This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
File: ElV9TH4Hxulcs5EpLcEYZvZhn10.mft (raw, json)
Hash identifier: oSn1EUTlh00CHdn+uzl5kzOVZ/USB9P3tHFO+kb/NVY=
Subject key identifier: 9A:A1:55:65:97:4D:EB:FD:32:10:A1:F8:B3:4C:42:71:49:B2:4E:0E
Authority key identifier: 12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D
Certificate issuer: /CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
Certificate serial: 019B5A1ABBB4DFA79798B65C5783F644D0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
Manifest number: 0C
Signing time: Fri 26 Dec 2025 10:00:59 +0000
Manifest this update: Fri 26 Dec 2025 10:00:59 +0000
Manifest next update: Sat 27 Dec 2025 10:00:59 +0000
Files and hashes: 1: ElV9TH4Hxulcs5EpLcEYZvZhn10.crl (hash: AD+TH5F9o/H1SOVJHjLsYFfxTyWw8+ZcEM7J2nKbTGA=)
2: xnRLlo23tZr77P_PlWWHMXafiE0.roa (hash: ZOHh3lxyRijBgs+ZpNg6w7UuHGhuEqemVn0XlY7nDQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5a:1a:bb:b4:df:a7:97:98:b6:5c:57:83:f6:44:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
Validity
Not Before: Dec 26 10:00:59 2025 GMT
Not After : Dec 27 10:00:59 2025 GMT
Subject: CN=9aa15565974debfd3210a1f8b34c427149b24e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:42:e3:ae:c7:b6:07:b8:47:31:25:8e:f6:
c5:b9:81:a7:84:d6:ea:82:28:46:c5:c4:29:e6:47:
53:9f:0c:ca:1f:20:8d:7e:b4:1f:82:69:78:09:75:
1a:07:2e:f7:89:b2:ec:02:cc:0f:d1:2c:33:02:0d:
32:17:a7:66:3f:f4:f4:55:fc:58:31:4b:94:2d:58:
32:5e:a2:fb:0d:ec:ee:72:b9:c4:f0:4d:0b:fb:6d:
19:70:1f:c5:bd:d0:cb:46:a8:00:dd:2f:50:80:bf:
df:53:b4:12:da:49:6e:92:cf:20:2c:94:11:31:5e:
1e:72:0e:56:4e:d0:4d:9f:42:c4:f7:47:74:0c:24:
43:b2:6d:68:06:01:66:70:a3:05:0a:7b:19:90:12:
eb:cf:78:63:98:bd:a4:fd:fa:01:ca:fe:10:91:c3:
0c:9f:69:56:ba:0f:6e:b6:06:14:17:b8:41:28:9a:
eb:8f:88:61:4a:56:47:ae:19:36:82:58:cf:bf:6f:
52:47:07:cc:27:2c:f2:da:c4:9a:c4:d9:c8:68:c8:
be:c3:4a:26:09:19:92:75:89:a7:35:ee:09:fe:b1:
cb:2c:69:e1:f9:db:6d:30:dc:98:0c:8c:90:9d:a3:
b0:b5:4a:b2:bf:85:0d:f1:67:14:03:14:90:d8:f2:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:55:65:97:4D:EB:FD:32:10:A1:F8:B3:4C:42:71:49:B2:4E:0E
X509v3 Authority Key Identifier:
keyid:12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:12:39:89:87:47:76:3d:f5:ca:c1:c9:b2:8a:85:89:d0:d2:
a1:d0:79:95:7c:c6:e3:e9:ca:e6:06:ce:32:c5:a3:a6:c9:ed:
ff:cf:63:1f:ea:28:95:be:20:4f:a5:33:39:b7:b1:a8:4d:62:
24:da:36:46:bd:de:de:d8:cf:ec:bb:8d:4f:24:aa:05:31:7e:
6a:62:ad:69:ef:8c:3b:10:c5:a3:40:69:72:93:12:b2:ab:e1:
4a:10:6b:f8:1b:42:32:dc:5f:2f:8c:c1:30:60:f1:e9:3f:41:
80:86:42:24:16:2c:be:5e:9f:2f:24:9c:42:d3:08:5b:73:92:
e5:36:30:d6:77:51:ac:fc:5b:4c:e4:8f:ec:f6:a5:1f:6b:ff:
f6:d8:43:88:03:71:6d:08:f2:de:9b:28:50:0d:a8:d4:4c:0c:
bc:06:8b:72:76:60:a3:69:e9:d7:80:25:7b:e3:82:6b:78:c0:
e1:c1:2e:cc:7e:1c:f2:0d:ae:e9:de:3c:ef:67:7c:41:58:a7:
43:4a:d0:df:03:fc:ae:db:be:1f:4f:e7:68:f1:bb:87:08:4d:
73:f8:63:83:37:47:35:a0:9b:e6:0b:3d:89:ca:d8:95:2b:df:
b9:95:0c:fe:fe:29:65:af:86:94:ca:85:70:19:49:81:c9:c8:
dc:39:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:42:22 2025 by rpki-client