This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft File: 18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json) Hash identifier: tU0cGUpTe+0Yps3e6BH1FQGhDapVcWQl5qbp63xT+ME= Subject key identifier: 36:BD:D1:38:A2:D0:61:CF:73:D6:92:10:0C:7C:72:51:D8:FD:C1:3B Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31 Certificate issuer: /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631 Certificate serial: 019B32D686DAE16FF35CFA79E0AC1B00508C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft Manifest number: 1222 Signing time: Thu 18 Dec 2025 19:01:18 +0000 Manifest this update: Thu 18 Dec 2025 19:01:18 +0000 Manifest next update: Fri 19 Dec 2025 19:01:18 +0000 Files and hashes: 1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: n2A8ALukbF0hN0+W18Xg06TLRNVgE+Nn/g4VnhHUjHw=) 2: ixnuzzyIGziCtrC0l3qz41OIrjQ.roa (hash: JSBHGZiyISoLK4HOeW+w9s4fRtop7E+RouVUw4Z0VAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:86:da:e1:6f:f3:5c:fa:79:e0:ac:1b:00:50:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631 Validity Not Before: Dec 18 19:01:18 2025 GMT Not After : Dec 19 19:01:18 2025 GMT Subject: CN=36bdd138a2d061cf73d692100c7c7251d8fdc13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:fb:61:36:51:0a:3c:f2:35:77:02:64:29: 4b:7d:4a:b8:d2:81:2b:d8:e3:57:87:1f:12:bb:2d: e2:1e:f9:8e:d8:b1:d1:93:da:4b:d0:b6:1d:3a:2b: 8e:03:8f:5e:99:e8:86:a7:cc:39:24:78:ff:69:e7: a1:5c:31:78:92:fb:e4:e7:8e:42:0e:c3:38:1c:20: 3a:cd:bf:03:da:fd:e6:31:7c:5a:ff:b5:82:ac:35: c8:20:ae:17:83:e6:e4:7b:05:dd:92:11:8a:02:8e: 84:d0:9c:85:1b:e0:11:05:81:81:9e:cb:f8:d1:b0: 2d:9c:36:ae:af:8f:da:ea:a1:9b:18:d6:c0:f3:18: 13:a7:72:62:41:f9:e4:3b:28:6d:df:80:a5:3c:d6: 32:30:6e:6a:13:23:cb:ef:18:b0:3e:2d:53:90:d1: 39:0d:fc:ae:02:5a:f3:20:a0:94:9d:41:c4:a0:67: fa:7f:22:ee:ec:3f:d7:e2:26:21:22:42:ac:2c:1e: d9:9c:0e:8f:0b:ae:26:c5:96:90:ec:fe:25:b1:94: fd:37:ab:a8:49:d7:74:46:aa:5a:be:67:f6:39:43: 97:7c:91:b8:0c:68:8b:a6:49:6f:5d:58:20:ca:92: 7f:dc:39:44:c2:21:53:72:d2:03:93:40:3c:95:29: 36:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:D1:38:A2:D0:61:CF:73:D6:92:10:0C:7C:72:51:D8:FD:C1:3B X509v3 Authority Key Identifier: keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f0:cd:a0:e0:b0:a0:37:06:64:b4:b1:51:18:d1:39:8d:8b: da:25:8b:89:29:63:e6:a1:52:97:cc:a4:3f:89:49:35:17:03: 0a:10:52:26:68:6b:95:3e:3b:32:b0:4a:c7:99:b9:c5:9d:db: a8:b5:21:72:76:fb:a3:52:3d:72:78:75:d5:7e:d6:3b:07:c4: c3:be:61:9a:18:52:3f:1a:f5:a5:d7:97:1a:26:cc:4e:de:13: f7:47:1f:a7:83:fa:60:f9:60:21:92:85:ea:ca:64:2e:29:cd: 00:fc:4a:e6:13:dc:83:b4:e0:2c:13:95:a8:ca:eb:7a:e4:ce: a9:57:cf:aa:be:c4:6a:9f:61:fe:7b:1f:56:05:d8:ea:92:b4: c5:c4:a4:de:cb:77:80:64:26:d4:46:5e:d8:79:36:00:2e:d1: 91:c0:64:70:f7:6a:6e:1b:a3:b2:b3:71:5e:6f:4f:f0:8d:07: ff:58:53:68:06:00:6c:a7:40:f4:8c:c6:d1:93:4a:26:e9:98: 5c:ef:71:45:93:53:bb:8c:db:96:e3:21:66:3f:22:c5:e1:3f: 75:6a:64:d9:8b:e9:e0:d1:96:7a:f9:ac:a2:f2:9c:c1:91:ee: 73:36:28:a1:e2:06:3a:07:57:08:a9:f2:48:2a:0e:23:20:06: 19:8b:69:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1oba4W/zXPp54KwbAFCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2I2MTZjY2ZlMGU4NjZiNDI3YzBhNDVlZjQxODFiMDk4 MWU2MzEwHhcNMjUxMjE4MTkwMTE4WhcNMjUxMjE5MTkwMTE4WjAzMTEwLwYDVQQD EygzNmJkZDEzOGEyZDA2MWNmNzNkNjkyMTAwYzdjNzI1MWQ4ZmRjMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cz7YTZRCjzyNXcCZClLfUq40oEr 2ONXhx8Suy3iHvmO2LHRk9pL0LYdOiuOA49emeiGp8w5JHj/aeehXDF4kvvk545C DsM4HCA6zb8D2v3mMXxa/7WCrDXIIK4Xg+bkewXdkhGKAo6E0JyFG+ARBYGBnsv4 0bAtnDaur4/a6qGbGNbA8xgTp3JiQfnkOyht34ClPNYyMG5qEyPL7xiwPi1TkNE5 DfyuAlrzIKCUnUHEoGf6fyLu7D/X4iYhIkKsLB7ZnA6PC64mxZaQ7P4lsZT9N6uo Sdd0Rqpavmf2OUOXfJG4DGiLpklvXVggypJ/3DlEwiFTctIDk0A8lSk22QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa90Tii0GHPc9aSEAx8clHY/cE7MB8GA1UdIwQY MBaAFNfLYWzP4OhmtCfApF70GBsJgeYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTct M2U2MTk4YTUxMmUwLzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTctM2U2MTk4YTUxMmUw LzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvDNoOCw oDcGZLSxURjROY2L2iWLiSlj5qFSl8ykP4lJNRcDChBSJmhrlT47MrBKx5m5xZ3b qLUhcnb7o1I9cnh11X7WOwfEw75hmhhSPxr1pdeXGibMTt4T90cfp4P6YPlgIZKF 6spkLinNAPxK5hPcg7TgLBOVqMrreuTOqVfPqr7Eap9h/nsfVgXY6pK0xcSk3st3 gGQm1EZe2Hk2AC7RkcBkcPdqbhujsrNxXm9P8I0H/1hTaAYAbKdA9IzG0ZNKJumY XO9xRZNTu4zbluMhZj8ixeE/dWpk2Yvp4NGWevmsovKcwZHuczYooeIGOgdXCKny SCoOIyAGGYtpjQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:10 2025 by rpki-client