This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json) Hash identifier: ln0jiK1bXUj+lksVyVOO7SAAYmmdItIru/2NonZyXKw= Subject key identifier: A5:1B:30:28:F4:F8:FA:3F:97:52:20:0D:BC:23:34:A9:C0:08:8B:58 Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019B3CB4A63C5DD5A9C1E5C533791D845627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft Manifest number: 58 Signing time: Sat 20 Dec 2025 17:00:30 +0000 Manifest this update: Sat 20 Dec 2025 17:00:30 +0000 Manifest next update: Sun 21 Dec 2025 17:00:30 +0000 Files and hashes: 1: 8jbviDQFoKAhlEjW0jC3b3qtGcI.roa (hash: Gqk9VF0dkefof36zEJuvdRT5XkqcUqe0DMO1kA7Q6OU=) 2: H_hOQkSql0xe8SzvI1lQZgozg84.roa (hash: BYpmoiDjHBHncY51m+5UvYoUmAnZrIME8Cmlf9qM/N4=) 3: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: cEN7q9OBS6XrF0lgji66+m1PYfyUooq5rwNcv2G+Xvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a6:3c:5d:d5:a9:c1:e5:c5:33:79:1d:84:56:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Dec 20 17:00:30 2025 GMT Not After : Dec 21 17:00:30 2025 GMT Subject: CN=a51b3028f4f8fa3f9752200dbc2334a9c0088b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:9b:0e:3e:92:8b:38:10:0d:4b:bd:89:90: 59:44:c0:89:d3:a3:41:a6:4f:db:29:71:0c:b5:c9: 64:bf:33:b4:bd:7e:5d:38:84:bd:e4:ba:5b:b2:55: 10:b5:6b:20:2d:b0:52:b1:23:0c:59:ee:c6:f2:cd: 93:c7:6f:09:e4:fe:48:f2:12:fb:a7:b9:f5:77:ce: f8:e8:45:00:7e:6c:a1:f5:17:15:17:32:21:2c:9d: 4c:9a:d5:96:18:55:06:8a:f9:ef:0d:3e:7d:55:c0: 97:7b:20:20:77:f1:a5:27:f6:90:d4:cb:e9:61:4a: 3d:dc:44:1d:96:99:26:f2:2b:75:2a:18:89:5c:b2: 22:ed:e9:73:6a:e5:b6:87:5e:d5:96:a7:ec:4e:4d: c9:eb:e9:84:17:7f:f0:03:f6:33:fc:67:b0:b2:49: 69:f1:76:7b:17:8f:cb:cc:ba:52:18:47:36:6a:60: 8f:c7:b1:ff:c8:f9:7c:0f:8d:01:67:37:79:b5:8c: 84:22:34:f4:91:02:cb:09:89:d9:d6:f2:99:96:a6: b8:91:91:83:b1:4a:bf:fc:99:2c:03:a8:ab:82:96: a7:f5:e5:c4:8b:2c:d3:52:73:e3:bd:55:0c:ff:5e: 93:d8:24:15:56:e3:5b:0a:f5:f7:12:12:3f:17:37: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1B:30:28:F4:F8:FA:3F:97:52:20:0D:BC:23:34:A9:C0:08:8B:58 X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b6:de:2a:e2:94:61:6b:59:a7:4d:bc:fa:b3:b9:e4:a5:bf: a1:f9:ed:21:0e:f4:9d:f9:2b:37:20:da:84:08:8b:ea:c3:5b: 90:07:25:7b:3f:34:a1:50:44:ab:61:f0:97:6a:30:5f:f7:61: c3:cd:12:06:ad:58:3f:32:11:2c:8c:b5:90:0a:ef:9d:51:47: e1:2d:b3:2d:6c:80:6f:4d:e1:9b:ee:e3:cc:25:65:82:bf:69: 4e:56:0a:88:c3:1c:92:1d:a7:18:68:2a:93:70:10:97:39:5e: e9:16:9a:5e:fd:3a:ff:1a:0d:86:bb:1f:d3:25:22:a8:21:dc: 0d:1e:7a:7b:75:ae:be:9c:f4:a8:b5:51:70:60:d3:c3:94:47: 7b:c5:a5:df:36:d6:94:c8:1f:0c:5f:a5:28:cf:d0:7c:45:a0: 2a:e5:d6:91:5f:c8:fe:e5:7e:97:5b:49:95:4d:d2:5c:53:89: 13:ca:0f:40:dc:a8:33:78:16:8a:60:47:20:ec:46:9f:41:57: df:f2:6e:4d:b2:ea:9f:94:ca:88:8a:2a:d2:8d:de:e0:32:4d: 34:19:f8:0f:2f:f0:04:a6:9e:e9:22:7f:92:23:42:12:7d:43: bd:72:3b:90:06:5a:18:e0:3b:51:78:e4:c6:db:db:8b:4e:fc: fe:77:2d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKY8XdWpweXFM3kdhFYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjUxMjIwMTcwMDMwWhcNMjUxMjIxMTcwMDMwWjAzMTEwLwYDVQQD EyhhNTFiMzAyOGY0ZjhmYTNmOTc1MjIwMGRiYzIzMzRhOWMwMDg4YjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdmbDj6SizgQDUu9iZBZRMCJ06NB pk/bKXEMtclkvzO0vX5dOIS95LpbslUQtWsgLbBSsSMMWe7G8s2Tx28J5P5I8hL7 p7n1d8746EUAfmyh9RcVFzIhLJ1MmtWWGFUGivnvDT59VcCXeyAgd/GlJ/aQ1Mvp YUo93EQdlpkm8it1KhiJXLIi7elzauW2h17VlqfsTk3J6+mEF3/wA/Yz/Gewsklp 8XZ7F4/LzLpSGEc2amCPx7H/yPl8D40BZzd5tYyEIjT0kQLLCYnZ1vKZlqa4kZGD sUq//JksA6irgpan9eXEiyzTUnPjvVUM/16T2CQVVuNbCvX3EhI/FzdfTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUbMCj0+Po/l1IgDbwjNKnACItYMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbbeKuKU YWtZp028+rO55KW/ofntIQ70nfkrNyDahAiL6sNbkAclez80oVBEq2Hwl2owX/dh w80SBq1YPzIRLIy1kArvnVFH4S2zLWyAb03hm+7jzCVlgr9pTlYKiMMckh2nGGgq k3AQlzle6RaaXv06/xoNhrsf0yUiqCHcDR56e3Wuvpz0qLVRcGDTw5RHe8Wl3zbW lMgfDF+lKM/QfEWgKuXWkV/I/uV+l1tJlU3SXFOJE8oPQNyoM3gWimBHIOxGn0FX 3/JuTbLqn5TKiIoq0o3e4DJNNBn4Dy/wBKae6SJ/kiNCEn1DvXI7kAZaGOA7UXjk xtvbi078/nctFA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:05:04 2025 by rpki-client