This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json) Hash identifier: yGf4GeyR0haHD6caytL8ExTgXNJXrfJ58Wa3K88Rq94= Subject key identifier: 19:57:6F:6D:F3:E7:03:82:41:C3:0C:DF:1B:77:6B:91:A2:67:3F:B6 Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe Certificate serial: 019AF12DBAC4668FA90EEB8A2BA0028FE1BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft Manifest number: 0570 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: f0pP3QzbpUhETbtEAcKMAynkmhVV/vgSpJGdn4mMBUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ba:c4:66:8f:a9:0e:eb:8a:2b:a0:02:8f:e1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=19576f6df3e7038241c30cdf1b776b91a2673fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:d6:ac:41:de:8e:da:69:b5:7e:44:c0:48: 89:19:d3:26:11:c4:aa:3b:ca:33:23:79:10:6a:d2: f0:04:38:ff:66:ec:64:33:f1:7f:8b:91:64:ba:d9: 97:8a:55:00:61:59:52:84:2b:1a:57:b8:0e:06:fc: 76:e0:25:21:2d:a7:47:36:07:8b:bc:18:00:c3:fc: 92:27:e3:19:18:b3:ce:7e:b9:45:8f:d2:ae:cc:75: 7c:a6:93:f3:89:98:67:b9:55:4a:c8:3e:d1:85:0a: 7c:e4:c4:3c:e3:3d:d3:b0:68:da:11:4e:93:b8:44: c8:57:fd:1b:65:f1:b7:0b:48:95:be:98:0d:64:a9: 26:e5:ae:a5:c6:34:d8:f4:5f:ca:1d:0a:83:c6:87: 4f:38:a9:17:c4:2f:01:53:d2:39:c3:b5:14:30:e4: 88:11:7a:5d:ca:a5:7c:a5:0f:c5:fb:b3:e0:e1:01: 05:21:2b:f5:cc:82:fe:70:ba:44:07:3b:8c:b4:a6: 56:6d:61:2f:5c:88:16:5c:dd:2b:71:8b:bf:93:74: 27:dc:4f:e0:9b:69:ba:6d:42:3e:c8:21:c9:7f:9a: 23:66:89:30:9c:93:18:cc:fa:8f:77:a2:b2:01:a4: 01:d8:79:ea:ab:43:4a:70:71:af:02:56:d6:c7:d6: 61:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:57:6F:6D:F3:E7:03:82:41:C3:0C:DF:1B:77:6B:91:A2:67:3F:B6 X509v3 Authority Key Identifier: keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d8:2a:51:6e:b9:f1:e4:6c:4b:e3:6e:2c:23:d0:4a:8c:34: 80:c8:49:67:97:06:83:d0:09:af:18:8c:aa:84:86:44:5c:ea: 0b:b9:a1:dd:4d:9d:18:36:73:c0:d7:9a:4d:6a:e2:aa:fe:ad: f0:9d:27:11:c5:7f:92:68:3f:67:61:50:53:79:0a:36:66:5a: 7d:91:89:af:fd:0b:4f:3a:f8:f9:df:a8:e0:d0:2a:44:34:9c: 74:48:fa:e4:9a:b5:73:3a:dd:c4:22:ae:18:8e:9e:6e:97:53: d9:d7:21:ac:6b:1b:b6:fa:dd:3b:fc:7c:3a:2c:05:44:6a:25: da:4a:34:49:cf:e5:ca:ce:a8:ba:ef:92:19:b5:cc:06:b7:38: e1:26:3e:f4:53:a9:3d:c3:7c:b7:c0:95:9d:2e:14:57:e7:cb: 0c:26:19:da:23:27:0c:88:25:8e:21:d1:e7:35:f6:67:08:a1: 71:74:67:00:e0:6d:11:3e:08:58:ea:96:34:2a:af:40:b2:fc: 71:0c:cd:3e:63:ec:bb:4d:7a:d4:8b:3f:e1:35:ce:55:d4:dd: 43:67:1c:c2:f5:1d:b9:7e:98:91:e4:d5:8f:f9:60:23:6b:9c: e6:1b:bb:64:e0:f9:ad:05:31:fb:ac:ad:26:14:43:7c:4d:90: 68:87:de:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbrEZo+pDuuKK6ACj+G9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNTI0ZGFjYmUwMmE5NTkzMWNhMWQ2ZWUyOWIzYzg5NTdh NGVjYmUwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EygxOTU3NmY2ZGYzZTcwMzgyNDFjMzBjZGYxYjc3NmI5MWEyNjczZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkovWrEHejtpptX5EwEiJGdMmEcSq O8ozI3kQatLwBDj/ZuxkM/F/i5FkutmXilUAYVlShCsaV7gOBvx24CUhLadHNgeL vBgAw/ySJ+MZGLPOfrlFj9KuzHV8ppPziZhnuVVKyD7RhQp85MQ84z3TsGjaEU6T uETIV/0bZfG3C0iVvpgNZKkm5a6lxjTY9F/KHQqDxodPOKkXxC8BU9I5w7UUMOSI EXpdyqV8pQ/F+7Pg4QEFISv1zIL+cLpEBzuMtKZWbWEvXIgWXN0rcYu/k3Qn3E/g m2m6bUI+yCHJf5ojZokwnJMYzPqPd6KyAaQB2Hnqq0NKcHGvAlbWx9ZhPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlXb23z5wOCQcMM3xt3a5GiZz+2MB8GA1UdIwQY MBaAFHpSTay+AqlZMcodbuKbPIlXpOy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wY2ZlNDUtNDJlNy00YmNmLTk0ZDUt YjhiMTBjNmQ1ZWJmLzEvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wY2ZlNDUtNDJlNy00YmNmLTk0ZDUtYjhiMTBjNmQ1ZWJm LzEvZWxKTnJMNENxVmt4eWgxdTRwczhpVmVrN0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtgqUW65 8eRsS+NuLCPQSow0gMhJZ5cGg9AJrxiMqoSGRFzqC7mh3U2dGDZzwNeaTWriqv6t 8J0nEcV/kmg/Z2FQU3kKNmZafZGJr/0LTzr4+d+o4NAqRDScdEj65Jq1czrdxCKu GI6ebpdT2dchrGsbtvrdO/x8OiwFRGol2ko0Sc/lys6ouu+SGbXMBrc44SY+9FOp PcN8t8CVnS4UV+fLDCYZ2iMnDIgljiHR5zX2ZwihcXRnAOBtET4IWOqWNCqvQLL8 cQzNPmPsu0161Is/4TXOVdTdQ2ccwvUduX6YkeTVj/lgI2uc5hu7ZOD5rQUx+6yt JhRDfE2QaIfemQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:13 2025 by rpki-client