This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json) Hash identifier: EBQS92Eur8zrXeK4IP6sah53MhZx1HYnaC0QkwrKRic= Subject key identifier: 43:51:EA:8A:A9:BD:AF:75:56:7D:C6:D5:23:68:50:8E:37:2B:C8:C5 Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Certificate serial: 019B4E84C43997111E39649D52BB281E97E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft Manifest number: 0DBD Signing time: Wed 24 Dec 2025 04:01:22 +0000 Manifest this update: Wed 24 Dec 2025 04:01:22 +0000 Manifest next update: Thu 25 Dec 2025 04:01:22 +0000 Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: cJ/qbMjrfo/7okfUJ5ScMolo3bzHy1bKyxoUt5Nyxas=) 2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:c4:39:97:11:1e:39:64:9d:52:bb:28:1e:97:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Validity Not Before: Dec 24 04:01:22 2025 GMT Not After : Dec 25 04:01:22 2025 GMT Subject: CN=4351ea8aa9bdaf75567dc6d52368508e372bc8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:71:4f:b6:3b:e3:f8:35:cb:20:d1:3c:8a: 22:34:4d:ed:82:8a:a8:55:ef:b7:44:80:f7:40:a1: 25:10:4c:e6:d3:5c:3a:aa:4c:58:a2:42:9a:be:7c: 67:d1:0d:8b:aa:9d:3f:22:b4:87:80:93:a0:46:3b: c4:29:20:d5:8a:56:0e:41:8a:94:7e:a8:94:88:6d: 00:5a:12:16:2e:0d:16:9d:a8:8f:e9:82:95:bd:47: d8:aa:14:da:75:9e:1c:d2:3f:a2:c2:86:32:8e:da: 30:62:cb:55:a2:89:15:78:8d:8b:f9:8a:76:31:e5: 3d:a3:1b:8b:ef:6c:33:69:6b:f8:4f:df:d0:44:ce: c7:47:df:61:ad:ee:cc:30:da:83:a4:04:c8:13:f3: a9:a6:9e:8f:d6:2b:02:4d:15:e5:a2:92:f8:4e:10: cc:00:40:e8:2d:2c:d8:19:af:b2:6d:0a:af:9d:fe: ff:ef:36:b6:a6:b6:b9:b3:b0:58:11:6a:cb:c4:71: ab:cc:74:c8:45:9b:f2:e0:1a:bc:99:95:7b:ea:c1: 81:d2:c2:16:22:28:45:04:88:08:50:c6:a1:23:90: ea:15:cc:5d:d5:dd:50:c4:fe:d0:1a:3b:17:14:d7: 8d:eb:c6:74:30:1a:af:56:77:e4:f1:71:b7:f3:a2: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:EA:8A:A9:BD:AF:75:56:7D:C6:D5:23:68:50:8E:37:2B:C8:C5 X509v3 Authority Key Identifier: keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c3:2c:f1:0f:ee:57:23:1f:3c:65:70:31:c6:25:a7:f2:0f: d2:d5:6d:23:95:a8:91:51:4e:42:3e:b5:36:3b:13:b9:11:b1: 0f:a5:dc:5c:20:f1:fc:94:aa:0c:a6:af:b2:90:b8:0d:21:f9: 65:90:b2:18:76:ee:82:1c:4c:c9:8d:6d:e4:d6:c7:1c:2b:78: c7:82:6a:b6:62:75:9b:96:22:40:8e:91:64:66:e7:fe:1c:93: cc:aa:32:9b:9e:83:d8:c8:00:ed:ec:cd:9b:2a:5f:1d:5b:a2: f7:76:0e:bb:a2:15:dc:22:06:4f:4e:eb:2e:9c:c1:f7:9d:7c: 8e:1e:da:cd:48:d4:88:42:08:b7:25:e8:43:f4:6b:d0:40:7f: ba:af:b8:1e:24:89:17:86:c1:85:57:52:12:b7:13:10:47:80: c4:05:ac:39:7a:6d:48:9c:8f:38:64:54:f5:ac:57:12:b5:bd: 89:e6:19:93:f0:fb:2e:1d:e2:f0:f0:92:18:d8:cc:13:7a:2c: 3a:15:2c:d6:1d:f8:0e:db:18:31:35:32:99:61:6d:d6:17:e9: dc:8c:5f:59:26:55:4e:df:d0:f5:b3:53:0f:bd:33:71:56:24: 31:51:0f:5a:75:42:7b:6b:1a:39:48:11:92:07:18:42:68:c3: b5:e3:aa:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhMQ5lxEeOWSdUrsoHpfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk OGNhMzUwHhcNMjUxMjI0MDQwMTIyWhcNMjUxMjI1MDQwMTIyWjAzMTEwLwYDVQQD Eyg0MzUxZWE4YWE5YmRhZjc1NTY3ZGM2ZDUyMzY4NTA4ZTM3MmJjOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyndxT7Y74/g1yyDRPIoiNE3tgoqo Ve+3RID3QKElEEzm01w6qkxYokKavnxn0Q2Lqp0/IrSHgJOgRjvEKSDVilYOQYqU fqiUiG0AWhIWLg0WnaiP6YKVvUfYqhTadZ4c0j+iwoYyjtowYstVookVeI2L+Yp2 MeU9oxuL72wzaWv4T9/QRM7HR99hre7MMNqDpATIE/Oppp6P1isCTRXlopL4ThDM AEDoLSzYGa+ybQqvnf7/7za2pra5s7BYEWrLxHGrzHTIRZvy4Bq8mZV76sGB0sIW IihFBIgIUMahI5DqFcxd1d1QxP7QGjsXFNeN68Z0MBqvVnfk8XG386LFiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENR6oqpva91Vn3G1SNoUI43K8jFMB8GA1UdIwQY MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt N2FjOWUyY2U0ZTMzLzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacMs8Q/u VyMfPGVwMcYlp/IP0tVtI5WokVFOQj61NjsTuRGxD6XcXCDx/JSqDKavspC4DSH5 ZZCyGHbughxMyY1t5NbHHCt4x4JqtmJ1m5YiQI6RZGbn/hyTzKoym56D2MgA7ezN mypfHVui93YOu6IV3CIGT07rLpzB9518jh7azUjUiEIItyXoQ/Rr0EB/uq+4HiSJ F4bBhVdSErcTEEeAxAWsOXptSJyPOGRU9axXErW9ieYZk/D7Lh3i8PCSGNjME3os OhUs1h34DtsYMTUymWFt1hfp3IxfWSZVTt/Q9bNTD70zcVYkMVEPWnVCe2saOUgR kgcYQmjDteOq9Q== -----END CERTIFICATE-----Generated at Wed Dec 24 11:27:29 2025 by rpki-client