This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json) Hash identifier: 6LOd87b7o3uLtV6nwwGCtpxiHQ2eoOZRJadBp8N672U= Subject key identifier: 69:B5:C6:13:14:E3:48:C4:24:87:92:35:9A:E3:42:1C:09:26:41:7E Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Certificate serial: 019AF1D23DF0863BC520E55B6384BED4B781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft Manifest number: 0886 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: yJx9m/MzicTnD6TmskOw3zkXHnlvSOAPke5MdN+jWRI=) 2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=) 3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:f0:86:3b:c5:20:e5:5b:63:84:be:d4:b7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=69b5c61314e348c4248792359ae3421c0926417e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:4d:2d:29:31:ac:d3:77:1d:d9:cf:b2:cd: dd:b5:35:fb:5b:a6:79:70:57:45:b0:d7:81:71:55: 46:f8:7a:3a:1c:73:14:53:f3:4a:86:f3:b1:a7:4e: 81:ad:a0:c0:52:ac:ed:a0:41:11:c8:04:28:20:60: 5f:02:d2:40:dc:4b:45:d3:f3:26:07:35:d6:47:6f: 78:4a:8a:18:3e:b8:54:f2:c5:50:55:38:b1:1b:c9: c8:f0:b9:71:0f:cc:e2:9a:4b:7a:09:94:8b:0a:63: fc:75:9b:48:fe:c7:d9:4e:bd:0f:b7:87:3a:8c:c4: b1:f5:49:db:18:be:ac:98:17:54:63:3c:38:86:96: 49:8b:35:9c:40:34:5b:68:bf:6d:46:b2:08:52:da: 57:8d:bc:36:a1:aa:59:aa:20:d4:a9:7f:4a:a2:24: 0f:0a:58:8d:77:bd:79:4d:bd:85:46:dc:b9:39:12: 35:5f:21:5a:ba:80:3d:8b:1a:7c:36:c6:6a:ed:83: f7:e1:c8:33:e0:ec:9c:18:27:4e:a5:76:31:3c:46: 09:1c:7e:fe:3e:c3:64:1d:71:84:9f:4a:47:d9:3f: ff:91:ae:7a:36:24:63:a4:fb:24:3e:25:bf:65:27: f6:d9:dd:26:26:dc:6b:87:38:80:20:f2:50:41:59: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B5:C6:13:14:E3:48:C4:24:87:92:35:9A:E3:42:1C:09:26:41:7E X509v3 Authority Key Identifier: keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:88:50:fd:fd:fe:06:4e:26:57:f0:dd:0c:42:ca:43:33:fb: ec:4d:95:b3:2f:1a:49:70:ae:82:24:c4:16:a4:af:57:a5:31: 04:88:43:0a:f9:c5:d2:66:ea:d7:75:4c:14:5f:1c:50:5e:4a: 42:ec:5c:d3:57:0b:84:c7:0f:80:c8:37:17:26:cb:98:d1:d8: 8e:87:5f:8f:96:26:32:03:3e:93:f0:fd:50:50:d6:b8:85:64: 74:f3:29:d9:97:80:c8:c7:8b:f9:b2:e0:25:c2:de:e4:65:54: 1c:df:70:07:c3:cc:ec:6b:25:81:17:c4:65:92:89:d1:fe:58: af:97:e9:3b:02:c7:a4:b1:01:63:fb:6d:97:71:6a:fc:0b:c6: a5:8d:c2:17:da:bb:c1:92:eb:52:af:dc:b2:ce:88:ce:30:be: 71:72:3c:04:d3:06:c5:55:0b:28:da:9a:66:18:85:72:d0:51: 37:0b:5f:d4:da:ed:91:af:4e:83:c3:c6:57:7c:b6:66:a0:43: 08:ea:5c:81:9f:d8:eb:93:67:81:a9:b0:75:71:e3:91:8a:50: a4:06:32:d7:a4:2e:9f:dc:ab:10:b5:f2:1c:26:bc:e7:87:02: 92:89:40:9d:91:71:33:bb:e4:42:3b:0e:ff:23:09:3d:f2:7d: 8f:ec:f1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j3whjvFIOVbY4S+1LeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk NTkwNmIwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg2OWI1YzYxMzE0ZTM0OGM0MjQ4NzkyMzU5YWUzNDIxYzA5MjY0MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMhNLSkxrNN3HdnPss3dtTX7W6Z5 cFdFsNeBcVVG+Ho6HHMUU/NKhvOxp06BraDAUqztoEERyAQoIGBfAtJA3EtF0/Mm BzXWR294SooYPrhU8sVQVTixG8nI8LlxD8zimkt6CZSLCmP8dZtI/sfZTr0Pt4c6 jMSx9UnbGL6smBdUYzw4hpZJizWcQDRbaL9tRrIIUtpXjbw2oapZqiDUqX9KoiQP CliNd715Tb2FRty5ORI1XyFauoA9ixp8NsZq7YP34cgz4OycGCdOpXYxPEYJHH7+ PsNkHXGEn0pH2T//ka56NiRjpPskPiW/ZSf22d0mJtxrhziAIPJQQVn6OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm1xhMU40jEJIeSNZrjQhwJJkF+MB8GA1UdIwQY MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4hQ/f3+ Bk4mV/DdDELKQzP77E2Vsy8aSXCugiTEFqSvV6UxBIhDCvnF0mbq13VMFF8cUF5K Quxc01cLhMcPgMg3FybLmNHYjodfj5YmMgM+k/D9UFDWuIVkdPMp2ZeAyMeL+bLg JcLe5GVUHN9wB8PM7GslgRfEZZKJ0f5Yr5fpOwLHpLEBY/ttl3Fq/AvGpY3CF9q7 wZLrUq/css6IzjC+cXI8BNMGxVULKNqaZhiFctBRNwtf1Nrtka9Og8PGV3y2ZqBD COpcgZ/Y65NngamwdXHjkYpQpAYy16Qun9yrELXyHCa854cCkolAnZFxM7vkQjsO /yMJPfJ9j+zx1g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:31 2025 by rpki-client