This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft File: eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json) Hash identifier: QkLed4xL7SfhahZ2va70AuYr1K/vBdZDFVoofQOu2ZQ= Subject key identifier: 1D:88:89:49:8D:FC:44:84:6E:72:DF:9E:B9:E6:D9:D9:F6:DF:01:48 Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5 Certificate issuer: /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5 Certificate serial: 019B2F67AF6F42F051E12D8FE722C2765F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft Manifest number: 177C Signing time: Thu 18 Dec 2025 03:01:22 +0000 Manifest this update: Thu 18 Dec 2025 03:01:22 +0000 Manifest next update: Fri 19 Dec 2025 03:01:22 +0000 Files and hashes: 1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: q95AMX7s9OSabgg74biK6BQ7awTVIshUYWH7RQ74hNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:af:6f:42:f0:51:e1:2d:8f:e7:22:c2:76:5f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5 Validity Not Before: Dec 18 03:01:22 2025 GMT Not After : Dec 19 03:01:22 2025 GMT Subject: CN=1d8889498dfc44846e72df9eb9e6d9d9f6df0148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:fc:d4:e6:77:7c:41:d1:fd:a5:25:e0:57: fb:7b:04:9e:f7:03:b0:cb:a7:dc:c2:c0:05:29:d3: 4d:2f:7b:ba:e5:b2:5e:6a:50:66:3c:3f:76:f1:f7: 6e:93:77:40:b6:16:76:87:97:ca:e6:aa:6c:fe:14: 37:be:2c:7c:9d:8b:f3:b6:5f:42:65:92:2f:ec:87: 7e:bd:c8:4a:ed:e6:82:f1:f1:03:c2:c4:f7:c6:0d: c3:78:ac:b2:ab:7e:65:36:c5:8b:f0:85:07:a7:33: 7d:33:70:ed:af:76:e4:ed:97:2a:d5:09:3b:df:12: 4b:b1:33:73:67:19:19:48:b8:6c:49:ea:4f:e6:a3: 8d:4e:a5:79:44:f6:7e:c9:1f:c3:09:5d:a9:68:20: 6d:f0:44:40:71:0e:dc:ba:ea:75:2a:f0:9e:78:bd: fb:57:f9:ea:34:18:10:ca:83:01:0c:db:a4:5f:22: 5a:78:a1:12:8e:36:04:bc:bc:c0:d1:ee:d1:4c:f8: 6a:c6:a1:c7:ad:fb:1b:ce:a4:79:e6:b4:82:41:59: 80:2b:70:63:12:61:95:f6:c8:30:03:16:b2:a8:9c: 87:80:8d:9f:4a:5c:9f:21:ac:a7:e9:d2:70:7b:5f: 59:1d:27:f2:56:e7:6e:56:db:05:22:f8:aa:71:00: 9a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:88:89:49:8D:FC:44:84:6E:72:DF:9E:B9:E6:D9:D9:F6:DF:01:48 X509v3 Authority Key Identifier: keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ff:34:32:22:35:aa:f1:f6:d9:3c:f9:1a:ac:c3:16:a1:e0: 85:85:83:64:f5:99:34:f2:f8:b2:ea:5e:8c:63:80:62:03:b6: 99:ac:37:36:56:98:a6:19:44:b0:d9:0c:bf:53:5b:12:e1:ef: 0d:f0:bf:35:cc:bb:58:c3:10:e9:ed:55:da:bc:a9:1f:6f:b8: 6d:6a:6a:6b:80:f6:84:15:5c:1b:e8:1b:c8:42:73:f9:33:ed: ea:b8:0e:bd:2d:74:d7:f8:36:0c:d3:13:76:30:0b:36:45:6f: 20:94:e7:71:67:dc:9c:48:af:bb:e4:85:b9:2a:02:ce:eb:1a: f4:e0:da:9c:ec:8d:5a:88:79:b6:92:3a:7c:75:59:69:91:2c: e3:92:4d:63:a5:58:13:86:6b:24:c8:c2:32:b6:78:02:8d:e3: 0a:5c:71:70:92:1f:16:7b:c1:6c:bd:3f:bf:3a:c2:40:09:a1: b8:45:53:4a:7a:b2:93:9c:d6:6b:bb:bd:6c:37:c7:e1:b8:5b: ec:9f:e3:fb:49:fc:5c:af:8a:ea:2c:86:07:65:c9:09:dd:d8: 60:d7:41:28:83:d7:47:f0:f6:5d:90:4e:5a:38:9c:a7:20:bf: b3:75:2b:3c:34:f4:a3:7d:72:89:39:6d:8f:45:00:ab:43:66: 93:ea:f4:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ69vQvBR4S2P5yLCdl8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YjBkZTRiNTJjMzE3MjJlNjJiOTM5NmQ4N2ExZWE4ZDUx YTA4ZTUwHhcNMjUxMjE4MDMwMTIyWhcNMjUxMjE5MDMwMTIyWjAzMTEwLwYDVQQD EygxZDg4ODk0OThkZmM0NDg0NmU3MmRmOWViOWU2ZDlkOWY2ZGYwMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxb81OZ3fEHR/aUl4Ff7ewSe9wOw y6fcwsAFKdNNL3u65bJealBmPD928fduk3dAthZ2h5fK5qps/hQ3vix8nYvztl9C ZZIv7Id+vchK7eaC8fEDwsT3xg3DeKyyq35lNsWL8IUHpzN9M3Dtr3bk7Zcq1Qk7 3xJLsTNzZxkZSLhsSepP5qONTqV5RPZ+yR/DCV2paCBt8ERAcQ7cuup1KvCeeL37 V/nqNBgQyoMBDNukXyJaeKESjjYEvLzA0e7RTPhqxqHHrfsbzqR55rSCQVmAK3Bj EmGV9sgwAxayqJyHgI2fSlyfIayn6dJwe19ZHSfyVuduVtsFIviqcQCa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2IiUmN/ESEbnLfnrnm2dn23wFIMB8GA1UdIwQY MBaAFHiw3ktSwxci5iuTlth6HqjVGgjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTlkN2ItNTFiNi00MTY0LTg5YmEt NDc0ODBmZWQwOWIwLzEvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNTlkN2ItNTFiNi00MTY0LTg5YmEtNDc0ODBmZWQwOWIw LzEvZUxEZVMxTERGeUxtSzVPVzJIb2VxTlVhQ09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/80MiI1 qvH22Tz5GqzDFqHghYWDZPWZNPL4supejGOAYgO2maw3NlaYphlEsNkMv1NbEuHv DfC/Ncy7WMMQ6e1V2rypH2+4bWpqa4D2hBVcG+gbyEJz+TPt6rgOvS101/g2DNMT djALNkVvIJTncWfcnEivu+SFuSoCzusa9ODanOyNWoh5tpI6fHVZaZEs45JNY6VY E4ZrJMjCMrZ4Ao3jClxxcJIfFnvBbL0/vzrCQAmhuEVTSnqyk5zWa7u9bDfH4bhb 7J/j+0n8XK+K6iyGB2XJCd3YYNdBKIPXR/D2XZBOWjicpyC/s3UrPDT0o31yiTlt j0UAq0Nmk+r0sA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:25:31 2025 by rpki-client