This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json) Hash identifier: ZO9eWAwNJgJuVw34O8izceXJuHUgXMWTsRztAlo6q2w= Subject key identifier: 82:F1:D4:44:7B:4A:B8:22:C6:F9:EA:41:97:06:FB:57:A3:1B:1E:4B Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019AF163ED3102A3457223F490530E673DE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft Manifest number: 31 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: 8jbviDQFoKAhlEjW0jC3b3qtGcI.roa (hash: Gqk9VF0dkefof36zEJuvdRT5XkqcUqe0DMO1kA7Q6OU=) 2: H_hOQkSql0xe8SzvI1lQZgozg84.roa (hash: BYpmoiDjHBHncY51m+5UvYoUmAnZrIME8Cmlf9qM/N4=) 3: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: YOx0dt9Sc3eGztNY5hDa7GhauMhhlr+2RBBgc7ZB+94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ed:31:02:a3:45:72:23:f4:90:53:0e:67:3d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=82f1d4447b4ab822c6f9ea419706fb57a31b1e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:d7:e6:6d:d3:df:f5:6b:ef:1b:0b:13:b5: d9:91:9a:24:4b:5d:f2:a6:7d:26:60:fd:f4:99:50: 05:fa:98:5d:51:a6:9d:8c:a9:5e:0e:9e:8a:88:8e: 1c:74:68:aa:3b:6e:d6:21:3f:0a:d8:7b:26:02:a0: 57:31:6b:f1:de:1f:88:f7:57:55:ba:e6:fc:b0:9c: fd:f8:b2:00:94:d4:99:88:e7:d1:36:f9:34:ad:f7: f2:e2:13:1a:a9:ef:2c:44:2f:55:16:79:08:71:fb: d5:db:55:07:0d:2f:8d:c0:85:7c:05:26:2a:2d:1c: fd:94:81:b7:8d:f7:8e:12:d8:de:69:99:53:bc:53: 1e:4d:6f:4c:fb:07:56:d7:46:be:13:a3:38:db:8a: 34:87:80:73:51:b3:3b:2e:80:b6:7b:43:a3:fd:c5: 68:e2:78:b1:a5:22:94:ec:31:37:f9:59:4a:11:86: ff:de:e5:10:58:ac:e5:a5:11:95:d5:3c:8e:1b:f2: 07:fe:76:ee:ec:18:97:4f:b9:00:e1:8a:d9:37:3a: bf:d9:30:60:a7:be:25:87:a9:fd:6b:de:cf:07:7c: 08:22:dd:67:8c:e4:46:c9:2e:42:fd:d8:f6:1d:aa: 87:8f:6e:97:36:ed:f0:b5:ce:46:29:05:a4:cf:d6: 9f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:D4:44:7B:4A:B8:22:C6:F9:EA:41:97:06:FB:57:A3:1B:1E:4B X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:82:2a:e3:fb:5a:07:c4:a8:9d:9d:b2:18:e9:48:da:2f:07: 66:27:e2:06:1c:48:c4:96:30:bf:92:6a:84:2a:cb:46:39:4a: 86:55:85:8d:dd:47:a7:4f:d1:b5:73:98:f5:97:bf:92:05:2a: e9:47:f9:a8:3c:8f:7d:7a:c7:19:2c:4b:13:0d:1c:31:8a:01: 3d:71:34:3a:8c:f4:dd:24:92:3e:b1:6e:bc:94:75:4a:95:92: d4:3d:72:53:1b:2d:2f:d1:05:0e:e5:06:67:79:13:a7:0c:8c: 03:48:af:41:ec:9b:b7:2a:8e:62:d4:eb:e5:2f:04:79:aa:b3: c8:dc:48:a1:2d:f5:27:62:c9:0c:d7:ef:14:c4:cd:11:73:8e: 73:0a:82:89:62:99:91:3e:3e:83:13:89:00:87:44:77:4e:b0: 47:1f:84:c2:53:59:54:e6:03:24:93:c9:09:02:50:ca:32:50: a5:16:f7:96:a1:5c:62:19:2a:fd:79:94:40:69:46:da:9d:77: 55:7b:45:2c:d3:89:a8:b7:bf:e3:b9:d4:82:1e:3d:0b:b0:62: 8f:67:39:55:c1:21:91:a1:ff:94:92:b0:86:e6:dd:a8:20:ce: 30:cc:ff:a8:fb:44:50:5a:d2:62:45:b4:6e:99:7f:67:83:fa: cf:7f:28:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+0xAqNFciP0kFMOZz3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD Eyg4MmYxZDQ0NDdiNGFiODIyYzZmOWVhNDE5NzA2ZmI1N2EzMWIxZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4rX5m3T3/Vr7xsLE7XZkZokS13y pn0mYP30mVAF+phdUaadjKleDp6KiI4cdGiqO27WIT8K2HsmAqBXMWvx3h+I91dV uub8sJz9+LIAlNSZiOfRNvk0rffy4hMaqe8sRC9VFnkIcfvV21UHDS+NwIV8BSYq LRz9lIG3jfeOEtjeaZlTvFMeTW9M+wdW10a+E6M424o0h4BzUbM7LoC2e0Oj/cVo 4nixpSKU7DE3+VlKEYb/3uUQWKzlpRGV1TyOG/IH/nbu7BiXT7kA4YrZNzq/2TBg p74lh6n9a97PB3wIIt1njORGyS5C/dj2HaqHj26XNu3wtc5GKQWkz9afyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILx1ER7SrgixvnqQZcG+1ejGx5LMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIIq4/ta B8SonZ2yGOlI2i8HZifiBhxIxJYwv5JqhCrLRjlKhlWFjd1Hp0/RtXOY9Ze/kgUq 6Uf5qDyPfXrHGSxLEw0cMYoBPXE0Ooz03SSSPrFuvJR1SpWS1D1yUxstL9EFDuUG Z3kTpwyMA0ivQeybtyqOYtTr5S8EeaqzyNxIoS31J2LJDNfvFMTNEXOOcwqCiWKZ kT4+gxOJAIdEd06wRx+EwlNZVOYDJJPJCQJQyjJQpRb3lqFcYhkq/XmUQGlG2p13 VXtFLNOJqLe/47nUgh49C7Bij2c5VcEhkaH/lJKwhubdqCDOMMz/qPtEUFrSYkW0 bpl/Z4P6z38okQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:20 2025 by rpki-client