This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json) Hash identifier: nCNNhwZPlOLStf136hBoolcwaOcS6+CQR+6+Q/1qu4c= Subject key identifier: 96:AF:12:76:57:1B:82:2B:C9:8D:B5:F8:B0:CC:00:2C:12:D7:34:A0 Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Certificate serial: 019B318CA98607F607433AA21235C61AD5F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft Manifest number: 0DAE Signing time: Thu 18 Dec 2025 13:01:00 +0000 Manifest this update: Thu 18 Dec 2025 13:01:00 +0000 Manifest next update: Fri 19 Dec 2025 13:01:00 +0000 Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: FYb2kONsQt+a3IRVbPKXuzMDX7MSnizw3R+JrHo7XCE=) 2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:a9:86:07:f6:07:43:3a:a2:12:35:c6:1a:d5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Validity Not Before: Dec 18 13:01:00 2025 GMT Not After : Dec 19 13:01:00 2025 GMT Subject: CN=96af1276571b822bc98db5f8b0cc002c12d734a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:66:00:88:ef:50:e0:1b:72:54:a5:cf:69: e7:5a:46:72:b9:95:4f:66:84:51:a0:e2:07:fc:e5: 6a:f6:6e:87:3f:51:66:eb:25:16:41:96:9b:9e:2c: 15:78:57:60:34:da:51:f7:1c:3f:8f:b2:62:1c:2d: 21:f1:6b:db:7e:7b:d2:95:38:0f:9d:39:54:8a:7b: 23:a2:5c:7b:5e:8b:1c:c6:cd:24:6b:a0:2f:4f:8d: 46:c4:f8:a8:4e:87:56:5d:57:23:9b:00:6d:ce:b9: aa:54:76:d9:5b:58:18:5e:51:01:97:bf:78:5f:5a: 15:29:c3:51:f8:c1:31:04:5e:e2:66:e8:d5:65:1f: 39:23:59:49:63:42:1b:cc:ea:f3:d7:00:11:94:9d: ac:2a:79:1a:07:60:8d:03:01:81:a6:06:4b:94:9f: 65:a4:a7:98:af:41:e0:a9:b1:4a:3d:ec:36:d0:cc: 01:6e:2b:38:b5:bb:6b:93:75:e7:68:d6:da:8e:c5: 2c:95:a9:6f:4a:b8:47:1c:35:19:ef:35:e7:cb:f1: 1c:83:a9:14:c8:df:18:0b:77:16:a6:85:73:3e:a3: e2:44:56:e0:21:3b:70:a9:09:81:a2:39:c4:e4:e2: 18:87:3a:11:d9:a2:2d:bc:ca:72:5b:9c:56:65:b5: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AF:12:76:57:1B:82:2B:C9:8D:B5:F8:B0:CC:00:2C:12:D7:34:A0 X509v3 Authority Key Identifier: keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:33:9b:b2:2b:1b:37:80:27:d1:98:05:31:01:7a:18:ee:68: de:28:ec:53:c8:b2:80:d5:0b:8f:5a:01:5a:4b:df:18:c5:f8: 4a:27:c4:b9:3f:41:7d:c7:16:e8:e5:5e:ad:ed:15:56:86:2b: bb:94:f9:15:11:31:d6:28:11:62:28:d6:e6:88:0c:bf:75:9d: ea:04:2c:7b:3d:6f:50:a3:27:18:18:cf:4b:b0:56:90:d7:ea: e6:d7:17:18:ed:d7:8f:46:51:71:96:28:20:11:09:45:2a:d4: 66:0d:4e:74:f7:91:4a:f4:84:d9:04:83:6c:69:90:a4:b5:e1: d9:f6:9e:b5:84:ac:d2:53:22:1d:40:30:96:71:9b:02:76:fe: f6:f5:d7:d2:21:3a:b1:fe:91:ed:d9:89:96:67:7d:d7:db:7a: 33:ed:f5:a7:64:bb:88:80:5b:d0:6f:bb:ce:d7:21:70:11:61: 2b:da:ed:ae:2a:70:af:bd:4b:26:11:9d:c8:4a:c6:eb:26:4a: ea:51:b8:18:52:79:0f:9f:fa:d7:80:ae:b6:22:c7:ec:38:58: 9d:b1:66:0e:4d:38:58:7f:6b:13:1e:8a:7b:89:75:f9:9e:b8: 0a:9d:b3:91:81:c0:00:07:27:22:f7:be:46:ee:8f:13:e9:56: 29:7a:c1:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjKmGB/YHQzqiEjXGGtX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzQ3NTQwM2ZkZDkwMzgxODkxZTVhMGMzMjY2YjQ3OGRk OGNhMzUwHhcNMjUxMjE4MTMwMTAwWhcNMjUxMjE5MTMwMTAwWjAzMTEwLwYDVQQD Eyg5NmFmMTI3NjU3MWI4MjJiYzk4ZGI1ZjhiMGNjMDAyYzEyZDczNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfxmAIjvUOAbclSlz2nnWkZyuZVP ZoRRoOIH/OVq9m6HP1Fm6yUWQZabniwVeFdgNNpR9xw/j7JiHC0h8WvbfnvSlTgP nTlUinsjolx7Xoscxs0ka6AvT41GxPioTodWXVcjmwBtzrmqVHbZW1gYXlEBl794 X1oVKcNR+MExBF7iZujVZR85I1lJY0IbzOrz1wARlJ2sKnkaB2CNAwGBpgZLlJ9l pKeYr0HgqbFKPew20MwBbis4tbtrk3XnaNbajsUslalvSrhHHDUZ7zXny/Ecg6kU yN8YC3cWpoVzPqPiRFbgITtwqQmBojnE5OIYhzoR2aItvMpyW5xWZbXzbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJavEnZXG4IryY21+LDMACwS1zSgMB8GA1UdIwQY MBaAFNfEdUA/3ZA4GJHloMMma0eN2Mo1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWIt N2FjOWUyY2U0ZTMzLzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85NzRjNzAtZTEzYy00Njk5LWIzMWItN2FjOWUyY2U0ZTMz LzEvMThSMVFEX2RrRGdZa2VXZ3d5WnJSNDNZeWpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczObsisb N4An0ZgFMQF6GO5o3ijsU8iygNULj1oBWkvfGMX4SifEuT9BfccW6OVere0VVoYr u5T5FREx1igRYijW5ogMv3Wd6gQsez1vUKMnGBjPS7BWkNfq5tcXGO3Xj0ZRcZYo IBEJRSrUZg1OdPeRSvSE2QSDbGmQpLXh2faetYSs0lMiHUAwlnGbAnb+9vXX0iE6 sf6R7dmJlmd919t6M+31p2S7iIBb0G+7ztchcBFhK9rtripwr71LJhGdyErG6yZK 6lG4GFJ5D5/614CutiLH7DhYnbFmDk04WH9rEx6Ke4l1+Z64Cp2zkYHAAAcnIve+ Ru6PE+lWKXrBIw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:06:26 2025 by rpki-client