This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json) Hash identifier: 3D5RxMJygGXMQHYtjB0mnqbDlpdpSqxcKYsNRlgxkH8= Subject key identifier: 59:98:65:AB:8A:9D:06:4B:84:55:20:0C:0A:9A:EA:F3:E7:C3:46:7C Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Certificate serial: 019B5FE5882E5B109E1CBE9EB5D5D942BD38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft Manifest number: 08BF Signing time: Sat 27 Dec 2025 13:00:36 +0000 Manifest this update: Sat 27 Dec 2025 13:00:36 +0000 Manifest next update: Sun 28 Dec 2025 13:00:36 +0000 Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: bT1AcGnzBVevTzlt5cm66z0sLkQXGqihCXULPFpvI4Y=) 2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=) 3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e5:88:2e:5b:10:9e:1c:be:9e:b5:d5:d9:42:bd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Validity Not Before: Dec 27 13:00:36 2025 GMT Not After : Dec 28 13:00:36 2025 GMT Subject: CN=599865ab8a9d064b8455200c0a9aeaf3e7c3467c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:c2:5e:98:ef:44:5d:df:48:1b:db:64:d4: e1:f2:6b:64:67:aa:1c:f5:02:6d:9d:b2:92:d3:d9: 76:46:fe:3c:8c:99:be:f0:18:64:a3:4b:2d:1f:de: 82:51:bb:43:4a:ca:f8:59:69:76:2e:c6:dc:30:1c: 03:26:a3:c3:28:2a:fd:ae:5f:34:dd:c7:16:7e:9a: 78:a8:df:75:d8:eb:44:91:8c:c1:8e:50:79:9d:0f: 5f:d0:29:b7:d0:56:07:56:10:55:ea:6b:a2:25:26: 2a:70:49:c8:63:75:f6:21:4f:8b:7f:f5:8b:a7:06: 19:4a:bb:d8:15:e5:cf:66:c9:d9:4c:18:05:b5:66: ad:6a:f6:da:d1:cc:e3:43:46:5e:93:c0:06:f7:c5: 05:04:67:e7:26:95:d7:a2:2c:17:af:cb:a4:93:15: 44:64:00:f7:70:de:75:93:8c:ae:a8:23:a4:db:d0: 5d:3d:1e:84:3c:af:46:c1:5d:a8:c7:a7:2e:06:7c: b5:fe:8f:a5:d4:20:ee:36:ed:65:1a:98:0c:27:94: 2b:85:87:11:66:39:b3:4d:28:13:ab:07:7d:ca:2a: 2e:e1:82:21:14:62:b6:c7:13:0c:74:9c:c5:d3:16: 6a:1f:d2:af:fb:ec:2c:87:b7:39:12:28:ba:b9:c8: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:98:65:AB:8A:9D:06:4B:84:55:20:0C:0A:9A:EA:F3:E7:C3:46:7C X509v3 Authority Key Identifier: keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:59:64:62:65:8a:9c:db:4b:f0:bc:09:a3:26:d6:0c:b7:29: e9:9b:f5:5d:18:ae:c6:c1:ec:ba:d9:e6:19:93:a3:ed:ec:3a: b1:78:eb:25:f7:54:30:7c:8a:47:2f:c0:a6:7c:56:16:a9:f6: 19:48:9e:61:c3:55:98:e9:08:06:96:4f:4a:d5:e7:70:4f:d1: 03:e3:e6:78:db:f7:c6:1c:a3:c6:6a:2b:67:8d:42:a5:46:8b: 0a:4c:1c:f5:0a:33:69:c9:ad:93:73:e4:64:16:36:10:a0:5f: 9b:3d:26:7f:79:8e:5e:97:02:7c:ab:a8:60:8b:00:3a:e8:7d: 9f:69:0f:81:3e:f5:f3:93:0e:74:1f:72:52:d1:ea:a0:12:6b: c0:d3:c6:05:48:30:96:31:cf:69:ed:eb:9c:82:26:4e:1a:46: f3:61:72:20:ca:b6:8a:90:dd:5d:65:d5:bf:84:70:d0:4c:da: 74:f9:c1:27:ec:db:e0:04:51:b6:3e:f3:8e:fe:cc:dc:38:38: c2:e3:4d:29:51:ec:84:b3:b7:ff:e1:2f:23:a3:a2:ba:98:18: 17:18:d8:b2:44:5d:2e:88:f6:46:9b:b9:38:8c:7f:40:5b:8c: d1:57:9a:47:58:25:42:15:31:59:b5:70:60:bf:74:4d:ad:05: 6a:bb:db:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5YguWxCeHL6etdXZQr04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk NTkwNmIwHhcNMjUxMjI3MTMwMDM2WhcNMjUxMjI4MTMwMDM2WjAzMTEwLwYDVQQD Eyg1OTk4NjVhYjhhOWQwNjRiODQ1NTIwMGMwYTlhZWFmM2U3YzM0NjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9LCXpjvRF3fSBvbZNTh8mtkZ6oc 9QJtnbKS09l2Rv48jJm+8Bhko0stH96CUbtDSsr4WWl2LsbcMBwDJqPDKCr9rl80 3ccWfpp4qN912OtEkYzBjlB5nQ9f0Cm30FYHVhBV6muiJSYqcEnIY3X2IU+Lf/WL pwYZSrvYFeXPZsnZTBgFtWatavba0czjQ0Zek8AG98UFBGfnJpXXoiwXr8ukkxVE ZAD3cN51k4yuqCOk29BdPR6EPK9GwV2ox6cuBny1/o+l1CDuNu1lGpgMJ5QrhYcR ZjmzTSgTqwd9yiou4YIhFGK2xxMMdJzF0xZqH9Kv++wsh7c5Eii6ucjBtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmYZauKnQZLhFUgDAqa6vPnw0Z8MB8GA1UdIwQY MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVlkYmWK nNtL8LwJoybWDLcp6Zv1XRiuxsHsutnmGZOj7ew6sXjrJfdUMHyKRy/ApnxWFqn2 GUieYcNVmOkIBpZPStXncE/RA+PmeNv3xhyjxmorZ41CpUaLCkwc9Qozacmtk3Pk ZBY2EKBfmz0mf3mOXpcCfKuoYIsAOuh9n2kPgT7185MOdB9yUtHqoBJrwNPGBUgw ljHPae3rnIImThpG82FyIMq2ipDdXWXVv4Rw0EzadPnBJ+zb4ARRtj7zjv7M3Dg4 wuNNKVHshLO3/+EvI6OiupgYFxjYskRdLoj2Rpu5OIx/QFuM0VeaR1glQhUxWbVw YL90Ta0FarvbEQ== -----END CERTIFICATE-----Generated at Sat Dec 27 17:50:04 2025 by rpki-client