This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json) Hash identifier: BS0rhZEfl1AcxXou0GBDSJizWTVWERlKcyFknQ1AHK8= Subject key identifier: 70:83:FC:8A:1E:71:EA:EF:D1:11:29:5C:76:9A:EB:82:BC:19:AD:AD Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f Certificate serial: 019B3FB65A15CD0D0BEDB18269205AE8DBFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft Manifest number: 0BE9 Signing time: Sun 21 Dec 2025 07:01:13 +0000 Manifest this update: Sun 21 Dec 2025 07:01:13 +0000 Manifest next update: Mon 22 Dec 2025 07:01:13 +0000 Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: 38jaMmaAYGd2jy33ww+6eirI+xv5O+C3dSqEc8c/aZc=) 2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:5a:15:cd:0d:0b:ed:b1:82:69:20:5a:e8:db:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f Validity Not Before: Dec 21 07:01:13 2025 GMT Not After : Dec 22 07:01:13 2025 GMT Subject: CN=7083fc8a1e71eaefd111295c769aeb82bc19adad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8c:84:dc:cf:07:ea:e8:40:4a:cb:e9:b9:71: 97:dd:b8:ed:c8:f7:da:09:4f:94:ec:03:69:a1:d3: 81:2b:c6:e3:54:d3:db:5e:65:66:21:b1:f3:bf:a3: d6:f6:ef:34:f9:51:2b:e3:02:ac:03:bf:3c:f9:42: db:67:4d:39:0a:fa:c0:6c:18:d7:fe:ff:88:e9:de: 2e:9f:4d:97:12:4f:9a:a3:c2:b0:85:81:d4:1e:d0: 54:da:26:cb:f0:63:72:c0:aa:e9:f2:d7:0a:09:db: b5:61:e1:6c:9b:bc:48:70:dd:57:8b:57:0b:e4:6e: 25:1d:a2:79:43:e4:13:b4:b3:32:30:83:e7:39:57: 93:ad:21:6d:94:fc:9b:96:48:2d:68:b1:16:b5:d9: c3:b5:e3:4d:41:b0:18:e6:17:1d:4b:9f:38:7c:6e: ec:fb:66:0a:77:e4:f0:ee:eb:a1:fa:31:66:01:56: f6:64:d9:9e:db:be:ba:79:75:8c:70:ab:47:0c:ea: 07:ca:28:21:0e:b0:74:43:10:83:86:1d:61:de:5e: f2:42:f7:23:17:a5:d2:eb:b9:ef:f4:ca:3b:dd:77: 8a:1c:6d:e6:52:fb:92:bb:2b:e8:e5:c2:c0:01:79: db:4f:ec:90:91:1e:86:eb:a3:e3:96:65:9d:49:f4: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:FC:8A:1E:71:EA:EF:D1:11:29:5C:76:9A:EB:82:BC:19:AD:AD X509v3 Authority Key Identifier: keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fa:89:e9:a8:37:63:9d:75:f2:97:30:91:7a:6a:39:56:7d: cf:d5:29:ec:3c:c8:93:7c:70:5c:79:6d:f5:a2:ce:6f:93:49: eb:44:7b:ae:0b:c6:fb:cb:5e:6f:dc:1a:fa:c5:3e:ce:ee:c6: 20:e0:66:b9:5e:1c:be:45:89:9d:a5:19:5f:ff:d9:79:47:1c: b1:9c:29:26:52:c1:7d:e6:54:38:93:e8:51:b2:e1:52:c3:fb: d7:97:12:e1:ff:73:86:66:32:d8:91:33:18:5c:eb:9e:f5:dd: d5:41:f8:d2:74:a8:bb:f2:f5:c9:58:79:c9:bf:e4:4a:a0:0e: 45:15:a9:e3:db:45:35:1c:31:55:95:c5:af:6a:ef:54:79:d6: 8d:52:83:31:c7:ef:23:6b:10:55:77:20:61:8b:2b:3d:26:2a: 91:5c:a9:2c:fc:7e:33:bd:2e:81:67:8e:5b:cc:4f:d7:0c:7d: 33:2e:18:a0:80:bb:f5:9d:4c:89:42:0e:39:4f:4d:cc:ff:59: e5:a0:ee:bf:c7:f1:d9:2f:6a:66:39:30:34:b0:b1:9c:2a:dc: cc:d7:9a:a3:13:b5:c2:70:b6:82:54:87:b6:f2:44:12:9b:d6: 27:28:50:9a:4f:96:81:17:c7:90:3a:86:13:56:e6:f9:e2:09: ad:d6:07:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tloVzQ0L7bGCaSBa6Nv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTk2OTYyMTQyNDgwY2JiMWQzODQxMTc3MWViNGZmM2Uz OTgzOWYwHhcNMjUxMjIxMDcwMTEzWhcNMjUxMjIyMDcwMTEzWjAzMTEwLwYDVQQD Eyg3MDgzZmM4YTFlNzFlYWVmZDExMTI5NWM3NjlhZWI4MmJjMTlhZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oyE3M8H6uhASsvpuXGX3bjtyPfa CU+U7ANpodOBK8bjVNPbXmVmIbHzv6PW9u80+VEr4wKsA788+ULbZ005CvrAbBjX /v+I6d4un02XEk+ao8KwhYHUHtBU2ibL8GNywKrp8tcKCdu1YeFsm7xIcN1Xi1cL 5G4lHaJ5Q+QTtLMyMIPnOVeTrSFtlPyblkgtaLEWtdnDteNNQbAY5hcdS584fG7s +2YKd+Tw7uuh+jFmAVb2ZNme2766eXWMcKtHDOoHyighDrB0QxCDhh1h3l7yQvcj F6XS67nv9Mo73XeKHG3mUvuSuyvo5cLAAXnbT+yQkR6G66PjlmWdSfRvGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCD/Ioecerv0REpXHaa64K8Ga2tMB8GA1UdIwQY MBaAFNHpaWIUJIDLsdOEEXcetP8+OYOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAt ODhmNjQxNjg4ZTBmLzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAtODhmNjQxNjg4ZTBm LzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfqJ6ag3 Y5118pcwkXpqOVZ9z9Up7DzIk3xwXHlt9aLOb5NJ60R7rgvG+8teb9wa+sU+zu7G IOBmuV4cvkWJnaUZX//ZeUccsZwpJlLBfeZUOJPoUbLhUsP715cS4f9zhmYy2JEz GFzrnvXd1UH40nSou/L1yVh5yb/kSqAORRWp49tFNRwxVZXFr2rvVHnWjVKDMcfv I2sQVXcgYYsrPSYqkVypLPx+M70ugWeOW8xP1wx9My4YoIC79Z1MiUIOOU9NzP9Z 5aDuv8fx2S9qZjkwNLCxnCrczNeaoxO1wnC2glSHtvJEEpvWJyhQmk+WgRfHkDqG E1bm+eIJrdYHgA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:14:17 2025 by rpki-client