This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft File: eLBPuvqja3H8027KULX-DojdNVE.mft (raw, json) Hash identifier: QBVnqOExg9p0vArnu7MFsOrhkcgRxOAG0XeUIOnAD+Q= Subject key identifier: AA:0E:13:15:81:15:A1:41:92:4A:8E:8A:1D:C3:D8:A1:6B:2A:1D:11 Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51 Certificate issuer: /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551 Certificate serial: 019B3DC7DC44C6F4A1033D3BF72B972CE39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:01:06 +0000 Manifest this update: Sat 20 Dec 2025 22:01:06 +0000 Manifest next update: Sun 21 Dec 2025 22:01:06 +0000 Files and hashes: 1: _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (hash: uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=) 2: bqoiPzwRe4PUMqiK_-uqiOSrT8g.roa (hash: zxBqKx04g5nB2wdjrM/3iI8Vlwm/BGdUl98rn328O3U=) 3: eLBPuvqja3H8027KULX-DojdNVE.crl (hash: XRPmVAF2JgORgXGNB/V4PcO9stgh5Bgd3z/4Md/DgQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:dc:44:c6:f4:a1:03:3d:3b:f7:2b:97:2c:e3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551 Validity Not Before: Dec 20 22:01:06 2025 GMT Not After : Dec 21 22:01:06 2025 GMT Subject: CN=aa0e13158115a141924a8e8a1dc3d8a16b2a1d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:61:d5:b4:ba:aa:85:61:b1:57:cf:73:40: 12:ba:e2:e2:9d:65:d5:65:cc:0f:3c:8d:ca:9e:44: b6:0b:45:15:3b:76:7b:5b:2f:6c:77:13:c0:5d:ce: ba:2a:9d:96:8f:16:90:66:c0:33:9a:4d:00:34:02: 85:93:fc:73:8f:7a:1d:6c:e9:17:51:f2:a1:29:cd: 93:fd:38:f5:67:68:61:c1:a7:7f:35:b1:fb:08:09: e2:5f:0e:4b:3f:b8:8e:20:31:6c:c7:aa:0f:67:84: 3a:64:99:a6:e3:2e:e8:dd:58:00:36:93:09:a9:72: f7:d5:ed:ec:f7:08:0b:5e:1a:bc:be:18:ef:91:54: f8:d0:b8:ec:85:13:b8:c3:05:aa:91:4f:0f:1c:78: 07:8b:54:dc:06:da:9a:af:9c:e4:2b:d8:78:bb:df: ce:55:35:41:72:df:72:f2:b4:74:1b:ca:b1:da:e4: 9b:f4:ad:18:31:2a:ef:1f:45:1b:5b:52:56:80:26: 3a:83:27:d6:48:b6:b8:cd:63:25:32:ee:27:4e:33: 19:f0:3e:c6:e2:e6:c5:6c:e7:7b:21:50:85:b9:23: 65:e5:a0:9c:92:ad:95:5c:29:5f:0a:ef:d7:8a:75: 46:5c:60:60:6a:65:a0:94:0c:4a:13:5c:f8:50:8c: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0E:13:15:81:15:A1:41:92:4A:8E:8A:1D:C3:D8:A1:6B:2A:1D:11 X509v3 Authority Key Identifier: keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:be:9a:0f:bc:64:b8:26:2a:ca:d3:2e:93:cb:f8:46:3b:23: 57:f0:d9:61:c5:d5:65:c2:92:7a:cf:99:0f:47:f7:19:74:69: a6:35:ee:96:b8:a2:a8:bb:0e:7d:7d:25:68:89:6d:92:02:f9: 7e:60:af:27:c5:0b:ed:18:fe:54:76:f4:22:62:0a:f8:f9:3b: e5:7d:62:48:ad:e0:8f:21:e8:92:72:03:28:7a:f0:0f:41:fa: 3e:a0:f2:bd:1f:31:5d:57:a7:aa:df:dc:a0:c0:0a:64:4e:02: 65:ff:2e:79:47:a1:e8:a1:48:13:ef:bc:cd:a5:29:88:5a:33: 8f:5c:61:fd:97:40:47:80:0f:c4:16:89:10:47:31:91:0a:a5: 52:9d:dc:0b:a8:e0:4e:57:fa:a1:73:cd:e1:2d:79:2e:2e:ee: 82:17:1e:0d:88:09:f8:0c:c8:52:1e:92:f8:02:ab:a4:c8:4c: 69:f4:dd:66:fe:71:ea:14:9e:84:ff:87:d2:bb:01:91:8e:a1: 04:bf:a5:54:a2:45:26:7e:ce:a9:fd:7c:b8:72:6c:31:47:82: bd:a4:9a:46:5e:9a:ac:52:54:75:3a:ae:57:31:9e:f2:47:aa: f9:16:9b:aa:38:2d:dc:e1:5c:08:a8:32:ae:a3:07:3e:e0:1e: a2:4e:1b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x9xExvShAz079yuXLOOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YjA0ZmJhZmFhMzZiNzFmY2QzNmVjYTUwYjVmZTBlODhk ZDM1NTEwHhcNMjUxMjIwMjIwMTA2WhcNMjUxMjIxMjIwMTA2WjAzMTEwLwYDVQQD EyhhYTBlMTMxNTgxMTVhMTQxOTI0YThlOGExZGMzZDhhMTZiMmExZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAth1bS6qoVhsVfPc0ASuuLinWXV ZcwPPI3KnkS2C0UVO3Z7Wy9sdxPAXc66Kp2WjxaQZsAzmk0ANAKFk/xzj3odbOkX UfKhKc2T/Tj1Z2hhwad/NbH7CAniXw5LP7iOIDFsx6oPZ4Q6ZJmm4y7o3VgANpMJ qXL31e3s9wgLXhq8vhjvkVT40LjshRO4wwWqkU8PHHgHi1TcBtqar5zkK9h4u9/O VTVBct9y8rR0G8qx2uSb9K0YMSrvH0UbW1JWgCY6gyfWSLa4zWMlMu4nTjMZ8D7G 4ubFbOd7IVCFuSNl5aCckq2VXClfCu/XinVGXGBgamWglAxKE1z4UIyrCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoOExWBFaFBkkqOih3D2KFrKh0RMB8GA1UdIwQY MBaAFHiwT7r6o2tx/NNuylC1/g6I3TVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYt MGFhZTFjY2Q4NzRiLzEvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jNDFjNzQtMGI4Mi00MGU3LWEwYmYtMGFhZTFjY2Q4NzRi LzEvZUxCUHV2cWphM0g4MDI3S1VMWC1Eb2pkTlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe76aD7xk uCYqytMuk8v4RjsjV/DZYcXVZcKSes+ZD0f3GXRppjXulriiqLsOfX0laIltkgL5 fmCvJ8UL7Rj+VHb0ImIK+Pk75X1iSK3gjyHoknIDKHrwD0H6PqDyvR8xXVenqt/c oMAKZE4CZf8ueUeh6KFIE++8zaUpiFozj1xh/ZdAR4APxBaJEEcxkQqlUp3cC6jg Tlf6oXPN4S15Li7ughceDYgJ+AzIUh6S+AKrpMhMafTdZv5x6hSehP+H0rsBkY6h BL+lVKJFJn7Oqf18uHJsMUeCvaSaRl6arFJUdTquVzGe8keq+Rabqjgt3OFcCKgy rqMHPuAeok4bkA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:02:29 2025 by rpki-client