This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft File: pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json) Hash identifier: E0J9/AwDosPfHeEKAl5Gb2scKK/AHaP1Es/ArcL+YGo= Subject key identifier: 8E:2F:11:59:E5:B3:B6:A0:F3:49:91:4A:8A:2A:51:D7:7B:57:F2:F4 Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C Certificate issuer: /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c Certificate serial: 019B3B350D697ED13B07E3414A58B7CC6C19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 10:01:31 +0000 Manifest this update: Sat 20 Dec 2025 10:01:31 +0000 Manifest next update: Sun 21 Dec 2025 10:01:31 +0000 Files and hashes: 1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=) 2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: QVMfkGLBbtxa6a2H/zMutz2DcZuAZr4DcT/LR5qeneM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:0d:69:7e:d1:3b:07:e3:41:4a:58:b7:cc:6c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c Validity Not Before: Dec 20 10:01:31 2025 GMT Not After : Dec 21 10:01:31 2025 GMT Subject: CN=8e2f1159e5b3b6a0f349914a8a2a51d77b57f2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:c4:d7:d1:d6:6e:90:96:9d:1c:d8:ca:f2: ff:29:e2:6b:32:41:fe:37:d1:50:d1:7d:e2:68:e0: 60:ca:f2:17:8f:cf:89:14:3a:3a:15:1b:ef:47:c1: 27:0f:cb:60:72:93:8e:75:99:45:24:24:84:1c:a2: 10:56:97:af:9e:26:45:6d:f6:ba:b9:7c:40:42:d8: 36:32:1b:c5:71:70:87:80:60:c7:ae:fa:45:98:82: 20:0e:f1:d8:ce:f3:f0:1c:43:5e:fd:f3:04:f1:45: 48:c2:b0:9f:d2:36:43:a4:35:4f:bd:fe:51:3f:56: 8f:43:05:67:33:57:c6:82:6d:ba:7c:64:82:b0:dc: 2a:de:67:f0:74:70:35:00:c7:f2:08:78:34:7a:76: 27:60:e2:ab:69:fe:d2:09:bb:fb:46:3b:e0:cd:57: 7a:1a:93:7c:03:82:3e:36:76:10:b1:da:fb:dd:d5: 1c:b4:00:f5:96:04:bd:65:ed:5a:f9:32:a3:4b:9c: c9:24:ae:ec:e5:6e:c9:b5:56:9c:a9:b1:1a:ae:6e: 4a:eb:c5:ff:c9:f4:d3:fc:c1:41:07:1e:38:73:1e: 73:13:52:dc:32:1b:85:cb:d3:ba:77:43:02:02:7a: fb:25:9c:3c:ea:62:3d:b6:57:7b:6e:65:17:60:64: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2F:11:59:E5:B3:B6:A0:F3:49:91:4A:8A:2A:51:D7:7B:57:F2:F4 X509v3 Authority Key Identifier: keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ca:31:4d:24:00:7f:4d:00:17:85:88:13:f3:32:66:79:23: 0c:d2:ff:80:7a:21:fa:cf:e7:30:59:3b:9d:4d:fe:dd:2e:5d: 73:d0:74:f2:0c:00:31:59:7b:7f:0f:0e:42:13:bd:6c:87:03: 83:14:0f:24:76:6e:8b:32:be:b7:c0:7d:7f:7a:30:da:f3:f1: 4a:a2:9e:f7:ef:ed:14:98:35:81:99:c4:08:29:72:e7:f6:5d: bf:8e:da:d8:bc:4d:e3:71:3c:1f:2d:1e:09:4e:04:57:a9:74: 7a:de:b8:28:41:6e:a0:a7:d5:54:1b:f2:5a:4f:d3:c1:b7:a1: e0:9f:88:d2:a2:e1:7e:1a:7e:9e:6e:f6:fa:ce:9b:a4:b2:9a: b6:c0:aa:59:de:fa:21:17:58:57:3b:6f:b2:88:dc:50:de:93: d4:80:bf:fa:d8:b3:31:c5:bc:a3:ef:58:b5:35:fa:e5:13:84: 6f:55:b0:8d:45:db:79:04:af:6f:bd:80:82:f6:15:84:7b:00: 52:67:83:45:05:10:21:f7:92:86:ce:10:94:81:ee:9a:62:27: a1:79:c1:4c:1d:a4:ef:b3:09:a7:1c:58:e3:5e:ab:2d:5a:b3: 51:b8:4c:04:be:92:d3:b3:83:eb:84:e3:e7:56:14:6f:1e:96: 47:40:1e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQ1pftE7B+NBSli3zGwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NDBiODVmMGY3YmE2Mzg1Y2Q0ZmVlOGEwZWMwNGU4MTg0 MTU0MmMwHhcNMjUxMjIwMTAwMTMxWhcNMjUxMjIxMTAwMTMxWjAzMTEwLwYDVQQD Eyg4ZTJmMTE1OWU1YjNiNmEwZjM0OTkxNGE4YTJhNTFkNzdiNTdmMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshPE19HWbpCWnRzYyvL/KeJrMkH+ N9FQ0X3iaOBgyvIXj8+JFDo6FRvvR8EnD8tgcpOOdZlFJCSEHKIQVpevniZFbfa6 uXxAQtg2MhvFcXCHgGDHrvpFmIIgDvHYzvPwHENe/fME8UVIwrCf0jZDpDVPvf5R P1aPQwVnM1fGgm26fGSCsNwq3mfwdHA1AMfyCHg0enYnYOKraf7SCbv7RjvgzVd6 GpN8A4I+NnYQsdr73dUctAD1lgS9Ze1a+TKjS5zJJK7s5W7JtVacqbEarm5K68X/ yfTT/MFBBx44cx5zE1LcMhuFy9O6d0MCAnr7JZw86mI9tld7bmUXYGSR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4vEVnls7ag80mRSooqUdd7V/L0MB8GA1UdIwQY MBaAFKRAuF8Pe6Y4XNT+6KDsBOgYQVQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDkt ZGRjZmUzNmY0MzNiLzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8yMWVjMGYtYTFlYy00YWQ0LWE3NDktZGRjZmUzNmY0MzNi LzEvcEVDNFh3OTdwamhjMVA3b29Pd0U2QmhCVkN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMoxTSQA f00AF4WIE/MyZnkjDNL/gHoh+s/nMFk7nU3+3S5dc9B08gwAMVl7fw8OQhO9bIcD gxQPJHZuizK+t8B9f3ow2vPxSqKe9+/tFJg1gZnECCly5/Zdv47a2LxN43E8Hy0e CU4EV6l0et64KEFuoKfVVBvyWk/Twbeh4J+I0qLhfhp+nm72+s6bpLKatsCqWd76 IRdYVztvsojcUN6T1IC/+tizMcW8o+9YtTX65ROEb1WwjUXbeQSvb72AgvYVhHsA UmeDRQUQIfeShs4QlIHummInoXnBTB2k77MJpxxY416rLVqzUbhMBL6S07OD64Tj 51YUbx6WR0AeWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:52 2025 by rpki-client