This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json) Hash identifier: 1tKmJKpW77P4Blfc1VHgE3qus+iMnbmDXFA4TtOdFZ8= Subject key identifier: 0B:FE:FF:C4:37:2E:84:A4:26:11:D9:F3:AB:A8:46:97:26:52:C1:FB Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Certificate serial: 019B3F11DF8983214C7C6CE826172EB9D697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft Manifest number: 0E Signing time: Sun 21 Dec 2025 04:01:34 +0000 Manifest this update: Sun 21 Dec 2025 04:01:34 +0000 Manifest next update: Mon 22 Dec 2025 04:01:34 +0000 Files and hashes: 1: 9Iobs21TrhznByva2SlSF67h2-k.roa (hash: aVVkV0PfZtBqaGt7A0dU8/KqJayapE1G90tqMVuDo5o=) 2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: /y411CLApMo+UjfB1ZkyABR4D6rE7uFecOmntzQHk1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:df:89:83:21:4c:7c:6c:e8:26:17:2e:b9:d6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Validity Not Before: Dec 21 04:01:34 2025 GMT Not After : Dec 22 04:01:34 2025 GMT Subject: CN=0bfeffc4372e84a42611d9f3aba846972652c1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ca:32:fa:14:90:96:88:33:77:fc:56:17:b4: 2f:38:74:fd:fa:c2:12:8a:da:e8:bc:1e:62:08:17: 62:c1:af:af:f3:93:24:54:e4:b9:b6:6b:99:f6:e4: 2c:48:52:4b:e6:16:41:2d:1d:b3:fe:dd:1d:b6:06: 1a:aa:8a:0e:3d:ba:38:a0:04:c2:53:7f:73:3b:4d: 7d:40:85:92:f5:0c:3b:1d:39:3a:23:cf:9a:30:c1: 62:e9:e1:83:a3:e6:84:08:bf:f0:d0:9c:9c:a1:94: d6:6f:05:3c:40:c9:c3:ba:7c:a8:6c:19:ba:41:ba: 1b:ac:97:81:29:67:84:f9:70:99:e3:02:79:5a:d2: 1b:dd:2b:82:36:94:48:02:23:8f:b2:63:4c:d0:33: 77:7b:16:e6:16:5c:21:ee:53:19:8e:a5:1e:4b:43: c9:3a:d6:49:63:5f:9f:b0:09:24:dd:f0:2b:bc:6e: ef:f3:20:4c:66:80:f5:f0:a8:36:37:0b:c1:7e:1b: e7:b6:ba:ce:06:8c:d1:c3:8c:51:2d:d2:09:70:fa: dd:8d:00:45:42:34:da:15:78:bf:9f:a2:39:fa:db: 11:71:d8:5c:a7:ff:37:36:c1:8b:59:57:cf:6b:cb: d4:03:8d:39:5c:ce:19:f4:77:df:1d:d2:36:66:0d: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FE:FF:C4:37:2E:84:A4:26:11:D9:F3:AB:A8:46:97:26:52:C1:FB X509v3 Authority Key Identifier: keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e6:cf:c4:84:16:f5:38:1a:f3:c5:8e:a8:78:3e:d5:be:e8: 5a:73:26:8e:cc:2d:ca:ca:df:ed:3c:c5:3d:b2:46:1e:9b:5c: f3:58:fc:7b:7f:33:db:be:ae:2d:bf:2d:16:79:ae:89:28:17: 4d:91:09:94:f0:b7:66:1d:d7:fc:f6:6d:7c:9e:96:a2:80:bd: ae:be:5f:b9:85:21:b2:5c:2d:48:2c:28:c0:0c:a4:91:f2:61: 7f:21:ca:f7:41:2f:74:32:1a:de:be:d1:b1:e0:22:e8:6c:5c: cb:16:3a:59:a8:e8:ee:2a:04:1a:b0:d2:f9:4e:2e:55:4d:c5: 86:f1:c0:27:42:6e:c5:3e:68:b7:96:f4:8b:88:cf:c9:6a:35: 33:17:bd:90:4b:fd:b7:8c:64:c4:df:76:fc:ea:b4:95:f4:e2: 06:e0:99:8c:65:ff:22:f7:7f:df:be:15:dc:45:2e:4b:54:65: 61:3b:51:ea:dc:53:8d:a8:0c:e1:d2:4c:d4:eb:87:6f:b9:29: c9:02:dc:04:75:e1:5b:52:a4:5b:e1:1e:98:39:43:24:d0:f9: b2:b4:0f:59:a2:9f:15:a2:01:30:13:27:fb:8e:88:0e:8b:58: 74:55:51:0e:44:59:ab:3c:03:97:bb:2a:bc:98:e9:2e:e9:09: 21:d6:2b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/Ed+JgyFMfGzoJhcuudaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk0YzQwNDcwYzZkYjk4ODAxZjdiZDA2MGRhYzk0MWU5 ZGQzMTYwHhcNMjUxMjIxMDQwMTM0WhcNMjUxMjIyMDQwMTM0WjAzMTEwLwYDVQQD EygwYmZlZmZjNDM3MmU4NGE0MjYxMWQ5ZjNhYmE4NDY5NzI2NTJjMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Moy+hSQlogzd/xWF7QvOHT9+sIS itrovB5iCBdiwa+v85MkVOS5tmuZ9uQsSFJL5hZBLR2z/t0dtgYaqooOPbo4oATC U39zO019QIWS9Qw7HTk6I8+aMMFi6eGDo+aECL/w0JycoZTWbwU8QMnDunyobBm6 QbobrJeBKWeE+XCZ4wJ5WtIb3SuCNpRIAiOPsmNM0DN3exbmFlwh7lMZjqUeS0PJ OtZJY1+fsAkk3fArvG7v8yBMZoD18Kg2NwvBfhvntrrOBozRw4xRLdIJcPrdjQBF QjTaFXi/n6I5+tsRcdhcp/83NsGLWVfPa8vUA405XM4Z9HffHdI2Zg1HHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAv+/8Q3LoSkJhHZ86uoRpcmUsH7MB8GA1UdIwQY MBaAFKXZTEBHDG25iAH3vQYNrJQendMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgt NTY2MzFmZjY3MmQxLzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgtNTY2MzFmZjY3MmQx LzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARubPxIQW 9Tga88WOqHg+1b7oWnMmjswtysrf7TzFPbJGHptc81j8e38z276uLb8tFnmuiSgX TZEJlPC3Zh3X/PZtfJ6WooC9rr5fuYUhslwtSCwowAykkfJhfyHK90EvdDIa3r7R seAi6GxcyxY6Wajo7ioEGrDS+U4uVU3FhvHAJ0JuxT5ot5b0i4jPyWo1Mxe9kEv9 t4xkxN92/Oq0lfTiBuCZjGX/Ivd/374V3EUuS1RlYTtR6txTjagM4dJM1OuHb7kp yQLcBHXhW1KkW+EemDlDJND5srQPWaKfFaIBMBMn+46IDotYdFVRDkRZqzwDl7sq vJjpLukJIdYrOA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:06 2025 by rpki-client