This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: w1kmjPUjy479iKHmdg16uUzUMMejJ1npIPPavknT4NU=
Subject key identifier: 96:5E:9C:FE:66:6B:30:FD:B3:6D:D7:66:5A:70:71:30:20:56:12:F5
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 019C42B411FE3A7FDAD74672C797CD74B38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 14:00:23 +0000
Manifest this update: Mon 09 Feb 2026 14:00:23 +0000
Manifest next update: Tue 10 Feb 2026 14:00:23 +0000
Files and hashes: 1: 7bhssnFALKXf6vwJgxr6iyB1j-E.roa (hash: Mq+fb+f7dnR1wdSCKsUAoyChLnoaaSkxAWMCvhi3v8s=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: C+McLJgTN0Lg6NrEMpb6kdTGce5g+lRUReZ34LHxNNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:11:fe:3a:7f:da:d7:46:72:c7:97:cd:74:b3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Feb 9 14:00:23 2026 GMT
Not After : Feb 10 14:00:23 2026 GMT
Subject: CN=965e9cfe666b30fdb36dd7665a707130205612f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:9c:73:9b:37:3d:73:48:41:17:03:8c:e7:
d5:98:13:c3:2c:3d:e8:e1:0a:23:1f:7f:f6:56:6f:
6f:e8:cd:4e:34:13:46:ec:ed:55:03:0a:ef:c2:ba:
bf:34:f2:d5:6b:4c:6d:89:ce:b6:ae:a4:2b:d6:ad:
64:95:f6:4c:c5:ac:ee:f9:85:ca:99:8a:a1:08:2b:
ef:c6:b0:55:d4:42:cc:7a:d8:a9:93:89:46:a3:13:
13:62:ad:1f:f0:cd:f0:d3:2e:31:71:69:8d:ad:36:
82:f0:6e:3f:7b:56:91:78:10:c2:f5:ca:e7:e2:7c:
dd:46:1b:dc:bb:51:70:25:b4:95:cd:10:bb:37:5b:
ec:0e:21:ff:5d:01:d7:20:a1:0a:86:60:21:46:8f:
5d:15:95:f3:3e:5e:ed:39:7e:fd:3c:ff:59:11:9b:
76:c8:26:a0:0b:79:da:fc:98:39:3c:52:ec:48:63:
1a:90:87:da:14:c9:18:0d:9e:91:9a:07:02:b8:cb:
67:f5:90:a3:b8:ea:7b:56:9b:96:f5:48:df:e0:0d:
f5:86:b1:69:fc:49:1f:6f:91:f0:c7:e6:05:c0:a3:
31:68:ac:85:da:a5:c2:24:35:46:a5:85:36:a7:bb:
d9:f2:89:97:a7:2a:5c:05:f4:89:c1:7e:11:20:e0:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5E:9C:FE:66:6B:30:FD:B3:6D:D7:66:5A:70:71:30:20:56:12:F5
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:70:d2:66:21:6e:3a:c2:47:01:1e:3a:2f:68:09:f0:51:74:
51:b9:35:2e:b5:5e:38:e6:c3:7b:d3:a0:1a:b1:0a:62:3e:83:
75:96:47:91:43:9f:e7:6b:14:f3:0e:7a:27:92:53:3c:55:fd:
20:27:5b:25:2b:f2:ce:18:57:55:28:4c:b8:06:eb:4d:c2:5d:
2f:85:53:82:95:42:d5:8e:a2:36:84:92:5f:ae:84:99:f5:1a:
24:35:37:47:dd:95:2a:be:85:bf:d3:be:59:f0:a0:37:b4:06:
a8:fd:7a:e1:64:8e:67:79:23:82:f1:33:7a:a5:5b:c2:bf:c8:
d7:93:7f:41:96:dc:52:f2:db:dd:9c:f3:19:c7:0e:af:e4:d9:
96:34:7b:4f:43:aa:f7:98:6d:2b:b8:ae:f2:94:b8:ff:32:48:
ef:30:85:9f:d5:34:86:43:fd:62:4c:01:32:27:e4:8a:8f:b0:
ef:4f:00:46:4a:72:ad:c6:c9:da:b0:cc:d3:15:65:8c:5a:46:
f6:a4:d1:b1:12:09:30:03:94:7a:4d:7a:7e:e3:32:1f:6f:59:
e0:74:94:0c:77:5e:7a:5e:7d:1c:c2:2f:db:fd:64:34:4a:e2:
16:98:e1:eb:cc:bb:ad:44:dc:16:e2:9e:1a:64:c6:a5:19:2d:
4c:f2:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:02 2026 by rpki-client