This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json) Hash identifier: VCvEt1ekLJDymcbpw1klffNHwyQawAfkQGj9B4nJ/Io= Subject key identifier: 50:1B:6E:41:80:5E:6E:39:61:A9:ED:6D:24:CB:DA:A6:B0:8E:A8:C6 Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a Certificate serial: 019AF12D89F9FF871D540CD65DB148F43038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft Manifest number: 12E9 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: ZQSNRbwW9f377UCGX1F+NdYOBp2dXgxis9upmhwenSw=) 2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:89:f9:ff:87:1d:54:0c:d6:5d:b1:48:f4:30:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=501b6e41805e6e3961a9ed6d24cbdaa6b08ea8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:ed:eb:b0:86:6e:49:0f:10:f7:80:1e:66: e5:49:ae:23:a7:d3:ed:bb:92:11:40:06:da:1d:85: 80:97:18:d6:08:05:65:cd:74:8b:d5:cd:9c:37:dd: 86:55:d5:2d:b6:9e:7d:ed:6c:17:78:23:d9:36:64: 06:69:df:19:69:c0:20:17:44:5e:ba:4c:cd:28:9d: 34:bd:93:d6:72:b5:bd:57:af:14:1a:6a:87:b4:c4: 06:1b:f6:45:37:fe:15:b9:0b:a1:58:9f:07:c3:db: 5a:71:65:a8:6b:fd:27:03:0c:ae:41:e1:5e:43:03: 4a:5e:c1:ec:f5:65:1e:b2:57:9a:fb:e0:16:20:14: 06:ae:57:3f:94:59:36:1e:08:05:79:e0:5a:c0:34: 0b:18:8a:a9:c9:57:4b:97:05:43:b1:17:35:6c:9a: f0:96:4d:7e:11:39:37:cf:5a:57:2c:09:97:9d:34: 9a:34:7b:de:bb:c2:dd:75:96:5e:bd:09:ef:9f:ff: a9:12:f1:e4:59:28:04:8e:cd:8f:37:14:a5:f8:e4: 42:27:dc:42:a6:83:d6:07:9f:28:b6:7a:8c:b6:78: 79:25:38:5b:43:da:a4:7e:55:0a:7c:e8:6c:8d:a2: 21:ee:da:e2:d4:7d:e1:f8:1e:71:04:67:82:1c:cb: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1B:6E:41:80:5E:6E:39:61:A9:ED:6D:24:CB:DA:A6:B0:8E:A8:C6 X509v3 Authority Key Identifier: keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e7:34:6b:a3:84:20:27:2b:77:06:6c:48:48:a7:e2:07:d9: ff:4c:e9:b2:7e:da:20:cb:62:b9:6b:b3:4e:89:f6:f3:9f:29: 6a:08:9a:41:bc:7f:b7:e4:de:3c:14:e2:53:7e:c1:b1:e7:91: c8:6e:7e:39:73:9b:d8:98:6b:bb:8b:03:7b:de:61:22:9c:67: fc:41:e6:80:3a:91:76:45:b9:e2:a9:b5:28:04:c1:8f:92:94: 0b:6b:92:b6:c0:2f:a0:d6:15:80:b0:f3:53:d7:58:9b:5e:aa: d1:95:49:ed:56:f1:49:15:31:2d:a4:ec:ee:b5:f3:3e:10:f9: 11:39:fc:8a:76:7f:28:b4:f8:90:3b:4c:ad:15:8c:a6:97:b4: ec:f0:a1:7d:bd:6b:d0:3d:0c:c9:f6:36:1e:fd:56:21:0d:53: 0c:65:ac:ec:fe:e3:eb:a5:41:de:cf:66:13:2c:70:70:7f:23: 50:47:1f:ad:44:9d:12:ba:28:1d:f8:ef:01:cd:46:50:58:29: 9d:60:6b:ad:a3:55:f2:cb:ca:4e:5c:fa:76:5d:ef:aa:48:e4: 52:f6:6f:25:3c:43:42:11:c7:a1:4c:d9:89:f2:ca:f7:cb:c2: 5b:d1:77:b6:06:23:bc:45:bb:5f:3d:57:9f:b3:93:62:5f:a1: 4c:f3:46:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYn5/4cdVAzWXbFI9DA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2E1M2FlODQ0MjIzNjc1N2E3ODA2NmU0ZTIxNzMzZjc1 ODQwN2EwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD Eyg1MDFiNmU0MTgwNWU2ZTM5NjFhOWVkNmQyNGNiZGFhNmIwOGVhOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zrt67CGbkkPEPeAHmblSa4jp9Pt u5IRQAbaHYWAlxjWCAVlzXSL1c2cN92GVdUttp597WwXeCPZNmQGad8ZacAgF0Re ukzNKJ00vZPWcrW9V68UGmqHtMQGG/ZFN/4VuQuhWJ8Hw9tacWWoa/0nAwyuQeFe QwNKXsHs9WUeslea++AWIBQGrlc/lFk2HggFeeBawDQLGIqpyVdLlwVDsRc1bJrw lk1+ETk3z1pXLAmXnTSaNHveu8LddZZevQnvn/+pEvHkWSgEjs2PNxSl+ORCJ9xC poPWB58otnqMtnh5JThbQ9qkflUKfOhsjaIh7tri1H3h+B5xBGeCHMvOdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAbbkGAXm45YantbSTL2qawjqjGMB8GA1UdIwQY MBaAFNfKU66EQiNnV6eAZuTiFzP3WEB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWIt OGM0OTgwNzc1NzhmLzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWItOGM0OTgwNzc1Nzhm LzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOc0a6OE ICcrdwZsSEin4gfZ/0zpsn7aIMtiuWuzTon2858pagiaQbx/t+TePBTiU37BseeR yG5+OXOb2Jhru4sDe95hIpxn/EHmgDqRdkW54qm1KATBj5KUC2uStsAvoNYVgLDz U9dYm16q0ZVJ7VbxSRUxLaTs7rXzPhD5ETn8inZ/KLT4kDtMrRWMppe07PChfb1r 0D0MyfY2Hv1WIQ1TDGWs7P7j66VB3s9mEyxwcH8jUEcfrUSdErooHfjvAc1GUFgp nWBrraNV8svKTlz6dl3vqkjkUvZvJTxDQhHHoUzZifLK98vCW9F3tgYjvEW7Xz1X n7OTYl+hTPNGzA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:51 2025 by rpki-client