This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft File: 18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json) Hash identifier: eW5rhnmGANoQV+tdCwy2tUZSDOhkhl7vMw7XTKgkclI= Subject key identifier: 62:BA:89:F9:D4:F4:94:25:F0:82:1B:0A:1B:A9:F6:58:EC:B5:35:A1 Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31 Certificate issuer: /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631 Certificate serial: 019B4DE0F15EBD620FFB54528B246E7DE021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft Manifest number: 1230 Signing time: Wed 24 Dec 2025 01:02:25 +0000 Manifest this update: Wed 24 Dec 2025 01:02:25 +0000 Manifest next update: Thu 25 Dec 2025 01:02:25 +0000 Files and hashes: 1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: t8rufYlfgEasx0bBioAvWuNbUleWkfqeHDHnUUglaUw=) 2: ixnuzzyIGziCtrC0l3qz41OIrjQ.roa (hash: JSBHGZiyISoLK4HOeW+w9s4fRtop7E+RouVUw4Z0VAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:f1:5e:bd:62:0f:fb:54:52:8b:24:6e:7d:e0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631 Validity Not Before: Dec 24 01:02:25 2025 GMT Not After : Dec 25 01:02:25 2025 GMT Subject: CN=62ba89f9d4f49425f0821b0a1ba9f658ecb535a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:e4:81:1b:1c:ff:45:cc:07:05:3c:23:df: 0a:40:23:29:7d:bf:c0:89:67:9e:96:b4:fe:60:fe: c2:33:49:a5:de:81:38:87:35:dc:e1:42:cf:e0:3a: 36:b0:ae:f4:17:bd:77:c4:1e:cc:f9:d5:31:11:f3: 9d:cf:ee:0c:5a:b2:13:f6:17:a5:95:38:39:c0:43: c7:e3:6b:69:0f:c2:29:67:44:5a:ba:97:b4:fa:21: d8:a1:a6:ec:f5:07:3c:b1:9a:ec:82:70:f7:d7:b4: 23:4a:08:4a:f0:21:58:9f:8e:19:3c:11:d1:92:54: bc:29:e0:78:d6:3b:3e:6b:92:d3:e8:ee:8f:1c:0b: 55:01:a5:34:93:03:03:96:71:28:c8:dc:b5:9d:5c: d3:ca:03:e8:1c:87:d1:64:78:11:bb:68:e7:42:7d: 19:75:9d:68:b6:6a:a6:ad:fa:93:1d:43:92:90:9e: 70:49:17:27:82:05:d8:e2:a7:6e:51:ee:62:df:f5: 19:4a:43:45:b5:5b:dc:a0:69:e7:a4:64:cb:03:62: 56:4e:35:3a:e2:88:7f:99:74:c5:26:b8:11:47:c6: 05:30:2f:bc:98:c6:c0:09:0b:75:ab:96:8f:be:92: 66:eb:8d:e5:e5:e8:33:ee:57:a5:66:67:46:e4:ca: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:89:F9:D4:F4:94:25:F0:82:1B:0A:1B:A9:F6:58:EC:B5:35:A1 X509v3 Authority Key Identifier: keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7d:04:02:6c:f7:65:14:58:1f:fd:0c:06:56:fb:1a:96:83: 8b:c5:8b:88:bc:00:29:ca:db:6d:76:e7:3b:02:5d:98:0c:b4: 07:31:6d:a0:fb:34:e9:f9:bc:ae:53:04:af:72:b3:90:1b:49: 2c:f3:78:51:0b:6e:1f:7f:00:b6:d4:ed:c4:73:fa:ac:87:d1: 00:af:45:e2:5a:3f:bd:79:c3:0c:54:13:d1:ad:1e:e5:7f:86: f5:57:90:86:73:c8:2f:5b:95:3e:59:78:c4:00:2f:38:a0:23: 75:f9:b3:e9:86:83:d3:ce:aa:72:96:8a:ee:07:1f:8b:ab:aa: cb:7d:6c:65:81:42:d5:7a:48:9b:5b:df:a1:d3:dc:cc:8b:fd: 59:33:c0:6f:72:e8:f8:35:fc:4e:0c:bb:17:ef:46:4f:78:e1: e5:f3:65:4e:8f:94:b0:3f:0f:f8:9e:4c:56:b2:15:b5:77:94: 40:8c:4d:01:37:2d:01:69:65:4a:2c:79:6b:a2:2d:fa:af:6a: 10:17:66:65:20:a5:2d:fe:52:60:4e:8e:55:bc:fb:f8:96:47: 55:b6:56:17:14:28:a8:4a:51:86:d2:7e:4c:46:e5:07:60:4a: 4c:cf:56:bb:23:96:db:45:91:23:fa:f5:27:20:e1:a1:ab:36: 46:09:9e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4PFevWIP+1RSiyRufeAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2I2MTZjY2ZlMGU4NjZiNDI3YzBhNDVlZjQxODFiMDk4 MWU2MzEwHhcNMjUxMjI0MDEwMjI1WhcNMjUxMjI1MDEwMjI1WjAzMTEwLwYDVQQD Eyg2MmJhODlmOWQ0ZjQ5NDI1ZjA4MjFiMGExYmE5ZjY1OGVjYjUzNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QzkgRsc/0XMBwU8I98KQCMpfb/A iWeelrT+YP7CM0ml3oE4hzXc4ULP4Do2sK70F713xB7M+dUxEfOdz+4MWrIT9hel lTg5wEPH42tpD8IpZ0Raupe0+iHYoabs9Qc8sZrsgnD317QjSghK8CFYn44ZPBHR klS8KeB41js+a5LT6O6PHAtVAaU0kwMDlnEoyNy1nVzTygPoHIfRZHgRu2jnQn0Z dZ1otmqmrfqTHUOSkJ5wSRcnggXY4qduUe5i3/UZSkNFtVvcoGnnpGTLA2JWTjU6 4oh/mXTFJrgRR8YFMC+8mMbACQt1q5aPvpJm643l5egz7lelZmdG5MprDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK6ifnU9JQl8IIbChup9ljstTWhMB8GA1UdIwQY MBaAFNfLYWzP4OhmtCfApF70GBsJgeYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTct M2U2MTk4YTUxMmUwLzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTctM2U2MTk4YTUxMmUw LzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX0EAmz3 ZRRYH/0MBlb7GpaDi8WLiLwAKcrbbXbnOwJdmAy0BzFtoPs06fm8rlMEr3KzkBtJ LPN4UQtuH38AttTtxHP6rIfRAK9F4lo/vXnDDFQT0a0e5X+G9VeQhnPIL1uVPll4 xAAvOKAjdfmz6YaD086qcpaK7gcfi6uqy31sZYFC1XpIm1vfodPczIv9WTPAb3Lo +DX8Tgy7F+9GT3jh5fNlTo+UsD8P+J5MVrIVtXeUQIxNATctAWllSix5a6It+q9q EBdmZSClLf5SYE6OVbz7+JZHVbZWFxQoqEpRhtJ+TEblB2BKTM9WuyOW20WRI/r1 JyDhoas2RgmeMw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:34:41 2025 by rpki-client