This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json) Hash identifier: 9fdtGbPRYKaIQphCvG/+Z/B9icd0EpAW6gOADoq6DMA= Subject key identifier: F6:25:13:60:6F:AC:AC:90:8C:39:1D:56:C0:23:96:F1:DA:56:0D:CB Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb Certificate serial: 019AF389E52A3B505491737624D9D63C13A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:31 +0000 Manifest this update: Sat 06 Dec 2025 12:01:31 +0000 Manifest next update: Sun 07 Dec 2025 12:01:31 +0000 Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=) 2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: kU43Iosa5wHWRGdpolO4IpVqvbu1voXh15i15WftgQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e5:2a:3b:50:54:91:73:76:24:d9:d6:3c:13:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb Validity Not Before: Dec 6 12:01:31 2025 GMT Not After : Dec 7 12:01:31 2025 GMT Subject: CN=f62513606facac908c391d56c02396f1da560dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:48:9b:42:ca:52:98:58:db:f6:9d:19:35: 40:29:7e:37:a3:eb:94:ef:8c:c1:7e:9d:ca:22:73: e3:99:9a:c7:fa:78:8e:79:c3:30:c3:bd:a9:2d:41: a5:9b:9e:ee:1f:c4:84:50:65:d0:41:7c:05:f3:1f: 81:ad:e9:af:f0:0e:94:a4:71:ad:fc:d7:e9:22:01: a7:35:3a:62:1e:e9:68:9a:ab:fd:42:8e:f2:65:3f: 99:28:65:9f:08:ca:12:d5:cd:f3:42:69:13:ae:bb: a6:3e:fe:af:b6:d6:f9:a7:78:8e:52:1a:20:7e:40: 82:cb:5a:5e:a7:c3:4b:27:99:d1:de:1f:5f:6d:c2: e1:db:21:0b:f4:cd:59:4d:ea:0a:b0:0c:2b:0f:d7: ab:a7:7f:a3:c0:d3:e0:fe:32:cc:9f:4f:8c:18:03: f3:df:bc:f6:03:63:bd:96:18:5f:b0:88:b6:03:75: 25:c1:ec:2b:44:18:38:47:2d:42:e8:8c:36:55:1a: b0:1d:b7:5d:d1:6c:95:57:2a:e4:cb:e3:cc:eb:08: c1:58:dd:a5:62:cf:19:08:97:c2:62:e7:fd:14:4a: 32:98:a5:2e:44:d9:5f:e9:7d:13:4e:f7:fd:c6:e1: b9:ec:94:9e:e4:37:ad:3a:74:44:50:b0:0c:e5:2e: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:25:13:60:6F:AC:AC:90:8C:39:1D:56:C0:23:96:F1:DA:56:0D:CB X509v3 Authority Key Identifier: keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:76:45:c8:47:16:9f:1c:92:44:2e:69:b6:1e:d3:9e:ba:de: 1c:2e:d3:29:05:14:96:c8:b2:a6:5b:94:49:3f:91:ff:d1:a0: 8b:9a:28:7d:3e:f8:5b:87:c5:1b:04:fb:8d:29:a0:d9:17:0b: 8d:bd:66:30:fb:af:44:da:51:47:86:75:6f:fd:ac:c1:50:1c: 20:af:6e:ad:c4:c6:08:ae:2d:5a:16:a0:7f:75:2e:1c:01:2c: 86:45:8e:b7:f5:be:55:bf:d2:5e:c2:9e:05:54:e3:48:2e:d0: fd:5e:4a:ee:5c:62:45:97:c8:f0:b8:16:0c:c0:88:fa:0f:ca: 42:8f:ab:96:8d:aa:4c:19:66:01:be:69:f2:75:76:e0:a9:3e: 1e:07:56:7c:0a:b4:89:12:b7:62:e6:8c:11:21:a6:13:98:7b: 0e:5b:77:77:b1:95:9f:57:de:21:04:a4:e6:7a:e6:e3:08:f7: ec:e4:99:a5:8c:34:5e:08:52:43:44:ec:c7:fc:3c:e4:bb:83: aa:56:41:6f:d9:b6:cb:50:64:6d:81:7d:a3:a3:33:ed:ba:00: b1:b3:d0:a1:67:60:b5:3e:f3:26:1d:f2:98:89:1d:97:4f:68: 86:f5:54:48:0d:29:f8:60:74:7d:50:ba:38:c0:49:af:c6:9b: ab:7b:da:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzieUqO1BUkXN2JNnWPBOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2 ZjExZmIwHhcNMjUxMjA2MTIwMTMxWhcNMjUxMjA3MTIwMTMxWjAzMTEwLwYDVQQD EyhmNjI1MTM2MDZmYWNhYzkwOGMzOTFkNTZjMDIzOTZmMWRhNTYwZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgBIm0LKUphY2/adGTVAKX43o+uU 74zBfp3KInPjmZrH+niOecMww72pLUGlm57uH8SEUGXQQXwF8x+Bremv8A6UpHGt /NfpIgGnNTpiHulomqv9Qo7yZT+ZKGWfCMoS1c3zQmkTrrumPv6vttb5p3iOUhog fkCCy1pep8NLJ5nR3h9fbcLh2yEL9M1ZTeoKsAwrD9erp3+jwNPg/jLMn0+MGAPz 37z2A2O9lhhfsIi2A3UlwewrRBg4Ry1C6Iw2VRqwHbdd0WyVVyrky+PM6wjBWN2l Ys8ZCJfCYuf9FEoymKUuRNlf6X0TTvf9xuG57JSe5DetOnREULAM5S6UpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYlE2BvrKyQjDkdVsAjlvHaVg3LMB8GA1UdIwQY MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt NDNjYzViNDZkNWIyLzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXZFyEcW nxySRC5pth7TnrreHC7TKQUUlsiypluUST+R/9Ggi5oofT74W4fFGwT7jSmg2RcL jb1mMPuvRNpRR4Z1b/2swVAcIK9urcTGCK4tWhagf3UuHAEshkWOt/W+Vb/SXsKe BVTjSC7Q/V5K7lxiRZfI8LgWDMCI+g/KQo+rlo2qTBlmAb5p8nV24Kk+HgdWfAq0 iRK3YuaMESGmE5h7Dlt3d7GVn1feIQSk5nrm4wj37OSZpYw0XghSQ0Tsx/w85LuD qlZBb9m2y1BkbYF9o6Mz7boAsbPQoWdgtT7zJh3ymIkdl09ohvVUSA0p+GB0fVC6 OMBJr8abq3vasA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:22 2025 by rpki-client