This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json) Hash identifier: IAo0XydnBSrbpSkzwMbSvVkwzZv9DSOcmXDPYGv8GPo= Subject key identifier: CB:C0:BD:0B:07:11:F4:95:B1:9C:31:17:98:C0:AA:57:25:88:3B:6A Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48 Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48 Certificate serial: 019B2D0BE61B7527D1144ADFBD5557E65A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 16:01:52 +0000 Manifest this update: Wed 17 Dec 2025 16:01:52 +0000 Manifest next update: Thu 18 Dec 2025 16:01:52 +0000 Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: Osswoj7SCMfAg+MNF0G1gesYXugUvFmt1N4n7gvwRgc=) 2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:e6:1b:75:27:d1:14:4a:df:bd:55:57:e6:5a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48 Validity Not Before: Dec 17 16:01:52 2025 GMT Not After : Dec 18 16:01:52 2025 GMT Subject: CN=cbc0bd0b0711f495b19c311798c0aa5725883b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:90:90:df:72:9c:7a:26:0f:99:d1:a0:a8: 0a:ef:c8:2a:69:21:32:84:62:88:b8:a3:f7:69:06: 22:1a:a9:50:79:a4:99:3a:be:9c:2c:8b:10:2c:51: 27:89:99:bf:b7:13:6b:39:b1:f2:90:97:f5:fc:d7: 73:28:91:d3:0b:d5:87:d8:df:e4:68:a3:84:4e:8e: de:06:76:9d:f5:2d:7b:40:64:c3:af:c2:0e:8b:e0: 1c:a4:f2:28:84:79:18:ce:02:8e:4e:75:92:4a:0a: 05:76:5e:71:45:17:7a:3d:24:bb:f8:b0:fd:06:69: 4b:c7:f8:83:0d:e6:51:58:3b:02:77:b6:75:6d:8c: 27:42:d3:f2:dd:95:3a:61:12:6c:f1:7b:20:93:2e: 63:99:8b:9f:1e:93:bf:d0:fc:40:3a:37:e7:eb:0f: dd:d2:43:a6:ba:3d:8b:86:fc:16:f8:6c:a8:b2:3e: f3:9e:e0:12:2a:4c:79:9b:c6:83:e7:43:4e:f6:e9: 68:9d:66:46:16:a5:ab:f1:69:29:57:98:ea:a5:50: 81:22:7a:5d:26:b4:70:19:14:0d:b7:7f:5c:3a:d9: 89:80:de:20:51:23:66:d9:ef:e6:25:b7:dd:a0:3e: 16:4d:6f:81:40:4e:82:09:56:52:e0:ed:f8:9d:aa: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C0:BD:0B:07:11:F4:95:B1:9C:31:17:98:C0:AA:57:25:88:3B:6A X509v3 Authority Key Identifier: keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d7:f2:66:75:08:ac:79:ef:e8:b7:40:7e:39:1f:fb:91:aa: b6:e3:20:12:9e:00:4a:af:eb:82:cb:8c:25:a5:10:e0:4a:46: d8:3a:1e:f7:5a:4a:ba:5c:30:3d:f6:4c:d4:29:fd:fc:b5:dc: 2c:ab:c4:b0:6b:7b:2f:65:5a:84:2f:d9:2a:b4:35:4e:b8:fc: ce:e7:e0:b7:35:e2:4f:da:cc:67:ad:cd:32:4f:3e:b5:8c:25: 80:29:52:3c:1a:c8:cc:c2:f8:e6:0d:1d:3e:b2:24:2c:54:46: e9:ef:c0:e3:ee:4d:f6:5f:f4:35:32:07:c2:81:1a:e1:92:37: 11:2c:fe:03:7e:fa:25:1f:cb:d0:7c:ab:ef:f9:3e:84:77:87: 9d:e4:c4:21:c1:a9:bb:41:60:61:52:cc:1c:47:f6:7e:b4:13: c1:f5:5c:40:39:94:4b:05:44:d1:62:8e:4c:cd:65:c6:88:c5: 86:2b:7b:62:d9:7b:83:39:f6:44:82:42:12:b1:6c:9b:e5:01: 4e:cf:5d:df:0c:9d:31:67:3a:18:c2:bb:82:29:98:52:52:a6: bd:79:c5:9f:45:e4:fb:b9:fd:84:2f:97:1a:f8:64:75:0d:1f: 84:b4:56:ed:d1:52:0d:ae:8e:13:c7:cc:a1:0e:96:61:8f:2d: d6:4a:1a:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC+YbdSfRFErfvVVX5lpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzE0ODc2MWI2NzAwNTMyOWFhODkxMzVkMzVhZDIzNTE3 M2JjNDgwHhcNMjUxMjE3MTYwMTUyWhcNMjUxMjE4MTYwMTUyWjAzMTEwLwYDVQQD EyhjYmMwYmQwYjA3MTFmNDk1YjE5YzMxMTc5OGMwYWE1NzI1ODgzYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmaQkN9ynHomD5nRoKgK78gqaSEy hGKIuKP3aQYiGqlQeaSZOr6cLIsQLFEniZm/txNrObHykJf1/NdzKJHTC9WH2N/k aKOETo7eBnad9S17QGTDr8IOi+AcpPIohHkYzgKOTnWSSgoFdl5xRRd6PSS7+LD9 BmlLx/iDDeZRWDsCd7Z1bYwnQtPy3ZU6YRJs8Xsgky5jmYufHpO/0PxAOjfn6w/d 0kOmuj2LhvwW+Gyosj7znuASKkx5m8aD50NO9ulonWZGFqWr8WkpV5jqpVCBInpd JrRwGRQNt39cOtmJgN4gUSNm2e/mJbfdoD4WTW+BQE6CCVZS4O34naqXIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvAvQsHEfSVsZwxF5jAqlcliDtqMB8GA1UdIwQY MBaAFNfBSHYbZwBTKaqJE101rSNRc7xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmIt MDExNjUwZmJkNGM0LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmItMDExNjUwZmJkNGM0 LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNfyZnUI rHnv6LdAfjkf+5GqtuMgEp4ASq/rgsuMJaUQ4EpG2Doe91pKulwwPfZM1Cn9/LXc LKvEsGt7L2VahC/ZKrQ1Trj8zufgtzXiT9rMZ63NMk8+tYwlgClSPBrIzML45g0d PrIkLFRG6e/A4+5N9l/0NTIHwoEa4ZI3ESz+A376JR/L0Hyr7/k+hHeHneTEIcGp u0FgYVLMHEf2frQTwfVcQDmUSwVE0WKOTM1lxojFhit7Ytl7gzn2RIJCErFsm+UB Ts9d3wydMWc6GMK7gimYUlKmvXnFn0Xk+7n9hC+XGvhkdQ0fhLRW7dFSDa6OE8fM oQ6WYY8t1koaPA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:18 2025 by rpki-client