This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft File: elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json) Hash identifier: Zgkk9f1saCVtMLwGwOqeXZ4P7y0MkWhck3W/5RDvKbI= Subject key identifier: C7:17:60:F4:8F:FD:9B:8C:F9:00:39:CD:B9:84:E4:86:99:DF:7B:0F Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2 Certificate issuer: /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2 Certificate serial: 019B35A0441CD2FBBC1E3326DEAF72F796F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft Manifest number: 073D Signing time: Fri 19 Dec 2025 08:00:54 +0000 Manifest this update: Fri 19 Dec 2025 08:00:54 +0000 Manifest next update: Sat 20 Dec 2025 08:00:54 +0000 Files and hashes: 1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=) 2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: qQyb/Ib246F9ID72PcY/pwFcCmXQY7ZK5SsbMcywkBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:44:1c:d2:fb:bc:1e:33:26:de:af:72:f7:96:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2 Validity Not Before: Dec 19 08:00:54 2025 GMT Not After : Dec 20 08:00:54 2025 GMT Subject: CN=c71760f48ffd9b8cf90039cdb984e48699df7b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:b9:6f:63:91:15:a3:84:45:80:73:92:d7: 28:15:c8:f9:f9:03:53:52:6b:04:5d:ae:57:09:04: f5:b4:79:a1:1f:df:47:81:7f:32:68:ce:b7:6f:9c: 4e:d8:14:2b:89:60:65:2a:9e:a4:e2:8e:ee:ab:9e: 19:db:00:c1:ec:12:fd:ea:22:48:f7:a6:d1:3c:e0: aa:f2:f3:e7:2c:65:e4:13:7d:ab:c8:22:67:cc:27: f5:1c:22:9c:2a:53:02:d5:cd:19:f2:b3:f8:43:19: 41:39:a2:dd:bd:87:98:fa:bd:82:d1:58:c4:1b:fb: b8:75:87:12:87:e5:03:d6:f2:df:0b:56:5e:0f:56: c0:56:5c:34:34:d1:09:2a:25:ff:22:2a:41:de:21: ac:4e:b3:0a:d7:11:0c:24:a4:45:e3:78:80:15:e9: 16:0f:ab:d5:89:36:bb:6a:0e:51:4b:ca:e2:a9:77: 91:f6:72:12:2b:6c:64:bb:5f:2c:3c:96:14:81:eb: 92:25:ec:a1:8b:1f:ef:28:8d:c4:c7:92:4f:3e:d1: 2a:85:1c:f9:9d:ad:09:eb:69:1f:44:b9:bb:6c:37: f0:77:e4:4b:ce:c6:a4:fe:d0:b8:8b:9d:d0:92:b1: 0e:e0:61:38:eb:73:b3:35:b0:f3:72:36:a9:fa:10: d9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:17:60:F4:8F:FD:9B:8C:F9:00:39:CD:B9:84:E4:86:99:DF:7B:0F X509v3 Authority Key Identifier: keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f2:8d:64:17:17:c4:3d:c6:c6:cb:bc:90:0d:b2:bf:b3:27: 89:b5:11:97:7a:19:93:56:29:b7:5b:c8:ca:ff:c7:43:86:39: fb:73:e5:9d:17:51:6b:77:77:c9:c5:a0:87:60:2d:78:66:7f: f3:ee:b6:64:34:ed:51:aa:05:a5:9f:5d:70:a9:4f:e4:e7:cd: 3f:41:0d:18:aa:b3:96:60:20:87:c1:bb:a3:6b:d5:8e:a4:15: be:d8:bf:8f:51:27:09:ca:0b:a2:61:a2:05:af:ca:f5:aa:ae: 17:3c:23:8a:27:ca:bb:e7:97:b4:40:15:85:56:73:71:08:d2: 4e:04:0a:7d:b1:8c:a6:b0:ff:a9:0f:ea:16:34:05:4e:ba:bf: 5a:3c:cc:5b:14:99:b2:40:95:a5:81:28:be:23:d6:0b:bd:11: 8b:e1:e6:cb:70:3c:d8:fb:fb:9e:d4:78:7e:5d:c8:20:ff:3b: 46:76:32:0e:48:2b:a2:9c:d1:b5:d4:08:97:03:ab:70:83:45: 54:28:78:49:6b:a8:bf:5d:48:34:e8:c2:2c:ee:db:f8:d1:bb: d3:dc:d0:de:db:7a:c4:6f:d4:b4:f7:81:53:5f:5e:49:dd:e3: bf:5e:3c:af:c5:4c:c3:cc:9a:73:6b:11:9a:12:8b:af:d4:75: 2c:81:1a:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEQc0vu8HjMm3q9y95bwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNTU2YzE5YTQ1NTZmMzZmNzYwMDAwNmQ4ZWFjZDFmYTNm NDM5ZjIwHhcNMjUxMjE5MDgwMDU0WhcNMjUxMjIwMDgwMDU0WjAzMTEwLwYDVQQD EyhjNzE3NjBmNDhmZmQ5YjhjZjkwMDM5Y2RiOTg0ZTQ4Njk5ZGY3YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB65b2ORFaOERYBzktcoFcj5+QNT UmsEXa5XCQT1tHmhH99HgX8yaM63b5xO2BQriWBlKp6k4o7uq54Z2wDB7BL96iJI 96bRPOCq8vPnLGXkE32ryCJnzCf1HCKcKlMC1c0Z8rP4QxlBOaLdvYeY+r2C0VjE G/u4dYcSh+UD1vLfC1ZeD1bAVlw0NNEJKiX/IipB3iGsTrMK1xEMJKRF43iAFekW D6vViTa7ag5RS8riqXeR9nISK2xku18sPJYUgeuSJeyhix/vKI3Ex5JPPtEqhRz5 na0J62kfRLm7bDfwd+RLzsak/tC4i53QkrEO4GE463OzNbDzcjap+hDZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcXYPSP/ZuM+QA5zbmE5IaZ33sPMB8GA1UdIwQY MBaAFHpVbBmkVW8292AABtjqzR+j9DnyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMt ZTNkMGEwYWNlMzk4LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NDIwNDYtM2Y1Zi00ZjRlLTkzMGMtZTNkMGEwYWNlMzk4 LzEvZWxWc0dhUlZiemIzWUFBRzJPck5INlAwT2ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfKNZBcX xD3Gxsu8kA2yv7MnibURl3oZk1Ypt1vIyv/HQ4Y5+3PlnRdRa3d3ycWgh2AteGZ/ 8+62ZDTtUaoFpZ9dcKlP5OfNP0ENGKqzlmAgh8G7o2vVjqQVvti/j1EnCcoLomGi Ba/K9aquFzwjiifKu+eXtEAVhVZzcQjSTgQKfbGMprD/qQ/qFjQFTrq/WjzMWxSZ skCVpYEoviPWC70Ri+Hmy3A82Pv7ntR4fl3IIP87RnYyDkgropzRtdQIlwOrcINF VCh4SWuov11INOjCLO7b+NG709zQ3tt6xG/UtPeBU19eSd3jv148r8VMw8yac2sR mhKLr9R1LIEaSA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:05 2025 by rpki-client