This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft File: ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json) Hash identifier: OwW2VhOZfOyTZ3/X2vKMVBGVwaH0aLol0E56IP6qhok= Subject key identifier: 2E:45:D4:99:6B:F8:18:AF:7C:85:1C:D0:B0:CE:04:FE:D6:2A:D6:97 Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30 Certificate issuer: /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30 Certificate serial: 019B48831F7CF9390CEDC35366469D89BEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft Manifest number: 05C4 Signing time: Tue 23 Dec 2025 00:01:51 +0000 Manifest this update: Tue 23 Dec 2025 00:01:51 +0000 Manifest next update: Wed 24 Dec 2025 00:01:51 +0000 Files and hashes: 1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: +BouMsvpjHTBoDAGZ2kb+wAmBgoMWBScp7nBZaOLXls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:1f:7c:f9:39:0c:ed:c3:53:66:46:9d:89:be:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30 Validity Not Before: Dec 23 00:01:51 2025 GMT Not After : Dec 24 00:01:51 2025 GMT Subject: CN=2e45d4996bf818af7c851cd0b0ce04fed62ad697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:5c:48:d5:da:78:86:f5:80:ca:f5:7d:1b: 24:30:76:83:c7:39:1e:5d:3f:4a:64:6e:84:24:e1: 45:e0:9d:ba:54:c6:e4:bf:21:df:bd:0b:4b:da:8c: a8:15:13:33:5f:33:e9:40:8e:d4:9d:41:86:c2:af: 95:ad:6c:32:3e:5c:0c:8d:dc:1a:af:8a:85:28:63: a5:3a:a3:57:f5:e3:9f:2c:06:64:bd:65:9c:32:f2: 2e:d6:ab:ec:b9:e5:0f:15:8e:90:c3:3f:f6:8f:a6: 71:b1:4f:98:45:a6:61:69:59:0d:94:dd:07:ad:77: 8c:83:9b:9c:b3:e0:c4:cb:0b:8e:98:51:32:26:f7: 1f:9c:cb:23:f4:1c:cb:83:0d:7a:df:2b:c3:1b:c5: b1:fc:b8:c8:81:4f:47:24:c0:65:cd:41:7e:fb:23: 6b:af:72:9b:e2:ab:17:e3:d0:ac:29:1a:7d:c6:4f: d2:5c:70:ce:05:b6:df:2f:cc:52:e3:2e:7a:07:c6: b7:b5:bf:fb:f1:b0:d9:e3:52:b2:a7:88:2e:ef:1b: 2a:88:31:09:c3:1b:69:03:71:6e:fd:9c:b2:7c:fb: e8:a9:4d:3c:6d:35:90:d7:15:f1:d1:90:57:41:b0: d2:78:69:3f:8d:8c:7c:ba:bc:a3:7d:df:b1:1d:b8: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:45:D4:99:6B:F8:18:AF:7C:85:1C:D0:B0:CE:04:FE:D6:2A:D6:97 X509v3 Authority Key Identifier: keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:51:c8:25:30:da:e9:d6:e8:ea:c3:cc:4d:a0:54:f9:72:84: 78:cf:0f:aa:bb:03:db:85:db:82:2f:33:53:e5:98:00:34:c7: f3:1a:4a:d1:30:3d:46:81:2b:31:54:bb:ce:66:c0:1b:0e:5c: 22:03:c8:cf:de:af:27:30:49:df:28:bd:81:75:b6:03:93:5f: cc:09:47:7a:4a:29:e6:46:02:69:e2:78:c2:16:9c:0e:ed:ee: 4b:83:cd:45:5e:d2:8c:2d:89:7a:f2:e2:b2:49:45:d3:bf:f4: a7:99:29:13:01:45:0c:2d:87:28:ea:fb:17:59:65:33:86:88: 10:be:79:d2:f1:f0:b0:30:83:26:5a:a4:6e:3d:94:2e:8d:f6: db:39:f9:1b:03:95:80:de:29:55:a5:38:09:0b:93:ac:b5:2c: 10:c5:85:31:2d:d7:50:ce:70:f1:e5:03:11:fb:0f:e5:13:6c: d5:53:3c:18:18:b2:b4:bd:59:cf:f7:5d:42:1c:b7:bb:31:0e: 62:3a:76:94:0d:92:85:64:ae:45:d2:89:86:7f:1e:c7:74:18: 3e:5f:0e:be:88:56:93:f1:95:23:c6:a8:00:95:f3:01:70:ff: 05:af:02:c7:54:02:bc:1c:4a:f8:d2:b4:6f:60:ac:2d:81:5f: 15:94:5c:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgx98+TkM7cNTZkadib74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTY4MmEwMWUyMmU0MjMzOGNhODVjNzI1NWI5YjNmOWUy YWVhMzAwHhcNMjUxMjIzMDAwMTUxWhcNMjUxMjI0MDAwMTUxWjAzMTEwLwYDVQQD EygyZTQ1ZDQ5OTZiZjgxOGFmN2M4NTFjZDBiMGNlMDRmZWQ2MmFkNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux5cSNXaeIb1gMr1fRskMHaDxzke XT9KZG6EJOFF4J26VMbkvyHfvQtL2oyoFRMzXzPpQI7UnUGGwq+VrWwyPlwMjdwa r4qFKGOlOqNX9eOfLAZkvWWcMvIu1qvsueUPFY6Qwz/2j6ZxsU+YRaZhaVkNlN0H rXeMg5ucs+DEywuOmFEyJvcfnMsj9BzLgw163yvDG8Wx/LjIgU9HJMBlzUF++yNr r3Kb4qsX49CsKRp9xk/SXHDOBbbfL8xS4y56B8a3tb/78bDZ41Kyp4gu7xsqiDEJ wxtpA3Fu/ZyyfPvoqU08bTWQ1xXx0ZBXQbDSeGk/jYx8uryjfd+xHbjPjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5F1Jlr+BivfIUc0LDOBP7WKtaXMB8GA1UdIwQY MBaAFBJWgqAeIuQjOMqFxyVbmz+eKuowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQt MzliMTEwNmNjOWYxLzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQtMzliMTEwNmNjOWYx LzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlHIJTDa 6dbo6sPMTaBU+XKEeM8PqrsD24Xbgi8zU+WYADTH8xpK0TA9RoErMVS7zmbAGw5c IgPIz96vJzBJ3yi9gXW2A5NfzAlHekop5kYCaeJ4whacDu3uS4PNRV7SjC2JevLi sklF07/0p5kpEwFFDC2HKOr7F1llM4aIEL550vHwsDCDJlqkbj2ULo322zn5GwOV gN4pVaU4CQuTrLUsEMWFMS3XUM5w8eUDEfsP5RNs1VM8GBiytL1Zz/ddQhy3uzEO Yjp2lA2ShWSuRdKJhn8ex3QYPl8OvohWk/GVI8aoAJXzAXD/Ba8Cx1QCvBxK+NK0 b2CsLYFfFZRcVA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:50:46 2025 by rpki-client