This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft File: 18thbM_g6Ga0J8CkXvQYGwmB5jE.mft (raw, json) Hash identifier: m8qRiYqtqdofBT/8UxpiKrAeQ3yWfPVYZ2TV6oCAXxw= Subject key identifier: 4C:1B:53:66:49:8F:34:42:24:6C:5B:60:AA:EE:A7:8F:56:57:2B:7C Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31 Certificate issuer: /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631 Certificate serial: 019AF12EDE2A9ECC5EC3623A719465102EED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft Manifest number: 1200 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: 18thbM_g6Ga0J8CkXvQYGwmB5jE.crl (hash: k99tdqDJAbbLuQIX4SCuKz8ci8jT1qNKOLBMRoIO3x8=) 2: ixnuzzyIGziCtrC0l3qz41OIrjQ.roa (hash: JSBHGZiyISoLK4HOeW+w9s4fRtop7E+RouVUw4Z0VAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:de:2a:9e:cc:5e:c3:62:3a:71:94:65:10:2e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631 Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=4c1b5366498f3442246c5b60aaeea78f56572b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:03:5f:e1:0d:ed:f4:d4:6b:c3:ae:46:ca: c4:8d:61:97:ef:cf:3b:c6:66:00:d0:76:14:ad:4c: ab:85:32:83:e1:ab:14:7e:b5:ec:55:8e:1a:78:4f: 22:67:0d:50:ac:f0:aa:3e:03:ea:d1:01:13:e1:18: c2:8b:d3:2d:b2:5d:70:64:d2:a9:fd:61:ae:ef:c7: d2:28:83:2f:ae:a7:2c:15:3b:39:ae:17:8c:b7:c4: 82:73:0c:e0:a6:14:a8:27:c6:fc:ec:37:76:39:24: c4:9d:8d:dc:9e:c5:f1:44:33:ef:8d:43:48:92:2b: 70:fe:3b:c0:84:3f:5e:5b:e3:4e:b4:1c:5b:72:29: 1b:68:98:77:cc:d2:32:09:4a:3b:19:a7:8e:6b:42: a1:8e:20:d0:54:d1:12:15:0e:51:40:0f:02:23:b1: 6e:d4:ae:f7:32:d8:b2:56:a0:e7:5f:48:9d:3f:92: dc:5b:7b:07:7d:a1:8e:ef:bb:54:f2:95:33:be:7a: dc:08:09:94:ac:08:53:5a:a8:00:22:59:77:3f:16: a6:9d:9c:1e:0c:7b:98:c0:f0:ac:b8:74:9f:81:01: 26:29:dc:f8:a9:db:93:75:99:99:be:33:35:1b:5e: da:5e:af:5f:1d:3f:c5:ba:54:c7:4e:9c:56:31:b9: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1B:53:66:49:8F:34:42:24:6C:5B:60:AA:EE:A7:8F:56:57:2B:7C X509v3 Authority Key Identifier: keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:dc:7c:9f:fb:e9:35:47:a6:38:c2:a7:05:e0:27:6d:9a:0d: 0b:39:04:41:9d:bb:eb:c5:d6:87:c0:d2:5b:5e:b4:22:1b:ca: 4c:b9:6c:21:2f:66:c2:5f:37:1f:da:5c:3e:9e:86:9a:1d:bd: 31:0a:be:ab:33:6e:d2:5a:9c:b5:e7:8c:44:f2:25:92:7b:37: 4b:4e:07:e8:88:77:49:bd:0e:fb:5a:99:8d:74:63:e4:59:4b: c7:44:cb:b1:06:58:7e:7a:17:83:7c:17:e1:ec:9e:92:9f:33: 13:ee:2f:8c:ec:f8:ab:c3:3b:5b:d3:e5:03:1d:70:e6:d2:17: 1d:76:fc:0c:04:78:81:20:cc:67:0b:01:c6:41:eb:47:8f:fe: dd:b9:81:8f:60:d2:3e:dc:00:24:6b:e8:e8:b1:d8:93:63:8f: 5e:f9:5b:03:ea:a1:d1:f9:1d:86:6a:3c:44:80:ae:1a:81:33: fd:88:48:3b:51:7f:9f:78:51:c9:d6:cd:0e:13:dc:ff:2e:f4: 9b:74:36:d8:b4:6d:37:55:ea:8a:93:2c:ba:8b:4f:2f:f3:82: 5f:5e:8c:66:f7:f6:76:bf:00:c9:ea:36:58:ef:3d:6e:e0:4a: b6:17:be:83:9e:53:a3:4d:df:13:63:0d:a8:b3:d9:f4:94:2d: c7:4c:25:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLt4qnsxew2I6cZRlEC7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2I2MTZjY2ZlMGU4NjZiNDI3YzBhNDVlZjQxODFiMDk4 MWU2MzEwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD Eyg0YzFiNTM2NjQ5OGYzNDQyMjQ2YzViNjBhYWVlYTc4ZjU2NTcyYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEsDX+EN7fTUa8OuRsrEjWGX7887 xmYA0HYUrUyrhTKD4asUfrXsVY4aeE8iZw1QrPCqPgPq0QET4RjCi9Mtsl1wZNKp /WGu78fSKIMvrqcsFTs5rheMt8SCcwzgphSoJ8b87Dd2OSTEnY3cnsXxRDPvjUNI kitw/jvAhD9eW+NOtBxbcikbaJh3zNIyCUo7GaeOa0KhjiDQVNESFQ5RQA8CI7Fu 1K73MtiyVqDnX0idP5LcW3sHfaGO77tU8pUzvnrcCAmUrAhTWqgAIll3PxamnZwe DHuYwPCsuHSfgQEmKdz4qduTdZmZvjM1G17aXq9fHT/FulTHTpxWMbnmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwbU2ZJjzRCJGxbYKrup49WVyt8MB8GA1UdIwQY MBaAFNfLYWzP4OhmtCfApF70GBsJgeYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTct M2U2MTk4YTUxMmUwLzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTctM2U2MTk4YTUxMmUw LzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNx8n/vp NUemOMKnBeAnbZoNCzkEQZ2768XWh8DSW160IhvKTLlsIS9mwl83H9pcPp6Gmh29 MQq+qzNu0lqcteeMRPIlkns3S04H6Ih3Sb0O+1qZjXRj5FlLx0TLsQZYfnoXg3wX 4eyekp8zE+4vjOz4q8M7W9PlAx1w5tIXHXb8DAR4gSDMZwsBxkHrR4/+3bmBj2DS PtwAJGvo6LHYk2OPXvlbA+qh0fkdhmo8RICuGoEz/YhIO1F/n3hRydbNDhPc/y70 m3Q22LRtN1XqipMsuotPL/OCX16MZvf2dr8Ayeo2WO89buBKthe+g55To03fE2MN qLPZ9JQtx0wl/g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:28 2025 by rpki-client