This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json) Hash identifier: lgOEmYUC7QuY7guyMJNKHYv6TxSB/nf8EfpSluJ8a/A= Subject key identifier: 57:54:21:8E:A5:5A:15:CC:B3:FD:B7:BF:AD:37:66:90:1F:BF:22:4B Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a Certificate serial: 019AF277199CCC9CBAB5D75D2AE76AB6FD15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft Manifest number: 08FD Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: Ox_5wctFyZuvInmQs0hviVdHYTY.roa (hash: g8iHju69S1V2EgutTovP9pVMh3pNWKkzCgYSyMGlRgE=) 2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: 0ftN67YYJzLycetY8WIaG0caTPkSoi4bn0W/xKGOKFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:19:9c:cc:9c:ba:b5:d7:5d:2a:e7:6a:b6:fd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=5754218ea55a15ccb3fdb7bfad3766901fbf224b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:82:20:5b:e7:80:79:78:b2:9b:e1:8a:95: 51:74:2f:76:6d:f7:e8:1c:5e:c0:3b:0e:a0:ca:9d: 5c:0f:d1:18:11:12:96:95:b3:7b:a8:a7:a2:01:7f: ce:7c:d7:62:7a:54:d4:f1:f9:7f:d8:4e:3b:20:a7: 71:68:56:94:6d:6d:2b:43:1c:b7:91:40:f8:0d:43: 4f:06:2f:51:a9:1d:28:7e:12:5f:ba:24:81:4b:a9: 20:bd:da:fc:0e:2e:8f:3b:13:3e:0d:60:73:8f:21: a4:9f:d1:90:d8:a4:89:ca:5b:0e:b5:08:01:e5:64: f0:8b:65:f4:8e:14:5d:12:ce:e7:dd:b7:dd:95:fe: a4:6b:e3:d0:3e:aa:89:6a:99:5f:f2:f5:84:55:2a: 1c:d2:e8:a1:41:3a:d4:22:81:85:1b:26:9c:e3:97: 58:94:66:1f:43:4b:64:14:85:bf:1a:50:f1:29:da: b5:41:f8:dd:93:87:86:ce:d1:f7:bb:61:90:8e:cd: a3:5a:20:5a:34:6e:3c:fc:c8:4a:d7:7a:eb:bb:d3: 98:e3:c1:76:46:ee:e7:a8:39:34:ad:65:3e:1d:48: 86:6e:91:1a:9d:a3:9e:74:ee:18:59:71:2b:29:58: 9e:74:3c:b1:3c:d5:77:57:44:1b:01:4c:6c:17:ab: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:54:21:8E:A5:5A:15:CC:B3:FD:B7:BF:AD:37:66:90:1F:BF:22:4B X509v3 Authority Key Identifier: keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:73:d5:7b:c9:64:58:89:9e:ee:48:7c:a9:22:a4:04:ab:1d: 59:6a:77:48:2a:7a:ad:6c:b0:92:84:fe:4b:c4:cc:fb:ef:f2: aa:9a:02:51:6b:d4:46:d8:75:6e:11:a8:83:0b:89:b7:7d:33: ef:f9:17:4f:f2:f9:de:27:65:bc:96:3b:e8:52:87:3a:3c:d9: 75:b6:5c:ab:50:ed:c0:26:74:0c:68:9c:9e:f5:7d:44:5a:1b: 12:a0:6e:bd:5b:e7:5f:28:40:01:f2:11:9e:fc:4c:6b:1f:5d: 93:6b:77:57:24:67:4d:78:77:68:dd:9b:cb:6b:7c:39:31:b5: d9:1e:8d:af:df:e9:36:ed:22:aa:a6:77:d5:28:8b:a1:60:e2: ba:f4:79:ef:54:94:2a:ab:68:6a:37:54:90:e5:8c:5b:26:36: 8e:ec:42:4d:15:a5:2e:e0:d1:b8:42:15:2f:f1:93:bc:db:a6: c0:20:1b:9f:07:33:fc:be:60:45:09:ab:71:d8:ec:e2:cd:fb: 63:df:57:31:c7:42:28:d7:be:2e:b8:6b:61:9d:4e:cf:61:3c: 28:c4:46:bd:42:54:f3:86:4b:fd:9e:8c:73:cd:71:78:ac:9a: 07:58:f9:8e:ec:ac:ea:f4:b9:38:22:0e:93:a3:8a:09:ec:48: 88:45:8e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxmczJy6tdddKudqtv0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NWYyNWFiM2M2NjAwM2IyZDVhZjgzZDJiMzY1MWY4OGQx NTFmMmEwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD Eyg1NzU0MjE4ZWE1NWExNWNjYjNmZGI3YmZhZDM3NjY5MDFmYmYyMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5eCIFvngHl4spvhipVRdC92bffo HF7AOw6gyp1cD9EYERKWlbN7qKeiAX/OfNdielTU8fl/2E47IKdxaFaUbW0rQxy3 kUD4DUNPBi9RqR0ofhJfuiSBS6kgvdr8Di6POxM+DWBzjyGkn9GQ2KSJylsOtQgB 5WTwi2X0jhRdEs7n3bfdlf6ka+PQPqqJaplf8vWEVSoc0uihQTrUIoGFGyac45dY lGYfQ0tkFIW/GlDxKdq1Qfjdk4eGztH3u2GQjs2jWiBaNG48/MhK13rru9OY48F2 Ru7nqDk0rWU+HUiGbpEanaOedO4YWXErKViedDyxPNV3V0QbAUxsF6vDIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdUIY6lWhXMs/23v603ZpAfvyJLMB8GA1UdIwQY MBaAFKdfJas8ZgA7LVr4PSs2UfiNFR8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUt YjZmNGE0ZDYwNTNiLzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUtYjZmNGE0ZDYwNTNi LzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3PVe8lk WIme7kh8qSKkBKsdWWp3SCp6rWywkoT+S8TM++/yqpoCUWvURth1bhGogwuJt30z 7/kXT/L53idlvJY76FKHOjzZdbZcq1DtwCZ0DGicnvV9RFobEqBuvVvnXyhAAfIR nvxMax9dk2t3VyRnTXh3aN2by2t8OTG12R6Nr9/pNu0iqqZ31SiLoWDiuvR571SU KqtoajdUkOWMWyY2juxCTRWlLuDRuEIVL/GTvNumwCAbnwcz/L5gRQmrcdjs4s37 Y99XMcdCKNe+LrhrYZ1Oz2E8KMRGvUJU84ZL/Z6Mc81xeKyaB1j5juys6vS5OCIO k6OKCexIiEWO2g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:01 2025 by rpki-client