This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json) Hash identifier: PClunfs23fAqT/pPYEXCzCpHVQ/IAEhs+bPbwJNPYNo= Subject key identifier: CF:B5:C1:4A:FF:BD:F1:BE:17:1F:72:61:78:79:24:7C:DA:7B:47:A9 Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Certificate serial: 019B5A1ADE92996A038066EFDBD088C6071A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft Manifest number: 1C Signing time: Fri 26 Dec 2025 10:01:08 +0000 Manifest this update: Fri 26 Dec 2025 10:01:08 +0000 Manifest next update: Sat 27 Dec 2025 10:01:08 +0000 Files and hashes: 1: 9Iobs21TrhznByva2SlSF67h2-k.roa (hash: aVVkV0PfZtBqaGt7A0dU8/KqJayapE1G90tqMVuDo5o=) 2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: c7XF8XZMP4iLpMJTiiT7BgimBnyYT8BBZqcJ2S0/QYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:de:92:99:6a:03:80:66:ef:db:d0:88:c6:07:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Validity Not Before: Dec 26 10:01:08 2025 GMT Not After : Dec 27 10:01:08 2025 GMT Subject: CN=cfb5c14affbdf1be171f72617879247cda7b47a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ce:d7:da:38:f0:be:ff:d2:45:1c:94:ff:de: 1f:0c:c1:5c:19:70:12:3a:c6:e2:98:61:58:11:e0: ee:f1:0d:5f:9f:cb:cd:bd:af:a0:ee:fc:c8:33:7f: ff:58:77:9e:08:bb:84:ad:5d:93:8b:2e:0c:f9:c3: 91:ad:7e:a2:68:af:5f:72:2c:ef:17:91:77:25:b3: 41:f6:24:3d:b0:e7:87:b9:eb:67:ff:9a:9e:d3:58: 86:e1:fd:c8:fd:2b:5b:d1:d6:88:b9:03:b1:dc:40: 59:46:2f:9c:5f:b3:f9:de:bd:39:49:75:91:40:6b: 2b:67:db:9c:b2:9a:4e:8b:e8:ec:d5:00:ac:0f:8b: a6:05:5c:d9:f2:94:5e:f1:52:d8:9e:53:2f:d9:4c: 8a:19:ae:06:17:2e:c0:b3:b5:cc:e3:13:e4:64:da: 6e:94:8d:d1:0e:a9:74:59:d4:c7:d5:f5:bc:5f:de: f3:65:03:23:de:26:74:18:48:3e:fa:b8:aa:37:93: 21:5f:b6:c1:51:74:b6:58:f5:49:a4:b6:06:64:c8: 1e:1d:85:d8:42:93:0a:df:32:d2:47:eb:cb:4d:fa: 83:d0:c9:b1:04:37:31:a3:51:12:ec:2a:f5:52:f8: 49:66:d0:e1:72:72:31:5e:08:af:9d:93:0b:21:b8: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B5:C1:4A:FF:BD:F1:BE:17:1F:72:61:78:79:24:7C:DA:7B:47:A9 X509v3 Authority Key Identifier: keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:43:81:3c:d6:80:00:33:fc:ee:7d:10:db:5c:af:55:03:b0: eb:9c:af:5f:ee:5a:b8:04:94:9b:c6:d5:fb:50:c4:ea:10:55: 94:06:7b:a8:a1:07:b7:0e:b2:02:ad:0e:3e:79:8c:e9:76:33: eb:b3:a9:4f:bf:b4:29:2d:09:64:52:28:4c:60:d3:a3:e1:1e: 68:29:0e:c6:c7:62:33:e4:7a:66:16:2a:9b:17:e8:1e:81:72: 31:f3:28:f1:39:37:c1:1b:55:21:19:80:22:fd:39:c9:a5:91: f5:b9:9d:61:78:d0:64:f5:ae:8e:08:6d:aa:76:53:43:ef:01: e4:84:54:92:85:f2:2b:70:84:1a:1f:b9:5b:fc:85:aa:af:ec: 68:9c:6b:0d:35:9a:6e:8b:49:e3:26:ed:67:c4:ef:dc:a5:cb: 00:be:b5:51:c2:11:b3:d3:88:81:03:80:7c:ec:4b:1e:90:ce: 4c:7d:3a:38:89:02:9e:ab:74:19:7f:23:33:c1:bf:e5:c0:1b: 5c:18:6b:bb:5b:ef:5d:fb:e8:14:d4:c1:5c:85:d6:7a:6c:1b: 3d:0a:30:ef:2d:cd:13:c0:14:e5:73:41:d1:f6:35:2c:a8:62: 11:93:68:63:8c:53:39:d3:c3:02:6b:bd:ff:61:45:13:4b:3c: 82:e9:10:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGt6SmWoDgGbv29CIxgcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk0YzQwNDcwYzZkYjk4ODAxZjdiZDA2MGRhYzk0MWU5 ZGQzMTYwHhcNMjUxMjI2MTAwMTA4WhcNMjUxMjI3MTAwMTA4WjAzMTEwLwYDVQQD EyhjZmI1YzE0YWZmYmRmMWJlMTcxZjcyNjE3ODc5MjQ3Y2RhN2I0N2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms7X2jjwvv/SRRyU/94fDMFcGXAS OsbimGFYEeDu8Q1fn8vNva+g7vzIM3//WHeeCLuErV2Tiy4M+cORrX6iaK9fcizv F5F3JbNB9iQ9sOeHuetn/5qe01iG4f3I/Stb0daIuQOx3EBZRi+cX7P53r05SXWR QGsrZ9ucsppOi+js1QCsD4umBVzZ8pRe8VLYnlMv2UyKGa4GFy7As7XM4xPkZNpu lI3RDql0WdTH1fW8X97zZQMj3iZ0GEg++riqN5MhX7bBUXS2WPVJpLYGZMgeHYXY QpMK3zLSR+vLTfqD0MmxBDcxo1ES7Cr1UvhJZtDhcnIxXgivnZMLIbjQvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+1wUr/vfG+Fx9yYXh5JHzae0epMB8GA1UdIwQY MBaAFKXZTEBHDG25iAH3vQYNrJQendMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgt NTY2MzFmZjY3MmQxLzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgtNTY2MzFmZjY3MmQx LzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkOBPNaA ADP87n0Q21yvVQOw65yvX+5auASUm8bV+1DE6hBVlAZ7qKEHtw6yAq0OPnmM6XYz 67OpT7+0KS0JZFIoTGDTo+EeaCkOxsdiM+R6ZhYqmxfoHoFyMfMo8Tk3wRtVIRmA Iv05yaWR9bmdYXjQZPWujghtqnZTQ+8B5IRUkoXyK3CEGh+5W/yFqq/saJxrDTWa botJ4ybtZ8Tv3KXLAL61UcIRs9OIgQOAfOxLHpDOTH06OIkCnqt0GX8jM8G/5cAb XBhru1vvXfvoFNTBXIXWemwbPQow7y3NE8AU5XNB0fY1LKhiEZNoY4xTOdPDAmu9 /2FFE0s8gukQ1Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:19 2025 by rpki-client