This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json) Hash identifier: GjNbOxLaQJDsoyS0+KGyc3J7mLxdq7u6c19rW9+G9o8= Subject key identifier: CE:AA:E4:A7:BF:BA:8F:42:A1:83:FC:0A:43:B5:55:36:8C:2B:4B:93 Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f Certificate serial: 019B2BC202648B8D597C387B29118C1107A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft Manifest number: 075B Signing time: Wed 17 Dec 2025 10:01:33 +0000 Manifest this update: Wed 17 Dec 2025 10:01:33 +0000 Manifest next update: Thu 18 Dec 2025 10:01:33 +0000 Files and hashes: 1: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: 65jXrFMQuPpvHpNZ5/QWligopczOikRbqZzHGFh2yKc=) 2: rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa (hash: ZIVMbBVJwlrHJ75Ki0ODTTpJ9+ylEgTfPq67Cig5C+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:02:64:8b:8d:59:7c:38:7b:29:11:8c:11:07:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f Validity Not Before: Dec 17 10:01:33 2025 GMT Not After : Dec 18 10:01:33 2025 GMT Subject: CN=ceaae4a7bfba8f42a183fc0a43b555368c2b4b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:ab:74:b4:a3:82:e0:e9:68:52:62:b9:14: ed:ce:ae:1a:5f:ca:46:6d:05:62:51:31:59:3c:a8: ce:c9:a3:a3:dd:a1:88:d2:12:70:bb:7f:e3:53:18: 80:a4:e3:a7:f7:bc:0b:b6:5e:af:f1:13:e0:2d:07: 89:e5:14:10:82:74:95:aa:39:f6:4e:52:a5:35:af: 03:4d:77:fb:71:aa:8d:8b:77:e9:e2:e1:ee:15:f1: e1:db:f7:93:93:b5:14:52:b5:67:10:00:94:bf:e0: 0b:db:68:db:8e:dd:4a:8b:6e:7c:c2:c4:50:d5:b7: 56:32:fe:92:1a:7d:4e:08:0f:94:ad:48:1c:b3:b0: c0:69:bd:f8:bb:3b:fb:04:ba:de:db:c6:95:b1:1f: d1:05:86:15:f0:80:97:26:e8:bf:6d:d7:f5:03:8e: 2e:67:70:30:48:74:fe:b6:24:25:97:ab:20:99:f9: 3f:42:fe:c9:15:50:6e:7d:2a:e8:b0:52:0a:4c:45: a3:40:72:42:4d:37:86:e3:8f:2c:2d:52:2a:26:a4: f1:84:a9:d0:57:d8:99:9e:9f:80:93:63:0d:bc:17: 74:77:7c:97:68:6e:f3:7c:6d:66:fa:bf:0e:0d:0f: 8d:48:7c:0a:e0:5f:3c:40:18:0e:9c:6f:07:76:37: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:E4:A7:BF:BA:8F:42:A1:83:FC:0A:43:B5:55:36:8C:2B:4B:93 X509v3 Authority Key Identifier: keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1c:da:e3:07:b8:90:88:9e:19:0e:25:5c:ad:ab:5f:09:a9: 01:9d:1e:09:8b:b0:6a:d3:fb:fc:56:48:61:55:d2:e2:a7:58: 80:2e:90:52:41:48:af:9e:9d:31:bf:e9:c4:a0:0b:d3:2f:13: 4a:bc:48:f1:06:22:23:39:e7:ab:28:ac:87:4b:41:ff:07:7d: 02:09:1d:f4:e2:06:21:b6:e5:15:df:b0:b5:86:8f:b7:bf:e8: 53:4f:9a:cd:aa:03:77:b4:05:22:4e:62:38:c7:86:81:52:34: 1a:8e:9e:58:28:e9:6f:95:ed:80:a8:05:84:53:0b:7f:01:82: 6e:a9:4c:10:c3:91:6d:05:ec:b3:28:49:40:5a:2d:9e:5e:63: c2:77:8e:45:dd:4e:1f:2e:46:e1:b9:49:f7:d9:fb:bc:08:48: 9a:be:52:ef:41:e0:82:f2:db:ba:52:83:a4:7c:e2:91:7d:c0: e1:96:53:47:c4:43:51:e3:f4:47:6d:39:d3:71:19:0d:68:21: 24:58:c5:31:a3:13:1f:c3:3a:31:ba:5a:76:2c:3c:9a:7d:d0: 7b:de:35:d9:c5:b5:c2:e2:b7:33:24:b0:12:99:67:2e:2b:ca: 94:74:2a:b0:5f:38:b7:79:ef:0d:e8:4e:59:66:61:f0:b2:5b: cf:b8:22:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwgJki41ZfDh7KRGMEQehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl N2I2NGYwHhcNMjUxMjE3MTAwMTMzWhcNMjUxMjE4MTAwMTMzWjAzMTEwLwYDVQQD EyhjZWFhZTRhN2JmYmE4ZjQyYTE4M2ZjMGE0M2I1NTUzNjhjMmI0YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AGrdLSjguDpaFJiuRTtzq4aX8pG bQViUTFZPKjOyaOj3aGI0hJwu3/jUxiApOOn97wLtl6v8RPgLQeJ5RQQgnSVqjn2 TlKlNa8DTXf7caqNi3fp4uHuFfHh2/eTk7UUUrVnEACUv+AL22jbjt1Ki258wsRQ 1bdWMv6SGn1OCA+UrUgcs7DAab34uzv7BLre28aVsR/RBYYV8ICXJui/bdf1A44u Z3AwSHT+tiQll6sgmfk/Qv7JFVBufSrosFIKTEWjQHJCTTeG448sLVIqJqTxhKnQ V9iZnp+Ak2MNvBd0d3yXaG7zfG1m+r8ODQ+NSHwK4F88QBgOnG8HdjdY+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6q5Ke/uo9CoYP8CkO1VTaMK0uTMB8GA1UdIwQY MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt ZjBlZDlhMmFiNjU0LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0 LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhza4we4 kIieGQ4lXK2rXwmpAZ0eCYuwatP7/FZIYVXS4qdYgC6QUkFIr56dMb/pxKAL0y8T SrxI8QYiIznnqyish0tB/wd9Agkd9OIGIbblFd+wtYaPt7/oU0+azaoDd7QFIk5i OMeGgVI0Go6eWCjpb5XtgKgFhFMLfwGCbqlMEMORbQXssyhJQFotnl5jwneORd1O Hy5G4blJ99n7vAhImr5S70HggvLbulKDpHzikX3A4ZZTR8RDUeP0R20503EZDWgh JFjFMaMTH8M6Mbpadiw8mn3Qe9412cW1wuK3MySwEplnLivKlHQqsF84t3nvDehO WWZh8LJbz7giMw== -----END CERTIFICATE-----Generated at Wed Dec 17 15:28:10 2025 by rpki-client