This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json) Hash identifier: 02N1Y1905H1ryyPxUBYyVKBeJMIqN/hTzKxXdxnCur0= Subject key identifier: 90:34:81:9E:93:58:98:62:23:C2:3F:60:B0:43:E9:79:7C:57:CC:AB Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb Certificate serial: 019B2B8ACF409C66B3050024CBD149CBA6B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 09:01:15 +0000 Manifest this update: Wed 17 Dec 2025 09:01:15 +0000 Manifest next update: Thu 18 Dec 2025 09:01:15 +0000 Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=) 2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: qPFiRzZkY/2Kvy4GSKop2TbSm34xsJEMMX1NDNwK3Mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:cf:40:9c:66:b3:05:00:24:cb:d1:49:cb:a6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb Validity Not Before: Dec 17 09:01:15 2025 GMT Not After : Dec 18 09:01:15 2025 GMT Subject: CN=9034819e9358986223c23f60b043e9797c57ccab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:55:8d:80:39:05:12:a6:ba:ac:3c:ce:3c:07: 7b:51:f3:1a:f1:2f:2d:62:72:5b:a8:79:b1:95:91: f2:d6:dd:88:18:3a:63:75:49:1a:ac:ee:0e:2e:a3: a0:8e:e0:fe:6a:9a:4b:ff:3c:b3:95:7b:69:3b:1e: 55:03:fb:33:8f:b6:1d:58:67:97:bc:8f:d2:1c:a7: 4f:ad:3c:71:12:ea:41:eb:1c:a7:21:c5:7b:a0:7e: 83:95:77:4c:13:89:9a:c2:40:bf:ca:62:45:0e:9e: f8:dc:e3:ba:88:99:cf:64:0f:9b:a9:0e:c8:6e:fe: 24:ef:86:20:f2:25:88:62:b6:97:88:ae:0f:28:de: 3e:0d:30:ea:18:ff:51:b3:66:81:da:fd:4d:55:d4: 13:f1:b9:d6:3d:73:38:2f:49:b9:6d:9b:f0:f5:1e: 56:e9:67:1c:07:d8:c1:a5:5f:4a:41:da:a8:eb:1a: cc:1b:28:62:7a:7f:0e:7c:65:cf:d2:9f:06:59:c2: 08:92:97:5d:02:bf:07:9f:39:53:5d:5c:6c:5f:78: c6:60:10:4d:a5:f6:f5:e4:39:97:01:b9:6d:34:33: 22:2a:e3:46:a2:fc:64:ff:1d:23:90:15:d5:02:fd: 92:18:d4:8c:34:ff:d5:e9:64:bf:06:4c:cc:8d:e5: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:34:81:9E:93:58:98:62:23:C2:3F:60:B0:43:E9:79:7C:57:CC:AB X509v3 Authority Key Identifier: keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:87:e9:eb:b2:04:07:45:ea:ad:81:e0:ec:8f:9d:04:ec:82: 58:a9:a3:8f:40:62:0b:24:90:49:2c:70:5d:fc:3d:29:02:5e: 83:95:76:f6:33:27:91:18:bb:2e:9b:ee:a6:29:84:8a:0b:49: 83:7a:70:31:33:b0:6a:11:eb:38:a2:57:b1:92:f8:91:bf:f6: 3c:f9:6e:93:0f:c4:f4:2c:7f:8e:f1:1d:2d:70:d2:35:71:3a: c4:c4:f2:ee:6b:18:33:4d:6d:92:ca:b9:60:b1:68:33:96:2b: 36:7a:d2:9e:31:8b:91:95:43:b1:dd:5f:5a:84:66:c4:7b:7f: f0:b5:a2:55:da:f3:1b:e1:c7:5a:d7:bb:8a:89:44:c4:0a:81: 87:14:74:ad:2d:c0:56:90:60:c0:d2:97:21:4b:31:72:80:9b: 42:cc:fc:29:c2:44:d5:26:35:64:af:d1:2d:34:dd:db:0b:3d: 58:f6:52:08:a9:4e:a6:fc:83:39:02:93:a5:94:8c:18:38:b3: 65:5e:e9:50:bd:1b:19:7f:ad:70:02:72:41:d9:30:2c:45:b5: f6:ff:f7:5e:61:ce:b0:4a:a3:7b:2e:d3:2b:a8:04:22:69:74: d2:b2:39:c9:58:27:a2:ae:2f:8e:73:2c:0f:db:18:e7:a7:63: 78:f1:64:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsris9AnGazBQAky9FJy6a4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDA4YjMxNTBhZDM0ZGUyYjg4NTkyMTc0MTkyNDA4Mzk2 ZjExZmIwHhcNMjUxMjE3MDkwMTE1WhcNMjUxMjE4MDkwMTE1WjAzMTEwLwYDVQQD Eyg5MDM0ODE5ZTkzNTg5ODYyMjNjMjNmNjBiMDQzZTk3OTdjNTdjY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61WNgDkFEqa6rDzOPAd7UfMa8S8t YnJbqHmxlZHy1t2IGDpjdUkarO4OLqOgjuD+appL/zyzlXtpOx5VA/szj7YdWGeX vI/SHKdPrTxxEupB6xynIcV7oH6DlXdME4mawkC/ymJFDp743OO6iJnPZA+bqQ7I bv4k74Yg8iWIYraXiK4PKN4+DTDqGP9Rs2aB2v1NVdQT8bnWPXM4L0m5bZvw9R5W 6WccB9jBpV9KQdqo6xrMGyhien8OfGXP0p8GWcIIkpddAr8HnzlTXVxsX3jGYBBN pfb15DmXAbltNDMiKuNGovxk/x0jkBXVAv2SGNSMNP/V6WS/BkzMjeUkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA0gZ6TWJhiI8I/YLBD6Xl8V8yrMB8GA1UdIwQY MBaAFKXQizFQrTTeK4hZIXQZJAg5bxH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMt NDNjYzViNDZkNWIyLzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85MDE4MzktMGVmMi00MGVjLTk5YjMtNDNjYzViNDZkNWIy LzEvcGRDTE1WQ3ROTjRyaUZraGRCa2tDRGx2RWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYfp67IE B0XqrYHg7I+dBOyCWKmjj0BiCySQSSxwXfw9KQJeg5V29jMnkRi7LpvupimEigtJ g3pwMTOwahHrOKJXsZL4kb/2PPlukw/E9Cx/jvEdLXDSNXE6xMTy7msYM01tksq5 YLFoM5YrNnrSnjGLkZVDsd1fWoRmxHt/8LWiVdrzG+HHWte7iolExAqBhxR0rS3A VpBgwNKXIUsxcoCbQsz8KcJE1SY1ZK/RLTTd2ws9WPZSCKlOpvyDOQKTpZSMGDiz ZV7pUL0bGX+tcAJyQdkwLEW19v/3XmHOsEqjey7TK6gEIml00rI5yVgnoq4vjnMs D9sY56djePFkwA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:02 2025 by rpki-client