This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft File: 18YKVOA8n4Fcwzr9RdPE25r3bxY.mft (raw, json) Hash identifier: tuwpAIRlC9E67wXxDbldponuu5OmZ9VZRvbF7axoHL0= Subject key identifier: A8:0D:9A:79:71:34:92:D6:CC:9E:23:EC:51:D7:59:24:14:F1:CE:94 Authority key identifier: D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 Certificate issuer: /CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Certificate serial: 019BF5758512DE69A080C96895F6357DDB08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft Manifest number: 0F0D Signing time: Sun 25 Jan 2026 14:01:18 +0000 Manifest this update: Sun 25 Jan 2026 14:01:18 +0000 Manifest next update: Mon 26 Jan 2026 14:01:18 +0000 Files and hashes: 1: 1-xQpxgbsAccfNR_RPwpELLBga3Q.roa (hash: O9JFLbnCzJwjSJV7ChA49hvf5EARsdHIdJti0Ql7a20=) 2: 18YKVOA8n4Fcwzr9RdPE25r3bxY.crl (hash: yFJfQmsVnjFagWVsVahVtNQpLCeIc1Gk3Zk603BYfsg=) 3: 7C0RXVU3AgsBgO3I-5tJ7yJP6WM.roa (hash: zGb9a33Qnpr4WzIXt8XY3dXadxDHjRQNTlqjB3b8R/g=) 4: InpXhnM9MS1muu9R3XQVBIkVVN8.roa (hash: yU7SB2RYwoKjc2l3Eev4frxkOGpJzWi5EJ1oAWnsaXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:85:12:de:69:a0:80:c9:68:95:f6:35:7d:db:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c60a54e03c9f815cc33afd45d3c4db9af76f16 Validity Not Before: Jan 25 14:01:18 2026 GMT Not After : Jan 26 14:01:18 2026 GMT Subject: CN=a80d9a79713492d6cc9e23ec51d7592414f1ce94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:1d:9d:f9:c0:79:7a:d1:11:30:a4:85:97: a6:53:38:53:73:f2:fc:f8:4a:ca:dc:bc:d7:bb:cf: ca:dd:39:55:81:78:04:61:67:21:40:46:ee:98:07: 01:07:a5:d8:b2:3a:18:7c:0a:7d:90:c9:fd:4c:ab: a1:fe:46:36:a3:a7:3f:a8:be:9d:69:dc:54:a2:2c: 22:65:cd:5e:d2:b4:57:4c:46:55:55:1d:4b:69:a2: 64:3d:02:bf:a5:43:8a:4f:f6:2f:f3:d3:60:c1:58: f5:48:f2:f9:cf:4d:59:b5:f8:35:75:2d:8a:c4:88: f2:9f:ae:4e:f8:bc:8c:7b:9f:c7:d3:ef:d8:66:35: d7:02:ed:bf:bd:25:ab:02:21:47:fe:df:37:cc:8d: e8:10:0d:a1:0f:49:22:f9:68:45:de:3a:a2:2f:00: 03:21:19:94:81:20:f2:e6:da:2e:cc:a9:94:c2:02: ea:54:d4:f2:a4:48:0e:4e:f2:b4:c5:bb:7a:20:31: 02:e8:ed:47:cd:fb:a0:1e:29:15:6a:d7:94:08:a9: e9:a3:2a:e5:5c:62:99:2a:e3:cf:23:8f:83:d8:f0: 12:21:10:d3:83:a1:72:43:a9:f3:d6:8e:4d:2c:3f: 08:9a:b3:ec:4f:8f:1d:ed:e3:e3:64:4c:f2:a8:1d: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0D:9A:79:71:34:92:D6:CC:9E:23:EC:51:D7:59:24:14:F1:CE:94 X509v3 Authority Key Identifier: