This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json) Hash identifier: Ju8YG0dIOQAPXiAbs1tI2lv1jwk4pjnP26tQiu1xd0E= Subject key identifier: 45:21:18:FB:DD:14:5C:BA:3E:99:C8:39:30:E6:CC:10:E4:92:FC:8B Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1 Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1 Certificate serial: 019B34C626DC34CCC2277F3E2F57CE209053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 04:02:39 +0000 Manifest this update: Fri 19 Dec 2025 04:02:39 +0000 Manifest next update: Sat 20 Dec 2025 04:02:39 +0000 Files and hashes: 1: DhgKv9EWttCPWimr0cMYdix-VFM.roa (hash: jt6Z6pHhL+jbqX5CBAxAInUF4d0Kgk2CfxAQbj8DhrM=) 2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: 07VxB5yNq5cbMPDSZfke/5hEOgYNMkJBnn7o3+iPDSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:26:dc:34:cc:c2:27:7f:3e:2f:57:ce:20:90:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1 Validity Not Before: Dec 19 04:02:39 2025 GMT Not After : Dec 20 04:02:39 2025 GMT Subject: CN=452118fbdd145cba3e99c83930e6cc10e492fc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:98:90:01:16:2d:b1:e6:5d:d9:c4:8a:67: da:5b:1b:1e:db:c4:13:80:02:2f:63:2e:f4:54:b1: b5:e4:f4:ae:29:7b:b8:1a:06:ee:ab:7d:f7:00:7a: 44:b3:67:a9:71:e1:b3:b4:29:b0:5d:9e:48:50:87: 67:63:6d:65:f9:b6:4c:2d:75:e8:4c:ab:1d:b0:69: 9c:1c:8c:2c:c6:bd:73:fa:92:6a:ee:dc:12:be:9e: a1:47:1a:c8:8a:24:32:16:7f:48:48:b5:9f:c5:5b: d3:91:29:fa:37:a2:e3:2b:06:5d:27:96:42:8d:96: 8a:9c:9d:51:23:98:1a:47:be:f8:7b:58:2c:71:3e: a0:c0:02:5c:9a:d9:8e:e0:cf:0b:0e:d5:a2:56:43: b3:6c:9c:54:18:fb:90:38:93:2d:f8:eb:9a:f2:c0: de:73:02:16:27:e0:ed:b6:c4:10:33:1e:bc:bd:42: 60:ea:59:fe:70:39:cc:47:5e:be:d5:12:7a:70:ec: 0a:3a:78:42:fd:79:36:bf:3f:ee:63:d6:d4:58:bc: 4c:27:16:7f:a9:ff:c5:b2:b2:bb:06:23:ea:85:2e: 34:12:75:6e:58:bc:96:05:2c:14:65:fc:28:fd:b2: 7e:d0:dd:87:2e:29:8c:17:d4:03:3a:b1:5a:47:6e: 16:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:21:18:FB:DD:14:5C:BA:3E:99:C8:39:30:E6:CC:10:E4:92:FC:8B X509v3 Authority Key Identifier: keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:5d:be:ef:5a:d8:22:11:6a:e0:94:8e:16:91:c1:89:47:89: c0:b2:e3:9c:74:5b:25:25:e0:c8:8a:4f:f9:d1:8a:ee:94:bc: 61:83:59:40:fc:17:67:0f:51:a3:20:d2:34:43:d3:18:dc:04: 0a:29:75:dc:e8:d5:2e:f6:b8:fe:79:10:ed:51:f5:3f:3a:25: 4c:cb:b0:2d:4e:70:76:68:22:e5:ce:69:16:d4:a8:7d:5a:2e: a8:9a:45:17:3d:e4:bc:28:4b:02:37:40:d9:ce:bc:f2:39:fd: df:39:57:73:0c:ed:6d:76:84:19:6a:48:d6:80:cc:d3:7a:d5: 27:ef:e7:71:53:c7:ef:9f:5c:23:2a:ec:57:25:24:c1:06:4d: 9f:32:4d:d1:e4:86:51:d6:7d:b3:90:d7:47:ec:09:01:41:e9: 9f:81:da:77:86:5f:71:be:26:29:f4:20:00:43:99:10:03:91: 94:81:92:74:33:18:0c:ad:cc:fc:b0:04:dc:87:7b:31:b4:a8: 14:7b:4b:e4:65:d8:7e:ce:4d:3e:35:e1:e3:58:bf:ea:4f:8d: ee:0c:c2:05:e5:37:d4:d9:e3:52:72:2c:68:0d:81:fc:23:fb: 48:f8:ec:76:25:35:4f:7e:9d:01:a6:c9:31:5c:ba:ab:07:af: bf:d5:a5:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xibcNMzCJ38+L1fOIJBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNTlhNWNjNjFmZWJkYjkxNmQ0NjI0YmJlOGMxMDg5NzM1 M2IwYzEwHhcNMjUxMjE5MDQwMjM5WhcNMjUxMjIwMDQwMjM5WjAzMTEwLwYDVQQD Eyg0NTIxMThmYmRkMTQ1Y2JhM2U5OWM4MzkzMGU2Y2MxMGU0OTJmYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxiYkAEWLbHmXdnEimfaWxse28QT gAIvYy70VLG15PSuKXu4Ggbuq333AHpEs2epceGztCmwXZ5IUIdnY21l+bZMLXXo TKsdsGmcHIwsxr1z+pJq7twSvp6hRxrIiiQyFn9ISLWfxVvTkSn6N6LjKwZdJ5ZC jZaKnJ1RI5gaR774e1gscT6gwAJcmtmO4M8LDtWiVkOzbJxUGPuQOJMt+Oua8sDe cwIWJ+DttsQQMx68vUJg6ln+cDnMR16+1RJ6cOwKOnhC/Xk2vz/uY9bUWLxMJxZ/ qf/FsrK7BiPqhS40EnVuWLyWBSwUZfwo/bJ+0N2HLimMF9QDOrFaR24WGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUhGPvdFFy6PpnIOTDmzBDkkvyLMB8GA1UdIwQY MBaAFHpZpcxh/r25FtRiS76MEIlzU7DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iMWFiMWItMGU5NS00YzNjLTg3Njgt OTAzZDA4MzQ5NmU1LzEvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9iMWFiMWItMGU5NS00YzNjLTg3NjgtOTAzZDA4MzQ5NmU1 LzEvZWxtbHpHSC12YmtXMUdKTHZvd1FpWE5Uc01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzl2+71rY IhFq4JSOFpHBiUeJwLLjnHRbJSXgyIpP+dGK7pS8YYNZQPwXZw9RoyDSNEPTGNwE Cil13OjVLva4/nkQ7VH1PzolTMuwLU5wdmgi5c5pFtSofVouqJpFFz3kvChLAjdA 2c688jn93zlXcwztbXaEGWpI1oDM03rVJ+/ncVPH759cIyrsVyUkwQZNnzJN0eSG UdZ9s5DXR+wJAUHpn4Had4Zfcb4mKfQgAEOZEAORlIGSdDMYDK3M/LAE3Id7MbSo FHtL5GXYfs5NPjXh41i/6k+N7gzCBeU31NnjUnIsaA2B/CP7SPjsdiU1T36dAabJ MVy6qwevv9Wlcg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:21:24 2025 by rpki-client