This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json) Hash identifier: lMvX+C5jWE9KHS+SXjLW9HzbqAuaX+o3tdQmIDfNZCg= Subject key identifier: 15:96:00:77:CE:AB:9F:4E:B8:29:84:09:8A:87:F5:73:D6:37:30:A5 Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe Certificate serial: 019BB43A66B5DD73BF91556BDEC7369206D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft Manifest number: 05D5 Signing time: Mon 12 Jan 2026 22:01:24 +0000 Manifest this update: Mon 12 Jan 2026 22:01:24 +0000 Manifest next update: Tue 13 Jan 2026 22:01:24 +0000 Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: fr8KCsDnBViSb1SPuOvvav5obEtZJKGJwPhGeF/zgT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:3a:66:b5:dd:73:bf:91:55:6b:de:c7:36:92:06:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe Validity Not Before: Jan 12 22:01:24 2026 GMT Not After : Jan 13 22:01:24 2026 GMT Subject: CN=15960077ceab9f4eb82984098a87f573d63730a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:89:ce:71:5b:b8:49:fb:87:d0:d2:fb:94: 05:dd:b1:5f:ea:84:37:2c:6d:c4:52:d4:1d:25:5d: aa:5f:44:aa:5b:00:57:06:ec:d1:e7:b1:83:2a:bf: a7:b3:9a:b0:ed:ed:61:9e:36:18:be:cd:08:26:56: a3:14:0b:f7:ae:e7:0e:07:c6:26:e6:54:95:c2:42: 39:fd:83:71:bd:58:34:88:db:a6:7f:12:f7:38:62: f0:e1:58:4c:51:9a:f0:e6:7c:ca:13:5f:58:94:4a: 30:53:a7:32:72:e4:50:b6:00:6d:eb:2c:46:b3:f9: e7:f5:bf:ca:a4:0a:36:b1:0a:07:35:7b:79:0e:f8: 80:20:45:61:65:30:bd:43:fa:77:93:27:44:99:cb: 15:e0:2d:24:af:82:16:20:29:8f:db:6e:ff:96:77: f4:b4:ba:a7:2f:b1:41:2b:91:87:5b:bd:02:ba:30: ba:24:dd:3e:78:42:9f:6b:bd:c3:85:23:88:73:ee: e9:37:a4:80:88:5a:e6:28:61:ac:20:bb:67:f4:b6: 5c:df:b5:a4:6a:37:02:03:64:c1:b4:a9:e2:5a:6d: 1b:95:a7:6b:74:8e:c5:38:a3:6a:e9:d1:30:0f:d3: 80:b4:6b:df:4b:88:7f:6c:6c:6e:a0:43:37:b8:a2: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:96:00:77:CE:AB:9F:4E:B8:29:84:09:8A:87:F5:73:D6:37:30:A5 X509v3 Authority Key Identifier: keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:85:3a:a0:4e:c3:c3:e5:44:a5:55:f5:60:fc:93:5f:ea:e1: 45:34:8a:d2:84:b6:c2:29:2d:99:c8:a8:7c:8b:00:ef:1b:71: fc:a2:91:4a:b9:97:6f:fe:65:f4:42:19:b6:6b:7b:fb:e2:33: 32:db:7c:93:83:ce:18:d4:9f:ed:bf:a3:fd:31:01:49:61:e2: 2c:da:92:72:a2:9b:3a:83:a6:94:ca:86:b2:dd:be:30:63:88: fe:da:1e:d8:05:7a:0f:06:db:b2:e8:2c:88:fd:b1:1f:99:f4: 62:29:9c:9c:fd:f4:0b:ab:9f:54:4b:b8:46:1f:36:f1:ff:a3: 1d:b7:e1:bf:30:f2:db:6a:e4:e5:c4:a4:f1:72:08:aa:5a:4d: 48:f3:e9:16:de:d5:50:07:b6:86:d6:3d:b8:bb:51:94:2e:12: a8:00:c8:39:a0:88:fb:04:c4:21:2d:fe:60:b6:fb:b0:49:93: 21:9c:df:99:0d:ae:58:3c:10:3a:e2:08:b5:48:44:ec:a5:e5: 8b:d2:60:c2:ee:62:c9:55:86:a7:20:4d:e2:d6:69:6b:b8:ff: 8d:aa:4d:04:25:f5:ae:b5:d2:4c:55:97:c0:fc:04:5d:88:8d: 15:e6:4a:64:9c:e0:7d:c8:3c:42:1b:64:6a:25:30:52:12:d0: e0:e1:c7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0Oma13XO/kVVr3sc2kgbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNTI0ZGFjYmUwMmE5NTkzMWNhMWQ2ZWUyOWIzYzg5NTdh NGVjYmUwHhcNMjYwMTEyMjIwMTI0WhcNMjYwMTEzMjIwMTI0WjAzMTEwLwYDVQQD EygxNTk2MDA3N2NlYWI5ZjRlYjgyOTg0MDk4YTg3ZjU3M2Q2MzczMGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0biJznFbuEn7h9DS+5QF3bFf6oQ3 LG3EUtQdJV2qX0SqWwBXBuzR57GDKr+ns5qw7e1hnjYYvs0IJlajFAv3rucOB8Ym 5lSVwkI5/YNxvVg0iNumfxL3OGLw4VhMUZrw5nzKE19YlEowU6cycuRQtgBt6yxG s/nn9b/KpAo2sQoHNXt5DviAIEVhZTC9Q/p3kydEmcsV4C0kr4IWICmP227/lnf0 tLqnL7FBK5GHW70CujC6JN0+eEKfa73DhSOIc+7pN6SAiFrmKGGsILtn9LZc37Wk ajcCA2TBtKniWm0bladrdI7FOKNq6dEwD9OAtGvfS4h/bGxuoEM3uKIMswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWWAHfOq59OuCmECYqH9XPWNzClMB8GA1UdIwQY MBaAFHpSTay+AqlZMcodbuKbPIlXpOy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2ZlNDUtNDJlNy00YmNmLTk0ZDUt YjhiMTBjNmQ1ZWJmLzEvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wY2ZlNDUtNDJlNy00YmNmLTk0ZDUtYjhiMTBjNmQ1ZWJm LzEvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4U6oE7D w+VEpVX1YPyTX+rhRTSK0oS2wiktmciofIsA7xtx/KKRSrmXb/5l9EIZtmt7++Iz Mtt8k4POGNSf7b+j/TEBSWHiLNqScqKbOoOmlMqGst2+MGOI/toe2AV6Dwbbsugs iP2xH5n0YimcnP30C6ufVEu4Rh828f+jHbfhvzDy22rk5cSk8XIIqlpNSPPpFt7V UAe2htY9uLtRlC4SqADIOaCI+wTEIS3+YLb7sEmTIZzfmQ2uWDwQOuIItUhE7KXl i9Jgwu5iyVWGpyBN4tZpa7j/japNBCX1rrXSTFWXwPwEXYiNFeZKZJzgfcg8Qhtk aiUwUhLQ4OHHww== -----END CERTIFICATE-----Generated at Tue Jan 13 04:56:20 2026 by rpki-client