This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft File: El8g0e9f8vAdgiSGvZ7or01la38.mft (raw, json) Hash identifier: dEWgLifTlembzsL47M+sM3k8VLb6rrO0vRlAXrv8R4U= Subject key identifier: 81:D3:8A:11:BB:96:E6:55:0C:95:41:AF:F1:55:F6:F3:5D:43:54:7A Authority key identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F Certificate issuer: /CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f Certificate serial: 019AF31CBFA8A9960E05BB589F5A55A2A8A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft Manifest number: C5 Signing time: Sat 06 Dec 2025 10:02:18 +0000 Manifest this update: Sat 06 Dec 2025 10:02:18 +0000 Manifest next update: Sun 07 Dec 2025 10:02:18 +0000 Files and hashes: 1: El8g0e9f8vAdgiSGvZ7or01la38.crl (hash: 2s0+geQlZajrhf7lGkZAv+Md+gznOddI/vAuCrACf9U=) 2: KoGn876I9exRZ9k5gXTBjcpENcg.roa (hash: hGdRcXXS4XbCvbFUJUyfTiVZHtH7iEjv5tVhxZaLIq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bf:a8:a9:96:0e:05:bb:58:9f:5a:55:a2:a8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f Validity Not Before: Dec 6 10:02:18 2025 GMT Not After : Dec 7 10:02:18 2025 GMT Subject: CN=81d38a11bb96e6550c9541aff155f6f35d43547a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:83:30:ab:22:53:10:f5:50:8e:0e:13:d3: db:e7:fc:f7:33:8b:73:42:24:f0:3d:e7:0c:a9:a4: 35:aa:4c:63:ac:f3:7d:c1:8c:a4:9c:e1:db:73:a1: 41:1f:41:fc:2b:bf:22:49:5f:ab:35:28:82:b3:55: f3:ed:cd:4e:88:9c:c5:61:95:f1:56:d4:83:ac:24: 9c:f0:85:e7:43:fa:e9:d0:d5:0d:a5:c5:2f:ab:5c: fd:ba:88:1d:d0:19:00:d4:47:13:a4:36:0d:5a:39: 73:4a:2d:91:df:ff:51:eb:3a:ce:a8:14:d2:fc:f1: 82:1f:e8:ac:67:34:56:0f:49:70:f1:78:31:5d:a6: a7:fc:63:f8:6d:05:dd:b5:f5:f5:41:f3:e0:21:0a: 18:79:2d:fc:b7:90:a0:1e:7a:18:e0:88:aa:ae:4b: cd:42:26:9c:df:b2:18:48:84:5d:52:d2:7a:e2:2a: 61:2a:f2:49:ec:39:55:8b:f9:b7:a3:f0:cd:90:bd: 21:c3:68:4f:53:ad:5c:d6:53:f1:a1:96:71:0a:83: 74:5c:34:8e:88:53:c1:3e:c3:88:95:06:c4:63:bd: 75:a7:0d:32:5e:0d:d6:29:8e:83:da:cb:fc:32:60: 31:04:a9:5c:76:38:97:62:fe:df:65:fd:3f:a4:43: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D3:8A:11:BB:96:E6:55:0C:95:41:AF:F1:55:F6:F3:5D:43:54:7A X509v3 Authority Key Identifier: keyid:12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:83:04:5c:ad:d7:b9:6d:06:f5:98:e1:99:d0:5c:73:78:32: 9d:f9:82:16:2b:bb:89:9e:f9:40:ad:3f:6d:5f:29:35:24:9c: a7:b6:76:ca:71:f8:a0:2a:7d:99:7f:22:8c:74:3f:50:c4:05: 10:65:dc:71:87:5d:3e:3b:81:32:6e:cd:0e:9d:38:5d:db:8a: 7b:d3:67:73:82:41:a3:e9:07:0c:c0:82:df:5f:f8:37:9e:7c: 7c:86:23:a6:1c:06:82:57:e3:f7:0e:84:3f:59:c7:8f:69:77: e6:6d:a9:1e:76:58:01:33:3c:ab:29:0b:8c:21:e3:d1:d2:c9: a0:96:ea:14:79:fe:c8:5a:10:82:fa:fe:84:91:86:b4:21:c8: 37:5c:51:d4:bb:5d:24:6b:9a:d5:f1:21:29:5a:4f:d4:13:19: 21:b4:97:2e:25:d7:4a:f6:51:2e:75:a6:ad:6b:61:e0:be:f1: 46:49:da:d6:23:e6:49:33:c6:4f:35:9e:7e:f2:2f:3b:0a:ce: bf:68:23:df:13:3d:18:59:ad:6c:5f:6c:86:74:17:56:84:43: 9a:8a:62:c4:6c:5f:81:67:4b:94:40:47:22:a0:76:4a:cf:0f: 0e:12:ca:b5:57:6b:69:c5:f4:d6:94:5c:5b:e2:a4:63:32:4e: 7f:e7:63:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHL+oqZYOBbtYn1pVoqioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNWYyMGQxZWY1ZmYyZjAxZDgyMjQ4NmJkOWVlOGFmNGQ2 NTZiN2YwHhcNMjUxMjA2MTAwMjE4WhcNMjUxMjA3MTAwMjE4WjAzMTEwLwYDVQQD Eyg4MWQzOGExMWJiOTZlNjU1MGM5NTQxYWZmMTU1ZjZmMzVkNDM1NDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAmDMKsiUxD1UI4OE9Pb5/z3M4tz QiTwPecMqaQ1qkxjrPN9wYyknOHbc6FBH0H8K78iSV+rNSiCs1Xz7c1OiJzFYZXx VtSDrCSc8IXnQ/rp0NUNpcUvq1z9uogd0BkA1EcTpDYNWjlzSi2R3/9R6zrOqBTS /PGCH+isZzRWD0lw8XgxXaan/GP4bQXdtfX1QfPgIQoYeS38t5CgHnoY4IiqrkvN Qiac37IYSIRdUtJ64iphKvJJ7DlVi/m3o/DNkL0hw2hPU61c1lPxoZZxCoN0XDSO iFPBPsOIlQbEY711pw0yXg3WKY6D2sv8MmAxBKlcdjiXYv7fZf0/pEP3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHTihG7luZVDJVBr/FV9vNdQ1R6MB8GA1UdIwQY MBaAFBJfINHvX/LwHYIkhr2e6K9NZWt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZGM0ZDctYmMzNC00NTg0LWIwZjkt ZmU5YTA2NDE4MWIyLzEvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yZGM0ZDctYmMzNC00NTg0LWIwZjktZmU5YTA2NDE4MWIy LzEvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYMEXK3X uW0G9ZjhmdBcc3gynfmCFiu7iZ75QK0/bV8pNSScp7Z2ynH4oCp9mX8ijHQ/UMQF EGXccYddPjuBMm7NDp04XduKe9Nnc4JBo+kHDMCC31/4N558fIYjphwGglfj9w6E P1nHj2l35m2pHnZYATM8qykLjCHj0dLJoJbqFHn+yFoQgvr+hJGGtCHIN1xR1Ltd JGua1fEhKVpP1BMZIbSXLiXXSvZRLnWmrWth4L7xRkna1iPmSTPGTzWefvIvOwrO v2gj3xM9GFmtbF9shnQXVoRDmopixGxfgWdLlEBHIqB2Ss8PDhLKtVdracX01pRc W+KkYzJOf+djyA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:46 2025 by rpki-client