This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json) Hash identifier: Vhwvra9/M6XZTxvMcjzZpJABNTWT5OWcnlMuRy3HGyI= Subject key identifier: 98:C4:42:C0:92:E6:10:17:AF:50:90:55:38:A3:79:B2:E8:64:88:75 Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Certificate serial: 019B41365E841DB5641F7ECA375EB94B3F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft Manifest number: 0223 Signing time: Sun 21 Dec 2025 14:00:40 +0000 Manifest this update: Sun 21 Dec 2025 14:00:40 +0000 Manifest next update: Mon 22 Dec 2025 14:00:40 +0000 Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: e8qdZZnMEzDCcbOeQ5abjortXRGqERN5tJUXsX3OUWU=) 2: STa1BOs7kw8CsADCt1RKyRnQOuM.roa (hash: JELToOA+ZVBF1T6CC8WjLEZ0cL/7hDlyzVpdOjCiv+Y=) 3: TTb9mwPRFCBpcrOhR-GLrg38faE.roa (hash: LvVba8YJThKcbjXAqszJAY5PJ2jIfuGz5gLO1LpYKNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:5e:84:1d:b5:64:1f:7e:ca:37:5e:b9:4b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=98c442c092e61017af50905538a379b2e8648875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:5f:b3:3d:5d:25:da:3c:09:76:02:b2:71: cb:3e:74:ad:cc:bf:8f:77:e1:cd:cf:db:7e:75:8c: a4:a6:bd:26:d2:5d:61:f6:c9:33:e8:f4:7b:60:a4: b7:fe:54:28:38:6b:e8:44:49:2f:92:9a:13:45:47: 55:b9:e3:c4:65:e8:89:5f:d0:6b:7f:02:ca:f9:d1: b3:d9:f8:98:68:77:b7:d3:e3:3d:1c:e4:62:c1:e3: 53:c6:fd:f1:c0:8e:56:dc:f0:80:7d:34:c8:5c:c9: 5a:2c:26:5c:8e:c4:7d:d7:d6:17:42:39:09:5b:23: bb:58:6c:59:f9:35:4b:b8:e5:c8:5d:28:91:30:db: ae:52:de:c5:e7:8d:a0:08:93:8b:fe:9b:b7:20:d3: e0:34:9e:d6:a7:e4:35:40:31:e3:47:ac:0d:78:f1: be:9c:cc:5b:6a:a0:92:84:de:dc:9c:8d:ee:26:f9: 6e:37:c0:23:dc:66:21:91:b8:9f:07:e3:5a:4e:68: c5:df:9e:77:f7:32:f2:a5:05:e5:6e:51:5d:23:cd: 0f:78:00:b0:54:58:b2:21:f4:a5:29:8e:40:fd:93: 79:52:8c:d6:48:fc:5a:ef:e7:d4:9d:e3:64:38:73: ca:c2:09:57:f1:48:88:60:46:a3:6c:94:ef:18:a8: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C4:42:C0:92:E6:10:17:AF:50:90:55:38:A3:79:B2:E8:64:88:75 X509v3 Authority Key Identifier: keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f2:c1:a0:6d:ee:98:51:7e:f6:85:7f:67:91:29:0b:5b:93: d5:e8:0a:a0:82:89:ac:39:a7:de:01:fc:00:ab:6c:9f:c7:f6: c4:3e:20:d3:40:52:ee:d2:74:61:f4:84:1c:a2:00:ac:f2:2e: 34:9a:bc:fa:61:1e:9f:18:7d:85:96:37:e1:3b:33:0d:27:f8: 53:59:90:9c:e8:7c:09:2a:12:f9:2c:88:61:23:14:f6:ab:df: 4a:2a:a9:f6:41:ff:ac:78:de:0c:52:7d:12:2e:49:cd:64:c6: 85:fe:37:83:b8:e9:58:39:21:99:f7:74:7d:92:00:ba:dc:66: e5:b1:da:31:ab:72:03:5d:2f:73:8a:fb:cd:53:70:de:b3:60: b7:26:ba:96:9e:c6:92:a3:64:81:eb:61:94:03:70:06:1a:6f: 0d:ff:a4:8b:49:69:14:0d:67:67:9e:5f:40:d3:49:49:f1:37: 9f:98:80:f4:54:8b:79:d4:6d:c5:a3:97:3b:b6:db:8c:94:0f: 35:18:db:7c:4a:a2:d2:9b:d4:e3:93:68:83:03:ad:91:92:d4: 53:5a:89:16:5a:f7:fe:84:ca:ab:aa:35:f8:eb:46:45:50:31: 74:d0:10:17:7a:29:28:45:b7:a9:47:02:7a:3c:fd:81:f0:ce: 11:06:1c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNl6EHbVkH37KN165Sz+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh M2ViZjQwHhcNMjUxMjIxMTQwMDQwWhcNMjUxMjIyMTQwMDQwWjAzMTEwLwYDVQQD Eyg5OGM0NDJjMDkyZTYxMDE3YWY1MDkwNTUzOGEzNzliMmU4NjQ4ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jdfsz1dJdo8CXYCsnHLPnStzL+P d+HNz9t+dYykpr0m0l1h9skz6PR7YKS3/lQoOGvoREkvkpoTRUdVuePEZeiJX9Br fwLK+dGz2fiYaHe30+M9HORiweNTxv3xwI5W3PCAfTTIXMlaLCZcjsR919YXQjkJ WyO7WGxZ+TVLuOXIXSiRMNuuUt7F542gCJOL/pu3INPgNJ7Wp+Q1QDHjR6wNePG+ nMxbaqCShN7cnI3uJvluN8Aj3GYhkbifB+NaTmjF35539zLypQXlblFdI80PeACw VFiyIfSlKY5A/ZN5UozWSPxa7+fUneNkOHPKwglX8UiIYEajbJTvGKhScwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjEQsCS5hAXr1CQVTijebLoZIh1MB8GA1UdIwQY MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct MzQyMWVhNDFkZjM2LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2 LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/LBoG3u mFF+9oV/Z5EpC1uT1egKoIKJrDmn3gH8AKtsn8f2xD4g00BS7tJ0YfSEHKIArPIu NJq8+mEenxh9hZY34TszDSf4U1mQnOh8CSoS+SyIYSMU9qvfSiqp9kH/rHjeDFJ9 Ei5JzWTGhf43g7jpWDkhmfd0fZIAutxm5bHaMatyA10vc4r7zVNw3rNgtya6lp7G kqNkgethlANwBhpvDf+ki0lpFA1nZ55fQNNJSfE3n5iA9FSLedRtxaOXO7bbjJQP NRjbfEqi0pvU45NogwOtkZLUU1qJFlr3/oTKq6o1+OtGRVAxdNAQF3opKEW3qUcC ejz9gfDOEQYcOg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:16:16 2025 by rpki-client