This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft File: 18cz6fYTT3RJxBpe6_WDzjW1QmA.mft (raw, json) Hash identifier: /Etxw6Xi5UpSVxV4m7Hoh98Z6XWsCJbz3qt1I/zJtYM= Subject key identifier: 48:85:D7:49:74:B6:20:B7:AF:13:71:E0:2A:E2:FD:13:4B:46:77:13 Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60 Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260 Certificate serial: 019AF208F26FD3921865F4DFD98F8D4C8E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft Manifest number: 0D5E Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: 18cz6fYTT3RJxBpe6_WDzjW1QmA.crl (hash: p4hju8+BLHB94+Rml+WyIYUAfcba/kE7Spbpiogdqho=) 2: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (hash: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f2:6f:d3:92:18:65:f4:df:d9:8f:8d:4c:8e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260 Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=4885d74974b620b7af1371e02ae2fd134b467713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:13:36:fc:12:af:3e:20:e0:e7:b2:98:25: a3:80:41:89:a6:04:89:7b:aa:3a:3e:07:74:b1:64: 41:67:9f:31:53:bf:e5:2b:ea:21:88:7d:25:5e:34: 31:b9:d4:6f:74:a5:1a:6b:b8:51:39:0c:28:b3:4c: 9c:a3:6b:17:86:0f:9a:9d:10:91:c4:93:9d:ff:28: 9c:ba:e2:2a:c0:be:86:38:9e:ae:b6:f1:d6:c6:f6: 2a:7c:cc:12:5e:b4:d8:bd:23:db:61:18:9f:f1:89: 60:1d:bf:69:75:bb:87:3c:df:3b:bd:a9:89:99:1a: 58:95:88:bb:2e:c9:bf:76:b2:d8:f7:44:c2:e5:26: 7f:36:f3:65:51:74:e1:76:30:14:ec:d4:43:a9:26: 1a:df:3b:af:dc:bc:63:e7:ac:dd:3c:07:30:6b:37: e8:cf:a2:8e:10:c4:46:25:8d:29:17:6d:34:a3:6d: e2:14:fe:ef:e7:0e:6e:97:76:b4:a1:b3:5c:8d:21: 64:1b:fd:6f:ee:c2:81:3f:dc:f7:e1:35:44:d2:8c: eb:7a:54:c4:ed:73:d8:00:49:4f:24:31:52:d4:bf: eb:f9:fe:4d:eb:53:5b:48:f8:25:0d:25:a6:39:3d: 92:a9:a1:f0:a8:42:14:e5:12:95:6e:61:93:4c:d7: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:85:D7:49:74:B6:20:B7:AF:13:71:E0:2A:E2:FD:13:4B:46:77:13 X509v3 Authority Key Identifier: keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:98:33:c4:8e:20:5f:46:ef:12:c3:99:e7:51:e9:41:76:3a: 81:a1:4e:4c:10:e2:ac:1a:89:bf:d7:a7:62:02:7a:44:72:73: ad:f8:f5:63:2e:63:15:53:4e:a4:49:89:e9:3e:bc:30:2b:8a: 91:5a:ff:ad:ea:98:54:ef:7b:38:4a:9c:26:dd:36:f0:94:4c: 47:f0:d9:e2:68:74:40:ba:8c:d5:ec:9c:aa:09:16:f5:91:21: 89:57:b1:61:1d:75:7f:42:4c:fc:3b:48:0a:a9:c4:50:70:3b: 7c:69:36:9b:ec:67:5f:01:a1:22:94:73:96:f3:a3:3d:ce:fe: 1b:7a:a5:12:f8:66:7c:7d:93:48:c6:b9:6d:e4:a9:bf:64:7e: 13:67:9e:10:1e:fa:68:01:0e:63:03:6b:ec:26:66:4b:0b:24: cd:68:16:78:a1:08:39:cd:e3:55:fd:70:95:bc:a2:08:10:bd: 69:39:12:d6:94:3d:42:c1:cc:e8:5f:04:de:cc:c6:9f:33:cd: 63:f3:ca:68:c2:2b:19:67:d3:62:0d:b2:ba:de:0b:13:49:d8: 47:47:6a:c0:1b:e1:9c:78:ce:4c:ff:a1:c8:d9:5c:7c:41:cc: e3:8a:45:1e:78:ed:e3:e2:43:91:46:b1:98:b5:5e:dc:4a:f0: ea:28:4e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPJv05IYZfTf2Y+NTI5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi NTQyNjAwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD Eyg0ODg1ZDc0OTc0YjYyMGI3YWYxMzcxZTAyYWUyZmQxMzRiNDY3NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI8TNvwSrz4g4OeymCWjgEGJpgSJ e6o6Pgd0sWRBZ58xU7/lK+ohiH0lXjQxudRvdKUaa7hROQwos0yco2sXhg+anRCR xJOd/yicuuIqwL6GOJ6utvHWxvYqfMwSXrTYvSPbYRif8YlgHb9pdbuHPN87vamJ mRpYlYi7Lsm/drLY90TC5SZ/NvNlUXThdjAU7NRDqSYa3zuv3Lxj56zdPAcwazfo z6KOEMRGJY0pF200o23iFP7v5w5ul3a0obNcjSFkG/1v7sKBP9z34TVE0ozrelTE 7XPYAElPJDFS1L/r+f5N61NbSPglDSWmOT2SqaHwqEIU5RKVbmGTTNekuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiF10l0tiC3rxNx4Cri/RNLRncTMB8GA1UdIwQY MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt OWM5MDJjNjZlZTk5LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5 LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJgzxI4g X0bvEsOZ51HpQXY6gaFOTBDirBqJv9enYgJ6RHJzrfj1Yy5jFVNOpEmJ6T68MCuK kVr/reqYVO97OEqcJt028JRMR/DZ4mh0QLqM1eycqgkW9ZEhiVexYR11f0JM/DtI CqnEUHA7fGk2m+xnXwGhIpRzlvOjPc7+G3qlEvhmfH2TSMa5beSpv2R+E2eeEB76 aAEOYwNr7CZmSwskzWgWeKEIOc3jVf1wlbyiCBC9aTkS1pQ9QsHM6F8E3szGnzPN Y/PKaMIrGWfTYg2yut4LE0nYR0dqwBvhnHjOTP+hyNlcfEHM44pFHnjt4+JDkUax mLVe3Erw6ihO5g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:05 2025 by rpki-client