This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json) Hash identifier: EnWWasePZj0Ccu8SzCjYe6mOXn6Ts+jmJTP1WyrvNKc= Subject key identifier: 9B:4E:22:1A:44:19:53:3D:71:C4:1F:C7:D0:45:CE:1C:FA:CA:A8:0F Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb Certificate serial: 019BFA2E3544819BD215D1E4BD72F00431F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 12:01:30 +0000 Manifest this update: Mon 26 Jan 2026 12:01:30 +0000 Manifest next update: Tue 27 Jan 2026 12:01:30 +0000 Files and hashes: 1: 6v2it1qTQM_G9sWb1tDinWYpODY.roa (hash: kiBDfwv0URUTmxQqj/IJZu5OTfVLSt/qbBsgaeH3VdA=) 2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: rG5KIM1OFQ70B94UHDpBNUJZZIPzf6cJPIpTk+RxGSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:35:44:81:9b:d2:15:d1:e4:bd:72:f0:04:31:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb Validity Not Before: Jan 26 12:01:30 2026 GMT Not After : Jan 27 12:01:30 2026 GMT Subject: CN=9b4e221a4419533d71c41fc7d045ce1cfacaa80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:b5:2a:69:a4:e7:30:32:4e:d3:06:e8:83: 1d:af:d5:be:a5:c9:db:12:6a:22:e1:c8:cc:5b:18: 38:02:d0:e7:17:3b:cb:71:46:1b:ad:70:7f:28:d2: 71:06:30:41:da:76:49:43:9b:00:e3:3d:b2:bc:c8: 52:db:54:00:f1:5f:18:d5:a8:09:e7:fb:c6:66:46: f0:87:c0:b4:25:0a:3a:71:ce:a1:d9:36:9d:c8:cf: 3b:74:8b:5d:96:b7:22:8f:90:02:d6:b0:25:69:27: 8d:98:e8:12:c9:e1:dc:33:14:0f:cc:24:b2:b5:f6: 80:09:b4:60:77:2a:6d:52:8f:fc:d6:42:6d:32:df: f0:7e:30:55:f0:19:f9:4d:de:7e:5d:ee:2b:76:b8: 10:1a:17:c3:62:f8:e3:d4:c1:9a:0d:51:f4:53:2f: 91:94:a5:93:26:91:c0:41:5f:ca:a5:0b:2a:90:8a: f9:4c:c7:f2:da:39:75:d2:ed:63:0a:25:59:ca:7e: d7:8c:56:0a:f7:9f:37:c9:35:9f:a7:df:d5:f2:4d: 95:25:31:e5:b4:49:90:d8:21:4d:5c:21:1f:5c:8c: 48:0f:cd:17:fd:73:5f:3d:df:4e:c5:72:db:1d:41: cb:e1:4d:c9:15:e1:52:eb:b0:7b:e8:41:81:09:da: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:22:1A:44:19:53:3D:71:C4:1F:C7:D0:45:CE:1C:FA:CA:A8:0F X509v3 Authority Key Identifier: keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:39:0e:94:c6:05:b4:dc:2a:23:5a:44:61:99:32:76:fb:ae: de:d8:d4:77:d3:40:91:8c:c4:ad:39:e3:83:91:38:f1:ba:ae: c1:1c:91:3c:9c:15:9e:6c:ef:95:0b:11:f3:ca:03:c2:f2:af: b9:c3:3e:77:a8:d9:cd:4e:4d:22:20:79:ed:a1:4d:97:12:69: df:b2:38:03:a2:78:b6:e1:4c:3c:e2:a1:46:cd:34:bc:2d:d7: 2e:a0:25:e7:e9:d2:03:63:8f:15:29:d1:a0:26:4a:0b:38:f2: 4f:f4:7b:06:42:bf:09:5f:f3:5c:42:c1:da:b0:93:b8:70:55: 17:81:87:d9:ee:e3:36:bf:59:c6:20:95:92:96:02:33:31:dd: 42:f8:de:95:0b:52:7e:db:58:b8:56:19:5f:15:ad:6a:a6:bd: c4:a7:2f:7a:e1:3a:71:04:ca:67:9a:63:1f:ca:e8:e0:a2:f5: 93:9c:b9:23:b0:ed:61:1d:d7:87:0f:28:4a:75:3b:da:ff:03: fb:2f:9b:23:1a:f5:c9:cd:68:ff:4c:7f:dd:ba:92:c0:d6:ea: 65:27:6a:52:cb:aa:f6:53:69:bd:f2:04:b9:a1:44:08:66:07: 53:ee:04:6d:05:70:08:60:19:bc:2b:b4:0d:0f:e5:ce:25:ca: c5:ec:21:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LjVEgZvSFdHkvXLwBDHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2 ZjExZmIwHhcNMjYwMTI2MTIwMTMwWhcNMjYwMTI3MTIwMTMwWjAzMTEwLwYDVQQD Eyg5YjRlMjIxYTQ0MTk1MzNkNzFjNDFmYzdkMDQ1Y2UxY2ZhY2FhODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JG1Kmmk5zAyTtMG6IMdr9W+pcnb Emoi4cjMWxg4AtDnFzvLcUYbrXB/KNJxBjBB2nZJQ5sA4z2yvMhS21QA8V8Y1agJ 5/vGZkbwh8C0JQo6cc6h2TadyM87dItdlrcij5AC1rAlaSeNmOgSyeHcMxQPzCSy tfaACbRgdyptUo/81kJtMt/wfjBV8Bn5Td5+Xe4rdrgQGhfDYvjj1MGaDVH0Uy+R lKWTJpHAQV/KpQsqkIr5TMfy2jl10u1jCiVZyn7XjFYK9583yTWfp9/V8k2VJTHl tEmQ2CFNXCEfXIxID80X/XNfPd9OxXLbHUHL4U3JFeFS67B76EGBCdp38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtOIhpEGVM9ccQfx9BFzhz6yqgPMB8GA1UdIwQY MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt NDNjYzViNDZkNWIyLzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozkOlMYF tNwqI1pEYZkydvuu3tjUd9NAkYzErTnjg5E48bquwRyRPJwVnmzvlQsR88oDwvKv ucM+d6jZzU5NIiB57aFNlxJp37I4A6J4tuFMPOKhRs00vC3XLqAl5+nSA2OPFSnR oCZKCzjyT/R7BkK/CV/zXELB2rCTuHBVF4GH2e7jNr9ZxiCVkpYCMzHdQvjelQtS fttYuFYZXxWtaqa9xKcveuE6cQTKZ5pjH8ro4KL1k5y5I7DtYR3Xhw8oSnU72v8D +y+bIxr1yc1o/0x/3bqSwNbqZSdqUsuq9lNpvfIEuaFECGYHU+4EbQVwCGAZvCu0 DQ/lziXKxewhDA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:07 2026 by rpki-client