This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json) Hash identifier: jsx4Xhp9GhzwnS+s7R9zc6r5/C7M25nMgjkAg5HDPVA= Subject key identifier: BF:70:24:17:18:22:1C:13:C9:10:C8:10:A2:D8:37:C7:21:40:29:53 Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Certificate serial: 019B5A1A783269F4FEFA3DA2AADF209EDBC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft Manifest number: 0DC3 Signing time: Fri 26 Dec 2025 10:00:42 +0000 Manifest this update: Fri 26 Dec 2025 10:00:42 +0000 Manifest next update: Sat 27 Dec 2025 10:00:42 +0000 Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: vphpVT/1JX+EdOCMcWCFIehjCrVHOlL5ParnExRN8dQ=) 2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:78:32:69:f4:fe:fa:3d:a2:aa:df:20:9e:db:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Validity Not Before: Dec 26 10:00:42 2025 GMT Not After : Dec 27 10:00:42 2025 GMT Subject: CN=bf70241718221c13c910c810a2d837c721402953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:73:66:01:bf:1e:47:60:1f:06:c7:0c:f9: 3a:e1:64:89:3a:c4:a2:d3:8d:96:55:83:b7:e7:ad: 35:84:c0:e7:28:41:5c:5e:81:62:4f:c4:af:a0:84: 11:7b:50:9f:43:e1:83:69:5f:35:e5:99:90:b3:2d: a2:20:7f:42:20:cb:34:21:0b:4c:8b:b0:b1:f4:de: f4:0d:54:13:4f:74:77:bf:af:fe:85:a5:94:26:34: 6f:91:2f:e9:14:68:7e:ca:7e:dc:53:dd:82:ef:25: 68:64:eb:2c:b9:03:dd:06:d5:55:95:2f:77:e1:34: db:af:49:fe:e3:32:49:a5:a3:f0:fb:d6:24:78:d1: 06:04:1a:af:87:64:bf:e4:fa:fe:0d:45:4f:28:1f: f4:fa:88:a7:40:7f:64:49:7c:dc:1f:dd:ca:f3:d6: 76:9b:d2:19:d3:b7:63:82:69:33:2c:f0:fc:56:fe: 57:02:f3:77:5c:16:2c:35:3b:d0:78:11:10:85:fa: e3:a2:c3:1a:d7:35:bf:19:17:a6:0d:9c:9e:9f:c2: 2e:7f:b1:21:2c:02:28:fe:20:5b:f7:85:a3:a8:68: 65:8a:3e:c9:df:fb:c1:c0:94:5d:6a:0b:f5:75:a3: ea:b0:40:14:65:8e:27:a5:4c:f0:8a:0f:9a:22:3e: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:70:24:17:18:22:1C:13:C9:10:C8:10:A2:D8:37:C7:21:40:29:53 X509v3 Authority Key Identifier: keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4f:34:c8:be:b4:4a:18:3f:58:49:a7:20:fd:53:fc:6a:8d: 97:26:d8:b7:99:ee:62:b0:65:a7:67:98:f5:0c:42:be:22:21: c4:0a:36:63:37:b7:e2:00:50:4f:dd:2b:d3:40:52:66:50:a1: be:11:3f:9a:1e:6b:e5:30:71:4f:16:2d:f6:b3:51:50:9d:c8: 0a:6d:fb:c9:ee:07:38:b4:4d:72:28:1b:e8:aa:bc:49:18:45: b7:a4:55:4b:6c:be:7c:01:e0:2d:5c:85:be:2c:e1:64:84:86: c9:f5:f8:bc:e5:f2:65:c3:53:e3:9b:b2:98:b8:c4:78:07:fd: 7d:d3:bf:42:75:5d:7a:e6:3e:96:59:4d:ef:e9:0c:4c:65:54: b8:e6:3a:da:a5:8f:74:d2:81:ee:66:25:b2:f9:9b:1a:cf:32: 22:e5:9b:ab:7a:b4:e0:ae:70:92:29:89:27:88:4e:22:42:11: 33:1b:54:f7:96:9a:15:50:ee:5e:e8:e2:34:75:bb:71:3e:04: 1f:18:c1:84:a3:cd:d7:f6:20:54:74:0a:20:a6:16:33:0e:1f: d2:2a:23:18:7d:14:04:67:b0:38:40:4a:67:ab:f9:a8:cc:4c: f9:c6:e2:5e:3e:af:16:f4:dc:ad:fa:aa:e9:3b:1d:47:0b:3f: 46:ff:d1:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGngyafT++j2iqt8gntvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk OGNhMzUwHhcNMjUxMjI2MTAwMDQyWhcNMjUxMjI3MTAwMDQyWjAzMTEwLwYDVQQD EyhiZjcwMjQxNzE4MjIxYzEzYzkxMGM4MTBhMmQ4MzdjNzIxNDAyOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjpzZgG/HkdgHwbHDPk64WSJOsSi 042WVYO35601hMDnKEFcXoFiT8SvoIQRe1CfQ+GDaV815ZmQsy2iIH9CIMs0IQtM i7Cx9N70DVQTT3R3v6/+haWUJjRvkS/pFGh+yn7cU92C7yVoZOssuQPdBtVVlS93 4TTbr0n+4zJJpaPw+9YkeNEGBBqvh2S/5Pr+DUVPKB/0+oinQH9kSXzcH93K89Z2 m9IZ07djgmkzLPD8Vv5XAvN3XBYsNTvQeBEQhfrjosMa1zW/GRemDZyen8Iuf7Eh LAIo/iBb94WjqGhlij7J3/vBwJRdagv1daPqsEAUZY4npUzwig+aIj7XCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9wJBcYIhwTyRDIEKLYN8chQClTMB8GA1UdIwQY MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt N2FjOWUyY2U0ZTMzLzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk80yL60 Shg/WEmnIP1T/GqNlybYt5nuYrBlp2eY9QxCviIhxAo2Yze34gBQT90r00BSZlCh vhE/mh5r5TBxTxYt9rNRUJ3ICm37ye4HOLRNcigb6Kq8SRhFt6RVS2y+fAHgLVyF vizhZISGyfX4vOXyZcNT45uymLjEeAf9fdO/QnVdeuY+lllN7+kMTGVUuOY62qWP dNKB7mYlsvmbGs8yIuWbq3q04K5wkimJJ4hOIkIRMxtU95aaFVDuXujiNHW7cT4E HxjBhKPN1/YgVHQKIKYWMw4f0iojGH0UBGewOEBKZ6v5qMxM+cbiXj6vFvTcrfqq 6TsdRws/Rv/Rgw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:20 2025 by rpki-client