This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json) Hash identifier: nCwe9wZwJ7dJjLtrluAa+lCWwphZ+h7XOi7ZVwrkUOA= Subject key identifier: CF:B8:A5:50:9C:1B:25:ED:55:18:16:6A:26:77:88:58:15:F1:46:10 Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Certificate serial: 019AF12DC4100E4F6BC36ADE163317BA9918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft Manifest number: 0A04 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=) 2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: wpFQ4jD+fK6ESIX/kXZxJcpB2zdLP+N3TyG8aolozus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c4:10:0e:4f:6b:c3:6a:de:16:33:17:ba:99:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=cfb8a5509c1b25ed5518166a2677885815f14610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:e8:73:66:37:cd:73:e4:72:d7:0f:33:11: 85:3a:eb:bd:d5:24:c9:80:89:6b:7e:12:1e:67:6b: 3f:3d:67:67:4c:8c:12:3d:f0:da:50:ef:74:69:42: 4d:10:b5:c7:28:fd:dd:cd:eb:4d:e7:45:9e:41:4c: aa:7b:dc:46:f3:29:21:5d:90:63:f6:de:2e:fc:b9: 3f:d3:33:40:c5:c1:1a:62:24:d9:30:6b:4f:33:d6: 7c:2c:7c:6d:9a:b2:85:22:d1:6f:3d:50:49:17:90: 3c:64:f8:c3:99:1d:93:fb:0b:39:92:98:75:f2:54: cf:b1:51:4f:bd:4c:e7:f1:da:23:c1:b3:09:f8:a3: 5a:e8:ab:dd:9a:17:b8:88:99:ef:71:39:25:75:7c: a0:f2:3e:43:50:8c:97:ec:29:f3:24:28:f8:82:1c: e6:e5:81:78:0b:6d:72:8b:d8:0a:83:df:4f:6f:4a: 78:22:e6:ad:12:f1:dd:ff:db:17:c1:55:d0:28:d8: 60:f7:58:d4:6e:22:21:b4:2f:d2:ad:53:4f:a6:31: 90:65:0e:d2:32:c4:23:05:b4:0e:18:77:f2:40:8b: 32:ee:6f:ab:5d:71:5f:5d:2f:29:09:43:1f:2b:73: 06:e9:1d:65:eb:31:0d:ae:89:f0:b3:1a:92:ad:73: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B8:A5:50:9C:1B:25:ED:55:18:16:6A:26:77:88:58:15:F1:46:10 X509v3 Authority Key Identifier: keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:12:ef:12:c8:b0:be:25:59:9d:09:c2:d3:8c:e0:fd:14:23: 9b:fc:36:5a:e1:5a:4a:c6:38:c8:86:ff:d9:2e:67:34:c4:d0: 41:a2:29:af:6d:39:80:4f:08:15:05:65:5e:ee:29:28:33:a7: 39:46:0f:3e:eb:06:6b:41:20:65:7a:fd:8c:64:5b:84:e6:a8: ff:46:fc:c7:ba:3b:86:67:07:10:40:97:d6:70:d1:73:60:ad: 4e:b6:c6:59:e7:93:9b:83:ed:4d:e2:a3:11:fc:76:7f:0f:ab: 96:29:c0:6e:cb:7e:c5:d0:dc:e5:3d:7e:35:78:7f:da:04:cf: 0e:49:ab:90:24:ac:72:7e:d0:82:06:90:d6:ef:72:20:8f:26: 4b:12:5e:cb:8b:5a:b7:ac:50:eb:44:74:65:13:80:53:f0:39: b4:2b:05:b9:9a:ec:4c:59:14:00:8f:2c:40:d5:1b:ab:46:38: ec:f2:89:8c:40:55:b1:9e:91:ad:27:5c:88:b6:70:66:ad:0a: 66:cb:99:57:28:96:8f:19:b1:ae:e0:70:42:a6:83:26:87:10: 05:8e:ea:fc:29:1b:42:06:59:59:6e:d4:fd:bf:95:1a:3a:cb: a7:5e:fa:89:e1:5a:ad:6c:99:6a:98:ed:8c:61:9a:2d:30:5a: 46:eb:32:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcQQDk9rw2reFjMXupkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZDk1NGQ2ZGIyYTExNzhlZmJlYzBkNWQ5NTkwNzY0MDdj Zjk2Y2EwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EyhjZmI4YTU1MDljMWIyNWVkNTUxODE2NmEyNjc3ODg1ODE1ZjE0NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzboc2Y3zXPkctcPMxGFOuu91STJ gIlrfhIeZ2s/PWdnTIwSPfDaUO90aUJNELXHKP3dzetN50WeQUyqe9xG8ykhXZBj 9t4u/Lk/0zNAxcEaYiTZMGtPM9Z8LHxtmrKFItFvPVBJF5A8ZPjDmR2T+ws5kph1 8lTPsVFPvUzn8dojwbMJ+KNa6Kvdmhe4iJnvcTkldXyg8j5DUIyX7CnzJCj4ghzm 5YF4C21yi9gKg99Pb0p4IuatEvHd/9sXwVXQKNhg91jUbiIhtC/SrVNPpjGQZQ7S MsQjBbQOGHfyQIsy7m+rXXFfXS8pCUMfK3MG6R1l6zENronwsxqSrXMDmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+4pVCcGyXtVRgWaiZ3iFgV8UYQMB8GA1UdIwQY MBaAFKXZVNbbKhF4777A1dlZB2QHz5bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUt MzlmNGFiNmVjN2U2LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mYmYzOWQtOTI0Ny00ZTA3LTllMTUtMzlmNGFiNmVjN2U2 LzEvcGRsVTF0c3FFWGp2dnNEVjJWa0haQWZQbHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxLvEsiw viVZnQnC04zg/RQjm/w2WuFaSsY4yIb/2S5nNMTQQaIpr205gE8IFQVlXu4pKDOn OUYPPusGa0EgZXr9jGRbhOao/0b8x7o7hmcHEECX1nDRc2CtTrbGWeeTm4PtTeKj Efx2fw+rlinAbst+xdDc5T1+NXh/2gTPDkmrkCSscn7QggaQ1u9yII8mSxJey4ta t6xQ60R0ZROAU/A5tCsFuZrsTFkUAI8sQNUbq0Y47PKJjEBVsZ6RrSdciLZwZq0K ZsuZVyiWjxmxruBwQqaDJocQBY7q/CkbQgZZWW7U/b+VGjrLp176ieFarWyZapjt jGGaLTBaRusyQw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:51 2025 by rpki-client