:c2:56:9f:96:a3:e5:cf:01:2d: f7:89:23:58:32:c2:67:22:fd:d4:d8:fb:1c:f2:10: 23:33:9d:1c:d3:66:44:fa:f3:c5:54:fc:63:7c:56: 1b:64:89:5b:dd:cc:a4:85:31:f2:84:19:f8:a3:28: a5:d1:76:34:04:f5:0a:41:e9:1e:ea:98:38:a1:f5: ae:4d:42:e7:71:ee:e1:ed:aa:f8:71:2f:65:89:0e: e2:e7:e1:b9:78:17:dd:4f:04:96:09:65:e8:b8:34: 94:a5:52:71:71:cb:a6:38:52:55:fc:da:45:cd:43: 9d:e2:a0:f0:48:2a:86:f5:80:59:27:8e:73:2a:f8: 51:e5:a9:83:18:5a:91:bf:6d:5f:8b:0d:f1:45:3b: e2:5b:eb:31:42:64:3c:c0:76:e4:c2:3d:dd:39:76: 88:e4:a5:6b:ba:0d:d6:b4:fd:4a:63:9e:45:1b:1a: 17:8d:a5:8d:e3:f1:e5:5a:11:02:b5:58:78:f0:9e: f1:6a:a7:41:81:e0:cc:f7:ee:48:49:98:2c:9d:45: 40:52:c5:4c:f0:b4:2d:6c:6e:23:42:69:92:65:27: fd:ac:9a:ac:b3:63:75:60:d8:44:0b:55:55:f7:3e: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0B:CA:5A:F2:41:9F:CF:92:3A:67:83:D2:44:5A:47:BD:E2:B1:FC X509v3 Authority Key Identifier: keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c4:86:a1:6a:3b:aa:43:75:c9:d2:7f:26:a3:aa:cb:af:d9: 0a:e1:ae:2e:d7:83:91:cd:86:b4:75:80:30:70:ca:0d:97:a3: be:4e:b7:c7:6b:e2:d9:1b:bb:6b:f4:d3:0c:31:90:ac:98:fd: 4d:01:9e:4d:2f:c4:54:5d:86:1c:e7:86:1d:33:d8:2a:72:c2: 68:ba:39:0d:96:f3:44:fb:eb:2b:12:7e:93:81:47:18:34:ce: fa:78:57:8e:44:48:25:fc:bd:b0:eb:fb:a1:e9:26:6a:5a:2f: 97:e7:ac:d8:a4:a5:9a:e1:4d:d4:29:af:a8:eb:7b:0c:6e:99: 2f:9c:11:86:2d:9d:95:8f:1f:95:aa:53:2c:71:b1:35:9c:0f: 77:18:46:7c:e5:f5:58:5d:e9:32:06:19:76:99:6e:30:02:02: 32:19:ac:dc:92:34:1f:e9:04:8e:5f:34:eb:e6:5a:8c:21:00: b1:07:fa:41:99:03:06:0e:fe:c7:7c:61:59:d4:c4:93:ee:6b: 5e:c9:39:d6:af:9f:22:31:a1:c1:93:69:29:26:2c:c0:23:98: d4:b7:23:7e:d2:19:e9:8b:a0:8a:dd:07:d1:49:c1:51:79:22: db:3b:7a:b9:8a:54:5d:56:f1:c2:65:2e:5d:da:f9:f1:6d:c5: 34:7b:84:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu7KQcgIVhF1WiEvDgz0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5 ODliNTIwHhcNMjUxMjI0MDUwMTIyWhcNMjUxMjI1MDUwMTIyWjAzMTEwLwYDVQQD Eyg0OTBiY2E1YWYyNDE5ZmNmOTIzYTY3ODNkMjQ0NWE0N2JkZTJiMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMGfjQr5fGG2cxmBN39eqMb6F0bC Vp+Wo+XPAS33iSNYMsJnIv3U2Psc8hAjM50c02ZE+vPFVPxjfFYbZIlb3cykhTHy hBn4oyil0XY0BPUKQeke6pg4ofWuTULnce7h7ar4cS9liQ7i5+G5eBfdTwSWCWXo uDSUpVJxccumOFJV/NpFzUOd4qDwSCqG9YBZJ45zKvhR5amDGFqRv21fiw3xRTvi W+sxQmQ8wHbkwj3dOXaI5KVrug3WtP1KY55FGxoXjaWN4/HlWhECtVh48J7xaqdB geDM9+5ISZgsnUVAUsVM8LQtbG4jQmmSZSf9rJqss2N1YNhEC1VV9z4T1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkLylryQZ/Pkjpng9JEWke94rH8MB8GA1UdIwQY MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt NTAwNDMyNTAxNzQzLzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosSGoWo7 qkN1ydJ/JqOqy6/ZCuGuLteDkc2GtHWAMHDKDZejvk63x2vi2Ru7a/TTDDGQrJj9 TQGeTS/EVF2GHOeGHTPYKnLCaLo5DZbzRPvrKxJ+k4FHGDTO+nhXjkRIJfy9sOv7 oekmalovl+es2KSlmuFN1CmvqOt7DG6ZL5wRhi2dlY8flapTLHGxNZwPdxhGfOX1 WF3pMgYZdpluMAICMhms3JI0H+kEjl806+ZajCEAsQf6QZkDBg7+x3xhWdTEk+5r Xsk51q+fIjGhwZNpKSYswCOY1LcjftIZ6Yugit0H0UnBUXki2zt6uYpUXVbxwmUu Xdr58W3FNHuE4Q== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:12 2025 by rpki-client