This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json) Hash identifier: y9mDTN2q4nPySMv0x6rLJ6o8YJBUGvHJJ5pC3AgLHzA= Subject key identifier: 5F:83:AE:3F:68:26:D1:F2:3C:08:CB:93:B0:B8:BA:89:15:90:78:58 Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Certificate serial: 019AF5E5806B4400F828636E3672D050A540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft Manifest number: 0E88 Signing time: Sat 06 Dec 2025 23:00:49 +0000 Manifest this update: Sat 06 Dec 2025 23:00:49 +0000 Manifest next update: Sun 07 Dec 2025 23:00:49 +0000 Files and hashes: 1: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: vupDNwSRNISzYnt1VdkIfLxuiZGLTUdP3vm5CXW7is8=) 2: 4YqKA_NWl67P1UUsYLLewOce3N4.roa (hash: jzpkFPCa8z2EEBKsdTK/EMaQenQwoVIoEp37mrkYSlo=) 3: IQytQDxkG6z6-hb3Iu6XIv8OQic.roa (hash: Fz8ORoLoUXIyDmykV9akqdIIcR0t067gq2FU4oUFIwY=) 4: OPYEfeaD4UG3_woKyPv1Wj7JrZg.roa (hash: iv8H/ObGNtJDTTAshveiukMxLvPbVXVjWuW+XjG+jWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:80:6b:44:00:f8:28:63:6e:36:72:d0:50:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Validity Not Before: Dec 6 23:00:49 2025 GMT Not After : Dec 7 23:00:49 2025 GMT Subject: CN=5f83ae3f6826d1f23c08cb93b0b8ba8915907858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:21:88:ad:69:37:00:30:ef:db:2a:b9:52:de: a0:61:18:b0:93:65:2d:e1:ce:19:09:55:2e:62:a6: 07:22:18:74:8a:7c:ea:f7:5b:a0:72:a7:93:97:71: 45:6d:fc:a8:fd:d5:52:39:ab:d4:84:41:60:99:e3: 13:c4:08:b4:0b:58:3c:94:a3:31:d0:12:09:ce:12: c0:36:c6:96:b1:dc:07:00:3d:f6:4f:72:c2:d8:a3: 1c:36:09:08:8d:b4:1f:35:31:b7:d4:5a:ae:d6:d3: fa:d4:3f:c3:d2:fb:eb:aa:c0:9e:0c:38:7d:97:eb: b9:28:14:6f:a6:a7:b2:9a:a0:b4:59:79:e2:b3:07: 48:b5:31:1e:af:9c:1d:c2:dc:b6:2b:19:a0:87:bd: 81:58:3c:51:cb:bb:9e:a0:19:89:5b:78:e0:3c:b3: 02:ab:5c:f7:50:57:a6:cd:47:ed:03:33:30:1c:f2: 88:29:7d:e6:96:46:b0:39:8f:e2:35:f0:4e:69:48: a9:d5:fe:9a:d3:6c:bb:4c:d0:04:77:b2:13:33:21: ca:42:d6:c7:2e:45:0b:6b:31:6f:20:d4:5e:39:6b: 0e:47:15:c5:8f:8c:f5:29:b9:53:5c:b2:16:a5:74: 03:d7:8b:08:c6:5c:41:98:4c:95:fa:01:02:d4:78: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:AE:3F:68:26:D1:F2:3C:08:CB:93:B0:B8:BA:89:15:90:78:58 X509v3 Authority Key Identifier: keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f7:6c:cb:f5:5c:d0:8b:28:05:80:60:81:a8:1c:f2:09:4f: d2:42:f8:5f:dc:5b:44:8e:03:19:8b:f6:1a:0b:b5:bd:a0:cb: 58:f0:79:94:ba:ba:93:b9:0c:d9:e0:aa:7d:d0:51:0e:11:d0: 2b:a7:75:b7:59:3e:cb:25:5b:75:f0:8a:13:7a:c4:5e:96:a0: a0:fa:44:c4:56:42:3d:e2:d8:28:e2:b1:01:61:6a:0d:4a:3c: f3:1b:29:81:6b:7f:bd:82:60:ee:fb:69:d9:ed:f1:57:4a:23: d0:bc:ce:01:11:f6:83:67:e0:eb:3a:ab:cc:f3:7e:3e:2e:b6: 31:0d:8c:00:f5:d1:1a:d3:67:f2:33:1f:a7:aa:53:9f:fc:d7: 6e:c6:3a:88:97:17:da:8a:91:ee:5e:11:c2:85:11:58:74:15: da:3a:68:52:9f:5b:d3:c6:d6:37:19:60:64:b8:5c:45:a3:82: a7:fa:45:b8:46:5a:1e:ad:7c:9c:0f:49:aa:d2:71:10:12:15: 6d:03:2b:58:64:9c:b7:c6:38:7d:71:7b:58:67:42:f8:72:5b: 11:d7:9d:2b:bb:79:48:e3:da:54:a9:49:59:09:b8:db:94:19: 4b:11:78:52:34:a4:bf:b9:0c:23:c6:e9:ea:72:27:a0:75:63: 0c:b6:9a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15YBrRAD4KGNuNnLQUKVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzYwYTU0ZTAzYzlmODE1Y2MzM2FmZDQ1ZDNjNGRiOWFm NzZmMTYwHhcNMjUxMjA2MjMwMDQ5WhcNMjUxMjA3MjMwMDQ5WjAzMTEwLwYDVQQD Eyg1ZjgzYWUzZjY4MjZkMWYyM2MwOGNiOTNiMGI4YmE4OTE1OTA3ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SGIrWk3ADDv2yq5Ut6gYRiwk2Ut 4c4ZCVUuYqYHIhh0inzq91ugcqeTl3FFbfyo/dVSOavUhEFgmeMTxAi0C1g8lKMx 0BIJzhLANsaWsdwHAD32T3LC2KMcNgkIjbQfNTG31Fqu1tP61D/D0vvrqsCeDDh9 l+u5KBRvpqeymqC0WXniswdItTEer5wdwty2Kxmgh72BWDxRy7ueoBmJW3jgPLMC q1z3UFemzUftAzMwHPKIKX3mlkawOY/iNfBOaUip1f6a02y7TNAEd7ITMyHKQtbH LkULazFvINReOWsORxXFj4z1KblTXLIWpXQD14sIxlxBmEyV+gEC1HjYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+Drj9oJtHyPAjLk7C4uokVkHhYMB8GA1UdIwQY MBaAFNfGClTgPJ+BXMM6/UXTxNua928WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgt MzgzMWYzZWQxY2E4LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgtMzgzMWYzZWQxY2E4 LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvdsy/Vc 0IsoBYBggagc8glP0kL4X9xbRI4DGYv2Ggu1vaDLWPB5lLq6k7kM2eCqfdBRDhHQ K6d1t1k+yyVbdfCKE3rEXpagoPpExFZCPeLYKOKxAWFqDUo88xspgWt/vYJg7vtp 2e3xV0oj0LzOARH2g2fg6zqrzPN+Pi62MQ2MAPXRGtNn8jMfp6pTn/zXbsY6iJcX 2oqR7l4RwoURWHQV2jpoUp9b08bWNxlgZLhcRaOCp/pFuEZaHq18nA9JqtJxEBIV bQMrWGSct8Y4fXF7WGdC+HJbEdedK7t5SOPaVKlJWQm425QZSxF4UjSkv7kMI8bp 6nInoHVjDLaaNw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:42:12 2025 by rpki-client