This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json) Hash identifier: g0QGvxiuaL0H0m9RYQ/xs/Ft8YdWkohcif1Ju6wzyUI= Subject key identifier: 86:0D:18:FD:32:89:9B:AF:5E:66:97:48:D5:65:6B:14:51:FF:1B:F5 Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Certificate serial: 019AF27668515082ECDD9C04CF457049E0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=) 2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=) 3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: DEnq7OFnAk+LZ0mmQLg7v3SqGIHTbj62ewmf9BKs+uU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:68:51:50:82:ec:dd:9c:04:cf:45:70:49:e0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=860d18fd32899baf5e669748d5656b1451ff1bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:30:07:1d:e4:c6:21:a2:73:ad:0f:1e:59: 58:f6:74:eb:df:95:1e:87:0b:08:d6:2f:62:a9:60: d8:08:b0:87:ba:58:3f:30:f7:73:a5:fc:88:57:52: 01:47:db:d7:60:0a:45:de:7d:d8:56:aa:91:6b:ea: 80:c9:4a:f3:7c:d2:dc:43:d0:c3:1c:8a:ce:ca:81: cb:89:91:a5:df:e4:43:7d:5e:83:23:7d:0e:ed:1e: ad:76:12:8f:60:90:f1:e3:3a:82:62:ae:4f:2f:13: 85:ca:ed:40:d7:21:74:61:e2:20:8f:e1:87:50:75: 07:9c:fa:c7:ca:1b:9f:fa:49:ba:71:6e:ea:87:76: 90:21:67:99:6d:d5:8a:8d:aa:bc:47:32:7f:94:5e: 48:bd:a1:22:a5:a8:0c:82:fa:4b:8d:f6:80:e2:fd: 78:f2:70:45:73:0c:e8:2e:e5:6e:46:1b:26:27:d5: f2:fb:89:fa:1a:b4:b6:1f:6c:0d:68:17:7b:e0:05: c1:e3:2b:78:06:d3:9c:12:de:4c:e1:58:bb:5d:08: 26:f8:73:77:86:5c:d8:80:a6:b9:9f:18:5f:87:23: 5b:8f:7e:c7:05:77:be:6d:38:90:ec:cc:61:58:02: 9c:c3:85:2d:1e:8d:4a:29:f4:83:6d:6f:29:19:76: 54:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0D:18:FD:32:89:9B:AF:5E:66:97:48:D5:65:6B:14:51:FF:1B:F5 X509v3 Authority Key Identifier: keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:18:4f:7e:34:e4:e0:75:cd:7c:b8:9e:b1:bd:e5:92:54:41: ec:7f:05:1e:d9:1b:0c:56:58:5d:b0:a7:dd:4c:b2:c8:cb:21: 4d:10:83:fe:bf:5e:5f:f2:03:ec:e8:dd:2e:e3:42:23:ad:15: 41:f1:82:69:1c:36:82:e2:c7:db:0b:26:e6:f5:3f:6e:4f:0e: e1:e3:1b:8e:0c:e0:20:75:54:c3:95:d5:9d:56:6c:39:0d:a3: 86:b2:96:80:4c:68:1d:8a:65:ba:f6:b2:15:a3:92:72:b7:99: f6:87:5e:e6:2c:dd:fd:e0:9a:ad:62:05:2d:be:cb:b4:63:8c: 58:d4:1f:49:c7:07:f7:7e:34:56:99:21:d2:57:f0:1a:f1:24: 1c:61:14:66:94:44:da:ed:7b:ca:a9:46:4d:20:c7:ea:a9:b3: 75:6f:a7:c0:04:ac:93:c8:bf:7f:f7:5e:9e:33:79:d5:81:e2: a7:a4:e4:fd:da:ca:d7:8e:6e:02:4b:c3:c1:fc:55:52:ec:67: 28:6a:58:98:db:65:db:23:f4:9b:70:d6:dd:26:9c:b8:5a:3d: 38:65:09:20:7b:a5:48:c2:2d:e9:af:41:f2:12:7b:e2:45:21: a8:d5:24:fe:86:0f:ac:8b:a5:90:af:e4:46:57:d2:3d:c0:95: 3d:4c:ec:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmhRUILs3ZwEz0VwSeCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx YzRlYWYwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD Eyg4NjBkMThmZDMyODk5YmFmNWU2Njk3NDhkNTY1NmIxNDUxZmYxYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUcwBx3kxiGic60PHllY9nTr35Ue hwsI1i9iqWDYCLCHulg/MPdzpfyIV1IBR9vXYApF3n3YVqqRa+qAyUrzfNLcQ9DD HIrOyoHLiZGl3+RDfV6DI30O7R6tdhKPYJDx4zqCYq5PLxOFyu1A1yF0YeIgj+GH UHUHnPrHyhuf+km6cW7qh3aQIWeZbdWKjaq8RzJ/lF5IvaEipagMgvpLjfaA4v14 8nBFcwzoLuVuRhsmJ9Xy+4n6GrS2H2wNaBd74AXB4yt4BtOcEt5M4Vi7XQgm+HN3 hlzYgKa5nxhfhyNbj37HBXe+bTiQ7MxhWAKcw4UtHo1KKfSDbW8pGXZUjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYNGP0yiZuvXmaXSNVlaxRR/xv1MB8GA1UdIwQY MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt Yzc0M2NiNmQyZmMzLzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhhPfjTk 4HXNfLiesb3lklRB7H8FHtkbDFZYXbCn3UyyyMshTRCD/r9eX/ID7OjdLuNCI60V QfGCaRw2guLH2wsm5vU/bk8O4eMbjgzgIHVUw5XVnVZsOQ2jhrKWgExoHYpluvay FaOScreZ9ode5izd/eCarWIFLb7LtGOMWNQfSccH9340Vpkh0lfwGvEkHGEUZpRE 2u17yqlGTSDH6qmzdW+nwASsk8i/f/denjN51YHip6Tk/drK145uAkvDwfxVUuxn KGpYmNtl2yP0m3DW3SacuFo9OGUJIHulSMIt6a9B8hJ74kUhqNUk/oYPrIulkK/k RlfSPcCVPUzsYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:23 2025 by rpki-client