This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json) Hash identifier: KOg51HljJ1472wTC/lNlGF1MalZBnSh2mQenH8CO6pA= Subject key identifier: F3:21:67:1B:B7:C3:B5:10:99:71:E3:49:0C:AB:F2:94:E9:E6:F1:BC Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Certificate serial: 019B59767CDB824E58F3977B422A85A39555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft Manifest number: 0A3A Signing time: Fri 26 Dec 2025 07:01:35 +0000 Manifest this update: Fri 26 Dec 2025 07:01:35 +0000 Manifest next update: Sat 27 Dec 2025 07:01:35 +0000 Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=) 2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: 0CLoORUMsKXCVUA3zcON8m22GUUx+dTngHfpX0nJ75A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:7c:db:82:4e:58:f3:97:7b:42:2a:85:a3:95:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Validity Not Before: Dec 26 07:01:35 2025 GMT Not After : Dec 27 07:01:35 2025 GMT Subject: CN=f321671bb7c3b5109971e3490cabf294e9e6f1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:4f:d8:ad:79:24:01:db:24:18:83:fa:d9: bc:ae:95:1a:9d:69:9e:a5:17:3f:89:bc:78:1e:8e: c3:ba:bd:0c:5e:a7:ae:d4:7c:38:5c:20:4a:f3:37: 47:dc:04:17:df:51:40:05:88:fc:28:c1:55:43:75: e7:5a:3d:5f:91:6c:f6:76:77:e8:61:ce:14:19:3b: d4:db:cb:f8:ae:7a:b5:0f:ef:3b:b5:db:b9:42:f5: eb:0b:72:2b:28:12:0b:9a:0b:2c:c9:e8:0b:aa:6e: 48:b4:50:d4:7d:44:68:8c:74:5f:75:05:89:d0:8c: 21:f3:7f:8a:29:8d:9f:17:5b:f6:a9:0f:4a:a0:1d: 20:ce:09:5b:fb:f9:d2:8a:a0:12:28:76:06:00:9c: aa:70:2d:51:ed:7f:6c:72:ef:a5:93:df:ca:91:d3: 8b:4b:84:fa:cb:cf:94:97:31:4d:f8:6d:5c:1a:85: 9a:5b:7f:06:e6:e3:2b:8a:32:df:d5:e9:e0:b7:80: 16:df:9b:36:51:ab:68:42:08:84:59:f3:3d:33:44: 30:6b:a3:55:6a:cc:df:66:a1:a6:75:27:fd:a6:c2: f7:e8:41:12:19:41:33:e3:40:71:cc:b4:af:45:21: 47:56:ae:d9:9a:aa:84:25:cc:97:f6:06:f8:bb:de: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:67:1B:B7:C3:B5:10:99:71:E3:49:0C:AB:F2:94:E9:E6:F1:BC X509v3 Authority Key Identifier: keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f8:c6:39:d0:40:5d:bd:a3:03:1c:23:09:bf:fc:cb:11:e6: 23:43:a1:c6:27:8c:23:cd:e9:16:a0:aa:9c:db:7b:b4:d0:9e: ac:9a:e8:e8:a1:75:a2:a1:f0:87:12:3c:b5:72:59:ca:8e:13: ef:0b:f9:6d:4b:aa:9f:4b:66:42:0e:62:64:c5:e6:3b:25:53: 04:30:c2:8f:60:ec:1e:11:60:1c:e8:37:e8:0f:a6:fc:bf:04: 07:d5:40:c1:27:ae:84:e6:4c:4e:0e:3f:4e:76:71:7e:89:87: de:79:17:0f:a0:2f:df:90:bf:23:58:ff:b6:9c:7a:3a:33:b9: ff:26:7c:39:bc:09:3c:ac:45:7d:aa:a6:0a:87:15:79:cc:c3: bb:ec:1e:21:a0:f4:b0:2e:9d:30:2a:fd:48:30:8b:3a:3f:18: af:bd:af:01:11:cd:41:77:9b:e3:69:84:28:18:e7:a9:fe:4b: ab:9c:ff:b2:5d:78:05:78:6f:a7:05:37:4a:7e:61:89:7c:e9: 3e:82:ee:4a:f1:49:3f:59:b4:6c:a2:96:1e:0e:ea:13:f2:d1: 4f:b4:d4:77:c8:bb:b4:e5:26:f6:61:de:ca:63:5d:e9:fb:97: 12:5d:e8:db:ae:b2:8e:3d:07:62:99:5b:d0:a2:f2:f8:36:2b: 0f:5d:77:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnzbgk5Y85d7QiqFo5VVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj Zjk2Y2EwHhcNMjUxMjI2MDcwMTM1WhcNMjUxMjI3MDcwMTM1WjAzMTEwLwYDVQQD EyhmMzIxNjcxYmI3YzNiNTEwOTk3MWUzNDkwY2FiZjI5NGU5ZTZmMWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnORP2K15JAHbJBiD+tm8rpUanWme pRc/ibx4Ho7Dur0MXqeu1Hw4XCBK8zdH3AQX31FABYj8KMFVQ3XnWj1fkWz2dnfo Yc4UGTvU28v4rnq1D+87tdu5QvXrC3IrKBILmgssyegLqm5ItFDUfURojHRfdQWJ 0Iwh83+KKY2fF1v2qQ9KoB0gzglb+/nSiqASKHYGAJyqcC1R7X9scu+lk9/KkdOL S4T6y8+UlzFN+G1cGoWaW38G5uMrijLf1engt4AW35s2UatoQgiEWfM9M0Qwa6NV aszfZqGmdSf9psL36EESGUEz40BxzLSvRSFHVq7ZmqqEJcyX9gb4u96ASwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMhZxu3w7UQmXHjSQyr8pTp5vG8MB8GA1UdIwQY MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt MzlmNGFiNmVjN2U2LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2 LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPjGOdBA Xb2jAxwjCb/8yxHmI0OhxieMI83pFqCqnNt7tNCerJro6KF1oqHwhxI8tXJZyo4T 7wv5bUuqn0tmQg5iZMXmOyVTBDDCj2DsHhFgHOg36A+m/L8EB9VAwSeuhOZMTg4/ TnZxfomH3nkXD6Av35C/I1j/tpx6OjO5/yZ8ObwJPKxFfaqmCocVeczDu+weIaD0 sC6dMCr9SDCLOj8Yr72vARHNQXeb42mEKBjnqf5Lq5z/sl14BXhvpwU3Sn5hiXzp PoLuSvFJP1m0bKKWHg7qE/LRT7TUd8i7tOUm9mHeymNd6fuXEl3o266yjj0HYplb 0KLy+DYrD113WA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:53 2025 by rpki-client