This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json) Hash identifier: HRsoBt1DyzWcBNjaf7RrtJiqk0s3z0Mgu1kTQee8ov0= Subject key identifier: 81:DF:66:B7:21:D1:49:1E:63:77:3B:E6:18:6B:3C:6A:8E:A6:F2:B8 Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf Certificate serial: 019AF388F77CF0310E0660E41294F1B6BFAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 12:00:31 +0000 Manifest this update: Sat 06 Dec 2025 12:00:31 +0000 Manifest next update: Sun 07 Dec 2025 12:00:31 +0000 Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: RMDFyQDjTMqelKSsNovizr3+kpGXdsh06qlVa2svPno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:f7:7c:f0:31:0e:06:60:e4:12:94:f1:b6:bf:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf Validity Not Before: Dec 6 12:00:31 2025 GMT Not After : Dec 7 12:00:31 2025 GMT Subject: CN=81df66b721d1491e63773be6186b3c6a8ea6f2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:9b:c0:ed:b9:5e:36:15:b8:b1:76:7f:a0: 8b:96:51:07:8e:c3:4b:fb:67:2f:5d:7e:0f:21:6e: bb:e9:ea:c8:8c:cf:bc:cb:ca:fb:78:47:b1:26:31: 22:ec:37:75:b3:e4:97:45:df:b8:02:ea:0b:6f:1f: e6:46:2e:54:36:91:06:12:d9:9a:44:c9:69:f3:b3: 67:44:51:4a:df:81:9b:85:38:b9:21:7f:8a:16:95: 6f:6d:f1:1e:5c:bd:0a:76:ca:bb:de:24:d3:ec:70: 0e:d7:9c:3d:25:38:8d:98:04:a8:3a:16:68:b5:90: 01:d1:b7:59:4d:0b:48:ee:38:3d:43:71:b1:04:04: 4c:6c:c1:22:8b:2a:f7:3e:a4:dc:13:7a:8a:56:b8: 5c:93:65:83:67:57:85:e2:ea:2c:05:89:a0:89:0f: 42:f3:58:5d:14:99:30:1b:9b:76:a6:71:9b:ef:be: 67:28:b0:5b:cc:d6:5e:4f:fc:45:75:c1:9e:fe:25: ae:5d:68:94:5d:d6:d8:e9:57:7b:ce:e5:c9:de:a1: 10:cd:a9:af:da:ab:94:23:bf:91:5d:9d:21:4c:10: d5:3b:47:42:40:e8:19:90:d9:72:4b:fe:2b:ce:06: bb:95:f0:8e:62:db:29:34:a6:83:de:ca:ae:ac:5a: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DF:66:B7:21:D1:49:1E:63:77:3B:E6:18:6B:3C:6A:8E:A6:F2:B8 X509v3 Authority Key Identifier: keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:54:d3:15:42:79:15:cb:5a:0e:2a:86:af:0c:b8:1f:40:b0: e7:31:38:2f:42:8c:95:f2:79:c0:f0:00:a6:6e:c2:ba:a2:90: de:6c:87:09:12:68:3d:28:f6:50:4f:ba:0e:6c:43:d3:64:ae: b2:18:0b:48:e7:15:2f:29:1b:d2:bc:80:1a:d6:80:fa:24:9a: 12:07:99:79:df:6c:b2:3b:aa:78:b0:63:bd:c3:80:04:7e:db: 68:48:bb:a2:ff:28:56:ec:63:95:64:cd:10:62:30:08:ec:c7: 24:76:97:27:f4:8c:7d:7c:46:36:cb:37:a6:2f:f9:37:d3:e5: 4a:9d:eb:d4:38:22:b3:a8:48:09:3d:7b:3c:b0:ce:f2:05:5c: 4a:47:2d:2b:4e:13:4b:d7:da:28:c1:1d:e3:c5:d7:cd:39:8d: c7:28:b0:5c:90:82:33:d7:91:e7:24:7d:2b:38:cc:4b:ef:be: 23:4d:d4:7a:48:79:7b:0d:d7:f7:72:a1:a6:f0:d2:12:e4:37: 77:b7:c7:4d:f7:23:93:1e:30:a0:5b:9f:fb:32:51:72:e6:b4: 4f:42:56:bf:2f:57:6b:ff:f3:36:6b:d0:71:41:a5:20:d7:ce: d9:90:e0:27:05:e3:f9:cb:07:b8:17:5d:f0:dd:d5:fa:b4:ab: 08:86:d8:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziPd88DEOBmDkEpTxtr+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2I4ZjgxYjhkMzg4MmQ3ZGIxNzNhNTQ5MDA5NjYxMTU3 NDhjYmYwHhcNMjUxMjA2MTIwMDMxWhcNMjUxMjA3MTIwMDMxWjAzMTEwLwYDVQQD Eyg4MWRmNjZiNzIxZDE0OTFlNjM3NzNiZTYxODZiM2M2YThlYTZmMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdubwO25XjYVuLF2f6CLllEHjsNL +2cvXX4PIW676erIjM+8y8r7eEexJjEi7Dd1s+SXRd+4AuoLbx/mRi5UNpEGEtma RMlp87NnRFFK34GbhTi5IX+KFpVvbfEeXL0Kdsq73iTT7HAO15w9JTiNmASoOhZo tZAB0bdZTQtI7jg9Q3GxBARMbMEiiyr3PqTcE3qKVrhck2WDZ1eF4uosBYmgiQ9C 81hdFJkwG5t2pnGb775nKLBbzNZeT/xFdcGe/iWuXWiUXdbY6Vd7zuXJ3qEQzamv 2quUI7+RXZ0hTBDVO0dCQOgZkNlyS/4rzga7lfCOYtspNKaD3squrFoC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHfZrch0UkeY3c75hhrPGqOpvK4MB8GA1UdIwQY MBaAFNfLj4G404gtfbFzpUkAlmEVdIy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGIt MmU4NzFjNTk3Zjk3LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGItMmU4NzFjNTk3Zjk3 LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFTTFUJ5 FctaDiqGrwy4H0Cw5zE4L0KMlfJ5wPAApm7CuqKQ3myHCRJoPSj2UE+6DmxD02Su shgLSOcVLykb0ryAGtaA+iSaEgeZed9ssjuqeLBjvcOABH7baEi7ov8oVuxjlWTN EGIwCOzHJHaXJ/SMfXxGNss3pi/5N9PlSp3r1Dgis6hICT17PLDO8gVcSkctK04T S9faKMEd48XXzTmNxyiwXJCCM9eR5yR9KzjMS+++I03Uekh5ew3X93KhpvDSEuQ3 d7fHTfcjkx4woFuf+zJRcua0T0JWvy9Xa//zNmvQcUGlINfO2ZDgJwXj+csHuBdd 8N3V+rSrCIbYwg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:59 2025 by rpki-client