This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft File: 18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json) Hash identifier: +vEV51WiMgSd/ObWzvnR1IOLy4AciXoMJ4c55Xu5SZ0= Subject key identifier: 90:1A:EC:D4:9B:D4:54:1B:FF:BE:01:E9:63:B1:A6:FC:02:59:B2:19 Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60 Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260 Certificate serial: 019B5A5185980C0CEECB0D0CDA61129B8470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft Manifest number: 0D94 Signing time: Fri 26 Dec 2025 11:00:50 +0000 Manifest this update: Fri 26 Dec 2025 11:00:50 +0000 Manifest next update: Sat 27 Dec 2025 11:00:50 +0000 Files and hashes: 1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: EIfvGVhGWIgNcpPOiucXnX9rlPLJ8cZ8qQr7HCa0dFY=) 2: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (hash: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:85:98:0c:0c:ee:cb:0d:0c:da:61:12:9b:84:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260 Validity Not Before: Dec 26 11:00:50 2025 GMT Not After : Dec 27 11:00:50 2025 GMT Subject: CN=901aecd49bd4541bffbe01e963b1a6fc0259b219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:50:87:9c:3c:d0:63:33:d5:3c:73:b4:7d: db:a9:75:bb:d0:7c:9c:f9:36:f0:c8:c7:d1:35:79: da:ef:ff:78:c6:d5:0e:7c:53:d3:e7:48:7d:f3:cd: 1e:52:74:d9:ca:af:d1:a7:c0:94:c5:ed:ac:79:09: 5c:ee:21:f5:96:dc:47:ca:60:84:b9:12:59:1d:32: fa:b2:b8:8f:ef:fd:32:0b:0c:fa:dd:b4:c5:10:09: 05:77:f8:f8:c9:b9:b4:8d:08:a8:f1:9d:78:de:53: 80:44:e1:3e:ea:88:33:1a:50:fa:7d:4a:71:3b:bc: af:4c:ac:70:f1:81:ef:36:bc:ec:8d:bb:a1:47:09: db:4d:99:62:54:85:00:db:a4:50:cb:1e:93:41:47: 47:38:97:cb:4c:99:fe:2a:77:47:b4:ff:36:ba:61: 37:d1:83:c5:2c:e3:ee:77:f8:86:e1:06:bf:5a:c2: 08:e7:b6:15:e2:1d:d8:95:eb:ee:57:ea:7a:3a:a4: be:45:d8:cf:ce:3b:24:f1:0d:25:08:88:3a:52:d3: 85:a2:2c:2d:2b:92:8f:5d:13:ce:a1:f4:e4:fb:10: ea:6d:d7:e4:d4:3e:56:1a:2b:17:c8:5e:fe:79:de: 6d:cf:18:f6:7d:f7:cb:b6:ce:8a:68:4a:6d:da:53: 88:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1A:EC:D4:9B:D4:54:1B:FF:BE:01:E9:63:B1:A6:FC:02:59:B2:19 X509v3 Authority Key Identifier: keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:11:f7:37:d5:d6:73:cb:b3:61:74:7a:e7:b2:30:89:fc:e9: 9e:f9:70:3c:ca:ab:82:52:01:7a:5f:ee:d4:70:38:fa:43:f3: d0:07:6e:78:50:9b:9a:10:79:e0:ba:2e:18:78:72:4c:da:28: 5d:aa:23:73:a1:3b:91:82:31:b2:08:45:a5:77:15:4f:3f:14: 7e:1f:5d:59:18:6d:84:35:23:09:c1:74:93:0f:3d:e8:c8:36: e9:42:6a:c5:e3:ee:ae:da:cd:c7:99:cf:67:87:11:9d:43:f2: b2:25:e9:92:ab:44:d7:d3:88:40:23:9b:db:2c:eb:21:c4:13: fa:95:ad:d5:6e:b9:a0:a4:52:cf:27:f3:e9:6a:9d:dc:d4:36: e9:2f:52:80:61:49:a8:64:dc:a5:9e:e7:1f:c8:c5:d1:67:c9: 58:8b:3f:d3:46:49:b0:71:f0:60:f1:79:37:f9:89:be:36:35: 0a:ec:4e:98:51:94:d6:f8:5a:4a:80:0a:ef:2d:40:89:27:fb: 57:b5:be:2f:27:cd:f3:14:6a:64:db:fb:53:3d:62:d8:38:e7: 9f:d0:24:65:84:0e:03:ca:23:47:69:13:7d:5f:87:a3:44:7b: 52:a3:0a:67:b1:71:36:03:1c:32:78:31:95:e9:db:06:f6:41: 1c:55:54:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYWYDAzuyw0M2mESm4RwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi NTQyNjAwHhcNMjUxMjI2MTEwMDUwWhcNMjUxMjI3MTEwMDUwWjAzMTEwLwYDVQQD Eyg5MDFhZWNkNDliZDQ1NDFiZmZiZTAxZTk2M2IxYTZmYzAyNTliMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzNQh5w80GMz1TxztH3bqXW70Hyc +TbwyMfRNXna7/94xtUOfFPT50h9880eUnTZyq/Rp8CUxe2seQlc7iH1ltxHymCE uRJZHTL6sriP7/0yCwz63bTFEAkFd/j4ybm0jQio8Z143lOAROE+6ogzGlD6fUpx O7yvTKxw8YHvNrzsjbuhRwnbTZliVIUA26RQyx6TQUdHOJfLTJn+KndHtP82umE3 0YPFLOPud/iG4Qa/WsII57YV4h3YlevuV+p6OqS+RdjPzjsk8Q0lCIg6UtOFoiwt K5KPXRPOofTk+xDqbdfk1D5WGisXyF7+ed5tzxj2fffLts6KaEpt2lOIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAa7NSb1FQb/74B6WOxpvwCWbIZMB8GA1UdIwQY MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt OWM5MDJjNjZlZTk5LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5 LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBH3N9XW c8uzYXR657IwifzpnvlwPMqrglIBel/u1HA4+kPz0AdueFCbmhB54LouGHhyTNoo Xaojc6E7kYIxsghFpXcVTz8Ufh9dWRhthDUjCcF0kw896Mg26UJqxePurtrNx5nP Z4cRnUPysiXpkqtE19OIQCOb2yzrIcQT+pWt1W65oKRSzyfz6Wqd3NQ26S9SgGFJ qGTcpZ7nH8jF0WfJWIs/00ZJsHHwYPF5N/mJvjY1CuxOmFGU1vhaSoAK7y1AiSf7 V7W+LyfN8xRqZNv7Uz1i2Djnn9AkZYQOA8ojR2kTfV+Ho0R7UqMKZ7FxNgMcMngx lenbBvZBHFVUOw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:46 2025 by rpki-client