This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft File: ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json) Hash identifier: 5lujRqDpFUIUP91ZHpMHo23rPGGU6xsIFNlFuHKeQtg= Subject key identifier: 6E:73:1E:A1:62:32:B9:78:F6:B0:DE:1B:C0:95:BA:A4:BA:CC:91:8C Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39 Certificate issuer: /CN=10b43613535ffaa73d9acc503c71a28fa17b3839 Certificate serial: 019AF12D6DAEF993FFCF078363C868A7DBCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft Manifest number: 0E02 Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: 5FZF+o8Lhn/nZsHTu5gWj4RPUZA1fhVcq5HAjE64tcA=) 2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6d:ae:f9:93:ff:cf:07:83:63:c8:68:a7:db:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839 Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=6e731ea16232b978f6b0de1bc095baa4bacc918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:ad:b7:bc:af:1f:1e:f7:46:f3:c4:ea:7e: a1:8b:fd:01:78:9a:62:17:72:8d:58:3f:af:93:d3: 80:68:9c:7f:00:87:d0:12:cd:2d:c4:fc:1f:56:9d: 3f:a4:9e:d0:52:e4:e3:c4:aa:3f:16:0e:b8:3a:78: ce:80:35:89:78:9c:88:f8:db:16:9b:cd:50:27:49: 06:9c:3a:9d:31:47:ca:ed:bf:67:0e:e2:19:e9:59: f1:99:33:65:fa:af:c4:1d:78:da:99:ed:b4:7f:4f: e1:7a:12:8d:58:91:64:fc:82:81:7d:50:51:37:28: cc:ae:d0:60:51:82:30:4a:20:a1:3b:53:f0:14:17: 2c:0e:0a:8d:fb:5d:9b:d2:58:f5:d8:8e:1b:cc:9c: 63:e7:f6:a2:6c:29:33:b4:bd:ca:af:3f:34:92:71: 6a:b9:d9:d7:49:20:dd:e1:90:4a:f7:21:dd:2a:99: 81:dd:87:67:57:6b:d4:06:77:c7:2f:c3:15:ce:a0: 55:a7:bb:fc:4c:ef:8c:23:93:91:35:bd:40:8f:e0: f3:46:e0:c6:07:a3:17:cc:0b:3b:3d:be:03:2f:a0: 26:2d:8e:77:69:10:78:46:e1:17:f2:05:b7:b0:d4: 6f:2b:d8:eb:75:0f:e3:60:39:20:6c:15:a4:ca:d8: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:1E:A1:62:32:B9:78:F6:B0:DE:1B:C0:95:BA:A4:BA:CC:91:8C X509v3 Authority Key Identifier: keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8c:d4:31:5c:3c:25:65:32:64:aa:1b:c2:e7:16:2c:36:98: c2:bb:5c:de:ef:54:06:07:da:41:3d:8c:21:5b:89:ab:c8:85: 52:47:22:eb:20:2a:4e:46:60:7f:7a:50:7a:45:5d:3b:fc:94: de:77:82:d0:37:34:11:ac:39:2d:6a:bc:bc:ef:6c:69:b8:74: d5:a7:3b:30:71:53:5e:25:41:ce:61:4d:85:95:69:84:61:3f: 9a:cc:a1:d2:8a:ed:7b:b9:1d:76:60:e2:ce:23:2f:da:6e:5c: b3:a2:39:15:40:76:49:01:1b:03:a3:0f:9e:7a:e9:a5:c7:fc: 09:6d:0a:e3:89:9c:43:48:5f:9d:20:74:2f:18:4c:65:49:35: 0c:d2:75:fa:c4:a0:c0:2d:5f:2f:b5:11:22:c3:3e:19:32:aa: 44:28:99:20:35:63:de:40:dc:8e:f2:64:24:c7:9f:bc:00:f0: 59:14:5f:d0:77:53:c3:17:8f:49:b1:e9:69:9b:6e:c6:ca:07: 26:af:03:5c:71:88:59:4c:fa:e8:39:e9:64:57:ac:d5:22:68: a5:ee:83:76:29:d4:f5:04:99:f0:71:84:33:70:36:87:f3:58: 6c:3a:ac:aa:5e:09:2f:c0:a6:1f:d0:a0:9a:2c:f5:4c:64:15: 78:de:df:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLW2u+ZP/zweDY8hop9vLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYjQzNjEzNTM1ZmZhYTczZDlhY2M1MDNjNzFhMjhmYTE3 YjM4MzkwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD Eyg2ZTczMWVhMTYyMzJiOTc4ZjZiMGRlMWJjMDk1YmFhNGJhY2M5MThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9att7yvHx73RvPE6n6hi/0BeJpi F3KNWD+vk9OAaJx/AIfQEs0txPwfVp0/pJ7QUuTjxKo/Fg64OnjOgDWJeJyI+NsW m81QJ0kGnDqdMUfK7b9nDuIZ6VnxmTNl+q/EHXjame20f0/hehKNWJFk/IKBfVBR NyjMrtBgUYIwSiChO1PwFBcsDgqN+12b0lj12I4bzJxj5/aibCkztL3Krz80knFq udnXSSDd4ZBK9yHdKpmB3YdnV2vUBnfHL8MVzqBVp7v8TO+MI5ORNb1Aj+DzRuDG B6MXzAs7Pb4DL6AmLY53aRB4RuEX8gW3sNRvK9jrdQ/jYDkgbBWkythelwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5zHqFiMrl49rDeG8CVuqS6zJGMMB8GA1UdIwQY MBaAFBC0NhNTX/qnPZrMUDxxoo+hezg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQt Y2YzYzFhNzllNjM0LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQtY2YzYzFhNzllNjM0 LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABozUMVw8 JWUyZKobwucWLDaYwrtc3u9UBgfaQT2MIVuJq8iFUkci6yAqTkZgf3pQekVdO/yU 3neC0Dc0Eaw5LWq8vO9sabh01ac7MHFTXiVBzmFNhZVphGE/msyh0orte7kddmDi ziMv2m5cs6I5FUB2SQEbA6MPnnrppcf8CW0K44mcQ0hfnSB0LxhMZUk1DNJ1+sSg wC1fL7URIsM+GTKqRCiZIDVj3kDcjvJkJMefvADwWRRf0HdTwxePSbHpaZtuxsoH Jq8DXHGIWUz66DnpZFes1SJope6DdinU9QSZ8HGEM3A2h/NYbDqsql4JL8CmH9Cg miz1TGQVeN7fqw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:59 2025 by rpki-client