This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json) Hash identifier: B+Vnqzy38JwoO/9vPk91yxEPo4cEZ/fQ7kFFgtR3dSo= Subject key identifier: 17:B9:86:64:41:FA:C5:0C:9D:26:34:97:57:29:37:7F:27:5E:E1:D3 Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f Certificate serial: 019AF1D185470F8D6E15FDC2A28A1FB4F813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft Manifest number: 073D Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: IGaVKGcp7fS0wJIy7LEOtaQMCQk+R27bCGnJfgSZoHc=) 2: rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa (hash: ZIVMbBVJwlrHJ75Ki0ODTTpJ9+ylEgTfPq67Cig5C+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:85:47:0f:8d:6e:15:fd:c2:a2:8a:1f:b4:f8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=17b9866441fac50c9d2634975729377f275ee1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7e:7a:9f:9b:cb:d6:47:a3:a4:46:7f:6e:15: 2e:7d:3d:34:9b:57:1e:c7:29:a9:f9:f1:3b:31:ff: ad:29:ef:3a:4c:4d:65:ce:0a:0e:83:60:d1:4a:ef: b4:42:a3:32:87:a8:a0:a8:e2:06:aa:2d:75:cc:fb: a6:47:0a:8e:9d:4f:8c:a2:bf:06:8c:d4:e1:58:bb: 64:2a:ae:76:99:e0:d3:2f:34:98:10:5c:6e:41:22: 22:35:63:06:71:fe:ac:90:2b:ae:e8:f5:1e:22:e5: 8c:78:10:cc:96:f9:84:5a:ad:f4:37:17:39:4d:59: 0d:cc:4e:bf:1d:3e:57:41:ef:74:b7:6e:a9:16:81: 34:4c:43:08:26:76:1b:c5:18:ce:49:58:c6:dc:84: 72:bc:8b:96:ff:9c:a2:df:fe:1e:f4:bd:59:d4:05: a6:47:cd:8f:0a:d6:8b:e5:b7:1c:9a:2c:8d:38:38: b7:a4:7f:9b:d7:7b:ad:13:8f:c0:2d:64:92:e1:07: 2a:4b:36:4d:d4:6c:d9:a9:a5:da:e1:cf:24:8a:3b: 01:66:5a:0a:89:0b:ed:cf:b6:ef:98:3c:be:20:62: 1e:04:01:60:80:75:3d:94:48:61:20:d4:18:2e:27: f4:81:b7:19:7e:ed:f6:26:00:3b:cc:81:fc:fb:ea: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:86:64:41:FA:C5:0C:9D:26:34:97:57:29:37:7F:27:5E:E1:D3 X509v3 Authority Key Identifier: keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4f:73:b0:71:c7:62:b8:51:d0:60:73:1a:2c:f2:38:fc:4e: e7:3f:94:c7:9b:83:36:91:a9:2a:0e:3c:b9:05:10:2e:b1:46: c1:09:ec:e0:3c:2d:2f:b9:01:d1:f4:04:5f:3f:a4:42:db:3f: 80:68:f2:53:60:4b:03:2f:a7:f0:e3:9d:15:ea:39:5d:ac:1a: ba:d1:6e:0b:f3:07:a5:4a:91:47:08:ab:49:d5:de:1f:8a:a7: 49:e6:6c:66:c6:a6:86:12:f2:fe:69:b8:04:b1:10:94:e3:b3: 8d:8c:95:45:45:dd:7d:b8:ea:26:46:d2:f1:67:fc:9a:9d:78: 52:f9:7d:aa:d8:a5:70:ea:11:f4:18:bf:44:92:74:cc:a9:7e: 7b:58:a4:31:ea:71:bf:33:de:a2:85:6c:35:6a:be:bd:73:dc: 42:03:e5:7a:ae:e3:f3:6d:a1:fd:1a:f9:62:ae:16:2d:f4:b7: ce:ac:e4:28:ea:bf:91:b4:f4:40:26:35:fc:61:c6:d6:30:96: fa:9f:44:b6:45:c4:f4:4b:a9:77:7a:a1:24:58:85:de:b7:dd: a1:5a:d4:d5:3b:c6:77:27:63:d0:9f:e9:d6:ec:5d:9f:89:b3: f1:84:17:ca:bc:b4:78:d9:8c:e2:88:b3:7e:f6:0b:f3:af:ce: 05:da:da:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YVHD41uFf3CoooftPgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl N2I2NGYwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EygxN2I5ODY2NDQxZmFjNTBjOWQyNjM0OTc1NzI5Mzc3ZjI3NWVlMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy356n5vL1kejpEZ/bhUufT00m1ce xymp+fE7Mf+tKe86TE1lzgoOg2DRSu+0QqMyh6igqOIGqi11zPumRwqOnU+Mor8G jNThWLtkKq52meDTLzSYEFxuQSIiNWMGcf6skCuu6PUeIuWMeBDMlvmEWq30Nxc5 TVkNzE6/HT5XQe90t26pFoE0TEMIJnYbxRjOSVjG3IRyvIuW/5yi3/4e9L1Z1AWm R82PCtaL5bccmiyNODi3pH+b13utE4/ALWSS4QcqSzZN1GzZqaXa4c8kijsBZloK iQvtz7bvmDy+IGIeBAFggHU9lEhhINQYLif0gbcZfu32JgA7zIH8++pBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe5hmRB+sUMnSY0l1cpN38nXuHTMB8GA1UdIwQY MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt ZjBlZDlhMmFiNjU0LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0 LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU9zsHHH YrhR0GBzGizyOPxO5z+Ux5uDNpGpKg48uQUQLrFGwQns4DwtL7kB0fQEXz+kQts/ gGjyU2BLAy+n8OOdFeo5XawautFuC/MHpUqRRwirSdXeH4qnSeZsZsamhhLy/mm4 BLEQlOOzjYyVRUXdfbjqJkbS8Wf8mp14Uvl9qtilcOoR9Bi/RJJ0zKl+e1ikMepx vzPeooVsNWq+vXPcQgPleq7j822h/Rr5Yq4WLfS3zqzkKOq/kbT0QCY1/GHG1jCW +p9EtkXE9Eupd3qhJFiF3rfdoVrU1TvGdydj0J/p1uxdn4mz8YQXyry0eNmM4oiz fvYL86/OBdraIg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:46 2025 by rpki-client