This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
File: 36E709368620BD63612D7AF179D2A786396A87A5.mft (raw, json)
Hash identifier: zffnMoRzzRi0e0dzjglUievzBxVkF6N5se4vnXlEp0g=
Subject key identifier: 8B:D2:77:BD:02:2B:8D:81:06:03:1A:7A:5B:E3:42:3E:38:7C:C4:4F
Authority key identifier: 36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
Certificate issuer: /CN=36E709368620BD63612D7AF179D2A786396A87A5
Certificate serial: 76E5F7EB8D2C6B0CACD31DD65A6808BACF1A26B7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject info access: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
Manifest number: E4
Signing time: Sat 20 Dec 2025 11:47:32 +0000
Manifest this update: Sat 20 Dec 2025 11:42:32 +0000
Manifest next update: Sun 21 Dec 2025 14:18:32 +0000
Files and hashes: 1: 326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa (hash: h/s4tew81Yh64OLotMKMEnaDt3sFUjU1FYTmZDG0IcA=)
2: 326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (hash: d5u5k+3/rjeFAbZMAZL2Vjbr4aRvWxZsoNuduoSU1fw=)
3: 36E709368620BD63612D7AF179D2A786396A87A5.crl (hash: dS8pUlp0pqOdCEAJXAkV1A4dc5mk/y/7DckL+buse7Q=)
Validation: OK
Signature path: rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 14:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e5:f7:eb:8d:2c:6b:0c:ac:d3:1d:d6:5a:68:08:ba:cf:1a:26:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36E709368620BD63612D7AF179D2A786396A87A5
Validity
Not Before: Dec 20 11:42:32 2025 GMT
Not After : Dec 21 14:18:32 2025 GMT
Subject: CN=8BD277BD022B8D8106031A7A5BE3423E387CC44F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:20:ed:f7:44:fd:5b:e7:55:84:cf:14:a2:
0a:6d:a3:70:31:cf:ba:9c:fc:59:63:0f:7a:b5:08:
2f:65:a4:1e:ee:db:1a:d5:5f:ab:df:a5:e2:db:1d:
17:e4:2a:f9:71:a4:4b:35:8c:1b:c0:b3:72:8f:a1:
3e:09:16:87:06:43:5f:3b:5e:78:b1:fd:af:b2:90:
41:d1:f5:7a:aa:1f:f5:8e:7f:80:3f:4b:37:ca:b0:
e2:19:28:5f:35:d5:5d:85:27:0e:d7:e0:03:fd:04:
31:d9:da:0e:30:3d:66:a5:0f:18:b4:4c:d0:6d:d6:
a0:5c:ee:69:fc:7d:29:31:4b:db:68:26:b1:26:9d:
60:c2:80:b3:f3:c1:d0:8e:e4:1f:27:7d:2e:72:5d:
bf:cc:6f:8f:fc:b0:88:ba:0f:06:62:dc:97:8f:03:
73:32:c0:d1:15:57:3c:3a:f5:65:e9:c2:17:a1:27:
d7:c6:d2:96:d9:d6:f9:b7:1b:94:47:04:49:bb:34:
d7:af:a3:f7:de:d9:39:b2:43:4d:69:08:b9:14:3a:
43:d1:c8:6a:ed:08:d2:a0:c9:cb:91:e5:69:6e:a6:
9a:6c:51:9a:83:89:40:50:a7:de:aa:83:06:e2:6d:
9a:fe:f2:c0:7d:e4:41:e2:2b:80:64:bb:70:b1:03:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D2:77:BD:02:2B:8D:81:06:03:1A:7A:5B:E3:42:3E:38:7C:C4:4F
X509v3 Authority Key Identifier:
keyid:36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0b:e8:5a:6f:79:f9:dd:d8:a6:79:dd:3b:56:ba:bf:64:06:
71:c4:2c:3c:d7:88:71:03:58:0d:34:66:52:3d:1c:92:56:7e:
49:86:2c:de:a6:cb:0a:ea:56:3b:b0:25:9e:ff:fd:d2:5a:bc:
7c:da:62:d0:7b:ce:8d:87:0e:12:b5:2d:3f:f2:d1:7d:d6:68:
32:3c:40:cc:85:0d:23:81:6a:5c:b2:4e:30:b9:29:84:6b:3f:
cb:9d:8d:1a:23:83:8c:46:1f:bb:f6:fb:b5:12:15:dd:05:1c:
c1:e1:d5:f2:05:84:3a:5b:2b:45:99:50:e5:9d:d5:16:fd:ef:
b0:ff:54:37:97:e1:08:5e:3f:3b:0c:7d:fd:52:f2:15:da:73:
1a:85:84:fa:f8:eb:0a:19:3b:9f:83:7d:39:12:77:45:63:88:
c4:ec:75:42:7c:c4:6e:9c:55:b7:5b:6f:04:0a:57:79:97:a8:
2b:36:df:7a:32:ab:bd:31:5d:64:ce:51:ec:76:26:b7:5a:fc:
94:72:25:95:ae:30:11:0f:e0:f1:98:67:c3:87:89:de:e0:c6:
f1:51:6e:b3:7d:4f:7f:64:d3:f2:3d:56:89:8a:2d:cd:51:04:
9e:2b:07:88:10:6c:75:61:f5:ed:53:60:3e:b9:8a:f4:1c:c1:
fe:31:b5:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Dec 21 01:34:32 2025 by rpki-client