This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft File: pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft (raw, json) Hash identifier: wR2fi7nfs9e4feziD1TaSwuEPCqOUBoseHdMhzKlRHI= Subject key identifier: 14:5C:10:2A:F8:78:0C:FC:CF:B6:F5:87:7B:31:64:D4:01:4D:73:F7 Authority key identifier: A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 Certificate issuer: /CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Certificate serial: 019BF5AC9678589003045DF2F7476954AE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft Manifest number: 6D Signing time: Sun 25 Jan 2026 15:01:27 +0000 Manifest this update: Sun 25 Jan 2026 15:01:27 +0000 Manifest next update: Mon 26 Jan 2026 15:01:27 +0000 Files and hashes: 1: K8n7I1H2oE7tKlPP1k9nvB8DG5k.roa (hash: UjX/ryztZkJjpS5Xe9sfL6gBMh8TzzZ+CIXQZJZ92YQ=) 2: pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl (hash: bvmy++DPRep7LBfLMuZY47ZTAg0H5a9QfZEpDl4r5R8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:96:78:58:90:03:04:5d:f2:f7:47:69:54:ae:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d94c40470c6db98801f7bd060dac941e9dd316 Validity Not Before: Jan 25 15:01:27 2026 GMT Not After : Jan 26 15:01:27 2026 GMT Subject: CN=145c102af8780cfccfb6f5877b3164d4014d73f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:25:a6:f5:bb:53:bc:aa:3c:88:f4:5d:87: b6:42:55:27:06:cb:e9:c0:d5:1c:6b:f5:96:dc:8b: 81:91:dc:af:1d:9e:a2:9f:de:ad:98:55:99:e1:d9: 10:95:d4:5f:fc:0b:4a:fc:e1:29:88:56:5b:c2:2e: 50:34:e6:44:cc:9d:49:72:d6:c4:5d:91:f2:dc:d9: d1:6a:28:da:4c:d7:70:64:22:d2:f7:03:ef:8e:e9: a4:49:c5:99:ec:fb:06:54:08:37:81:fd:39:ec:bb: 94:ae:57:49:7a:8f:cf:3f:c3:8e:7f:ba:d0:f9:a3: c9:4e:15:2b:2f:2c:d3:38:eb:37:94:2a:14:22:87: f8:11:3f:d8:b1:9c:c5:11:d5:c7:89:27:27:ab:ea: b2:64:f1:16:f4:73:88:31:1e:e7:96:2f:c0:6c:f4: 44:0c:c0:91:5b:2c:c6:0b:22:72:6f:5f:59:ba:32: 37:1c:ab:69:7d:0a:a1:ac:62:cc:e9:a7:ea:b3:14: 5e:20:eb:3f:8d:14:fa:af:3d:ad:42:9d:6c:8e:d1: 82:e2:d1:a8:98:a9:36:93:ad:f5:77:f5:01:76:3e: 49:3c:7f:fd:50:0c:80:4b:c3:28:88:42:ef:3b:2d: 4b:68:93:61:a4:56:0c:63:fd:cb:b6:10:5d:4e:8e: fd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5C:10:2A:F8:78:0C:FC:CF:B6:F5:87:7B:31:64:D4:01:4D:73:F7 X509v3 Authority Key Identifier: