This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json) Hash identifier: wgtfpJqQ8/uQ/ab+7fYd/zkrFUH7VfqeEFazUrljUh0= Subject key identifier: 5F:DA:F7:25:F3:DC:34:05:C5:76:DF:77:C5:DC:69:01:92:10:07:44 Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae Certificate serial: 019B54BD6CDAB47C00B7D3563B730116EA53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft Manifest number: 1427 Signing time: Thu 25 Dec 2025 09:00:58 +0000 Manifest this update: Thu 25 Dec 2025 09:00:58 +0000 Manifest next update: Fri 26 Dec 2025 09:00:58 +0000 Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=) 2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: QLuuKwHyV0rFDUqklpzcfzJxmcZlaI+TNGh7KknwX8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:6c:da:b4:7c:00:b7:d3:56:3b:73:01:16:ea:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae Validity Not Before: Dec 25 09:00:58 2025 GMT Not After : Dec 26 09:00:58 2025 GMT Subject: CN=5fdaf725f3dc3405c576df77c5dc690192100744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:74:5f:01:47:d7:c7:33:22:c1:3f:ce:c6: 75:42:50:08:46:0d:c9:bf:07:e9:62:0b:73:de:4f: 1e:e2:55:c6:b3:c7:31:da:f0:97:f8:f0:ae:cd:52: 70:57:4f:af:a6:9d:59:11:b1:86:26:ca:56:a1:34: 7e:db:62:06:b0:d0:21:63:0f:e7:33:37:f4:75:c3: 8e:5a:89:7a:6e:56:69:45:a3:25:a9:8d:d6:83:84: 3d:4b:f5:7c:6a:45:4c:97:ca:00:d6:96:d4:98:06: 77:df:94:44:d0:d5:a8:12:02:20:ff:9a:cc:58:c6: b2:2b:e2:0d:01:7f:a9:b9:d8:fa:13:04:52:83:7c: 74:bf:b8:26:e0:1f:09:41:49:f6:6b:8c:e9:46:4c: 95:56:93:66:b8:12:ab:7a:90:c7:b5:a6:a8:5a:b5: a7:c0:4c:f8:1d:a9:0f:56:ec:b5:6c:a3:c7:62:18: 8b:b1:41:94:1f:ee:3d:48:c0:9b:30:d3:38:6d:7a: f6:5e:e3:8a:57:e9:a6:47:04:1e:fe:07:07:4c:b4: 62:9a:81:f7:b7:7f:a8:cd:41:f1:9c:27:52:2e:28: e1:72:51:a7:ba:b3:16:fb:fd:3c:db:e1:c1:67:47: 1c:26:8b:b2:b8:76:dc:c8:e8:2f:8d:e5:b2:19:4f: f4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DA:F7:25:F3:DC:34:05:C5:76:DF:77:C5:DC:69:01:92:10:07:44 X509v3 Authority Key Identifier: keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ca:da:b0:30:7d:a5:dd:f0:fe:0f:dd:26:6f:04:f7:c3:2d: 54:67:53:1f:01:72:6d:7a:c7:66:1b:d8:a9:0f:21:95:54:b5: 8b:82:a9:2c:2d:0c:2c:df:1e:b7:f3:35:22:33:b3:a4:1e:f7: 3d:f9:d6:30:ed:20:1a:e7:d7:20:44:57:b1:5a:4c:70:98:98: 15:33:a7:8e:30:cd:1a:17:21:79:ff:8c:27:c2:b0:00:02:09: 4e:cf:a6:d3:c2:9f:e4:b7:f1:a0:38:f6:43:d1:4e:14:62:94: 4a:f8:66:b3:b9:a4:3d:e0:7b:62:38:be:a5:4f:a9:20:b1:06: 6f:a7:e8:3b:bd:30:1c:7e:40:7c:16:1d:90:66:9d:80:49:05: 1e:25:35:cb:cd:25:bc:c3:7f:5b:d6:e6:8d:c3:1c:ba:c6:b4: 70:0d:dc:d6:73:14:57:92:fc:17:00:73:fc:ec:38:38:f6:98: 84:ea:8b:ab:0a:16:48:4d:e3:2f:8c:16:7a:00:87:50:46:64: 50:5e:77:62:7a:0c:95:5f:51:8d:3e:e5:6e:0f:b5:ec:7a:dd: db:9e:39:43:dd:36:0d:ca:11:8d:f2:eb:cb:98:0a:cc:a6:fb: 5a:13:63:b8:37:ea:60:04:0f:04:3c:f6:fd:14:94:d3:8b:ac: bc:33:c1:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvWzatHwAt9NWO3MBFupTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YjI0OWEyYzU2MmM1ZWRiZGI3NTA1OGUyNmJkNzcwMTIz ZTk1YWUwHhcNMjUxMjI1MDkwMDU4WhcNMjUxMjI2MDkwMDU4WjAzMTEwLwYDVQQD Eyg1ZmRhZjcyNWYzZGMzNDA1YzU3NmRmNzdjNWRjNjkwMTkyMTAwNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRN0XwFH18czIsE/zsZ1QlAIRg3J vwfpYgtz3k8e4lXGs8cx2vCX+PCuzVJwV0+vpp1ZEbGGJspWoTR+22IGsNAhYw/n Mzf0dcOOWol6blZpRaMlqY3Wg4Q9S/V8akVMl8oA1pbUmAZ335RE0NWoEgIg/5rM WMayK+INAX+pudj6EwRSg3x0v7gm4B8JQUn2a4zpRkyVVpNmuBKrepDHtaaoWrWn wEz4HakPVuy1bKPHYhiLsUGUH+49SMCbMNM4bXr2XuOKV+mmRwQe/gcHTLRimoH3 t3+ozUHxnCdSLijhclGnurMW+/082+HBZ0ccJouyuHbcyOgvjeWyGU/0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/a9yXz3DQFxXbfd8XcaQGSEAdEMB8GA1UdIwQY MBaAFLaySaLFYsXtvbdQWOJr13ASPpWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUt OWNlMzFjMjczMTA4LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUtOWNlMzFjMjczMTA4 LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcrasDB9 pd3w/g/dJm8E98MtVGdTHwFybXrHZhvYqQ8hlVS1i4KpLC0MLN8et/M1IjOzpB73 PfnWMO0gGufXIERXsVpMcJiYFTOnjjDNGhchef+MJ8KwAAIJTs+m08Kf5LfxoDj2 Q9FOFGKUSvhms7mkPeB7Yji+pU+pILEGb6foO70wHH5AfBYdkGadgEkFHiU1y80l vMN/W9bmjcMcusa0cA3c1nMUV5L8FwBz/Ow4OPaYhOqLqwoWSE3jL4wWegCHUEZk UF53YnoMlV9RjT7lbg+17Hrd2545Q902DcoRjfLry5gKzKb7WhNjuDfqYAQPBDz2 /RSU04usvDPByQ== -----END CERTIFICATE-----Generated at Thu Dec 25 13:59:08 2025 by rpki-client