This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json) Hash identifier: bFQDQk/jgcdSoS5BZuzsNDGYxm9Jd4Dn+I9VBugH+nU= Subject key identifier: CE:BD:7A:98:91:CF:FC:E0:AF:BF:47:EC:2C:61:1B:BC:F0:DD:72:76 Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Certificate serial: 019B717DD086DBADE6DB22948C18E0F74A82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft Manifest number: 023C Signing time: Tue 30 Dec 2025 23:00:29 +0000 Manifest this update: Tue 30 Dec 2025 23:00:29 +0000 Manifest next update: Wed 31 Dec 2025 23:00:29 +0000 Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: v1no2vKPFJsNK4bSmgYxKKxV0cN/VZEca97Op9xthdw=) 2: STa1BOs7kw8CsADCt1RKyRnQOuM.roa (hash: JELToOA+ZVBF1T6CC8WjLEZ0cL/7hDlyzVpdOjCiv+Y=) 3: TTb9mwPRFCBpcrOhR-GLrg38faE.roa (hash: LvVba8YJThKcbjXAqszJAY5PJ2jIfuGz5gLO1LpYKNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:d0:86:db:ad:e6:db:22:94:8c:18:e0:f7:4a:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4 Validity Not Before: Dec 30 23:00:29 2025 GMT Not After : Dec 31 23:00:29 2025 GMT Subject: CN=cebd7a9891cffce0afbf47ec2c611bbcf0dd7276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:c4:11:ba:d7:c2:4d:67:1f:85:f8:7b:57: 88:53:51:3f:7e:12:18:8d:c2:21:6b:31:ad:72:45: d7:05:fa:d2:d5:ba:0e:b2:d1:26:46:3d:da:0a:94: e8:68:ff:02:d8:20:a8:1e:f4:05:e1:31:80:04:48: 53:be:fa:a8:18:16:86:bf:f2:2d:86:40:50:c5:03: 8e:bb:ee:ee:64:54:91:14:cc:33:e2:94:82:c2:7c: 18:22:04:78:a3:08:39:5e:ee:d3:ec:10:62:61:c2: de:47:bb:ef:cf:9f:6d:89:40:4d:ca:48:78:ce:c0: af:33:a0:57:79:3a:f9:00:9c:04:e7:14:3a:42:e8: e2:71:c1:45:f3:b7:7c:d6:52:52:18:6b:8f:79:8f: 31:fa:51:2d:26:cb:98:80:9f:c8:bc:1e:4d:7a:94: 15:cb:32:e0:fc:f8:d4:9a:3a:4b:f5:8a:65:6a:46: e8:eb:f1:87:73:19:5f:1c:7d:67:59:b8:29:d1:7a: 5c:7b:f8:5f:7b:8d:7d:d9:cf:2d:b3:82:64:42:d1: f1:2c:33:a6:0a:84:ed:eb:ec:da:3f:e3:cd:c8:d8: 6f:cd:2e:83:f2:a4:a6:94:7f:ca:73:1c:52:88:b3: 0b:f8:0e:ab:94:84:21:c2:fd:eb:4f:0f:8a:ee:57: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BD:7A:98:91:CF:FC:E0:AF:BF:47:EC:2C:61:1B:BC:F0:DD:72:76 X509v3 Authority Key Identifier: keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:54:68:db:32:ef:fc:dd:5b:0d:0f:89:d3:28:58:6d:48:47: c3:fa:a2:bc:fc:48:c7:c9:3e:a5:58:4c:21:22:63:db:3a:1a: ee:4c:10:c7:f6:93:fb:15:26:0e:24:a1:b5:a0:76:92:ba:c8: 23:9e:5f:01:ba:47:77:e4:e8:29:e3:63:3f:58:b9:ad:61:87: 8c:27:7b:20:d0:48:35:2f:7b:ca:6b:26:0f:66:af:ee:1a:cb: 6f:ee:72:53:75:5e:78:7c:e7:42:cc:37:97:29:f7:b1:69:03: a1:12:87:9b:8d:41:b2:49:35:4e:27:3f:e3:66:be:41:c7:25: 3a:58:45:23:2f:03:68:ed:b8:a7:d5:83:ea:cd:9e:83:5c:32: b9:7e:6e:a3:a2:89:fd:b7:38:97:89:73:f0:57:f8:03:f5:7e: 11:a1:c6:24:2b:f4:7e:a7:12:e9:f5:4e:27:d4:0a:6a:3f:e2: 59:ed:a2:07:fe:d5:f7:bf:2a:dd:cc:88:6e:ab:68:19:d1:d9: 5f:2a:35:6c:ba:50:77:ac:53:a6:c1:aa:07:ab:fd:51:a3:aa: ba:b2:5d:2b:6b:f5:d7:a2:4f:07:43:6c:08:c6:b5:a8:12:b1: bb:b9:27:bd:0b:9f:ee:f9:6d:16:b4:4b:60:89:8c:08:43:61: e2:d6:dd:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfdCG263m2yKUjBjg90qCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNTIwZjhiMmFmOGExNDUzMDg5YTYyMGQyMzkyZjY2YjBh M2ViZjQwHhcNMjUxMjMwMjMwMDI5WhcNMjUxMjMxMjMwMDI5WjAzMTEwLwYDVQQD EyhjZWJkN2E5ODkxY2ZmY2UwYWZiZjQ3ZWMyYzYxMWJiY2YwZGQ3Mjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUrEEbrXwk1nH4X4e1eIU1E/fhIY jcIhazGtckXXBfrS1boOstEmRj3aCpToaP8C2CCoHvQF4TGABEhTvvqoGBaGv/It hkBQxQOOu+7uZFSRFMwz4pSCwnwYIgR4owg5Xu7T7BBiYcLeR7vvz59tiUBNykh4 zsCvM6BXeTr5AJwE5xQ6QujiccFF87d81lJSGGuPeY8x+lEtJsuYgJ/IvB5NepQV yzLg/PjUmjpL9Yplakbo6/GHcxlfHH1nWbgp0Xpce/hfe4192c8ts4JkQtHxLDOm CoTt6+zaP+PNyNhvzS6D8qSmlH/KcxxSiLML+A6rlIQhwv3rTw+K7lf/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM69epiRz/zgr79H7CxhG7zw3XJ2MB8GA1UdIwQY MBaAFBJSD4sq+KFFMImmINI5L2awo+v0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTct MzQyMWVhNDFkZjM2LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NzY1NjUtYTY5OS00ZDg4LTgxMTctMzQyMWVhNDFkZjM2 LzEvRWxJUGl5cjRvVVV3aWFZZzBqa3ZackNqNl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1Ro2zLv /N1bDQ+J0yhYbUhHw/qivPxIx8k+pVhMISJj2zoa7kwQx/aT+xUmDiShtaB2krrI I55fAbpHd+ToKeNjP1i5rWGHjCd7INBINS97ymsmD2av7hrLb+5yU3VeeHznQsw3 lyn3sWkDoRKHm41Bskk1Tic/42a+QcclOlhFIy8DaO24p9WD6s2eg1wyuX5uo6KJ /bc4l4lz8Ff4A/V+EaHGJCv0fqcS6fVOJ9QKaj/iWe2iB/7V978q3cyIbqtoGdHZ Xyo1bLpQd6xTpsGqB6v9UaOqurJdK2v116JPB0NsCMa1qBKxu7knvQuf7vltFrRL YImMCENh4tbduA== -----END CERTIFICATE-----Generated at Wed Dec 31 01:53:52 2025 by rpki-client