This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json) Hash identifier: /Ortp8Y0it4TdfBmtP6olwest+4eBd4d01SiGec/JmY= Subject key identifier: C3:DB:79:3E:82:EC:DE:3A:CA:BF:29:DB:83:8A:F4:CE:8A:64:5B:26 Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a Certificate serial: 019B405B46E72C62CE63B43173ED4385AC4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft Manifest number: 1312 Signing time: Sun 21 Dec 2025 10:01:22 +0000 Manifest this update: Sun 21 Dec 2025 10:01:22 +0000 Manifest next update: Mon 22 Dec 2025 10:01:22 +0000 Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: az6j8SUq3lxlaq5acz+QPMwcrARX0zHbLgQKeTk8bWk=) 2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:46:e7:2c:62:ce:63:b4:31:73:ed:43:85:ac:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a Validity Not Before: Dec 21 10:01:22 2025 GMT Not After : Dec 22 10:01:22 2025 GMT Subject: CN=c3db793e82ecde3acabf29db838af4ce8a645b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:6c:cb:cf:71:49:17:1d:16:33:15:73:e8: 8e:84:da:65:d9:21:7e:c1:ef:94:ac:2d:51:be:2b: b2:5b:f9:af:fa:44:55:5c:86:b4:dd:b5:2b:a6:2e: 9b:ed:4b:ff:fe:98:3d:85:35:47:e4:e6:1a:2a:d8: 10:95:1d:b1:81:2d:f2:6c:32:78:d0:3a:75:b8:6c: 38:b4:d8:43:c5:34:48:e4:e3:e0:ff:cd:bf:45:8a: be:45:cf:b8:83:45:77:4f:8f:04:24:ef:62:94:02: 1f:66:87:37:d7:e3:aa:76:bb:69:b7:40:b9:0d:1c: 43:73:98:8e:d8:09:bf:97:66:3c:e7:ac:32:b1:5d: e6:75:2f:3e:51:d3:5b:58:7c:6f:73:e5:f5:34:b0: ee:cf:66:21:03:36:ca:11:26:33:b1:1a:5a:a9:89: 61:35:f6:46:09:e8:82:fa:76:1c:90:46:6b:d1:8f: 4c:50:00:d4:41:dd:56:24:77:b2:d7:33:d0:a0:c9: db:4c:bc:23:00:77:47:8f:6b:3a:1e:0b:e2:29:36: 71:7d:10:02:27:2e:e0:a5:c3:14:cd:ee:70:7f:e4: e6:3e:03:e0:fd:81:b5:3d:8c:2b:8b:72:b6:61:e3: 21:f5:6c:9d:cc:7e:0a:59:42:16:4a:7b:4b:51:31: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:79:3E:82:EC:DE:3A:CA:BF:29:DB:83:8A:F4:CE:8A:64:5B:26 X509v3 Authority Key Identifier: keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:23:27:f9:d5:17:d3:7c:fc:4b:be:54:09:0f:b7:45:f3:9b: c9:61:26:66:2f:3c:92:6e:7c:e5:a6:11:0a:27:db:1e:8a:fe: 4b:66:50:51:b9:74:fc:8d:9a:d4:db:bc:7d:1c:da:ad:9a:17: 9b:d0:a3:f9:eb:9d:9f:b1:1d:a6:a1:25:c3:6d:9f:cb:2c:7a: 28:15:06:b1:1c:99:0f:5a:4b:10:b2:ba:8d:29:e6:74:df:d4: 7c:86:d7:d3:e1:3c:46:80:ed:f9:3f:99:7a:95:99:9d:b2:36: e3:07:d5:2c:f1:2c:86:d9:44:77:06:a2:65:1f:b8:b3:06:18: 05:bf:6d:bd:d6:19:43:ad:a5:82:36:62:36:4e:38:3c:05:77: 08:3a:da:41:d9:1e:49:ac:83:35:ab:3b:47:5a:49:48:26:c0: 49:0b:e5:d4:17:b9:1a:d3:9c:7f:da:e3:3b:96:67:4b:50:26: eb:04:53:1f:be:6d:1d:b0:bc:25:22:9f:ff:63:54:92:c1:a2: 3e:e2:47:b2:20:c6:7d:0f:54:98:e6:6e:0b:c3:c2:97:f2:a3: 8a:75:91:a2:ec:a0:d6:ee:46:fc:35:6c:93:19:ea:47:a9:44: eb:af:d7:0a:38:d9:da:44:94:24:61:58:02:ef:cb:c8:63:31: 4a:d3:0a:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW0bnLGLOY7Qxc+1DhaxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2E1M2FlODQ0MjIzNjc1N2E3ODA2NmU0ZTIxNzMzZjc1 ODQwN2EwHhcNMjUxMjIxMTAwMTIyWhcNMjUxMjIyMTAwMTIyWjAzMTEwLwYDVQQD EyhjM2RiNzkzZTgyZWNkZTNhY2FiZjI5ZGI4MzhhZjRjZThhNjQ1YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xdsy89xSRcdFjMVc+iOhNpl2SF+ we+UrC1RviuyW/mv+kRVXIa03bUrpi6b7Uv//pg9hTVH5OYaKtgQlR2xgS3ybDJ4 0Dp1uGw4tNhDxTRI5OPg/82/RYq+Rc+4g0V3T48EJO9ilAIfZoc31+Oqdrtpt0C5 DRxDc5iO2Am/l2Y856wysV3mdS8+UdNbWHxvc+X1NLDuz2YhAzbKESYzsRpaqYlh NfZGCeiC+nYckEZr0Y9MUADUQd1WJHey1zPQoMnbTLwjAHdHj2s6HgviKTZxfRAC Jy7gpcMUze5wf+TmPgPg/YG1PYwri3K2YeMh9WydzH4KWUIWSntLUTHj9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPbeT6C7N46yr8p24OK9M6KZFsmMB8GA1UdIwQY MBaAFNfKU66EQiNnV6eAZuTiFzP3WEB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWIt OGM0OTgwNzc1NzhmLzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWItOGM0OTgwNzc1Nzhm LzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSMn+dUX 03z8S75UCQ+3RfObyWEmZi88km585aYRCifbHor+S2ZQUbl0/I2a1Nu8fRzarZoX m9Cj+eudn7EdpqElw22fyyx6KBUGsRyZD1pLELK6jSnmdN/UfIbX0+E8RoDt+T+Z epWZnbI24wfVLPEshtlEdwaiZR+4swYYBb9tvdYZQ62lgjZiNk44PAV3CDraQdke SayDNas7R1pJSCbASQvl1Be5GtOcf9rjO5ZnS1Am6wRTH75tHbC8JSKf/2NUksGi PuJHsiDGfQ9UmOZuC8PCl/KjinWRouyg1u5G/DVskxnqR6lE66/XCjjZ2kSUJGFY Au/LyGMxStMKtQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:56 2025 by rpki-client