keyid:A5:D9:4C:40:47:0C:6D:B9:88:01:F7:BD:06:0D:AC:94:1E:9D:D3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlMQEcMbbmIAfe9Bg2slB6d0xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6e592f-8bcc-40c3-b258-56631ff672d1/1/pdlMQEcMbbmIAfe9Bg2slB6d0xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:dc:60:44:88:b1:f4:ce:f7:85:b2:9b:81:4d:8e:a1:de:75: 88:05:fa:b2:85:02:18:14:1a:5e:35:c3:0e:52:fb:53:e7:67: aa:31:c9:46:f1:52:9f:29:b4:93:35:4f:7f:4a:26:90:8f:e8: 80:cb:6f:61:8c:04:9d:03:6b:18:e5:f7:ae:5c:cd:f6:5a:87: 19:99:4a:79:7e:c7:9c:d0:57:7b:e2:b8:36:6d:f8:29:71:b9: 3f:81:6f:b5:2f:31:aa:92:e9:b7:2f:f2:be:b5:90:18:97:c3: 90:ec:ab:d5:77:d6:b1:10:d8:00:c2:a4:b9:61:18:07:f7:5c: ee:7d:f6:56:05:fd:a7:d6:56:c5:7b:20:3e:05:60:18:bb:68: 2c:11:ad:6c:f8:25:95:2d:04:cf:fe:c6:68:c0:73:bd:f5:f8: 30:fc:a9:fc:7d:a3:85:74:4c:d5:96:57:40:39:53:5f:1b:4b: c9:56:74:84:ff:9d:53:dd:03:ef:55:d9:00:21:f8:0f:50:0e: 03:33:01:bd:27:8e:1f:6f:45:2c:9e:f1:bd:12:bd:ae:16:20: 7a:b3:7c:eb:67:03:16:3f:15:0c:22:51:55:08:6b:2d:ef:98: 1f:80:2a:c1:93:f4:9b:39:77:95:4a:79:61:d7:30:f7:59:5b: 58:71:b1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rJZ4WJADBF3y90dpVK5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk0YzQwNDcwYzZkYjk4ODAxZjdiZDA2MGRhYzk0MWU5 ZGQzMTYwHhcNMjYwMTI1MTUwMTI3WhcNMjYwMTI2MTUwMTI3WjAzMTEwLwYDVQQD EygxNDVjMTAyYWY4NzgwY2ZjY2ZiNmY1ODc3YjMxNjRkNDAxNGQ3M2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt38lpvW7U7yqPIj0XYe2QlUnBsvp wNUca/WW3IuBkdyvHZ6in96tmFWZ4dkQldRf/AtK/OEpiFZbwi5QNOZEzJ1JctbE XZHy3NnRaijaTNdwZCLS9wPvjumkScWZ7PsGVAg3gf057LuUrldJeo/PP8OOf7rQ +aPJThUrLyzTOOs3lCoUIof4ET/YsZzFEdXHiScnq+qyZPEW9HOIMR7nli/AbPRE DMCRWyzGCyJyb19ZujI3HKtpfQqhrGLM6afqsxReIOs/jRT6rz2tQp1sjtGC4tGo mKk2k631d/UBdj5JPH/9UAyAS8MoiELvOy1LaJNhpFYMY/3LthBdTo79HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRcECr4eAz8z7b1h3sxZNQBTXP3MB8GA1UdIwQY MBaAFKXZTEBHDG25iAH3vQYNrJQendMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgt NTY2MzFmZjY3MmQxLzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82ZTU5MmYtOGJjYy00MGMzLWIyNTgtNTY2MzFmZjY3MmQx LzEvcGRsTVFFY01iYm1JQWZlOUJnMnNsQjZkMHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9xgRIix 9M73hbKbgU2Ood51iAX6soUCGBQaXjXDDlL7U+dnqjHJRvFSnym0kzVPf0omkI/o gMtvYYwEnQNrGOX3rlzN9lqHGZlKeX7HnNBXe+K4Nm34KXG5P4FvtS8xqpLpty/y vrWQGJfDkOyr1XfWsRDYAMKkuWEYB/dc7n32VgX9p9ZWxXsgPgVgGLtoLBGtbPgl lS0Ez/7GaMBzvfX4MPyp/H2jhXRM1ZZXQDlTXxtLyVZ0hP+dU90D71XZACH4D1AO AzMBvSeOH29FLJ7xvRK9rhYgerN862cDFj8VDCJRVQhrLe+YH4AqwZP0mzl3lUp5 Ydcw91lbWHGxuA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:25 2026 by rpki-client