This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json) Hash identifier: 7tXwogyJ+6/I5HQPwgFR+iRiEQwvfDCDou2ky9z+5eI= Subject key identifier: 32:D9:3E:B3:D9:7D:44:A7:9D:C8:EB:C2:78:4A:C5:5A:72:A4:49:8B Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec Certificate serial: 019B5C401E9173B63555955340F3DF1BEF1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft Manifest number: 17A1 Signing time: Fri 26 Dec 2025 20:01:04 +0000 Manifest this update: Fri 26 Dec 2025 20:01:04 +0000 Manifest next update: Sat 27 Dec 2025 20:01:04 +0000 Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: eC/m/HbVTtoShd9j6bFqy3B/MDA+DaP2Fi8g9LNTx28=) 2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:1e:91:73:b6:35:55:95:53:40:f3:df:1b:ef:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125ae2cfd315c131193484665acada7c013163ec Validity Not Before: Dec 26 20:01:04 2025 GMT Not After : Dec 27 20:01:04 2025 GMT Subject: CN=32d93eb3d97d44a79dc8ebc2784ac55a72a4498b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e0:24:63:46:94:da:29:58:47:5c:10:fb:d7: 1a:6a:35:4f:d9:9d:3f:19:9f:d0:ed:48:43:fc:ae: 3a:60:4c:10:19:c8:5b:81:2b:e2:6b:5d:27:c7:6f: 63:85:2a:01:ff:41:4a:d7:e3:0f:b6:40:cc:dc:5e: 07:ec:ef:28:2f:ed:af:d6:9c:3e:46:bc:03:44:76: a8:a7:26:4a:4a:3d:31:db:0f:6e:cf:62:ee:10:25: 04:27:6d:20:1e:da:71:a0:3d:d0:12:c8:16:5d:89: d3:74:13:68:c9:4c:81:7e:a4:ee:52:76:ce:f5:af: 4c:da:77:e2:a1:15:be:83:47:ea:33:3b:53:f5:9e: 01:48:36:77:07:17:dd:bc:d0:02:06:ca:6a:d0:9b: 57:64:47:a0:23:cf:f9:35:0d:3e:df:bf:f4:cc:d8: e6:67:0a:40:12:47:60:8a:2b:91:87:9f:09:d7:ba: 03:27:75:54:f1:7f:91:f7:3a:da:75:45:7a:c0:d5: 91:ff:13:4e:d9:2b:6e:55:e6:04:da:8f:1d:5a:25: aa:c3:33:25:fc:5e:11:64:cc:8c:3a:9d:80:ed:03: 51:1d:8f:f9:23:ea:71:35:9a:5a:37:4d:3e:0e:fb: bc:24:79:15:70:f5:c0:3a:c1:ca:63:dd:4b:11:51: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D9:3E:B3:D9:7D:44:A7:9D:C8:EB:C2:78:4A:C5:5A:72:A4:49:8B X509v3 Authority Key Identifier: keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:dd:b8:3c:2e:1f:e9:8a:0f:84:ed:fc:4a:d0:60:12:1f:c9: af:06:7f:16:fa:3a:58:cb:f1:9e:ce:8b:cf:a0:d8:7c:61:a7: 8f:6d:41:de:b1:f7:ae:34:59:12:a7:20:2c:27:91:07:66:2a: 1b:85:ef:f0:fe:d6:5c:9f:4c:68:f2:93:e5:e6:a6:7c:b5:db: b3:29:11:ed:4e:d7:d6:de:e5:53:a8:25:51:2b:8f:5a:88:0f: 77:a7:08:06:a6:88:2c:fe:f0:c8:63:df:03:60:43:51:62:41: 3b:81:bd:97:ee:58:2a:5b:41:d8:d7:36:f0:d8:dd:7b:e1:8e: bb:12:00:da:3d:4a:bf:9e:0b:78:42:69:4a:d3:d7:26:4e:cd: f2:62:f0:9c:73:96:e4:f3:71:04:86:61:b2:94:4c:d9:3e:f9: 5f:58:f2:b2:2c:7c:f3:62:b0:5b:0d:f2:93:d5:75:ec:94:70: 21:44:6b:c4:c3:35:b8:89:f0:84:08:28:98:91:96:38:14:6b: 4c:27:35:34:4a:95:97:c6:37:ee:c9:c1:8f:78:e9:3b:c4:54: 4d:7c:f8:d8:14:51:4f:42:b3:3d:8d:7b:9e:57:61:8d:8e:24: 21:ce:9a:01:d4:5c:5b:68:63:03:b3:bc:28:54:b9:f5:cd:d5: fa:e4:30:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQB6Rc7Y1VZVTQPPfG+8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz MTYzZWMwHhcNMjUxMjI2MjAwMTA0WhcNMjUxMjI3MjAwMTA0WjAzMTEwLwYDVQQD EygzMmQ5M2ViM2Q5N2Q0NGE3OWRjOGViYzI3ODRhYzU1YTcyYTQ0OThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+AkY0aU2ilYR1wQ+9caajVP2Z0/ GZ/Q7UhD/K46YEwQGchbgSvia10nx29jhSoB/0FK1+MPtkDM3F4H7O8oL+2v1pw+ RrwDRHaopyZKSj0x2w9uz2LuECUEJ20gHtpxoD3QEsgWXYnTdBNoyUyBfqTuUnbO 9a9M2nfioRW+g0fqMztT9Z4BSDZ3BxfdvNACBspq0JtXZEegI8/5NQ0+37/0zNjm ZwpAEkdgiiuRh58J17oDJ3VU8X+R9zradUV6wNWR/xNO2StuVeYE2o8dWiWqwzMl /F4RZMyMOp2A7QNRHY/5I+pxNZpaN00+Dvu8JHkVcPXAOsHKY91LEVEMjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLZPrPZfUSnncjrwnhKxVpypEmLMB8GA1UdIwQY MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ924PC4f 6YoPhO38StBgEh/JrwZ/Fvo6WMvxns6Lz6DYfGGnj21B3rH3rjRZEqcgLCeRB2Yq G4Xv8P7WXJ9MaPKT5eamfLXbsykR7U7X1t7lU6glUSuPWogPd6cIBqaILP7wyGPf A2BDUWJBO4G9l+5YKltB2Nc28Njde+GOuxIA2j1Kv54LeEJpStPXJk7N8mLwnHOW 5PNxBIZhspRM2T75X1jysix882KwWw3yk9V17JRwIURrxMM1uInwhAgomJGWOBRr TCc1NEqVl8Y37snBj3jpO8RUTXz42BRRT0KzPY17nldhjY4kIc6aAdRcW2hjA7O8 KFS59c3V+uQweA== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:33 2025 by rpki-client