This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json) Hash identifier: NRlim7FoJMlD7EIcQ4vJBUjk7sTu4V7AKoomR1U0Asc= Subject key identifier: A1:3F:40:98:E3:BB:F8:1D:4F:AB:A2:DF:94:25:F0:96:B7:F1:50:71 Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Certificate serial: 019B3946BC8B07A06BE2E390B1BCD42A1ED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft Manifest number: 08AB Signing time: Sat 20 Dec 2025 01:01:35 +0000 Manifest this update: Sat 20 Dec 2025 01:01:35 +0000 Manifest next update: Sun 21 Dec 2025 01:01:35 +0000 Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: A22TCrTl5sRbr76ywXGuhORzSNA8xJHRkj1gCzy0MiI=) 2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=) 3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:bc:8b:07:a0:6b:e2:e3:90:b1:bc:d4:2a:1e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Validity Not Before: Dec 20 01:01:35 2025 GMT Not After : Dec 21 01:01:35 2025 GMT Subject: CN=a13f4098e3bbf81d4faba2df9425f096b7f15071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a9:52:8b:bb:38:08:09:ef:c3:03:71:73:da: 4a:7d:1b:14:79:21:1b:40:a0:2f:6a:f5:4c:39:e3: 1d:05:b2:5f:93:aa:fb:0b:73:71:c3:ed:8e:df:8f: 2a:c0:89:d6:75:32:9a:8f:30:a8:93:fa:ee:5d:88: 94:d1:50:c4:7a:79:b1:d3:79:99:c8:fe:7b:ed:ab: 26:e7:ae:c0:79:2b:c5:e4:93:2d:b7:58:69:1d:58: b5:16:4c:e0:95:32:f8:19:df:c7:e5:99:6e:9b:d8: 52:a5:01:78:e5:52:95:8c:0e:20:4a:78:87:b5:0f: c2:b9:07:0b:35:36:9c:9a:9e:2b:47:fc:db:8e:dd: 21:87:a1:04:f5:b5:fc:68:1e:b0:a5:65:5a:9c:e1: fd:89:66:d3:da:1a:3b:37:c2:92:e1:15:9f:ba:ed: a0:2e:ae:bb:40:b1:e5:3b:2d:77:83:cf:71:9e:5a: 82:b5:c1:f4:7e:dd:ec:f8:1d:b5:b7:93:c7:e0:74: a7:23:10:72:a7:d9:72:cc:db:05:96:4a:ea:ff:9f: 58:b8:33:42:6f:d3:77:42:18:f1:ac:79:69:97:6f: e1:05:27:05:86:3e:48:46:70:b8:80:7f:25:55:84: a9:bd:e4:83:f8:39:43:ea:cd:27:05:5c:94:79:fb: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:40:98:E3:BB:F8:1D:4F:AB:A2:DF:94:25:F0:96:B7:F1:50:71 X509v3 Authority Key Identifier: keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f1:0c:30:0f:c4:61:ee:e0:5c:75:dc:95:69:b5:7e:32:70: 34:bb:5a:08:94:06:78:e5:1a:4c:29:24:6d:fe:b9:d9:b1:da: 48:cc:a2:7e:9e:e0:fe:54:7c:6a:a0:3a:1e:a6:fd:53:d7:4b: 0f:d4:86:c2:74:5a:bf:90:b5:05:3d:ce:20:0b:f8:1c:5c:fd: 6c:12:c3:16:de:ee:6f:1d:5b:2a:f3:0c:52:35:39:b2:5f:7a: e2:73:8b:54:d8:97:30:7a:a1:be:43:d9:17:63:fc:39:a2:e0: 2f:a5:43:be:a4:86:c5:73:62:b3:de:0e:3f:63:9c:ff:bd:82: c0:ff:a9:4b:40:71:de:34:8f:6e:ac:af:15:6a:d3:c6:08:ab: ad:79:90:98:0c:06:67:a2:25:b8:29:4b:48:c9:a4:df:93:2a: 5c:be:e1:3b:f4:17:cc:92:bd:35:92:c3:ba:43:e9:4c:5f:4c: 0c:4a:1b:6d:e9:4c:5e:3c:c0:8c:30:71:7f:dd:c1:39:04:61: f8:b7:e0:be:8a:02:65:8e:51:b3:c3:59:c4:57:87:a9:23:cb: 35:64:ed:07:9f:0b:39:f3:0a:a8:a9:ec:8c:fb:4e:ca:b6:db: bd:d1:27:a2:52:f7:22:4c:50:47:30:32:05:96:a0:a1:2a:57: 5b:bc:eb:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RryLB6Br4uOQsbzUKh7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk NTkwNmIwHhcNMjUxMjIwMDEwMTM1WhcNMjUxMjIxMDEwMTM1WjAzMTEwLwYDVQQD EyhhMTNmNDA5OGUzYmJmODFkNGZhYmEyZGY5NDI1ZjA5NmI3ZjE1MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6lSi7s4CAnvwwNxc9pKfRsUeSEb QKAvavVMOeMdBbJfk6r7C3Nxw+2O348qwInWdTKajzCok/ruXYiU0VDEenmx03mZ yP577asm567AeSvF5JMtt1hpHVi1FkzglTL4Gd/H5Zlum9hSpQF45VKVjA4gSniH tQ/CuQcLNTacmp4rR/zbjt0hh6EE9bX8aB6wpWVanOH9iWbT2ho7N8KS4RWfuu2g Lq67QLHlOy13g89xnlqCtcH0ft3s+B21t5PH4HSnIxByp9lyzNsFlkrq/59YuDNC b9N3QhjxrHlpl2/hBScFhj5IRnC4gH8lVYSpveSD+DlD6s0nBVyUefvV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE/QJjju/gdT6ui35Ql8Ja38VBxMB8GA1UdIwQY MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/EMMA/E Ye7gXHXclWm1fjJwNLtaCJQGeOUaTCkkbf652bHaSMyifp7g/lR8aqA6Hqb9U9dL D9SGwnRav5C1BT3OIAv4HFz9bBLDFt7ubx1bKvMMUjU5sl964nOLVNiXMHqhvkPZ F2P8OaLgL6VDvqSGxXNis94OP2Oc/72CwP+pS0Bx3jSPbqyvFWrTxgirrXmQmAwG Z6IluClLSMmk35MqXL7hO/QXzJK9NZLDukPpTF9MDEobbelMXjzAjDBxf93BOQRh +LfgvooCZY5Rs8NZxFeHqSPLNWTtB58LOfMKqKnsjPtOyrbbvdEnolL3IkxQRzAy BZagoSpXW7zrtw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:53:15 2025 by rpki-client