keyid:D7:C6:0A:54:E0:3C:9F:81:5C:C3:3A:FD:45:D3:C4:DB:9A:F7:6F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18YKVOA8n4Fcwzr9RdPE25r3bxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/89090c-53b1-41be-a338-3831f3ed1ca8/1/18YKVOA8n4Fcwzr9RdPE25r3bxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1e:08:7c:da:8b:ba:17:25:1e:df:5c:ea:53:c5:ae:a8:a8: 0c:da:63:13:6e:e1:ab:a1:96:e5:78:2e:b2:21:9f:97:94:76: 3b:17:61:be:4e:f5:81:f1:19:71:c5:24:29:0c:e2:69:8d:eb: b5:45:23:97:ca:94:57:db:79:2d:dd:b2:f4:3c:a9:0e:36:26: 2d:ab:25:b0:ec:31:cd:91:4c:32:64:43:42:1a:9b:4f:57:eb: e4:44:ca:78:a2:4a:a1:4b:6e:da:4c:7f:93:0a:62:fa:38:44: b6:61:b8:39:c8:25:15:5b:f9:18:a9:b8:a1:22:e0:38:c6:e7: ea:43:e6:51:92:8e:d5:48:22:bf:5a:fb:61:c9:95:d7:6e:24: ac:e6:a1:fb:be:30:ea:83:75:2e:83:56:d6:6a:2d:23:39:89: 09:33:06:9a:8d:23:b0:3d:84:ed:13:b8:f3:8c:03:66:6e:72: 83:83:29:ff:d1:ee:93:3f:4c:77:ec:41:c9:32:49:b1:c0:ea: d7:e3:c2:a7:39:51:04:4a:82:46:e1:6a:3b:d5:6b:37:e7:3d: 08:d1:7b:03:75:dd:1e:da:72:b6:e0:4f:a8:47:bc:de:6a:98: e2:bd:8c:cf:e9:64:7a:4c:1a:00:3f:d7:f3:37:50:e7:e0:96: d9:cb:d0:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dYUS3mmggMlolfY1fdsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzYwYTU0ZTAzYzlmODE1Y2MzM2FmZDQ1ZDNjNGRiOWFm NzZmMTYwHhcNMjYwMTI1MTQwMTE4WhcNMjYwMTI2MTQwMTE4WjAzMTEwLwYDVQQD EyhhODBkOWE3OTcxMzQ5MmQ2Y2M5ZTIzZWM1MWQ3NTkyNDE0ZjFjZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZwdnfnAeXrRETCkhZemUzhTc/L8 +ErK3LzXu8/K3TlVgXgEYWchQEbumAcBB6XYsjoYfAp9kMn9TKuh/kY2o6c/qL6d adxUoiwiZc1e0rRXTEZVVR1LaaJkPQK/pUOKT/Yv89NgwVj1SPL5z01Ztfg1dS2K xIjyn65O+LyMe5/H0+/YZjXXAu2/vSWrAiFH/t83zI3oEA2hD0ki+WhF3jqiLwAD IRmUgSDy5touzKmUwgLqVNTypEgOTvK0xbt6IDEC6O1HzfugHikVateUCKnpoyrl XGKZKuPPI4+D2PASIRDTg6FyQ6nz1o5NLD8ImrPsT48d7ePjZEzyqB3zEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgNmnlxNJLWzJ4j7FHXWSQU8c6UMB8GA1UdIwQY MBaAFNfGClTgPJ+BXMM6/UXTxNua928WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgt MzgzMWYzZWQxY2E4LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84OTA5MGMtNTNiMS00MWJlLWEzMzgtMzgzMWYzZWQxY2E4 LzEvMThZS1ZPQThuNEZjd3pyOVJkUEUyNXIzYnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx4IfNqL uhclHt9c6lPFrqioDNpjE27hq6GW5XgusiGfl5R2Oxdhvk71gfEZccUkKQziaY3r tUUjl8qUV9t5Ld2y9DypDjYmLaslsOwxzZFMMmRDQhqbT1fr5ETKeKJKoUtu2kx/ kwpi+jhEtmG4OcglFVv5GKm4oSLgOMbn6kPmUZKO1Ugiv1r7YcmV124krOah+74w 6oN1LoNW1motIzmJCTMGmo0jsD2E7RO484wDZm5yg4Mp/9Hukz9Md+xByTJJscDq 1+PCpzlRBEqCRuFqO9VrN+c9CNF7A3XdHtpytuBPqEe83mqY4r2Mz+lkekwaAD/X 8zdQ5+CW2cvQGw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:08 2026 by rpki-client