This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json) Hash identifier: pgO4zbSrALHawmqv9lISxVy0F4ljVHHjcBz7FDse/ow= Subject key identifier: 86:16:39:3F:D7:3C:8C:63:33:42:CD:92:CF:6A:B1:0A:5A:A4:B9:15 Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019B06A25FBE4D52867293CDF3F3F9034219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft Manifest number: 3C Signing time: Wed 10 Dec 2025 05:01:03 +0000 Manifest this update: Wed 10 Dec 2025 05:01:03 +0000 Manifest next update: Thu 11 Dec 2025 05:01:03 +0000 Files and hashes: 1: 8jbviDQFoKAhlEjW0jC3b3qtGcI.roa (hash: Gqk9VF0dkefof36zEJuvdRT5XkqcUqe0DMO1kA7Q6OU=) 2: H_hOQkSql0xe8SzvI1lQZgozg84.roa (hash: BYpmoiDjHBHncY51m+5UvYoUmAnZrIME8Cmlf9qM/N4=) 3: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: DUTA5gP1tKqS4+nyk3KrKMF3v2tDN5htWMNAahCp7C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a2:5f:be:4d:52:86:72:93:cd:f3:f3:f9:03:42:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Dec 10 05:01:03 2025 GMT Not After : Dec 11 05:01:03 2025 GMT Subject: CN=8616393fd73c8c633342cd92cf6ab10a5aa4b915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:53:14:62:5c:1d:64:8c:73:f7:b5:14:23: 0f:0c:8b:a4:04:11:44:6d:3f:f8:14:8f:cf:20:13: f3:92:44:99:42:f3:37:7c:f8:38:d8:32:27:cd:66: 6e:05:2b:17:e5:f3:5d:fc:76:8b:45:29:9d:b8:f9: ac:0a:6f:c6:18:b4:9c:8a:48:b0:54:00:29:1b:ae: 12:29:91:88:b9:7c:c0:05:8d:a8:c0:30:b6:ff:a0: a4:8e:39:ef:1a:c3:21:75:ee:37:61:4e:b4:a1:34: 47:6e:20:eb:c5:c5:5c:e5:13:f6:e1:3e:7d:05:ef: 60:dd:bf:bc:62:f6:af:ac:1c:ac:c5:4f:ea:70:02: 78:0f:96:61:14:de:03:65:8e:b6:a4:ad:b2:4a:d4: 62:03:e0:95:30:49:36:72:34:fb:ee:33:b3:93:4d: 01:57:81:35:69:04:a6:07:3a:b2:1e:e0:69:80:53: 4a:db:26:af:fa:a6:82:e0:00:4f:a9:3c:8d:03:41: 70:92:14:e0:c9:fd:d6:c4:0c:e2:f7:69:34:e3:40: 1a:07:9c:5b:2b:5d:40:7a:98:cb:68:11:e8:54:d7: b4:4e:18:f2:56:0a:ec:0f:bc:06:c4:65:58:87:fc: 49:3b:e3:b8:45:a1:fa:1b:94:e9:eb:36:5b:39:cb: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:16:39:3F:D7:3C:8C:63:33:42:CD:92:CF:6A:B1:0A:5A:A4:B9:15 X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3d:14:67:84:47:46:b3:db:b3:45:cf:62:14:1f:94:d2:53: 8d:d1:93:66:f5:ea:9b:66:f4:9f:70:05:5d:3b:74:a0:9a:d1: a7:5b:ab:9d:7f:27:52:ee:49:e8:03:01:81:89:af:ab:b4:7a: 78:e1:d3:f0:2f:67:cf:7d:32:b8:72:66:33:10:6d:ae:cb:51: 4d:45:23:b5:1b:f4:a9:cb:05:60:47:87:3b:26:a9:47:43:2a: 2f:b8:03:0f:da:b9:4b:d3:c5:ed:24:45:f6:73:52:5c:e4:68: 48:fb:6f:6f:1e:fd:e7:fc:69:3c:ed:13:40:56:16:96:96:10: 4d:12:3f:22:86:d6:7d:79:90:d8:12:ae:7b:17:a5:85:b2:3c: 01:1a:a5:ec:59:f7:c0:46:f8:fc:3e:f2:e4:59:c6:30:27:14: 04:9a:85:2f:82:08:71:ab:a9:a2:b2:09:32:8e:76:46:22:2b: 67:91:e4:f7:54:43:10:99:db:d6:c1:f0:4d:73:b7:a3:a7:53: b3:32:1c:d0:81:c0:d3:52:c4:bc:a9:ff:41:c3:c0:10:8a:64: 35:c4:19:bd:71:02:ef:7e:1a:64:35:37:16:b9:64:f6:92:09: 07:1a:cd:b5:f8:53:0b:bf:5e:08:c8:76:25:cd:9b:9b:06:8e: 56:26:7c:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGol++TVKGcpPN8/P5A0IZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjUxMjEwMDUwMTAzWhcNMjUxMjExMDUwMTAzWjAzMTEwLwYDVQQD Eyg4NjE2MzkzZmQ3M2M4YzYzMzM0MmNkOTJjZjZhYjEwYTVhYTRiOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki9TFGJcHWSMc/e1FCMPDIukBBFE bT/4FI/PIBPzkkSZQvM3fPg42DInzWZuBSsX5fNd/HaLRSmduPmsCm/GGLScikiw VAApG64SKZGIuXzABY2owDC2/6CkjjnvGsMhde43YU60oTRHbiDrxcVc5RP24T59 Be9g3b+8YvavrBysxU/qcAJ4D5ZhFN4DZY62pK2yStRiA+CVMEk2cjT77jOzk00B V4E1aQSmBzqyHuBpgFNK2yav+qaC4ABPqTyNA0FwkhTgyf3WxAzi92k040AaB5xb K11AepjLaBHoVNe0ThjyVgrsD7wGxGVYh/xJO+O4RaH6G5Tp6zZbOcv/AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYWOT/XPIxjM0LNks9qsQpapLkVMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVT0UZ4RH RrPbs0XPYhQflNJTjdGTZvXqm2b0n3AFXTt0oJrRp1urnX8nUu5J6AMBgYmvq7R6 eOHT8C9nz30yuHJmMxBtrstRTUUjtRv0qcsFYEeHOyapR0MqL7gDD9q5S9PF7SRF 9nNSXORoSPtvbx795/xpPO0TQFYWlpYQTRI/IobWfXmQ2BKuexelhbI8ARql7Fn3 wEb4/D7y5FnGMCcUBJqFL4IIcauporIJMo52RiIrZ5Hk91RDEJnb1sHwTXO3o6dT szIc0IHA01LEvKn/QcPAEIpkNcQZvXEC734aZDU3Frlk9pIJBxrNtfhTC79eCMh2 Jc2bmwaOViZ8Wg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:42:56 2025 by rpki-client