This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft File: ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json) Hash identifier: eRLYEFKOByiJIFDxPs4TnysqnbH6wwwla64tiTRL3wc= Subject key identifier: FF:58:12:9E:E8:A5:51:D0:57:19:96:31:E5:6F:96:9E:38:B8:7C:28 Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3 Certificate issuer: /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3 Certificate serial: 019AF465094A4F2A21F55EAA15163BC7D9B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft Manifest number: 100F Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: ADQUqbUHy/g/3QDRXUOMyLn1Hx8FWImi+rl5uJNr2ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:09:4a:4f:2a:21:f5:5e:aa:15:16:3b:c7:d9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3 Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=ff58129ee8a551d057199631e56f969e38b87c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:02:7a:4a:8b:dc:1d:dd:f6:93:a2:63:c0:42: 5c:73:b8:b9:03:48:e4:1e:aa:67:ab:15:97:7e:b4: 4d:bf:80:bb:1a:c1:76:d0:a1:90:69:0f:b1:cc:dd: 86:8c:ab:17:df:44:4f:90:65:bd:99:b3:e6:78:b1: a0:83:a9:22:59:fc:32:20:d2:94:3c:4e:13:49:64: 29:80:a9:2b:4e:12:10:94:f9:a9:2a:83:c0:9f:48: 13:b7:49:37:8f:08:63:85:80:54:9a:b0:0d:f8:11: af:43:cc:a5:07:86:18:80:3e:69:e2:1b:55:ba:38: eb:0e:f3:01:e8:4a:5b:34:c1:58:c2:9b:15:23:dd: 50:22:f1:af:96:11:20:c0:3e:96:b1:ec:67:2e:85: d0:e1:be:b5:3c:42:84:27:59:15:b9:b5:89:83:0b: c4:ca:49:44:92:5a:24:0d:33:62:71:95:0a:90:28: f3:ce:3b:94:34:99:64:e3:0c:d6:aa:6e:cf:b6:25: 63:57:38:88:42:b4:18:fc:67:b6:08:19:de:0e:56: 3a:9a:58:7c:6d:34:2f:25:16:8c:91:e4:77:1b:4c: 98:e2:04:fa:54:da:6a:f6:6f:a2:7d:c8:0f:fe:72: b4:f6:4f:55:5d:79:db:c4:a5:39:50:e1:5d:7a:eb: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:12:9E:E8:A5:51:D0:57:19:96:31:E5:6F:96:9E:38:B8:7C:28 X509v3 Authority Key Identifier: keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4c:7f:f5:f2:6f:ea:4a:29:37:c9:f1:9d:da:d7:8f:14:ee: 1d:33:bb:2a:05:4b:59:c1:8a:7f:86:41:15:95:66:d4:b4:0a: 6b:1c:aa:5b:4e:45:09:12:b4:21:1c:81:dd:77:66:76:97:f5: 55:62:2e:4e:fb:6e:ba:aa:9e:d0:40:78:0a:20:40:1a:77:80: c4:ba:a4:6b:89:e9:16:02:8b:15:5e:12:e2:a6:db:1f:f9:eb: e0:74:04:d4:30:71:43:dc:74:3d:1d:02:cd:12:99:d3:9c:16: ad:93:db:c2:1b:bb:52:f1:cc:a8:5b:d6:5c:80:22:65:39:00: 28:cf:0f:00:49:ba:50:78:3c:0d:9e:e2:0f:63:28:06:1a:40: 2d:2d:b9:f3:97:0d:86:49:04:44:be:1a:95:ee:85:26:60:74: 61:a7:35:de:0d:b5:d1:0b:3c:eb:44:45:3c:91:32:21:47:62: 54:e4:64:04:04:76:7f:2d:86:b3:54:e8:f7:d6:20:96:15:14: 1a:c2:8a:e6:16:a0:4a:74:c7:74:c8:83:20:99:26:c1:e3:31: 7c:15:2d:1f:e7:0f:c6:2a:41:78:1c:58:e6:77:7c:9c:62:b0: da:7f:b5:82:60:7f:1b:8b:6d:3a:4c:0c:00:f8:bb:0d:fd:ff: de:1f:38:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQlKTyoh9V6qFRY7x9m4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYjY1Y2Y2ZmE1ZTFmY2FlOGNmODRjOTcwMWUzOGJkZmI2 M2FhYjMwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD EyhmZjU4MTI5ZWU4YTU1MWQwNTcxOTk2MzFlNTZmOTY5ZTM4Yjg3YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AJ6SovcHd32k6JjwEJcc7i5A0jk HqpnqxWXfrRNv4C7GsF20KGQaQ+xzN2GjKsX30RPkGW9mbPmeLGgg6kiWfwyINKU PE4TSWQpgKkrThIQlPmpKoPAn0gTt0k3jwhjhYBUmrAN+BGvQ8ylB4YYgD5p4htV ujjrDvMB6EpbNMFYwpsVI91QIvGvlhEgwD6WsexnLoXQ4b61PEKEJ1kVubWJgwvE yklEklokDTNicZUKkCjzzjuUNJlk4wzWqm7PtiVjVziIQrQY/Ge2CBneDlY6mlh8 bTQvJRaMkeR3G0yY4gT6VNpq9m+ifcgP/nK09k9VXXnbxKU5UOFdeus7eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9YEp7opVHQVxmWMeVvlp44uHwoMB8GA1UdIwQY MBaAFBC2XPb6Xh/K6M+EyXAeOL37Y6qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDIt YTIzODU1ODcyYjg2LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDItYTIzODU1ODcyYjg2 LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEx/9fJv 6kopN8nxndrXjxTuHTO7KgVLWcGKf4ZBFZVm1LQKaxyqW05FCRK0IRyB3Xdmdpf1 VWIuTvtuuqqe0EB4CiBAGneAxLqka4npFgKLFV4S4qbbH/nr4HQE1DBxQ9x0PR0C zRKZ05wWrZPbwhu7UvHMqFvWXIAiZTkAKM8PAEm6UHg8DZ7iD2MoBhpALS2585cN hkkERL4ale6FJmB0Yac13g210Qs860RFPJEyIUdiVORkBAR2fy2Gs1To99YglhUU GsKK5hagSnTHdMiDIJkmweMxfBUtH+cPxipBeBxY5nd8nGKw2n+1gmB/G4ttOkwM APi7Df3/3h84Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:46:08 2025 by rpki-client