This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json) Hash identifier: 8HxPbtWPjmc/+OfRSOUJYdhFITSlEWfGD0m0XutPhkk= Subject key identifier: FD:60:34:FA:31:20:08:CF:EE:3D:93:49:E2:3E:F1:96:62:E8:B1:A7 Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c Certificate serial: 019AF1D25F5C1EA5B396A09DF22C5AC4E0CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=) 2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: fIXHl7Vn6WpmmEfAfXNGL7euNetw+UPlztL/38e+I4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5f:5c:1e:a5:b3:96:a0:9d:f2:2c:5a:c4:e0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=fd6034fa312008cfee3d9349e23ef19662e8b1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:dc:0f:36:5f:c4:15:92:d1:fd:d9:93:63: 16:82:d9:ec:06:f2:87:1b:0d:f2:10:07:c9:93:63: 1c:7b:91:35:f8:36:ab:fd:5c:fb:52:cc:78:ab:64: b7:44:09:2e:38:13:07:f3:49:29:bb:6b:66:a6:76: 9e:ff:a9:11:11:53:c4:c5:dd:31:ea:9f:5b:1e:a5: aa:30:0b:b1:44:d3:b8:a9:54:17:5e:ad:e7:aa:39: b0:a8:52:76:cf:42:83:71:e3:ea:aa:47:18:16:f1: 8b:f2:a4:61:fb:6a:63:a6:c5:57:f3:af:d3:58:9e: 0a:b3:2c:a4:56:f3:83:4c:be:20:80:ac:e8:5b:f1: b0:28:ca:fe:23:05:22:85:16:e2:bb:a4:42:8d:ff: 2a:ec:9f:11:29:bd:73:4b:52:fe:07:f5:51:5f:c1: 64:e3:6c:64:3e:9f:44:b4:9e:b7:21:0c:1e:44:73: c5:1d:86:7a:ea:ee:83:54:b7:3e:aa:b0:ce:88:c0: 64:19:43:b2:36:2e:3a:f2:96:6b:29:cd:c3:1b:a4: 43:b7:3d:7e:b4:46:97:9b:3e:db:b9:a3:f7:60:e1: e2:0b:e8:b6:7e:e2:85:10:2b:0f:ff:77:f5:47:81: 6e:25:e0:a0:66:2c:91:84:97:39:d3:c8:83:be:73: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:34:FA:31:20:08:CF:EE:3D:93:49:E2:3E:F1:96:62:E8:B1:A7 X509v3 Authority Key Identifier: keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0d:5d:9a:c4:39:23:b6:76:84:4b:03:75:6f:fa:88:a1:3d: 1b:65:d2:33:6c:56:5a:d8:73:4f:22:8e:a1:7c:16:a5:5d:62: 8c:14:6e:dc:fa:e9:d2:3e:81:71:26:62:5c:e7:a1:de:59:97: 11:d9:86:05:43:39:4c:6c:fb:b3:04:9b:dc:75:c9:be:26:59: c0:d1:78:c0:32:27:b9:55:2b:ce:cb:10:0e:ba:5d:c9:77:5d: 91:36:64:4f:31:92:fb:ec:f3:27:16:ea:e0:35:a0:17:de:8a: ce:4b:bb:85:6a:04:8b:d7:e5:94:4c:69:5b:d1:e2:6d:09:88: d2:86:14:ef:6f:e9:5e:44:c6:fd:25:16:2c:4b:f7:1d:c6:9a: 2d:8f:fb:7a:b7:db:62:cd:2e:88:db:b7:67:f5:c1:a3:b6:ef: f2:da:e6:2b:ca:fd:6a:0e:ac:a2:6b:8d:ee:f7:fe:8c:6d:17: cc:d9:38:3a:c1:cf:c9:ba:55:8f:60:ff:f6:a4:bc:e4:6d:66: 66:b3:8f:95:01:c2:ea:76:d6:47:40:69:56:04:87:ae:9d:4d: 8d:74:20:f9:79:64:61:2b:71:ee:11:ba:2e:1f:63:4a:c1:c5: 97:1f:ea:cf:93:d7:76:b4:24:14:cb:65:24:2a:56:48:ed:0c: 03:99:3a:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l9cHqWzlqCd8ixaxODNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0 MTU0MmMwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EyhmZDYwMzRmYTMxMjAwOGNmZWUzZDkzNDllMjNlZjE5NjYyZThiMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsrcDzZfxBWS0f3Zk2MWgtnsBvKH Gw3yEAfJk2Mce5E1+Dar/Vz7Usx4q2S3RAkuOBMH80kpu2tmpnae/6kREVPExd0x 6p9bHqWqMAuxRNO4qVQXXq3nqjmwqFJ2z0KDcePqqkcYFvGL8qRh+2pjpsVX86/T WJ4KsyykVvODTL4ggKzoW/GwKMr+IwUihRbiu6RCjf8q7J8RKb1zS1L+B/VRX8Fk 42xkPp9EtJ63IQweRHPFHYZ66u6DVLc+qrDOiMBkGUOyNi468pZrKc3DG6RDtz1+ tEaXmz7buaP3YOHiC+i2fuKFECsP/3f1R4FuJeCgZiyRhJc508iDvnNf4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1gNPoxIAjP7j2TSeI+8ZZi6LGnMB8GA1UdIwQY MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjg1dmsQ5 I7Z2hEsDdW/6iKE9G2XSM2xWWthzTyKOoXwWpV1ijBRu3Prp0j6BcSZiXOeh3lmX EdmGBUM5TGz7swSb3HXJviZZwNF4wDInuVUrzssQDrpdyXddkTZkTzGS++zzJxbq 4DWgF96Kzku7hWoEi9fllExpW9HibQmI0oYU72/pXkTG/SUWLEv3HcaaLY/7erfb Ys0uiNu3Z/XBo7bv8trmK8r9ag6somuN7vf+jG0XzNk4OsHPybpVj2D/9qS85G1m ZrOPlQHC6nbWR0BpVgSHrp1NjXQg+XlkYStx7hG6Lh9jSsHFlx/qz5PXdrQkFMtl JCpWSO0MA5k62w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:22 2025 by rpki-client