This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json) Hash identifier: UWN5WlHsaWk4AaqJSqfgIXue/NREnVrbb4bnLCLaj+E= Subject key identifier: 2A:93:4A:0F:C9:72:7E:40:20:0A:9F:D6:61:A4:9E:79:EE:FE:7D:DE Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Certificate serial: 019BAFB8EA24B91A7BA686BE27983BBED9BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft Manifest number: 0A67 Signing time: Mon 12 Jan 2026 01:01:29 +0000 Manifest this update: Mon 12 Jan 2026 01:01:29 +0000 Manifest next update: Tue 13 Jan 2026 01:01:29 +0000 Files and hashes: 1: D58-o0mTsNy267l9yWClEeen-9U.roa (hash: zL9nvY9m4yNsvHsIg/CV6pNzOVRrn6CNj0HvmE2CaMk=) 2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: JLPhtrD2hAMOmkzYU65dVeCQtFrBpe6Zouj0x8tSEgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b8:ea:24:b9:1a:7b:a6:86:be:27:98:3b:be:d9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Validity Not Before: Jan 12 01:01:29 2026 GMT Not After : Jan 13 01:01:29 2026 GMT Subject: CN=2a934a0fc9727e40200a9fd661a49e79eefe7dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:db:fe:92:ff:e8:a3:50:05:41:40:1e:3d: 9e:a1:92:8b:d2:90:84:9d:ac:81:c7:10:b2:df:e0: 34:0f:8d:41:ca:97:4a:df:10:10:b5:6e:09:db:0f: 62:63:04:22:d0:2a:f4:46:ed:17:f1:52:73:c6:1f: 9a:42:96:7e:02:cf:0e:5d:c3:58:55:ed:4f:6e:62: 58:74:44:3c:13:ef:0f:22:86:4e:68:f2:d9:f9:4e: 34:25:bd:d4:69:78:f9:a8:db:a3:46:20:f6:5d:1b: 86:a8:8a:85:f2:e8:3e:59:e8:18:12:0b:aa:cb:68: 7e:1a:65:d2:b5:50:67:aa:cd:0a:38:be:2f:96:93: e9:78:ab:41:ca:2c:0b:bd:0d:4c:7b:5c:85:a8:94: e6:af:2c:cc:b9:b9:b6:5f:ab:96:77:2c:f3:96:97: 1c:2a:0b:e6:20:07:35:24:b9:5e:ec:18:0d:39:04: 79:70:ea:a8:12:f2:36:00:40:96:af:80:89:df:1b: 9d:2e:db:06:6c:c7:a3:2b:50:f3:f0:60:f0:88:4b: 48:ab:f9:a6:24:bf:2e:e9:d6:9c:d9:dd:1c:bf:c0: 1f:10:03:93:99:ea:8d:63:89:06:d9:35:04:4a:a9: 8e:19:33:77:4c:c8:b3:1a:60:1b:a8:0c:f9:74:4e: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:93:4A:0F:C9:72:7E:40:20:0A:9F:D6:61:A4:9E:79:EE:FE:7D:DE X509v3 Authority Key Identifier: keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:df:c6:76:89:0d:76:fe:53:b7:d6:ca:a7:3a:a8:b4:47:9d: f0:6c:12:5a:d4:59:45:41:79:80:ba:88:8e:b6:f2:cb:13:ac: 14:08:e8:6b:34:38:70:24:4e:16:a3:ee:80:ee:3d:85:cf:02: 95:a4:ee:e1:0a:a8:c5:47:df:8c:ad:7e:08:59:1b:90:0b:84: f8:2f:30:80:7c:19:2d:60:a5:9d:b7:ab:c6:08:8c:6b:ed:e0: 18:e4:0e:d7:8b:43:8c:43:9b:77:c5:ce:a4:f2:6b:1d:59:10: fc:30:a8:fe:e2:26:69:68:82:39:56:c2:60:3c:8d:eb:95:7f: 5f:c6:0b:31:f0:03:c5:7e:7b:04:f0:a5:e1:10:65:a6:eb:6a: 9c:c5:bc:08:51:b4:13:f1:5d:e3:eb:a2:d5:95:9f:7b:80:4b: fc:d6:e8:05:19:56:0a:82:56:92:24:49:1b:f1:68:91:b4:76: 24:00:e9:71:18:b7:d5:8e:5b:6e:40:a5:a7:15:cf:0a:9e:bd: 80:ab:31:21:d2:3e:7c:67:a7:e6:02:e3:71:8a:77:68:7a:68: 6c:0a:c6:47:94:12:3b:0e:4b:a2:c1:1d:a8:2d:4e:68:64:54: 9b:fb:5f:53:44:35:da:49:aa:e9:d2:50:65:eb:c6:d3:d6:04: f9:03:62:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuOokuRp7poa+J5g7vtm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj Zjk2Y2EwHhcNMjYwMTEyMDEwMTI5WhcNMjYwMTEzMDEwMTI5WjAzMTEwLwYDVQQD EygyYTkzNGEwZmM5NzI3ZTQwMjAwYTlmZDY2MWE0OWU3OWVlZmU3ZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurLb/pL/6KNQBUFAHj2eoZKL0pCE nayBxxCy3+A0D41BypdK3xAQtW4J2w9iYwQi0Cr0Ru0X8VJzxh+aQpZ+As8OXcNY Ve1PbmJYdEQ8E+8PIoZOaPLZ+U40Jb3UaXj5qNujRiD2XRuGqIqF8ug+WegYEguq y2h+GmXStVBnqs0KOL4vlpPpeKtByiwLvQ1Me1yFqJTmryzMubm2X6uWdyzzlpcc KgvmIAc1JLle7BgNOQR5cOqoEvI2AECWr4CJ3xudLtsGbMejK1Dz8GDwiEtIq/mm JL8u6dac2d0cv8AfEAOTmeqNY4kG2TUESqmOGTN3TMizGmAbqAz5dE6YywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqTSg/Jcn5AIAqf1mGknnnu/n3eMB8GA1UdIwQY MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt MzlmNGFiNmVjN2U2LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2 LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd/GdokN dv5Tt9bKpzqotEed8GwSWtRZRUF5gLqIjrbyyxOsFAjoazQ4cCROFqPugO49hc8C laTu4QqoxUffjK1+CFkbkAuE+C8wgHwZLWClnberxgiMa+3gGOQO14tDjEObd8XO pPJrHVkQ/DCo/uImaWiCOVbCYDyN65V/X8YLMfADxX57BPCl4RBlputqnMW8CFG0 E/Fd4+ui1ZWfe4BL/NboBRlWCoJWkiRJG/FokbR2JADpcRi31Y5bbkClpxXPCp69 gKsxIdI+fGen5gLjcYp3aHpobArGR5QSOw5LosEdqC1OaGRUm/tfU0Q12kmq6dJQ ZevG09YE+QNi9g== -----END CERTIFICATE-----Generated at Mon Jan 12 12:30:14 2026 by rpki-client