This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json) Hash identifier: qQs8UqlWNA5QQXU0plW3Vzd9zBh3ZyD86hDTxy4xjt8= Subject key identifier: B5:4E:BA:95:7C:2D:54:24:63:A1:12:7C:9E:CB:7E:04:F8:98:C0:58 Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Certificate serial: 019B3D237C9A375666347B02C6262F5DDEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft Manifest number: 08AD Signing time: Sat 20 Dec 2025 19:01:34 +0000 Manifest this update: Sat 20 Dec 2025 19:01:34 +0000 Manifest next update: Sun 21 Dec 2025 19:01:34 +0000 Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: 45DHqNG97Jpc5qOQMGLzE7ummQNnZE2yzkySBVl0BNo=) 2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=) 3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:7c:9a:37:56:66:34:7b:02:c6:26:2f:5d:de:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Validity Not Before: Dec 20 19:01:34 2025 GMT Not After : Dec 21 19:01:34 2025 GMT Subject: CN=b54eba957c2d542463a1127c9ecb7e04f898c058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:ff:17:b5:ac:59:25:0c:8b:fd:29:5c:91: 6f:db:05:ee:87:8d:48:d7:1a:4c:0f:50:5e:84:5e: 30:26:c5:6e:76:db:9c:1a:f0:e3:ea:92:9f:80:f6: 43:47:e4:d0:e2:05:3f:86:29:73:b6:64:0c:16:b3: 29:32:24:4d:e4:5e:c7:ef:2a:92:57:27:f1:5e:e9: c2:1a:a7:ec:14:a8:b9:73:b6:a5:8b:b4:6b:ed:55: 2c:f0:21:44:13:f4:59:4a:6c:39:61:9f:aa:ed:e5: 48:9a:5d:d7:ac:c1:bf:6a:2f:db:2a:73:5c:ae:85: 4d:24:d3:3c:75:1a:1a:05:87:b9:d7:4d:89:a5:a1: 09:94:86:f0:20:e6:d4:c8:78:a9:2d:80:bb:fe:d3: 58:cc:0d:05:0c:76:50:ee:de:6a:2c:af:1e:81:e6: 6f:46:ec:cc:3e:3c:88:c4:25:0f:d7:33:79:33:9c: b5:70:33:06:6f:a0:2f:a3:94:76:b0:78:4d:67:94: d4:ec:e6:3d:77:5d:5e:b8:a8:f0:b6:46:a4:d6:ca: 39:0f:76:02:47:72:0c:c4:e8:25:7d:20:1f:8d:08: b4:2d:4f:8d:54:62:f3:34:98:43:c0:db:61:99:13: 4c:c3:73:91:11:ac:c5:b9:d1:8f:d0:c9:25:1d:2a: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4E:BA:95:7C:2D:54:24:63:A1:12:7C:9E:CB:7E:04:F8:98:C0:58 X509v3 Authority Key Identifier: keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:83:26:a8:22:0c:63:9f:cc:dc:28:80:f5:ed:86:f8:c5:ed: 64:5d:24:dc:18:61:16:98:fc:e3:5c:12:cc:59:e4:e0:09:09: 24:4f:c8:25:9e:a0:c7:c7:72:6f:7a:98:c8:12:ce:0a:60:b1: 92:4f:50:9a:83:4a:fd:bf:1d:8e:97:08:e1:4b:2d:67:6e:85: d4:98:cf:a1:a5:56:91:b0:6f:3e:c9:a5:8e:db:ca:de:ec:f6: 7c:c7:8c:0d:15:3b:04:8e:b6:83:66:7a:65:9f:d6:1b:1f:7b: 0d:55:e1:ec:ec:44:b9:1f:53:cf:90:d7:c2:10:41:0e:f4:81: f4:e3:06:ce:73:01:2b:a6:f0:1f:69:21:c1:59:e9:24:0b:ee: 2d:ae:5d:94:39:98:95:ee:ed:d3:d3:13:9a:d1:0e:1b:3d:04: 52:ba:b7:e7:48:49:4c:b8:4b:91:8b:9a:2b:6e:ac:8c:a8:33: c8:03:72:61:95:fe:67:04:8c:de:f6:c1:fd:62:71:b2:3a:88: 8c:6b:1d:ca:1c:d5:61:9c:06:f7:98:92:b4:a4:c8:c0:ff:94: f5:09:09:7b:3d:1d:8a:09:2e:90:07:14:9f:66:6e:49:e4:a2: 37:29:5e:0b:73:a7:2d:45:76:57:98:13:20:bd:00:50:18:0e: a8:8e:d9:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I3yaN1ZmNHsCxiYvXd7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk NTkwNmIwHhcNMjUxMjIwMTkwMTM0WhcNMjUxMjIxMTkwMTM0WjAzMTEwLwYDVQQD EyhiNTRlYmE5NTdjMmQ1NDI0NjNhMTEyN2M5ZWNiN2UwNGY4OThjMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL3/F7WsWSUMi/0pXJFv2wXuh41I 1xpMD1BehF4wJsVudtucGvDj6pKfgPZDR+TQ4gU/hilztmQMFrMpMiRN5F7H7yqS VyfxXunCGqfsFKi5c7ali7Rr7VUs8CFEE/RZSmw5YZ+q7eVIml3XrMG/ai/bKnNc roVNJNM8dRoaBYe5102JpaEJlIbwIObUyHipLYC7/tNYzA0FDHZQ7t5qLK8egeZv RuzMPjyIxCUP1zN5M5y1cDMGb6Avo5R2sHhNZ5TU7OY9d11euKjwtkak1so5D3YC R3IMxOglfSAfjQi0LU+NVGLzNJhDwNthmRNMw3OREazFudGP0MklHSp6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVOupV8LVQkY6ESfJ7LfgT4mMBYMB8GA1UdIwQY MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoMmqCIM Y5/M3CiA9e2G+MXtZF0k3BhhFpj841wSzFnk4AkJJE/IJZ6gx8dyb3qYyBLOCmCx kk9QmoNK/b8djpcI4UstZ26F1JjPoaVWkbBvPsmljtvK3uz2fMeMDRU7BI62g2Z6 ZZ/WGx97DVXh7OxEuR9Tz5DXwhBBDvSB9OMGznMBK6bwH2khwVnpJAvuLa5dlDmY le7t09MTmtEOGz0EUrq350hJTLhLkYuaK26sjKgzyANyYZX+ZwSM3vbB/WJxsjqI jGsdyhzVYZwG95iStKTIwP+U9QkJez0digkukAcUn2ZuSeSiNyleC3OnLUV2V5gT IL0AUBgOqI7Zlg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:22 2025 by rpki-client