This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft File: Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json) Hash identifier: fh1Rt1hzxju/8AkgBvbDP0PQB/0FFWeXeVE3kLjiKfE= Subject key identifier: 46:68:B2:88:A0:C9:A1:67:25:47:62:78:5B:B9:3C:A3:87:EF:05:4A Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC Certificate issuer: /CN=125ae2cfd315c131193484665acada7c013163ec Certificate serial: 019AF208C88FA4B4B0CE9799CDD294192387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: bFDtamhcxzEjXjBWqFkqHot+61uJGjurwQkSKjgnySo=) 2: wbTgEv-sqFR9u9r7ZDRXXLL-IqI.roa (hash: taRPRQvI9CVnj6I4aQu8cTaoxv9W7+s+q4UGNBYlAx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c8:8f:a4:b4:b0:ce:97:99:cd:d2:94:19:23:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125ae2cfd315c131193484665acada7c013163ec Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=4668b288a0c9a167254762785bb93ca387ef054a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:2d:ac:77:77:74:b3:2f:43:46:b6:3c:f1: 7f:7d:25:34:b6:12:5b:41:62:fd:aa:3b:12:05:fe: d8:11:66:93:91:18:dc:20:bd:43:82:40:75:2c:50: 42:35:c1:b5:64:75:f1:53:e5:85:f0:f4:31:ef:c6: d7:5c:7e:f9:e8:f2:f7:59:4f:47:0d:08:1b:09:12: 3a:da:24:bc:ad:d8:01:46:15:13:b8:e6:cc:3c:d7: 30:f7:17:63:0f:c7:67:de:45:fe:f4:07:fd:c7:49: 52:19:fa:e1:d1:c3:47:2d:af:e7:20:f6:68:26:f2: a7:8d:7b:ca:22:cd:c9:49:b0:f0:c7:04:44:a3:c3: e0:d2:71:0c:ba:6f:2d:cf:47:c3:d7:1c:c2:6d:fc: 71:a3:e4:e0:e5:93:23:9e:ce:08:ee:38:93:08:a4: a5:aa:6c:08:b1:f7:8f:08:dc:0f:37:13:e2:2b:41: 84:8e:de:52:79:f7:ac:a2:2d:54:13:b2:97:f1:82: be:55:f8:ef:6a:a0:66:9f:3a:1a:10:14:0c:c9:d2: e5:f5:5c:bd:ef:78:6b:ed:e2:d0:00:3a:b3:a7:2c: a6:1e:9a:94:37:f3:68:b5:41:53:90:a5:af:36:7d: 2c:cd:2a:81:56:f1:4b:f4:62:7a:59:93:87:e0:3a: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:68:B2:88:A0:C9:A1:67:25:47:62:78:5B:B9:3C:A3:87:EF:05:4A X509v3 Authority Key Identifier: keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:34:d1:84:25:27:29:1c:06:f4:74:48:2b:d2:57:27:07:d3: 6d:c4:e0:b0:1f:22:55:a7:53:50:42:f7:51:8e:d1:96:89:9c: a7:af:52:4a:b7:e6:e7:19:cf:e8:af:08:08:1f:25:fe:a3:a5: de:fd:a7:77:91:28:34:74:65:10:89:99:d4:48:0d:c4:a5:71: ba:cf:23:24:8f:0f:34:62:0d:a5:4a:2f:ac:19:40:e4:00:5b: 57:2c:a3:c7:0b:74:d2:9d:e3:95:91:cc:c3:ff:8c:a9:6f:ee: 2f:a2:3e:67:b4:af:b9:09:64:25:cc:0a:64:12:58:eb:5e:86: 30:f9:c7:18:7a:a6:ad:ad:74:c1:23:83:d9:d4:f9:bd:ef:a7: 72:2d:41:75:56:1d:29:e9:ba:8e:4d:91:97:5d:18:8a:60:1d: ff:5e:5e:8b:89:c4:09:03:13:7a:01:20:d5:37:72:69:30:a5: d7:67:44:0a:b4:20:4a:05:dc:5e:2f:ba:e1:4b:04:6c:5d:8f: 94:fc:f0:8d:12:7f:62:99:47:2d:a7:31:c3:48:19:a7:79:f9: 39:ce:01:19:65:27:b4:e8:f7:d6:42:d5:10:83:c0:71:20:52: af:fd:00:9d:e6:02:7f:80:c2:ad:2b:67:2f:e1:2e:26:fe:22: d0:80:c3:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMiPpLSwzpeZzdKUGSOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz MTYzZWMwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD Eyg0NjY4YjI4OGEwYzlhMTY3MjU0NzYyNzg1YmI5M2NhMzg3ZWYwNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy50trHd3dLMvQ0a2PPF/fSU0thJb QWL9qjsSBf7YEWaTkRjcIL1DgkB1LFBCNcG1ZHXxU+WF8PQx78bXXH756PL3WU9H DQgbCRI62iS8rdgBRhUTuObMPNcw9xdjD8dn3kX+9Af9x0lSGfrh0cNHLa/nIPZo JvKnjXvKIs3JSbDwxwREo8Pg0nEMum8tz0fD1xzCbfxxo+Tg5ZMjns4I7jiTCKSl qmwIsfePCNwPNxPiK0GEjt5Sefesoi1UE7KX8YK+VfjvaqBmnzoaEBQMydLl9Vy9 73hr7eLQADqzpyymHpqUN/NotUFTkKWvNn0szSqBVvFL9GJ6WZOH4DogsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZosoigyaFnJUdieFu5PKOH7wVKMB8GA1UdIwQY MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDTRhCUn KRwG9HRIK9JXJwfTbcTgsB8iVadTUEL3UY7Rlomcp69SSrfm5xnP6K8ICB8l/qOl 3v2nd5EoNHRlEImZ1EgNxKVxus8jJI8PNGINpUovrBlA5ABbVyyjxwt00p3jlZHM w/+MqW/uL6I+Z7SvuQlkJcwKZBJY616GMPnHGHqmra10wSOD2dT5ve+nci1BdVYd Kem6jk2Rl10YimAd/15ei4nECQMTegEg1TdyaTCl12dECrQgSgXcXi+64UsEbF2P lPzwjRJ/YplHLacxw0gZp3n5Oc4BGWUntOj31kLVEIPAcSBSr/0AneYCf4DCrStn L+EuJv4i0IDDiw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:35 2025 by rpki-client