This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json) Hash identifier: 6jPkXexqMColU8x90IKmtFfRSFdkstVYco4gLZ43Jio= Subject key identifier: 75:60:B6:AB:85:20:D0:70:F2:4E:66:06:34:08:04:3F:7C:80:6B:32 Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019BFA2D8C29D76E7A3C71246775A7975F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft Manifest number: BB Signing time: Mon 26 Jan 2026 12:00:47 +0000 Manifest this update: Mon 26 Jan 2026 12:00:47 +0000 Manifest next update: Tue 27 Jan 2026 12:00:47 +0000 Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=) 2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: zEGMuGqp0eqJEnsM5dg5iZyrl1pE3to6SnpWNXN/P4U=) 3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:8c:29:d7:6e:7a:3c:71:24:67:75:a7:97:5f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Jan 26 12:00:47 2026 GMT Not After : Jan 27 12:00:47 2026 GMT Subject: CN=7560b6ab8520d070f24e66063408043f7c806b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8b:e2:a2:39:ea:4f:f1:f2:d9:f8:48:54:e8: 7f:91:3d:2c:b4:cc:9a:5b:e3:61:70:c3:ae:bd:33: 35:64:e5:9d:0e:7d:cd:1a:4c:9a:c5:2e:86:b1:73: a5:5b:6e:02:9b:79:fa:fd:8d:09:ac:47:ae:69:2b: 00:a1:91:51:ff:e3:79:36:f8:65:cc:26:34:47:2d: 9d:a9:2e:4f:1d:de:92:a1:90:81:b1:90:5e:43:e1: ca:69:3f:83:4e:fd:85:a9:b2:d9:57:dc:38:5c:52: 78:3a:78:80:65:ae:7d:e9:a4:34:33:08:16:d2:07: 95:4d:2c:2d:6e:bf:ac:8c:18:39:0e:3e:2c:1e:60: b3:cc:85:ee:b6:0e:31:6d:a3:da:7a:3f:a7:41:f5: d2:95:d8:20:05:c8:c3:a1:88:26:94:65:15:9b:6c: 04:6c:d5:d0:b8:e5:fd:b7:b3:ff:38:96:25:6c:f6: f5:6d:fe:75:68:e7:80:6f:7e:9f:2a:ab:90:31:94: c9:4a:f5:04:ee:4a:42:f3:02:fc:ec:af:36:88:a0: 4b:bb:7d:ff:4d:35:b1:5f:93:7e:e6:a8:bf:51:bf: b5:83:04:6f:03:46:67:b0:98:dd:47:86:cc:0b:a1: 13:0a:0d:aa:b9:eb:36:4b:4c:f8:64:44:e1:2d:0c: da:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:60:B6:AB:85:20:D0:70:F2:4E:66:06:34:08:04:3F:7C:80:6B:32 X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:03:dd:f2:b9:5e:74:b8:52:57:23:6d:aa:30:3a:85:36:c1: 98:d7:9b:23:3f:3c:8f:bc:0c:50:3c:46:00:fb:09:77:52:d3: f3:89:14:69:e2:1a:46:e0:b1:54:56:25:2b:73:ff:13:20:72: 33:1e:ec:f6:44:97:cc:e6:aa:b6:3a:a6:f9:69:35:87:c7:d5: 40:67:ea:79:b9:51:d4:d8:8b:b2:c2:70:ae:d3:90:1d:ed:5c: dd:11:93:50:55:27:b8:c6:06:4d:ff:6d:bd:c5:e0:20:aa:d4: 28:c5:21:55:9c:68:2f:3a:df:33:81:1b:b9:29:8b:bf:2d:d0: 66:24:c9:a4:a6:92:78:f7:92:24:99:01:0a:46:be:6c:f8:6a: e1:8c:a0:6c:86:38:81:ed:46:ea:c3:e8:00:b1:3b:fd:44:f3: f2:85:2c:3f:74:c3:93:fa:92:de:e7:de:21:be:0f:0e:ad:34: 60:ad:06:54:33:e8:6a:3c:70:16:63:f2:25:4c:1f:56:b8:21: 4b:6d:ea:61:3f:eb:07:e6:2e:b9:98:95:08:f0:ff:6d:70:19: 36:94:e0:b4:67:fc:98:77:e3:fe:80:af:a9:a1:71:ce:5b:99: 9c:d6:a1:cd:55:58:23:c3:14:84:db:28:1e:c1:a7:f2:c7:a3: c4:01:16:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LYwp1256PHEkZ3Wnl19VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjYwMTI2MTIwMDQ3WhcNMjYwMTI3MTIwMDQ3WjAzMTEwLwYDVQQD Eyg3NTYwYjZhYjg1MjBkMDcwZjI0ZTY2MDYzNDA4MDQzZjdjODA2YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54viojnqT/Hy2fhIVOh/kT0stMya W+NhcMOuvTM1ZOWdDn3NGkyaxS6GsXOlW24Cm3n6/Y0JrEeuaSsAoZFR/+N5Nvhl zCY0Ry2dqS5PHd6SoZCBsZBeQ+HKaT+DTv2FqbLZV9w4XFJ4OniAZa596aQ0MwgW 0geVTSwtbr+sjBg5Dj4sHmCzzIXutg4xbaPaej+nQfXSldggBcjDoYgmlGUVm2wE bNXQuOX9t7P/OJYlbPb1bf51aOeAb36fKquQMZTJSvUE7kpC8wL87K82iKBLu33/ TTWxX5N+5qi/Ub+1gwRvA0ZnsJjdR4bMC6ETCg2ques2S0z4ZEThLQza4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVgtquFINBw8k5mBjQIBD98gGsyMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQPd8rle dLhSVyNtqjA6hTbBmNebIz88j7wMUDxGAPsJd1LT84kUaeIaRuCxVFYlK3P/EyBy Mx7s9kSXzOaqtjqm+Wk1h8fVQGfqeblR1NiLssJwrtOQHe1c3RGTUFUnuMYGTf9t vcXgIKrUKMUhVZxoLzrfM4EbuSmLvy3QZiTJpKaSePeSJJkBCka+bPhq4YygbIY4 ge1G6sPoALE7/UTz8oUsP3TDk/qS3ufeIb4PDq00YK0GVDPoajxwFmPyJUwfVrgh S23qYT/rB+YuuZiVCPD/bXAZNpTgtGf8mHfj/oCvqaFxzluZnNahzVVYI8MUhNso HsGn8sejxAEWNg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:34 2026 by rpki-client