This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft File: ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json) Hash identifier: VpUwH4pxezJ/nzjuWppzyA6YtoC+X21Lf17YgzD/tM4= Subject key identifier: 75:F3:07:E3:21:D4:E1:F9:D6:8E:0E:DC:AF:A1:07:FA:2E:40:F6:EC Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30 Certificate issuer: /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30 Certificate serial: 019B6D33F1D50887B7DB43ED52FDCE0ECD6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft Manifest number: 05D7 Signing time: Tue 30 Dec 2025 03:01:19 +0000 Manifest this update: Tue 30 Dec 2025 03:01:19 +0000 Manifest next update: Wed 31 Dec 2025 03:01:19 +0000 Files and hashes: 1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: LUyqNz5KdpMUo3eNFPNYy4ZMXZe6lPX9CZzDYzkHJ4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:f1:d5:08:87:b7:db:43:ed:52:fd:ce:0e:cd:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30 Validity Not Before: Dec 30 03:01:19 2025 GMT Not After : Dec 31 03:01:19 2025 GMT Subject: CN=75f307e321d4e1f9d68e0edcafa107fa2e40f6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:38:2c:79:eb:61:9a:2a:e3:a7:b5:6b:cf:74: 08:43:ea:ef:70:50:6c:db:53:f0:fe:fa:7e:a3:98: f5:b1:2d:db:fd:74:61:26:f4:8e:23:c7:e2:0a:95: ad:fd:9e:b0:3f:ba:1c:35:a2:2b:71:ab:18:54:ac: d6:dd:c9:43:62:a6:f5:f5:9e:2b:9e:1b:45:c7:93: d1:7f:33:55:e3:d2:f3:5a:61:77:43:8f:72:fc:81: 95:64:03:02:ff:cd:37:bb:ba:78:97:8d:f1:b9:1b: 75:e2:37:f6:6d:3b:b7:e2:35:9d:27:94:db:17:10: 52:6e:bc:1e:d2:d3:0c:8a:9c:68:85:36:24:a4:f8: 19:8a:79:56:61:58:ac:9a:0b:41:aa:67:d2:cf:a9: 78:1e:07:39:a0:f1:dd:fe:1c:63:32:fa:af:11:34: 6c:d5:e5:8a:6b:14:4f:af:f5:1c:63:0a:b6:6f:3a: d7:cf:b4:05:b6:c8:4d:e6:92:7c:e4:1c:fb:d8:9c: e9:8b:43:2d:af:68:a4:25:11:dc:a6:55:de:50:50: 9b:12:d9:15:ae:71:0f:be:59:29:09:36:7f:b2:81: fc:1a:41:0a:90:31:b3:90:1e:c4:e0:57:e0:59:de: 61:74:93:ba:81:37:d2:89:e3:e0:51:02:b3:a5:84: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:07:E3:21:D4:E1:F9:D6:8E:0E:DC:AF:A1:07:FA:2E:40:F6:EC X509v3 Authority Key Identifier: keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b1:ea:a9:c2:7f:f3:56:58:cb:d2:98:b0:2c:1f:3a:87:fd: d2:d1:e0:61:0a:a3:da:86:d1:60:13:f7:51:d5:09:09:10:62: f0:9e:2f:76:1e:3e:09:35:df:de:02:34:20:b3:64:30:43:63: d7:81:57:0d:c5:d3:7c:5b:e4:bb:b2:a6:15:b4:f1:2a:77:84: b8:1a:6f:88:8b:b5:b7:7c:5a:e9:7d:3a:e0:b8:fb:27:31:34: 55:59:9a:74:87:3d:9b:6c:c4:e7:41:19:d0:a3:ed:ec:9d:5a: 30:22:cb:bb:3b:e4:75:32:89:e3:07:4e:af:ab:64:11:93:e1: e5:a7:37:6e:f6:31:ed:a4:7b:5c:78:73:ef:f9:c3:6b:d4:f9: 04:ae:35:70:59:64:30:df:33:21:d2:87:0d:79:54:2f:db:d5: 2b:2f:68:e5:e1:2c:59:e2:6c:f8:a3:63:c1:5e:61:3d:42:74: ba:32:a6:2e:db:9c:2a:a8:a0:d4:31:e9:ae:33:25:2c:6c:89: 13:9e:72:6d:5a:e3:c5:e6:b0:cc:32:7e:eb:0e:22:30:92:ee: 98:06:e1:6d:1e:dd:23:00:b0:70:b6:c0:e7:20:9c:f4:be:89: 34:f6:d0:2d:c9:4f:c0:4a:7b:6a:95:51:91:3b:bb:ef:32:43: ca:77:9a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM/HVCIe320PtUv3ODs1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTY4MmEwMWUyMmU0MjMzOGNhODVjNzI1NWI5YjNmOWUy YWVhMzAwHhcNMjUxMjMwMDMwMTE5WhcNMjUxMjMxMDMwMTE5WjAzMTEwLwYDVQQD Eyg3NWYzMDdlMzIxZDRlMWY5ZDY4ZTBlZGNhZmExMDdmYTJlNDBmNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzgseethmirjp7Vrz3QIQ+rvcFBs 21Pw/vp+o5j1sS3b/XRhJvSOI8fiCpWt/Z6wP7ocNaIrcasYVKzW3clDYqb19Z4r nhtFx5PRfzNV49LzWmF3Q49y/IGVZAMC/803u7p4l43xuRt14jf2bTu34jWdJ5Tb FxBSbrwe0tMMipxohTYkpPgZinlWYVismgtBqmfSz6l4Hgc5oPHd/hxjMvqvETRs 1eWKaxRPr/UcYwq2bzrXz7QFtshN5pJ85Bz72Jzpi0Mtr2ikJRHcplXeUFCbEtkV rnEPvlkpCTZ/soH8GkEKkDGzkB7E4FfgWd5hdJO6gTfSiePgUQKzpYRIyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXzB+Mh1OH51o4O3K+hB/ouQPbsMB8GA1UdIwQY MBaAFBJWgqAeIuQjOMqFxyVbmz+eKuowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQt MzliMTEwNmNjOWYxLzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQtMzliMTEwNmNjOWYx LzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirHqqcJ/ 81ZYy9KYsCwfOof90tHgYQqj2obRYBP3UdUJCRBi8J4vdh4+CTXf3gI0ILNkMENj 14FXDcXTfFvku7KmFbTxKneEuBpviIu1t3xa6X064Lj7JzE0VVmadIc9m2zE50EZ 0KPt7J1aMCLLuzvkdTKJ4wdOr6tkEZPh5ac3bvYx7aR7XHhz7/nDa9T5BK41cFlk MN8zIdKHDXlUL9vVKy9o5eEsWeJs+KNjwV5hPUJ0ujKmLtucKqig1DHprjMlLGyJ E55ybVrjxeawzDJ+6w4iMJLumAbhbR7dIwCwcLbA5yCc9L6JNPbQLclPwEp7apVR kTu77zJDynea2A== -----END CERTIFICATE-----Generated at Tue Dec 30 07:07:14 2025 by rpki-client