This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json) Hash identifier: DpfyZiYXH6URt2Qqt577j/NwhX9RUKDqN5XHasVUv0c= Subject key identifier: C1:E0:9A:50:2A:95:71:27:42:15:71:4A:AC:70:18:F0:30:E5:1F:18 Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Certificate serial: 019B6F58E69406118027FDCDFD22A53C6A76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft Manifest number: 08C7 Signing time: Tue 30 Dec 2025 13:00:55 +0000 Manifest this update: Tue 30 Dec 2025 13:00:55 +0000 Manifest next update: Wed 31 Dec 2025 13:00:55 +0000 Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: WLuLvYarfMYe3HpR995uI1wqOiS+aFH45D4c/duiueE=) 2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=) 3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:e6:94:06:11:80:27:fd:cd:fd:22:a5:3c:6a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Validity Not Before: Dec 30 13:00:55 2025 GMT Not After : Dec 31 13:00:55 2025 GMT Subject: CN=c1e09a502a9571274215714aac7018f030e51f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cf:3a:1c:95:96:e1:76:2b:bf:5d:d6:8d:d8: 7a:e2:33:f0:0b:51:e6:42:cb:a4:7c:60:27:7d:41: c2:47:28:0f:e6:28:ac:8a:35:aa:88:a8:0e:85:f0: a1:dd:1a:3e:4d:a4:d1:c7:28:7d:fb:59:ec:cd:9d: cb:a5:24:e0:2a:ec:77:df:15:c9:b8:43:b7:48:3c: 93:27:04:f1:be:4a:f0:df:b3:f6:0e:ab:d4:f9:37: 5a:26:f2:48:0c:2b:32:86:13:c3:61:b7:7b:11:9e: 57:ab:4a:96:ac:16:fe:ef:d9:2e:0c:c6:d6:11:de: 85:7c:19:07:22:f6:4a:d3:53:4c:c3:e6:49:ae:70: 0c:18:44:7b:52:50:64:9b:d1:21:1c:2b:85:8b:9e: 05:3b:a3:e9:d8:02:69:f4:5c:28:27:be:d9:af:b2: 28:c9:7c:e9:e6:d9:88:03:54:21:33:7a:6d:20:f2: 2a:7f:23:e1:4e:f3:d5:60:47:c0:78:67:9c:9e:6a: 3e:0f:f9:e5:45:2d:39:45:9c:5e:26:1e:e9:6e:c7: 60:5a:e0:04:7f:11:db:bf:83:08:9c:79:88:a7:c8: 07:7f:a5:29:09:87:92:35:57:36:1e:c1:9c:a9:27: d3:f4:2c:f1:18:7e:ac:0a:32:bb:9f:19:39:1e:0c: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E0:9A:50:2A:95:71:27:42:15:71:4A:AC:70:18:F0:30:E5:1F:18 X509v3 Authority Key Identifier: keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d8:53:a9:a0:63:cb:4d:06:1d:fe:f8:25:1f:ee:92:c0:1b: 16:2f:fb:45:bd:4c:f0:c8:eb:64:ca:73:79:15:aa:a0:fd:c9: 92:3f:fa:eb:5d:63:d2:5e:2a:d7:f0:33:64:36:68:b6:dc:33: 50:af:f4:30:30:14:60:80:71:95:5a:4a:32:13:68:c8:bd:df: 40:5d:ce:6d:a5:14:56:e1:6b:2d:e3:9c:ed:3a:42:71:22:3f: 5c:3a:fc:49:a4:29:87:00:c6:eb:03:f6:cf:94:8d:ee:c2:7a: 35:fb:9d:d2:00:64:80:b2:ea:a5:07:88:a3:b5:b1:2a:01:90: c5:f4:92:0e:95:32:66:73:0c:3e:70:23:45:33:ab:c0:0a:a5: df:ae:49:f8:83:6d:b0:4c:a6:df:51:b6:c6:0f:ac:63:0f:86: eb:74:e1:21:bb:c6:7b:c3:e6:f3:b8:ad:90:05:35:9c:f9:49: 8c:8c:86:39:1f:05:49:ef:4a:68:46:a6:a7:a6:90:90:28:0d: 49:da:cf:89:05:b7:b4:e8:50:a8:7e:88:79:a1:96:17:d4:ca: 1b:c2:8f:98:64:6a:a3:56:da:67:84:71:f2:3c:f8:6c:f7:83: 58:55:24:da:ec:d8:a2:c7:f8:02:6c:8f:ec:68:75:5b:e0:8f: e0:86:42:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWOaUBhGAJ/3N/SKlPGp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk NTkwNmIwHhcNMjUxMjMwMTMwMDU1WhcNMjUxMjMxMTMwMDU1WjAzMTEwLwYDVQQD EyhjMWUwOWE1MDJhOTU3MTI3NDIxNTcxNGFhYzcwMThmMDMwZTUxZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs86HJWW4XYrv13Wjdh64jPwC1Hm QsukfGAnfUHCRygP5iisijWqiKgOhfCh3Ro+TaTRxyh9+1nszZ3LpSTgKux33xXJ uEO3SDyTJwTxvkrw37P2DqvU+TdaJvJIDCsyhhPDYbd7EZ5Xq0qWrBb+79kuDMbW Ed6FfBkHIvZK01NMw+ZJrnAMGER7UlBkm9EhHCuFi54FO6Pp2AJp9FwoJ77Zr7Io yXzp5tmIA1QhM3ptIPIqfyPhTvPVYEfAeGecnmo+D/nlRS05RZxeJh7pbsdgWuAE fxHbv4MInHmIp8gHf6UpCYeSNVc2HsGcqSfT9CzxGH6sCjK7nxk5HgzjywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHgmlAqlXEnQhVxSqxwGPAw5R8YMB8GA1UdIwQY MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdhTqaBj y00GHf74JR/uksAbFi/7Rb1M8MjrZMpzeRWqoP3Jkj/6611j0l4q1/AzZDZottwz UK/0MDAUYIBxlVpKMhNoyL3fQF3ObaUUVuFrLeOc7TpCcSI/XDr8SaQphwDG6wP2 z5SN7sJ6Nfud0gBkgLLqpQeIo7WxKgGQxfSSDpUyZnMMPnAjRTOrwAql365J+INt sEym31G2xg+sYw+G63ThIbvGe8Pm87itkAU1nPlJjIyGOR8FSe9KaEamp6aQkCgN SdrPiQW3tOhQqH6IeaGWF9TKG8KPmGRqo1baZ4Rx8jz4bPeDWFUk2uzYosf4AmyP 7Gh1W+CP4IZC4Q== -----END CERTIFICATE-----Generated at Tue Dec 30 14:59:57 2025 by rpki-client