This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json) Hash identifier: qwHnJHvrXEcUOqI7N8KKIJvWmjgOL3pZxpE+ebLeuqM= Subject key identifier: A3:6A:38:DE:9B:0C:D4:CA:B1:B7:F2:7D:0D:B3:04:AD:B0:35:F6:B3 Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Certificate serial: 019B3F114D4E57DF4AACE609E137747010C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft Manifest number: 0DB5 Signing time: Sun 21 Dec 2025 04:00:56 +0000 Manifest this update: Sun 21 Dec 2025 04:00:56 +0000 Manifest next update: Mon 22 Dec 2025 04:00:56 +0000 Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: Ae6axBZeZxyGStHmm4+ISnBsiJXkr97apqprJ1A5DSQ=) 2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:4d:4e:57:df:4a:ac:e6:09:e1:37:74:70:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Validity Not Before: Dec 21 04:00:56 2025 GMT Not After : Dec 22 04:00:56 2025 GMT Subject: CN=a36a38de9b0cd4cab1b7f27d0db304adb035f6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:bf:7d:e4:f3:9e:6c:7a:6d:2c:f4:58:c6: 8f:44:9c:e6:80:75:15:ba:e1:f7:a2:98:bd:2f:9a: f6:d0:97:32:50:d8:2c:06:58:c2:e0:b1:c4:b0:aa: 42:db:f0:26:b7:8e:39:dc:98:75:84:0c:69:e1:65: 44:31:76:fd:60:f2:02:51:df:3a:33:24:72:36:33: d3:0b:4b:8b:1a:8a:c1:2e:fb:ea:85:29:e7:31:d4: d9:45:27:f5:73:30:e1:f0:ac:ef:61:00:7c:03:a9: 09:2b:8a:a9:aa:7e:07:d5:dc:46:82:59:67:53:a4: ac:99:d3:0d:e0:35:18:30:2b:08:a7:5b:6e:f6:43: a8:b2:0b:c9:3a:ba:8f:43:6e:e1:cb:c7:6a:ac:ee: 8b:ee:d1:fb:f9:21:ba:50:fa:e5:ce:1c:7f:2d:79: d8:a5:45:a4:c5:16:8c:70:d1:75:7f:67:20:99:e2: 47:b9:83:a3:26:a9:5a:b6:40:82:62:9c:ba:e8:d7: 7d:3f:3e:9d:50:82:4c:e9:9b:75:62:ca:71:17:11: 31:10:63:14:19:9e:57:36:34:70:d0:fb:b6:5b:49: 50:05:33:5e:93:86:01:67:ba:e8:3e:62:bf:2b:fa: 7f:b1:3f:55:4f:a0:93:b5:ff:98:e1:70:74:85:74: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6A:38:DE:9B:0C:D4:CA:B1:B7:F2:7D:0D:B3:04:AD:B0:35:F6:B3 X509v3 Authority Key Identifier: keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:77:e2:fb:3e:e6:7b:d5:80:bf:16:95:6b:72:e3:5e:b3:8d: 11:10:ef:d8:57:1a:5a:8e:1d:72:fb:03:7f:f8:89:f7:63:48: 10:b4:8c:7d:73:8c:62:e8:fd:3e:24:37:ba:df:dd:db:38:f6: 01:c0:a5:b9:e9:02:8a:9b:05:19:ed:9c:3d:7d:83:cf:c2:f8: 80:b7:87:8c:3b:2b:0d:cd:ab:86:32:bf:e5:c0:70:40:20:40: 16:8e:08:1e:13:2b:60:f7:ae:1c:60:67:8e:e6:f2:90:46:de: f9:f9:f6:45:db:48:1e:75:22:a4:7a:26:71:02:26:f4:f7:6a: 56:ca:4b:64:3e:50:49:4f:08:1f:52:9f:ab:1a:c4:2d:09:dc: 19:c8:c6:ef:b1:ba:9a:bf:fc:4c:b8:47:d6:72:98:f0:58:c0: 84:c8:6b:02:1b:43:ed:db:0a:d1:1d:80:e0:cf:3b:54:81:88: 01:5e:2b:0c:51:bc:ea:22:3e:28:38:69:1b:c8:ed:e6:22:83: 23:80:65:13:f2:f5:ce:4f:ca:7d:2d:71:42:86:a2:1e:c0:1d: 1a:bf:69:46:c8:9e:29:22:6f:fb:97:53:52:25:02:d2:ca:fa: 9c:68:08:fa:5b:ce:a4:e8:68:2c:96:c7:df:1c:cc:fc:2a:55: f7:ea:7d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EU1OV99KrOYJ4Td0cBDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk OGNhMzUwHhcNMjUxMjIxMDQwMDU2WhcNMjUxMjIyMDQwMDU2WjAzMTEwLwYDVQQD EyhhMzZhMzhkZTliMGNkNGNhYjFiN2YyN2QwZGIzMDRhZGIwMzVmNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V6/feTznmx6bSz0WMaPRJzmgHUV uuH3opi9L5r20JcyUNgsBljC4LHEsKpC2/Amt4453Jh1hAxp4WVEMXb9YPICUd86 MyRyNjPTC0uLGorBLvvqhSnnMdTZRSf1czDh8KzvYQB8A6kJK4qpqn4H1dxGglln U6SsmdMN4DUYMCsIp1tu9kOosgvJOrqPQ27hy8dqrO6L7tH7+SG6UPrlzhx/LXnY pUWkxRaMcNF1f2cgmeJHuYOjJqlatkCCYpy66Nd9Pz6dUIJM6Zt1YspxFxExEGMU GZ5XNjRw0Pu2W0lQBTNek4YBZ7roPmK/K/p/sT9VT6CTtf+Y4XB0hXS3HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNqON6bDNTKsbfyfQ2zBK2wNfazMB8GA1UdIwQY MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt N2FjOWUyY2U0ZTMzLzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHfi+z7m e9WAvxaVa3LjXrONERDv2FcaWo4dcvsDf/iJ92NIELSMfXOMYuj9PiQ3ut/d2zj2 AcCluekCipsFGe2cPX2Dz8L4gLeHjDsrDc2rhjK/5cBwQCBAFo4IHhMrYPeuHGBn jubykEbe+fn2RdtIHnUipHomcQIm9PdqVspLZD5QSU8IH1KfqxrELQncGcjG77G6 mr/8TLhH1nKY8FjAhMhrAhtD7dsK0R2A4M87VIGIAV4rDFG86iI+KDhpG8jt5iKD I4BlE/L1zk/KfS1xQoaiHsAdGr9pRsieKSJv+5dTUiUC0sr6nGgI+lvOpOhoLJbH 3xzM/CpV9+p9HQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:17 2025 by rpki-client