This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json) Hash identifier: zc5yMnRR8PV7Y/hspWDOmkQJNDPV/rNMsNeEqdnrOTM= Subject key identifier: 81:C8:E1:A3:6A:20:88:81:4B:E7:67:DD:75:7F:A6:89:0F:4F:91:7D Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f Certificate serial: 019B360E97829D822590E3945F52BCDE87F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft Manifest number: 0BE4 Signing time: Fri 19 Dec 2025 10:01:24 +0000 Manifest this update: Fri 19 Dec 2025 10:01:24 +0000 Manifest next update: Sat 20 Dec 2025 10:01:24 +0000 Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: HtoyvlH47bF4gXiq7R09f4IZX2ROINNvtAL4JofLp6g=) 2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:97:82:9d:82:25:90:e3:94:5f:52:bc:de:87:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f Validity Not Before: Dec 19 10:01:24 2025 GMT Not After : Dec 20 10:01:24 2025 GMT Subject: CN=81c8e1a36a2088814be767dd757fa6890f4f917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:d2:b3:92:6a:51:ee:4b:71:95:54:ef:41: b0:8b:08:41:75:3b:4d:4d:e2:14:e7:bc:c0:94:26: 5e:e6:cb:d5:05:ce:ca:2f:ce:78:e2:66:51:c7:c0: df:98:41:6c:e5:9d:d1:d7:81:d5:eb:4f:3d:bc:0f: 4b:8a:ec:ac:6f:53:4e:6e:e4:70:95:93:33:42:a4: 2a:07:9a:a4:ce:98:8d:fe:8a:c6:ed:be:23:82:b6: 06:db:11:21:11:34:bf:9c:08:67:2a:f2:c5:51:45: 5a:19:94:fb:76:18:42:63:b3:93:a8:40:c6:db:03: 9b:26:be:9f:dd:b7:2d:d1:6b:49:cf:96:4e:3d:8c: 86:08:0f:04:27:9e:10:e4:a0:e0:73:55:81:0b:1b: c7:9b:0a:66:d2:07:3e:33:d6:73:b5:1c:0b:fa:3e: ce:d6:cb:e9:5a:dc:d4:4e:a5:81:03:a4:5a:1e:7d: 99:ac:23:f4:d3:76:0c:ad:6a:43:27:0e:ab:cb:a8: 53:5b:6b:75:74:3b:19:80:38:e8:44:4d:86:b4:4d: a1:a7:59:9d:39:49:12:e6:6c:2e:ec:a2:f5:88:75: 94:26:32:29:c2:c8:1b:3b:45:a4:af:76:49:d6:6d: da:d4:8e:69:6e:97:72:1d:55:b1:f8:bd:54:22:41: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C8:E1:A3:6A:20:88:81:4B:E7:67:DD:75:7F:A6:89:0F:4F:91:7D X509v3 Authority Key Identifier: keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:23:20:f3:db:24:2e:a0:40:75:5d:8d:e0:9a:5b:fa:0b:c5: 80:97:da:d5:7a:54:fe:e7:53:db:65:38:4e:3a:72:ba:47:2e: 2d:61:d9:a6:c1:e4:4d:f5:51:b9:de:0d:48:34:1d:ae:d0:5f: 4d:58:fb:29:58:72:f5:3d:69:62:9a:58:fe:1f:f4:16:c9:62: e2:db:39:07:95:82:f5:47:e1:67:64:bd:3b:e3:51:26:32:48: 95:1a:64:04:3c:9f:7f:15:ee:91:33:0a:5a:c8:e0:23:0b:a4: fc:ca:7c:ff:81:e9:e6:15:0d:d2:ce:9c:24:a6:16:a2:36:5a: ad:f1:95:58:5b:c5:c9:85:8a:87:61:90:ea:a6:6b:4d:36:40: f5:a1:07:3d:8d:70:3e:f4:a9:37:08:df:f8:bb:b8:e5:10:cf: fa:76:d5:67:c2:a8:68:77:81:0a:a8:7c:87:b1:d0:ef:f8:ed: 26:29:4b:fb:ec:8d:71:83:e4:3f:60:dc:10:28:1e:7a:d9:2d: 9d:b0:fb:99:28:2f:c3:49:07:8e:c3:c3:b2:2f:c0:41:e8:a4: c9:ac:63:c7:ef:08:ef:1c:a9:7c:a8:2f:41:f7:59:95:d4:f6: 96:9d:0e:fb:88:27:84:89:89:4a:da:ec:97:29:3f:d2:d0:a2: 23:a2:cf:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DpeCnYIlkOOUX1K83of0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTk2OTYyMTQyNDgwY2JiMWQzODQxMTc3MWViNGZmM2Uz OTgzOWYwHhcNMjUxMjE5MTAwMTI0WhcNMjUxMjIwMTAwMTI0WjAzMTEwLwYDVQQD Eyg4MWM4ZTFhMzZhMjA4ODgxNGJlNzY3ZGQ3NTdmYTY4OTBmNGY5MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz7Ss5JqUe5LcZVU70GwiwhBdTtN TeIU57zAlCZe5svVBc7KL8544mZRx8DfmEFs5Z3R14HV6089vA9Liuysb1NObuRw lZMzQqQqB5qkzpiN/orG7b4jgrYG2xEhETS/nAhnKvLFUUVaGZT7dhhCY7OTqEDG 2wObJr6f3bct0WtJz5ZOPYyGCA8EJ54Q5KDgc1WBCxvHmwpm0gc+M9ZztRwL+j7O 1svpWtzUTqWBA6RaHn2ZrCP003YMrWpDJw6ry6hTW2t1dDsZgDjoRE2GtE2hp1md OUkS5mwu7KL1iHWUJjIpwsgbO0Wkr3ZJ1m3a1I5pbpdyHVWx+L1UIkHd3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHI4aNqIIiBS+dn3XV/pokPT5F9MB8GA1UdIwQY MBaAFNHpaWIUJIDLsdOEEXcetP8+OYOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAt ODhmNjQxNjg4ZTBmLzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAtODhmNjQxNjg4ZTBm LzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCMg89sk LqBAdV2N4Jpb+gvFgJfa1XpU/udT22U4TjpyukcuLWHZpsHkTfVRud4NSDQdrtBf TVj7KVhy9T1pYppY/h/0Fsli4ts5B5WC9UfhZ2S9O+NRJjJIlRpkBDyffxXukTMK WsjgIwuk/Mp8/4Hp5hUN0s6cJKYWojZarfGVWFvFyYWKh2GQ6qZrTTZA9aEHPY1w PvSpNwjf+Lu45RDP+nbVZ8KoaHeBCqh8h7HQ7/jtJilL++yNcYPkP2DcECgeetkt nbD7mSgvw0kHjsPDsi/AQeikyaxjx+8I7xypfKgvQfdZldT2lp0O+4gnhImJStrs lyk/0tCiI6LPUg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:28 2025 by rpki-client