This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json) Hash identifier: P+IlP9YrzjP3lJsnt0dh/i5sXmaXLJvCIiHYdwr2EeA= Subject key identifier: CE:9B:F5:CD:63:1A:8C:60:AF:98:66:6D:D7:86:05:E4:33:DA:9A:18 Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Certificate serial: 019C427DCB84D6A2A713BC2A29EA8E9521DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft Manifest number: 0AB3 Signing time: Mon 09 Feb 2026 13:01:06 +0000 Manifest this update: Mon 09 Feb 2026 13:01:06 +0000 Manifest next update: Tue 10 Feb 2026 13:01:06 +0000 Files and hashes: 1: D58-o0mTsNy267l9yWClEeen-9U.roa (hash: zL9nvY9m4yNsvHsIg/CV6pNzOVRrn6CNj0HvmE2CaMk=) 2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: EDH+rbqvl1ub9uovWAvrLFXd/pO6uk1+JMyNXLOTh7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cb:84:d6:a2:a7:13:bc:2a:29:ea:8e:95:21:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Validity Not Before: Feb 9 13:01:06 2026 GMT Not After : Feb 10 13:01:06 2026 GMT Subject: CN=ce9bf5cd631a8c60af98666dd78605e433da9a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:d7:76:45:8b:4f:e3:fe:90:b7:26:2b:f2: ad:8a:85:2c:e7:81:72:72:9b:0c:68:f2:ad:34:59: d1:25:2e:bb:06:3c:c0:b0:c3:74:b4:62:62:fc:b3: 70:40:00:f2:e0:ab:4b:26:39:13:04:9b:64:4d:db: c5:15:c1:a9:04:e7:1e:4f:03:16:ca:ef:79:72:52: 49:f3:43:59:8b:ea:58:3f:52:f9:0f:38:b2:91:b1: d8:51:67:0f:0d:b2:9a:1d:72:04:b4:07:37:89:b2: dd:5a:fc:31:69:38:22:fa:9a:a5:36:32:c6:9e:29: 6a:ee:1c:5c:34:5b:7d:09:46:da:22:b3:22:b2:72: 6a:cd:52:ea:70:2c:01:25:20:a8:52:06:4a:23:d5: e7:3b:3c:ed:19:2a:44:78:6b:00:df:56:86:75:fe: 6d:71:fe:28:62:13:f2:dd:1d:bb:b7:c7:24:71:29: dd:5c:7d:83:e6:7b:68:2f:0c:16:1c:73:df:c0:4c: b9:e8:b6:f4:3b:67:3f:8c:c2:09:1b:57:d6:93:aa: 74:39:78:35:8f:b8:ca:10:fe:19:8c:00:b2:69:43: a5:2e:b0:c9:7b:8c:c2:80:4d:42:57:3d:c3:00:f7: f3:f4:f8:a4:f9:7b:73:c8:87:28:5b:6e:ea:b1:5d: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9B:F5:CD:63:1A:8C:60:AF:98:66:6D:D7:86:05:E4:33:DA:9A:18 X509v3 Authority Key Identifier: keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cf:b4:01:99:b7:e1:a6:a1:7b:45:f9:de:e6:1a:a0:10:3a: 59:48:85:d9:76:15:76:20:96:76:42:f0:0a:0c:ad:15:b2:55: 62:f7:f2:13:09:d4:16:64:10:48:48:74:31:bd:7f:0d:e3:29: 7e:ad:2b:f9:02:b9:42:c9:6c:df:b4:3f:4d:28:cd:3e:b6:29: 69:ae:f0:87:b7:00:09:61:e7:8b:90:bb:a0:7a:46:1c:62:e2: 6c:d0:8f:ff:11:44:2e:cc:77:4d:92:38:c9:7c:eb:af:88:a1: 57:4f:11:da:9c:a7:7c:3b:4a:77:58:e8:6b:da:c5:d1:7a:18: 4a:8a:ff:2b:89:36:19:e0:c8:9b:de:be:79:09:0f:b4:75:7c: 04:35:eb:ec:a4:36:6b:d2:dd:d2:a4:61:8d:12:4f:e0:e3:91: c2:38:95:ae:e3:15:6d:02:e3:02:4c:e7:f7:65:27:98:e3:2a: f2:40:39:6e:7a:fd:b8:e8:24:c0:eb:27:d7:d7:c5:7b:b0:82: 33:8e:a9:00:4c:51:f8:1b:aa:aa:2d:52:df:b4:79:72:4c:30: ea:f4:b8:9a:a6:0d:41:73:d4:fe:9b:a4:af:a2:35:a5:cf:81: 79:7f:52:3a:42:8a:9b:25:3e:53:21:3e:2b:4d:9e:3f:fa:20: 64:ba:ad:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcuE1qKnE7wqKeqOlSHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj Zjk2Y2EwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD EyhjZTliZjVjZDYzMWE4YzYwYWY5ODY2NmRkNzg2MDVlNDMzZGE5YTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFPXdkWLT+P+kLcmK/KtioUs54Fy cpsMaPKtNFnRJS67BjzAsMN0tGJi/LNwQADy4KtLJjkTBJtkTdvFFcGpBOceTwMW yu95clJJ80NZi+pYP1L5DziykbHYUWcPDbKaHXIEtAc3ibLdWvwxaTgi+pqlNjLG nilq7hxcNFt9CUbaIrMisnJqzVLqcCwBJSCoUgZKI9XnOzztGSpEeGsA31aGdf5t cf4oYhPy3R27t8ckcSndXH2D5ntoLwwWHHPfwEy56Lb0O2c/jMIJG1fWk6p0OXg1 j7jKEP4ZjACyaUOlLrDJe4zCgE1CVz3DAPfz9Pik+XtzyIcoW27qsV34bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6b9c1jGoxgr5hmbdeGBeQz2poYMB8GA1UdIwQY MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt MzlmNGFiNmVjN2U2LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2 LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc+0AZm3 4aahe0X53uYaoBA6WUiF2XYVdiCWdkLwCgytFbJVYvfyEwnUFmQQSEh0Mb1/DeMp fq0r+QK5Qsls37Q/TSjNPrYpaa7wh7cACWHni5C7oHpGHGLibNCP/xFELsx3TZI4 yXzrr4ihV08R2pynfDtKd1joa9rF0XoYSor/K4k2GeDIm96+eQkPtHV8BDXr7KQ2 a9Ld0qRhjRJP4OORwjiVruMVbQLjAkzn92UnmOMq8kA5bnr9uOgkwOsn19fFe7CC M46pAExR+Buqqi1S37R5ckww6vS4mqYNQXPU/pukr6I1pc+BeX9SOkKKmyU+UyE+ K02eP/ogZLqtLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:39 2026 by rpki-client