This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json) Hash identifier: a7Qjoyze2SMMxk5lk1z/EmVnJGNER7qND5nIcObCLSM= Subject key identifier: F3:47:46:AC:27:EE:6D:2F:3B:B6:F7:FA:F8:18:65:E2:BE:C2:9F:E4 Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a Certificate serial: 019B3D23968131098F6E23B4F35AD5759D7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft Manifest number: 0A68 Signing time: Sat 20 Dec 2025 19:01:41 +0000 Manifest this update: Sat 20 Dec 2025 19:01:41 +0000 Manifest next update: Sun 21 Dec 2025 19:01:41 +0000 Files and hashes: 1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=) 2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: NqZBsHhWBfavxWwKZEw7P9wZBcbRLs6udQ9UyhvjeOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:96:81:31:09:8f:6e:23:b4:f3:5a:d5:75:9d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a Validity Not Before: Dec 20 19:01:41 2025 GMT Not After : Dec 21 19:01:41 2025 GMT Subject: CN=f34746ac27ee6d2f3bb6f7faf81865e2bec29fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:80:ed:51:a3:47:c2:33:a5:4b:8e:fc:3b: da:39:f4:f3:78:85:f1:dc:3a:39:d1:4e:c7:86:f6: 5b:91:4e:3b:a6:f7:9a:b2:e9:c2:48:70:98:4d:26: 28:2d:0c:be:84:78:12:7b:eb:03:04:57:08:1b:1d: 27:3e:ff:ea:e2:cd:b0:7d:5e:c7:be:b3:a0:66:7d: e1:0d:7c:a6:f0:2d:a7:df:cc:21:98:d3:cc:80:1c: 56:de:2a:5b:c2:15:e9:2f:7f:a5:4d:20:fa:20:6e: 66:6a:3d:77:90:74:d8:35:13:e0:21:56:6a:07:d7: 43:2b:f1:5b:5e:1a:50:ed:93:68:6f:71:a1:6e:30: d0:b6:c9:1f:4a:8c:cf:82:86:07:11:8e:95:6e:ee: 8b:6a:d9:ed:12:ef:a4:3f:ec:c6:b8:bd:ba:d5:50: dc:90:9d:0a:0b:e2:9e:2c:fe:a7:b2:1b:4e:f6:33: 38:04:a1:42:9b:ef:cb:7b:14:49:da:04:ff:3b:cf: 88:80:15:25:0d:15:e3:0f:0d:db:dc:5b:fe:86:11: 61:30:2b:69:b6:15:ef:4c:ec:2e:48:05:45:42:a5: 80:89:01:ad:2c:82:a0:d4:03:7b:33:2f:e1:8d:47: b4:f3:27:42:9c:c7:db:a5:84:c4:aa:0a:40:c8:b6: 10:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:47:46:AC:27:EE:6D:2F:3B:B6:F7:FA:F8:18:65:E2:BE:C2:9F:E4 X509v3 Authority Key Identifier: keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:06:b3:55:b4:a2:b7:72:fe:7d:da:a8:57:62:a7:7d:fd:ad: 24:e0:d3:20:f2:dc:e2:7f:35:27:f1:85:fa:a0:13:1b:bf:b6: 08:d8:3a:8e:7b:b0:6c:3c:09:54:c7:c9:e9:9b:96:c8:c1:39: af:b4:49:17:78:0b:52:48:18:f2:ee:42:81:d3:21:cd:f7:0f: 6d:97:b6:fc:db:21:a9:43:25:b8:e8:8a:b7:6e:a1:d2:5c:bf: c8:2c:24:41:32:f9:37:df:15:7f:c2:28:31:94:5d:cc:23:df: a3:1f:6f:26:c7:5c:16:d4:cf:a7:2e:25:19:94:b0:55:00:f6: 14:7b:83:6a:b7:42:3f:80:05:a6:7c:3c:e6:b7:49:c1:06:a3: 00:5d:c9:b1:00:43:d2:1f:86:e7:13:55:7a:e6:b1:47:f9:04: 1a:26:30:6b:b0:96:17:a5:66:93:65:9b:c0:89:78:9f:2c:28: ed:c4:da:5e:b9:3e:28:5d:91:b5:5a:cf:c3:b7:10:58:7d:3a: 4f:f6:6c:0b:16:2e:00:ad:0c:38:8e:4d:48:c6:45:d8:89:b0: 76:a0:37:1a:8b:31:bd:2d:5a:32:64:85:aa:ee:3b:79:83:35: e2:5e:42:bf:a2:41:29:a4:5b:d4:05:15:02:06:16:37:1e:37: e9:fb:9d:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I5aBMQmPbiO081rVdZ18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYmRhOGNhODY5NDhkOWZlMDI5ZGExMTFhMGM5ZTcwZDMw NDZhNWEwHhcNMjUxMjIwMTkwMTQxWhcNMjUxMjIxMTkwMTQxWjAzMTEwLwYDVQQD EyhmMzQ3NDZhYzI3ZWU2ZDJmM2JiNmY3ZmFmODE4NjVlMmJlYzI5ZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplmA7VGjR8IzpUuO/DvaOfTzeIXx 3Do50U7HhvZbkU47pveasunCSHCYTSYoLQy+hHgSe+sDBFcIGx0nPv/q4s2wfV7H vrOgZn3hDXym8C2n38whmNPMgBxW3ipbwhXpL3+lTSD6IG5maj13kHTYNRPgIVZq B9dDK/FbXhpQ7ZNob3GhbjDQtskfSozPgoYHEY6Vbu6LatntEu+kP+zGuL261VDc kJ0KC+KeLP6nshtO9jM4BKFCm+/LexRJ2gT/O8+IgBUlDRXjDw3b3Fv+hhFhMCtp thXvTOwuSAVFQqWAiQGtLIKg1AN7My/hjUe08ydCnMfbpYTEqgpAyLYQfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNHRqwn7m0vO7b3+vgYZeK+wp/kMB8GA1UdIwQY MBaAFBC9qMqGlI2f4CnaERoMnnDTBGpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQt MGJlZjlhM2JhYmE4LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQtMGJlZjlhM2JhYmE4 LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQazVbSi t3L+fdqoV2Knff2tJODTIPLc4n81J/GF+qATG7+2CNg6jnuwbDwJVMfJ6ZuWyME5 r7RJF3gLUkgY8u5CgdMhzfcPbZe2/NshqUMluOiKt26h0ly/yCwkQTL5N98Vf8Io MZRdzCPfox9vJsdcFtTPpy4lGZSwVQD2FHuDardCP4AFpnw85rdJwQajAF3JsQBD 0h+G5xNVeuaxR/kEGiYwa7CWF6Vmk2WbwIl4nywo7cTaXrk+KF2RtVrPw7cQWH06 T/ZsCxYuAK0MOI5NSMZF2ImwdqA3GosxvS1aMmSFqu47eYM14l5Cv6JBKaRb1AUV AgYWNx436fudrg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:08:55 2025 by rpki-client