This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json) Hash identifier: 8NwET3qoMMU1OE8PsDUpT8FuoqFKstQGG7ESJ9Z6B2o= Subject key identifier: 9B:39:5D:2D:FE:A8:F8:2B:59:5D:9C:D4:F4:94:3C:47:62:DA:90:1D Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0 Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0 Certificate serial: 019AF2094F506E112BC9403758C6D9784C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=) 2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: Rd4WTk/E87d56Lz+PUqY9+4WwH07NLvXwRPuOUacuaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4f:50:6e:11:2b:c9:40:37:58:c6:d9:78:4c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=9b395d2dfea8f82b595d9cd4f4943c4762da901d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:ce:a2:c5:71:2f:73:08:dc:34:0b:fd:ea: 62:af:0d:6a:0d:c0:29:8f:f2:82:28:aa:42:25:17: c7:72:2f:13:75:8f:be:ba:78:71:0e:e3:ed:fd:29: 93:c6:ec:ae:3d:01:af:82:d1:37:5c:e9:c3:be:66: 7a:1a:f9:3b:89:58:48:4e:4a:b7:b4:2f:3e:df:6f: 09:ea:3e:e4:f4:f0:a3:50:5b:61:fb:8e:c0:bd:4b: df:15:ed:9c:58:13:c7:1b:86:28:6a:ee:6d:ce:6f: a3:17:65:7f:a9:47:c6:6f:0f:65:76:8f:b9:a6:5e: d1:1b:1f:ce:c0:66:51:49:2f:46:7c:76:a4:0c:81: e9:f3:c3:4a:99:29:47:81:6a:8f:5c:ae:ac:36:15: 99:63:eb:47:1b:f5:b5:5c:3b:06:93:ac:b7:1e:4b: 92:57:42:67:44:05:47:a0:16:84:7a:fd:35:c5:4d: 57:a9:d1:88:3d:3a:5b:fc:33:35:a7:dc:c5:84:30: 10:ad:05:09:86:5a:d2:46:b3:0c:31:88:c2:ec:8b: ab:d3:43:61:6e:a2:6f:fd:e0:ec:5a:4a:75:69:a6: 1b:1c:0b:20:97:a9:6e:92:07:b7:b2:0b:9a:93:09: 58:2d:0b:59:f8:7c:17:62:ae:87:46:13:f2:10:5f: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:5D:2D:FE:A8:F8:2B:59:5D:9C:D4:F4:94:3C:47:62:DA:90:1D X509v3 Authority Key Identifier: keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5e:c4:0f:62:fa:23:0b:6f:05:ab:6d:4e:15:9b:b5:5c:a6: 9d:0b:dd:4d:61:3c:a5:54:ea:42:a1:58:c3:08:c1:61:2a:8e: f0:3c:d7:64:9f:d9:66:69:87:bf:b7:4f:31:1f:dc:bb:de:48: b8:f8:b7:dc:5a:96:0e:99:c5:c4:a9:11:4f:c9:48:c1:ec:77: 0e:a5:ac:08:bb:6b:ee:da:96:56:e8:6b:ba:12:ea:16:d8:c0: d9:b6:01:d5:e6:8a:21:b7:56:e5:b1:26:06:b5:38:87:e3:f9: 4c:a0:23:ee:f9:c1:d0:e9:13:8e:1d:92:82:b6:47:8c:cd:5c: b8:b9:91:cb:80:df:0a:82:0e:d8:17:c9:76:7d:32:bf:ea:9b: cb:dc:73:b4:2f:88:16:b7:9c:e4:a9:ab:f3:3a:69:3b:c7:2f: 07:8a:b2:3c:27:4f:04:a7:d8:ad:56:ab:e5:80:d7:a8:03:fc: 26:3e:f0:75:c7:a9:bc:60:20:1a:9c:05:aa:62:84:4e:85:ab: 49:8c:11:8f:f8:ff:b6:1c:f0:01:e4:e4:2c:25:20:a3:fb:87: e5:a5:63:7a:c6:48:88:7b:71:71:93:62:c1:ea:ec:e8:6a:72: 03:7a:37:a7:d9:95:c3:db:13:e4:41:a1:76:93:fb:81:66:7d: cf:0a:76:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCU9QbhEryUA3WMbZeEwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj OTE0ZDAwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD Eyg5YjM5NWQyZGZlYThmODJiNTk1ZDljZDRmNDk0M2M0NzYyZGE5MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/LOosVxL3MI3DQL/epirw1qDcAp j/KCKKpCJRfHci8TdY++unhxDuPt/SmTxuyuPQGvgtE3XOnDvmZ6Gvk7iVhITkq3 tC8+328J6j7k9PCjUFth+47AvUvfFe2cWBPHG4Yoau5tzm+jF2V/qUfGbw9ldo+5 pl7RGx/OwGZRSS9GfHakDIHp88NKmSlHgWqPXK6sNhWZY+tHG/W1XDsGk6y3HkuS V0JnRAVHoBaEev01xU1XqdGIPTpb/DM1p9zFhDAQrQUJhlrSRrMMMYjC7Iur00Nh bqJv/eDsWkp1aaYbHAsgl6lukge3sguakwlYLQtZ+HwXYq6HRhPyEF+DbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs5XS3+qPgrWV2c1PSUPEdi2pAdMB8GA1UdIwQY MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl7ED2L6 IwtvBattThWbtVymnQvdTWE8pVTqQqFYwwjBYSqO8DzXZJ/ZZmmHv7dPMR/cu95I uPi33FqWDpnFxKkRT8lIwex3DqWsCLtr7tqWVuhruhLqFtjA2bYB1eaKIbdW5bEm BrU4h+P5TKAj7vnB0OkTjh2SgrZHjM1cuLmRy4DfCoIO2BfJdn0yv+qby9xztC+I Frec5Kmr8zppO8cvB4qyPCdPBKfYrVar5YDXqAP8Jj7wdcepvGAgGpwFqmKEToWr SYwRj/j/thzwAeTkLCUgo/uH5aVjesZIiHtxcZNiwers6GpyA3o3p9mVw9sT5EGh dpP7gWZ9zwp2AA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:09 2025 by rpki-client