This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json) Hash identifier: CUB52EvQMQIMuQ2YFsdNeXPARKkUmmbi3hAjvPcWOhM= Subject key identifier: AC:7E:8A:46:E6:5F:89:10:1B:FA:8C:B6:FF:71:75:5D:00:D7:07:6C Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f Certificate serial: 019AF276EF1E7552E1881C258A9255E94261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft Manifest number: 0BC1 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: bd2WgsTxZ6tOxdM+Xw9uP3m45Z4lbxz0aqH+K4hpPuw=) 2: r2i6LbAhlbTcgRsB8rSZkcrF6lU.roa (hash: PJ1IbFsa6xc/CmUBVF12AqCmg0La+qLnFRg5In031II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ef:1e:75:52:e1:88:1c:25:8a:92:55:e9:42:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=ac7e8a46e65f89101bfa8cb6ff71755d00d7076c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:15:5b:ff:cc:bf:99:f3:54:45:c9:42:f7: 89:92:0c:b3:71:53:38:2a:7d:ba:62:6e:f9:1e:68: 81:c1:d6:5a:21:ba:25:0d:1d:e7:d8:2d:9b:f1:7c: 96:01:95:60:67:c3:f5:49:6f:a4:aa:36:cb:42:ad: 6f:a3:e6:6d:9a:75:79:bf:09:c2:95:0d:e9:cf:0b: 24:aa:21:bc:fd:a6:8c:04:7c:fc:1d:5c:24:f5:30: 70:17:f0:e2:eb:a1:11:f6:0a:61:5f:09:7a:14:9e: 95:44:4f:d2:e2:a0:6f:da:9c:99:ca:ba:d8:ea:9e: 36:4a:27:6f:a2:2e:5c:a1:9b:67:5a:3e:7a:5d:16: d9:3c:04:7d:6d:46:f4:30:a9:1d:88:c3:42:58:2f: 28:eb:af:b5:c4:49:31:40:72:d1:a4:4c:42:4b:f0: 58:a8:27:45:93:5e:b2:44:96:b9:22:e7:ea:2c:5a: 0d:03:ac:f5:20:3f:39:4d:72:a5:d8:07:a8:a4:6c: b3:b4:0b:6d:94:f0:a2:99:fd:4c:9b:81:e7:fb:3d: 7f:0e:44:9f:d6:17:6b:1b:98:1e:d8:45:08:a0:65: 70:20:cb:a0:86:94:40:c4:14:e5:ce:25:b9:1f:75: 47:0f:f5:42:77:95:e7:fc:00:67:9d:13:b1:fc:77: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7E:8A:46:E6:5F:89:10:1B:FA:8C:B6:FF:71:75:5D:00:D7:07:6C X509v3 Authority Key Identifier: keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e7:d7:60:45:df:4f:ce:70:14:12:13:9b:34:55:80:1f:35: 8e:54:21:db:46:63:23:d8:80:60:c8:2d:0d:cd:26:7a:20:b9: b6:39:c0:4e:83:07:0e:93:a4:ed:51:3c:8b:c9:04:6f:c7:9d: 0f:12:18:9c:5a:9e:01:3d:e1:6e:92:bb:c2:57:2d:98:74:34: 6a:77:4b:84:4e:68:b8:95:3c:25:cb:40:91:43:27:2b:c4:9f: b7:97:19:d1:e2:16:dd:5c:57:fd:27:eb:ed:9b:14:13:81:28: ea:36:4e:ba:a0:59:51:22:ed:3d:f3:98:16:7a:cf:15:5c:d1: 31:27:d3:4d:e9:f1:ae:4a:a7:73:ef:db:3a:fd:83:3b:d7:2b: ce:de:33:64:5e:fc:df:87:63:81:09:a9:a6:24:3d:ce:43:c3: 82:df:dd:4a:68:25:a4:35:cf:79:9f:95:d0:fe:55:31:15:b3: 8f:5b:cc:90:ec:6e:b9:b3:4d:8c:51:49:0f:75:2a:bd:fc:8b: a0:cb:6b:15:40:d3:45:3c:30:27:34:bf:3a:19:ba:04:29:dc: 01:06:36:4b:c0:12:ab:13:5e:ad:fd:89:6e:de:39:b4:22:a3: d2:d6:60:3f:27:16:90:51:53:ac:11:80:1d:1f:25:9a:ff:2b: 18:03:2f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu8edVLhiBwlipJV6UJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTk2OTYyMTQyNDgwY2JiMWQzODQxMTc3MWViNGZmM2Uz OTgzOWYwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EyhhYzdlOGE0NmU2NWY4OTEwMWJmYThjYjZmZjcxNzU1ZDAwZDcwNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJwVW//Mv5nzVEXJQveJkgyzcVM4 Kn26Ym75HmiBwdZaIbolDR3n2C2b8XyWAZVgZ8P1SW+kqjbLQq1vo+ZtmnV5vwnC lQ3pzwskqiG8/aaMBHz8HVwk9TBwF/Di66ER9gphXwl6FJ6VRE/S4qBv2pyZyrrY 6p42Sidvoi5coZtnWj56XRbZPAR9bUb0MKkdiMNCWC8o66+1xEkxQHLRpExCS/BY qCdFk16yRJa5IufqLFoNA6z1ID85TXKl2AeopGyztAttlPCimf1Mm4Hn+z1/DkSf 1hdrG5ge2EUIoGVwIMughpRAxBTlziW5H3VHD/VCd5Xn/ABnnROx/HdSGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx+ikbmX4kQG/qMtv9xdV0A1wdsMB8GA1UdIwQY MBaAFNHpaWIUJIDLsdOEEXcetP8+OYOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAt ODhmNjQxNjg4ZTBmLzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzc0OTktY2Q0Mi00MzIxLWJjNDAtODhmNjQxNjg4ZTBm LzEvMGVscFloUWtnTXV4MDRRUmR4NjBfejQ1ZzU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoefXYEXf T85wFBITmzRVgB81jlQh20ZjI9iAYMgtDc0meiC5tjnAToMHDpOk7VE8i8kEb8ed DxIYnFqeAT3hbpK7wlctmHQ0andLhE5ouJU8JctAkUMnK8Sft5cZ0eIW3VxX/Sfr 7ZsUE4Eo6jZOuqBZUSLtPfOYFnrPFVzRMSfTTenxrkqnc+/bOv2DO9crzt4zZF78 34djgQmppiQ9zkPDgt/dSmglpDXPeZ+V0P5VMRWzj1vMkOxuubNNjFFJD3UqvfyL oMtrFUDTRTwwJzS/Ohm6BCncAQY2S8ASqxNerf2Jbt45tCKj0tZgPycWkFFTrBGA HR8lmv8rGAMvQg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:10 2025 by rpki-client