This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json) Hash identifier: h5+XrUv7xujA/6jbQJ9pRiOFTMJFb9prv1sz3QEQ2fE= Subject key identifier: 42:1B:8C:D4:08:B7:24:08:4C:8E:DE:28:D5:6A:82:15:F5:DF:E9:22 Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5 Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5 Certificate serial: 019B1EAABEC4B56D2106EAF8D83C9FBBC076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft Manifest number: 177D Signing time: Sun 14 Dec 2025 21:01:04 +0000 Manifest this update: Sun 14 Dec 2025 21:01:04 +0000 Manifest next update: Mon 15 Dec 2025 21:01:04 +0000 Files and hashes: 1: BuG2OAiPDQnyx6d-WMA8tpFdnHw.roa (hash: uZBmZl0o3YtVzo0taGTcZqTYaNccqkyd0kSYhjubo7I=) 2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=) 3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: DUXRljcYis1KnoeRZWciAlK7d5oCQGMhANANHjT732g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:be:c4:b5:6d:21:06:ea:f8:d8:3c:9f:bb:c0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5 Validity Not Before: Dec 14 21:01:04 2025 GMT Not After : Dec 15 21:01:04 2025 GMT Subject: CN=421b8cd408b724084c8ede28d56a8215f5dfe922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:a3:5c:d3:32:42:13:26:4d:74:bf:bc:4a: bd:3e:f7:e1:3f:90:86:9c:18:97:36:7f:52:30:d2: c1:9e:58:f5:fd:fb:84:9a:50:3d:cf:91:da:f1:63: ed:02:4f:32:ed:16:35:2e:3f:eb:65:74:ce:84:e4: b5:df:e6:2c:f9:9f:ef:d4:23:f9:71:a2:6e:31:f3: 0e:35:70:64:39:64:4c:52:27:33:17:e0:29:6f:07: 30:20:88:3a:14:4b:b4:54:ca:77:0d:cc:a1:ac:7d: 09:5e:f4:c5:5d:57:3e:c1:71:36:82:56:0b:68:81: 58:5b:dd:b5:b4:f0:bf:ce:52:44:20:80:f8:0a:0e: 4b:bb:62:81:d1:e3:83:e6:7c:d6:9a:d3:8e:c8:cb: 0e:47:dc:03:66:0c:da:94:7b:94:c1:39:fb:c0:e1: b4:fc:ae:a1:72:ad:92:99:6c:6d:03:66:28:4a:51: cc:78:56:b7:87:39:91:df:3c:81:55:ad:0e:e0:aa: 53:09:3b:0b:94:9c:62:cc:f1:54:6d:f7:2b:00:10: 29:74:06:18:90:05:48:34:e8:80:a9:b9:70:57:e2: 40:46:06:88:7f:b2:02:28:52:84:81:d3:b8:f2:f3: de:88:b0:e3:d2:31:9f:27:14:bd:ba:7e:dc:55:6b: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1B:8C:D4:08:B7:24:08:4C:8E:DE:28:D5:6A:82:15:F5:DF:E9:22 X509v3 Authority Key Identifier: keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:11:f8:35:43:c9:8a:59:5e:28:f2:64:5d:2e:96:b9:e0:79: de:f6:e0:e9:d6:a2:d7:1a:21:cf:71:8d:7b:ee:70:d9:86:d0: 31:48:40:9c:e0:59:0a:5b:5e:ca:26:b9:f1:76:e0:a9:79:f5: 0b:60:fb:8b:9d:51:fa:a3:6d:7e:64:46:d2:1e:0d:5c:5b:76: 4b:86:6f:15:43:5b:49:4e:4e:1d:de:77:30:3e:7e:65:4f:fd: e2:bc:2a:b6:34:8d:ff:45:14:d8:e0:d4:c4:19:ce:2f:10:b2: f7:36:4f:28:de:b1:1a:e1:c0:d1:44:a2:9f:e9:2c:0f:01:58: ad:6d:e0:07:af:58:49:70:d7:33:99:63:1c:6f:76:05:11:65: b0:7f:a1:86:d0:04:e8:74:28:05:32:b7:4a:ca:8e:7a:e0:5c: 82:4e:c4:a5:b9:e0:c0:c9:fd:bf:26:17:f2:b7:58:30:d6:b8: d2:b8:b0:25:8b:3d:db:1f:3d:5b:ad:35:1e:0e:3f:18:4f:8e: e3:97:65:f4:dd:a7:f0:30:09:33:c9:fd:e4:44:dd:66:97:5b: 75:9d:bf:2e:52:03:56:e3:a2:f0:40:4c:f5:e0:9f:23:ae:6c: 69:c7:1b:ce:41:0e:28:57:56:50:f4:7f:80:74:e3:ca:fc:59: 3b:96:4a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqr7EtW0hBur42Dyfu8B2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2 YjFlZDUwHhcNMjUxMjE0MjEwMTA0WhcNMjUxMjE1MjEwMTA0WjAzMTEwLwYDVQQD Eyg0MjFiOGNkNDA4YjcyNDA4NGM4ZWRlMjhkNTZhODIxNWY1ZGZlOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2ejXNMyQhMmTXS/vEq9PvfhP5CG nBiXNn9SMNLBnlj1/fuEmlA9z5Ha8WPtAk8y7RY1Lj/rZXTOhOS13+Ys+Z/v1CP5 caJuMfMONXBkOWRMUiczF+ApbwcwIIg6FEu0VMp3DcyhrH0JXvTFXVc+wXE2glYL aIFYW921tPC/zlJEIID4Cg5Lu2KB0eOD5nzWmtOOyMsOR9wDZgzalHuUwTn7wOG0 /K6hcq2SmWxtA2YoSlHMeFa3hzmR3zyBVa0O4KpTCTsLlJxizPFUbfcrABApdAYY kAVINOiAqblwV+JARgaIf7ICKFKEgdO48vPeiLDj0jGfJxS9un7cVWsEPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIbjNQItyQITI7eKNVqghX13+kiMB8GA1UdIwQY MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt OTdjNWQ1OWIwYmJmLzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxH4NUPJ illeKPJkXS6WueB53vbg6dai1xohz3GNe+5w2YbQMUhAnOBZClteyia58XbgqXn1 C2D7i51R+qNtfmRG0h4NXFt2S4ZvFUNbSU5OHd53MD5+ZU/94rwqtjSN/0UU2ODU xBnOLxCy9zZPKN6xGuHA0USin+ksDwFYrW3gB69YSXDXM5ljHG92BRFlsH+hhtAE 6HQoBTK3SsqOeuBcgk7EpbngwMn9vyYX8rdYMNa40riwJYs92x89W601Hg4/GE+O 45dl9N2n8DAJM8n95ETdZpdbdZ2/LlIDVuOi8EBM9eCfI65saccbzkEOKFdWUPR/ gHTjyvxZO5ZKiw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:34 2025 by rpki-client