This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json) Hash identifier: zSDDvOgv+TKkty+RTrLjx8UnpVxO5kzdKLBzN7WNiX8= Subject key identifier: AB:65:F0:95:00:1F:72:10:98:2A:FB:5D:41:38:4E:1C:2A:8E:41:FC Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Certificate serial: 019B3BD91606300D39D45D88F0DADA4FB880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 13:00:41 +0000 Manifest this update: Sat 20 Dec 2025 13:00:41 +0000 Manifest next update: Sun 21 Dec 2025 13:00:41 +0000 Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=) 2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=) 3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: TaXMLs03UMUTwuEeKiWBEiupjCRh2DEhiFRJdeOjhR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:16:06:30:0d:39:d4:5d:88:f0:da:da:4f:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Validity Not Before: Dec 20 13:00:41 2025 GMT Not After : Dec 21 13:00:41 2025 GMT Subject: CN=ab65f095001f7210982afb5d41384e1c2a8e41fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:36:c0:39:55:ab:d8:36:c8:4d:8a:8d:ae: db:bd:57:70:e8:bc:c3:c2:e2:a2:4c:36:7e:1f:87: 73:a0:9c:93:bc:5c:c7:ea:ea:cc:93:6e:c9:2e:a4: 64:1f:4f:7a:00:ac:a8:16:de:24:49:f2:dd:c6:90: 54:71:35:6e:e4:c5:dd:73:5a:3e:c3:c2:3c:b2:c9: b5:4d:97:5d:a1:40:d5:1b:67:91:aa:e6:fe:8a:df: b8:ef:6f:f2:b9:f5:fd:66:5e:04:a3:cc:84:6c:52: ae:19:26:70:22:07:a8:b0:c8:66:25:4f:e0:72:0a: 40:ff:ce:4a:2a:f5:80:4b:ed:e0:49:49:26:da:71: 70:b0:99:5c:f2:56:33:3d:d1:38:4a:4b:a7:66:3e: 9c:04:f8:98:ca:28:15:02:ee:7e:c5:c7:c5:8b:38: e4:ce:65:8e:30:7e:81:5f:dd:1e:04:f5:0a:d5:3e: 6b:4f:57:d2:a5:1a:bc:7f:8a:b2:53:11:ae:df:ae: 39:5b:80:a7:9b:c7:08:9d:15:ea:6f:d4:c1:fc:9d: 75:27:11:be:65:cd:16:61:1d:6c:83:26:f3:23:fb: 7f:69:8b:d2:15:f6:ff:58:1b:5e:20:7c:63:0f:4b: bd:d1:48:b3:f6:8d:8f:7a:94:3b:75:e0:0e:73:2d: 8f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:65:F0:95:00:1F:72:10:98:2A:FB:5D:41:38:4E:1C:2A:8E:41:FC X509v3 Authority Key Identifier: keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:50:af:fa:77:a0:bf:17:a1:73:69:49:0a:35:38:50:ef:9e: 03:bc:1a:5e:a3:df:cf:7f:e0:11:36:2d:85:75:1e:dd:68:e0: 01:2b:39:56:3a:cb:35:e9:5a:13:e6:be:4a:90:65:02:ab:6e: 9a:98:a9:9d:61:15:fe:11:1c:44:34:b3:dc:7a:b6:03:5c:32: 25:c2:97:b4:b6:97:04:53:83:4d:63:f0:6f:99:82:14:9b:b9: cf:2f:53:82:d7:bd:3d:90:e7:26:26:53:e6:d6:d3:ad:c8:c2: e3:90:ac:60:07:ad:21:06:91:d7:a8:dc:32:1b:99:85:3f:9a: 66:05:41:55:11:70:f4:0d:80:ac:c7:c6:fa:8a:75:ac:bb:ed: b1:ee:ea:a2:78:61:15:0f:79:8d:31:9f:7f:c0:2b:5d:cc:53: 15:89:ea:aa:db:5a:a7:a2:93:04:8b:9d:d7:0a:ab:3f:36:fb: cc:2c:ef:1b:fd:a0:a4:a7:47:7e:47:1f:24:83:bf:0e:80:e9: 8a:87:cd:52:68:b3:1a:7e:19:bb:53:01:43:4a:4b:c6:8f:6c: 40:f1:69:6a:18:4c:01:ad:fd:d9:00:f6:db:12:54:44:3f:63: d5:ad:cb:c7:28:57:66:b7:34:01:b5:c3:03:ab:a4:30:06:57: b0:02:dc:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72RYGMA051F2I8NraT7iAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx YzRlYWYwHhcNMjUxMjIwMTMwMDQxWhcNMjUxMjIxMTMwMDQxWjAzMTEwLwYDVQQD EyhhYjY1ZjA5NTAwMWY3MjEwOTgyYWZiNWQ0MTM4NGUxYzJhOGU0MWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDs2wDlVq9g2yE2Kja7bvVdw6LzD wuKiTDZ+H4dzoJyTvFzH6urMk27JLqRkH096AKyoFt4kSfLdxpBUcTVu5MXdc1o+ w8I8ssm1TZddoUDVG2eRqub+it+472/yufX9Zl4Eo8yEbFKuGSZwIgeosMhmJU/g cgpA/85KKvWAS+3gSUkm2nFwsJlc8lYzPdE4SkunZj6cBPiYyigVAu5+xcfFizjk zmWOMH6BX90eBPUK1T5rT1fSpRq8f4qyUxGu3645W4Cnm8cInRXqb9TB/J11JxG+ Zc0WYR1sgybzI/t/aYvSFfb/WBteIHxjD0u90Uiz9o2PepQ7deAOcy2PvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtl8JUAH3IQmCr7XUE4ThwqjkH8MB8GA1UdIwQY MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt Yzc0M2NiNmQyZmMzLzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFCv+neg vxehc2lJCjU4UO+eA7waXqPfz3/gETYthXUe3WjgASs5VjrLNelaE+a+SpBlAqtu mpipnWEV/hEcRDSz3Hq2A1wyJcKXtLaXBFODTWPwb5mCFJu5zy9Tgte9PZDnJiZT 5tbTrcjC45CsYAetIQaR16jcMhuZhT+aZgVBVRFw9A2ArMfG+op1rLvtse7qonhh FQ95jTGff8ArXcxTFYnqqttap6KTBIud1wqrPzb7zCzvG/2gpKdHfkcfJIO/DoDp iofNUmizGn4Zu1MBQ0pLxo9sQPFpahhMAa392QD22xJURD9j1a3LxyhXZrc0AbXD A6ukMAZXsALc0A== -----END CERTIFICATE-----Generated at Sat Dec 20 15:31:37 2025 by rpki-client