This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json) Hash identifier: Ke0W1Mu7D1394F+2wRl+SU0hVhMlOjoOJZeaWVi+03U= Subject key identifier: BA:5D:9C:73:06:02:24:E2:DF:E2:C2:73:8A:08:72:03:14:01:11:BD Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a Certificate serial: 019B202B8E4A883520B66BFEE426DD074892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft Manifest number: 0A59 Signing time: Mon 15 Dec 2025 04:01:23 +0000 Manifest this update: Mon 15 Dec 2025 04:01:23 +0000 Manifest next update: Tue 16 Dec 2025 04:01:23 +0000 Files and hashes: 1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=) 2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: DnjlOj6LF1cvye6K45T+Rx1oRWjpsy3fD2RXO//9LCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:8e:4a:88:35:20:b6:6b:fe:e4:26:dd:07:48:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a Validity Not Before: Dec 15 04:01:23 2025 GMT Not After : Dec 16 04:01:23 2025 GMT Subject: CN=ba5d9c73060224e2dfe2c2738a087203140111bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:ad:bd:67:13:ce:04:d2:12:12:c8:63:b7: 69:b9:b3:30:92:64:71:9d:b2:67:5d:31:cb:59:0a: 8c:4a:d1:46:89:7a:f5:a6:48:8e:e5:2a:62:ba:9a: a4:d1:74:6b:46:28:31:8b:f6:86:f7:23:4d:66:c3: 0a:a4:fc:e0:5a:5f:52:79:d7:a5:e6:c4:b7:39:09: 5a:13:4d:8e:5c:13:2e:53:bc:9c:b6:30:39:e3:fb: 2d:62:eb:93:d1:2c:79:7d:2b:2a:48:7b:e9:c4:ad: 44:73:47:40:30:1a:66:fb:6e:30:7d:5f:33:6b:80: 76:6b:06:0f:38:c9:38:8a:8b:c6:a3:12:5e:f2:50: c5:d6:67:41:82:cd:17:c2:a5:b1:bd:b0:5c:bd:a0: 85:a2:79:b0:08:66:e4:e4:a4:53:da:e1:9a:09:1b: 7f:6c:82:11:20:9e:74:c7:87:c6:0f:af:9a:4f:9b: 73:56:b0:6e:99:cd:70:ef:e9:80:3d:9f:2c:7d:13: 4c:df:f9:e5:f5:8d:b3:1c:b9:c8:07:1b:53:b1:33: b5:3d:f1:06:f4:0f:64:4b:4b:b4:27:a2:d0:71:d4: 89:c4:4d:ba:a5:01:da:f7:9c:db:b2:c9:d8:7d:ee: 3b:60:18:69:8f:de:1f:7f:89:1c:ab:d6:8a:09:9e: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5D:9C:73:06:02:24:E2:DF:E2:C2:73:8A:08:72:03:14:01:11:BD X509v3 Authority Key Identifier: keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:db:fc:43:c2:8d:9b:21:e0:4a:a0:61:35:71:54:32:e9:8a: 67:a3:4f:46:33:64:18:5c:9c:97:73:33:8e:bf:34:42:82:56: b4:cf:ee:89:60:66:08:5b:4b:e4:ca:30:d7:dc:11:79:ea:7a: b4:a2:2b:6a:ce:57:7c:5f:ce:71:21:14:75:a1:1e:54:4d:ce: 5c:05:0b:c9:5f:23:de:fc:f5:8a:ec:63:a3:ef:bc:36:de:b4: bb:cf:9c:c9:36:eb:78:46:6d:da:cd:10:be:f3:39:20:89:7e: 5f:f9:52:a8:83:68:f8:7d:7a:c6:ed:26:ed:7d:09:1b:25:6f: a6:66:ca:ab:b3:0d:c4:28:a7:e4:a1:cb:d9:3b:00:07:28:29: d1:78:57:03:ed:b6:f1:35:2d:7c:fa:d9:3a:f9:d1:f4:3f:dd: d4:b1:08:57:2d:2d:30:17:0f:89:11:ef:0a:1f:70:cc:92:75: d0:1f:2b:9f:fb:64:5c:6d:c9:9c:f9:ad:b1:d0:96:f0:7c:b1: af:f7:83:16:a3:61:ba:80:14:a8:2f:49:9c:8b:f1:97:cb:f6: ae:f1:1c:9e:9f:74:4e:27:3f:b3:c6:54:8a:a5:ba:83:50:7d: a7:f1:f7:af:b8:48:f8:5f:99:31:05:9f:fc:71:b5:4e:a3:18: 5a:22:00:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK45KiDUgtmv+5CbdB0iSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYmRhOGNhODY5NDhkOWZlMDI5ZGExMTFhMGM5ZTcwZDMw NDZhNWEwHhcNMjUxMjE1MDQwMTIzWhcNMjUxMjE2MDQwMTIzWjAzMTEwLwYDVQQD EyhiYTVkOWM3MzA2MDIyNGUyZGZlMmMyNzM4YTA4NzIwMzE0MDExMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeKtvWcTzgTSEhLIY7dpubMwkmRx nbJnXTHLWQqMStFGiXr1pkiO5Spiupqk0XRrRigxi/aG9yNNZsMKpPzgWl9Sedel 5sS3OQlaE02OXBMuU7yctjA54/stYuuT0Sx5fSsqSHvpxK1Ec0dAMBpm+24wfV8z a4B2awYPOMk4iovGoxJe8lDF1mdBgs0XwqWxvbBcvaCFonmwCGbk5KRT2uGaCRt/ bIIRIJ50x4fGD6+aT5tzVrBumc1w7+mAPZ8sfRNM3/nl9Y2zHLnIBxtTsTO1PfEG 9A9kS0u0J6LQcdSJxE26pQHa95zbssnYfe47YBhpj94ff4kcq9aKCZ6aNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpdnHMGAiTi3+LCc4oIcgMUARG9MB8GA1UdIwQY MBaAFBC9qMqGlI2f4CnaERoMnnDTBGpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQt MGJlZjlhM2JhYmE4LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQtMGJlZjlhM2JhYmE4 LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtv8Q8KN myHgSqBhNXFUMumKZ6NPRjNkGFycl3Mzjr80QoJWtM/uiWBmCFtL5Mow19wReep6 tKIras5XfF/OcSEUdaEeVE3OXAULyV8j3vz1iuxjo++8Nt60u8+cyTbreEZt2s0Q vvM5IIl+X/lSqINo+H16xu0m7X0JGyVvpmbKq7MNxCin5KHL2TsABygp0XhXA+22 8TUtfPrZOvnR9D/d1LEIVy0tMBcPiRHvCh9wzJJ10B8rn/tkXG3JnPmtsdCW8Hyx r/eDFqNhuoAUqC9JnIvxl8v2rvEcnp90Tic/s8ZUiqW6g1B9p/H3r7hI+F+ZMQWf /HG1TqMYWiIA3A== -----END CERTIFICATE-----Generated at Mon Dec 15 07:05:09 2025 by rpki-client