This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json) Hash identifier: +rR57Ix1EURNz2mUzRB9yBTyf6IIsaA1WwEe1hOr5I0= Subject key identifier: 96:8C:8D:39:68:47:AC:FA:AE:5D:AB:52:97:02:72:D5:A4:D1:A2:C7 Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a Certificate serial: 019B3BD93BAD0428DE9FEE9160BBEF466A83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft Manifest number: 0923 Signing time: Sat 20 Dec 2025 13:00:50 +0000 Manifest this update: Sat 20 Dec 2025 13:00:50 +0000 Manifest next update: Sun 21 Dec 2025 13:00:50 +0000 Files and hashes: 1: Ox_5wctFyZuvInmQs0hviVdHYTY.roa (hash: g8iHju69S1V2EgutTovP9pVMh3pNWKkzCgYSyMGlRgE=) 2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: CH16PI2s1WAJHRq6awPGi5K41KGJlTdXM5LWPgedz/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:3b:ad:04:28:de:9f:ee:91:60:bb:ef:46:6a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a Validity Not Before: Dec 20 13:00:50 2025 GMT Not After : Dec 21 13:00:50 2025 GMT Subject: CN=968c8d396847acfaae5dab52970272d5a4d1a2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:08:63:84:7e:78:6f:ab:e5:ac:09:9a:e8: 31:8c:a4:5d:ec:2b:db:4a:cd:b4:96:f0:5b:c6:c6: e4:f6:50:01:7d:ea:9f:02:27:14:a0:19:3a:e0:78: fa:8d:c3:51:b0:90:6f:b1:63:68:fb:b7:2c:95:50: 9b:47:83:cc:a4:93:db:e2:ff:05:cc:33:fe:e8:24: 67:ff:f6:9b:f6:1c:5a:3c:56:92:4e:ec:3b:9a:64: 44:70:98:8c:40:cf:04:4b:8f:7e:18:bf:de:0f:2c: 4e:a9:ac:aa:d5:77:e4:f9:be:ab:d3:bd:2b:14:81: da:e4:a2:7d:cf:0c:30:03:37:2e:df:dd:db:6d:ce: f6:f8:1a:13:53:00:72:65:6d:98:e1:b2:0a:7c:c8: a3:a8:df:c2:52:d3:a8:65:53:ad:3e:74:c1:1b:49: 54:f8:16:54:4b:8b:a5:52:66:4b:e4:11:8f:bc:f0: 2b:c2:0a:a9:33:a9:4f:46:1c:df:b4:3b:6c:0d:07: 22:39:cc:67:62:03:f5:f6:b4:aa:5a:43:47:47:db: 48:fb:fb:81:5b:c4:bf:4f:e9:26:03:7d:87:ef:f0: 9a:b3:b8:3d:f2:9f:e0:a5:e6:f8:ff:aa:e3:86:4e: e8:e4:2d:53:fd:ed:1c:70:fa:9b:9c:3f:be:cd:08: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8C:8D:39:68:47:AC:FA:AE:5D:AB:52:97:02:72:D5:A4:D1:A2:C7 X509v3 Authority Key Identifier: keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:24:2b:0e:96:0d:ae:8f:16:d5:ed:08:00:21:63:79:14:13: d6:5d:71:41:a9:a4:d4:f2:5d:52:38:f7:75:9c:c7:c3:69:12: 48:5b:8d:a0:73:8f:01:57:69:07:af:c4:8b:91:6e:6b:1b:3e: 6d:a3:aa:49:13:35:06:47:36:35:94:60:27:4b:e6:60:bf:d7: 1e:ee:cf:ca:17:07:b4:79:33:f1:c1:1c:d7:04:69:00:f5:1d: d7:9e:b7:43:ce:ce:ef:17:c9:0a:ad:c5:20:9a:eb:68:c4:f5: f8:c9:ae:99:b6:96:5c:d6:fe:f1:e8:c7:6a:36:61:d9:f9:fb: 7b:de:e8:09:0e:b9:b6:0a:db:88:34:b7:fd:d8:5e:5a:da:84: c2:9f:c1:ac:48:dc:b6:99:ac:41:14:6f:7e:53:48:9f:ab:dd: f6:13:ac:6d:c8:d5:74:d4:b7:84:0d:42:13:1f:fe:f1:ed:ac: 52:c9:f6:e1:ed:19:34:86:59:e8:44:04:c9:ec:f1:d3:55:73: cf:9c:b1:8f:75:87:d4:e0:0d:bd:0c:49:07:69:68:64:86:c6: 33:c5:08:a3:13:0e:53:42:6f:7a:7f:f8:b6:61:7f:a5:3d:3e: 69:f9:48:40:4a:23:8b:d9:8d:89:49:f3:60:94:40:ba:68:64: 5f:5d:30:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72TutBCjen+6RYLvvRmqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NWYyNWFiM2M2NjAwM2IyZDVhZjgzZDJiMzY1MWY4OGQx NTFmMmEwHhcNMjUxMjIwMTMwMDUwWhcNMjUxMjIxMTMwMDUwWjAzMTEwLwYDVQQD Eyg5NjhjOGQzOTY4NDdhY2ZhYWU1ZGFiNTI5NzAyNzJkNWE0ZDFhMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEoIY4R+eG+r5awJmugxjKRd7Cvb Ss20lvBbxsbk9lABfeqfAicUoBk64Hj6jcNRsJBvsWNo+7cslVCbR4PMpJPb4v8F zDP+6CRn//ab9hxaPFaSTuw7mmREcJiMQM8ES49+GL/eDyxOqayq1Xfk+b6r070r FIHa5KJ9zwwwAzcu393bbc72+BoTUwByZW2Y4bIKfMijqN/CUtOoZVOtPnTBG0lU +BZUS4ulUmZL5BGPvPArwgqpM6lPRhzftDtsDQciOcxnYgP19rSqWkNHR9tI+/uB W8S/T+kmA32H7/Cas7g98p/gpeb4/6rjhk7o5C1T/e0ccPqbnD++zQj1ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaMjTloR6z6rl2rUpcCctWk0aLHMB8GA1UdIwQY MBaAFKdfJas8ZgA7LVr4PSs2UfiNFR8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUt YjZmNGE0ZDYwNTNiLzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUtYjZmNGE0ZDYwNTNi LzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyQrDpYN ro8W1e0IACFjeRQT1l1xQamk1PJdUjj3dZzHw2kSSFuNoHOPAVdpB6/Ei5Fuaxs+ baOqSRM1Bkc2NZRgJ0vmYL/XHu7PyhcHtHkz8cEc1wRpAPUd1563Q87O7xfJCq3F IJrraMT1+MmumbaWXNb+8ejHajZh2fn7e97oCQ65tgrbiDS3/dheWtqEwp/BrEjc tpmsQRRvflNIn6vd9hOsbcjVdNS3hA1CEx/+8e2sUsn24e0ZNIZZ6EQEyezx01Vz z5yxj3WH1OANvQxJB2loZIbGM8UIoxMOU0Jven/4tmF/pT0+aflIQEoji9mNiUnz YJRAumhkX10wPw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:14 2025 by rpki-client