This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json) Hash identifier: 75/3iaf3AciKCk7oWzPOecfUKE5wVqGnRJXRA913+nQ= Subject key identifier: 7F:BB:03:67:55:B6:D1:BA:82:14:81:35:2D:74:0B:F1:4C:B3:B3:2C Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb Certificate serial: 019B0E9306BC713CDF0E8B2D9E125B896460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:01:15 +0000 Manifest this update: Thu 11 Dec 2025 18:01:15 +0000 Manifest next update: Fri 12 Dec 2025 18:01:15 +0000 Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=) 2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: 9agtc5NgVFPXJlKACD3NgYLsuK/63sKGjRX/3tWA/zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:06:bc:71:3c:df:0e:8b:2d:9e:12:5b:89:64:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb Validity Not Before: Dec 11 18:01:15 2025 GMT Not After : Dec 12 18:01:15 2025 GMT Subject: CN=7fbb036755b6d1ba821481352d740bf14cb3b32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:0f:44:e1:bd:ea:82:32:4a:a5:e0:1a:a2: 11:4d:ff:64:4a:95:6a:3c:2a:7b:61:f5:fe:2b:d1: 10:21:11:ad:1d:67:01:86:50:84:9d:35:eb:fc:2e: 63:c1:63:20:41:8e:b8:27:4f:e4:f1:36:27:cb:ab: 15:c2:c2:69:1e:af:cf:8d:3b:2e:6a:47:72:cb:97: 17:1b:fb:a0:0f:04:1b:ef:2b:94:77:35:ae:7d:a3: f2:ae:3f:7b:cf:25:89:31:9f:88:6f:65:16:5e:92: 69:64:a5:f1:8b:3d:4d:cd:9b:21:d8:15:eb:f6:ee: 89:35:cb:c5:b5:63:06:cb:f9:d6:c7:3c:5f:10:b1: 22:27:fd:bd:e7:4c:c3:dd:19:64:65:7e:9e:98:cd: 5e:b5:ec:8d:fe:96:b1:89:db:3b:86:e7:4e:c1:bf: 28:11:ae:90:66:0f:77:49:da:22:62:1c:8b:8f:bc: ae:76:5f:60:17:d4:7a:75:09:b1:27:9f:17:c2:6b: e1:2e:d3:38:0b:21:c2:09:3a:f2:24:05:20:45:9f: 89:59:c2:73:2b:de:7f:6c:65:45:af:48:21:1b:6a: 3e:4d:55:b3:70:97:ba:d2:5e:6f:66:7a:d1:ef:1a: 89:a5:0d:79:39:39:22:f0:14:e9:7a:b1:a4:09:5b: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BB:03:67:55:B6:D1:BA:82:14:81:35:2D:74:0B:F1:4C:B3:B3:2C X509v3 Authority Key Identifier: keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d7:55:f6:16:d1:ca:eb:f8:b9:c1:e8:eb:bc:2e:7a:66:9e: fa:4f:2e:ff:43:46:99:be:58:5c:7b:2b:a8:b0:b8:43:91:c1: 8f:8d:2b:fb:be:27:a7:fe:86:b4:14:79:75:9a:3d:d9:6b:32: e3:b8:6f:4d:c3:42:78:5d:a0:ca:49:6a:4c:ad:5f:0b:2b:41: 5c:1b:86:82:d2:ed:67:bb:53:11:4f:e0:b2:47:5c:34:fa:b8: d8:f2:cd:ab:99:48:5c:d2:ab:1c:c8:bc:99:be:98:36:e8:51: 89:9c:3b:b3:15:c3:11:90:4c:a3:f6:ac:a8:8a:cd:b1:80:bc: e3:fe:a4:24:e4:25:c9:7b:b0:81:37:a8:0d:58:27:eb:3e:4b: 37:6d:c7:0f:4c:db:73:b8:e4:30:f4:7a:e5:dc:86:2d:db:0d: c2:31:05:92:9c:78:29:a5:b2:42:d2:6d:e2:7b:8f:9c:ee:78: f1:d3:96:43:21:b0:c9:42:4b:b1:42:fa:28:39:94:91:93:e2: c7:4e:16:07:85:20:bd:48:ac:df:a4:65:45:14:83:27:c8:6c: 5f:97:8d:8a:8f:fb:1f:76:fe:cb:61:d3:b8:4f:4f:b1:bb:81: 81:47:27:38:af:9c:91:db:18:c4:88:64:f1:d0:1c:df:ce:6d: 2c:c6:f3:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkwa8cTzfDostnhJbiWRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2 ZjExZmIwHhcNMjUxMjExMTgwMTE1WhcNMjUxMjEyMTgwMTE1WjAzMTEwLwYDVQQD Eyg3ZmJiMDM2NzU1YjZkMWJhODIxNDgxMzUyZDc0MGJmMTRjYjNiMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc4PROG96oIySqXgGqIRTf9kSpVq PCp7YfX+K9EQIRGtHWcBhlCEnTXr/C5jwWMgQY64J0/k8TYny6sVwsJpHq/PjTsu akdyy5cXG/ugDwQb7yuUdzWufaPyrj97zyWJMZ+Ib2UWXpJpZKXxiz1NzZsh2BXr 9u6JNcvFtWMGy/nWxzxfELEiJ/2950zD3RlkZX6emM1eteyN/paxids7hudOwb8o Ea6QZg93SdoiYhyLj7yudl9gF9R6dQmxJ58XwmvhLtM4CyHCCTryJAUgRZ+JWcJz K95/bGVFr0ghG2o+TVWzcJe60l5vZnrR7xqJpQ15OTki8BTperGkCVudqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+7A2dVttG6ghSBNS10C/FMs7MsMB8GA1UdIwQY MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt NDNjYzViNDZkNWIyLzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtdV9hbR yuv4ucHo67wuemae+k8u/0NGmb5YXHsrqLC4Q5HBj40r+74np/6GtBR5dZo92Wsy 47hvTcNCeF2gyklqTK1fCytBXBuGgtLtZ7tTEU/gskdcNPq42PLNq5lIXNKrHMi8 mb6YNuhRiZw7sxXDEZBMo/asqIrNsYC84/6kJOQlyXuwgTeoDVgn6z5LN23HD0zb c7jkMPR65dyGLdsNwjEFkpx4KaWyQtJt4nuPnO548dOWQyGwyUJLsUL6KDmUkZPi x04WB4UgvUis36RlRRSDJ8hsX5eNio/7H3b+y2HTuE9PsbuBgUcnOK+ckdsYxIhk 8dAc385tLMbzAQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:33:04 2025 by rpki-client