This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft File: PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft (raw, json) Hash identifier: KjBPW4sYFwVwieBl9gC9Rrx1ZkEEkvatAzej4Caqunk= Subject key identifier: 9D:AD:F4:3C:2A:BB:C6:B0:AE:19:8B:B7:0C:9A:F5:D4:D8:40:18:26 Authority key identifier: 3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 Certificate issuer: /CN=3c361707514c4420ce82bce1bb71995c25171be3 Certificate serial: 019BF650B3D555366D6199B83CC3885F470E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft Manifest number: B9 Signing time: Sun 25 Jan 2026 18:00:42 +0000 Manifest this update: Sun 25 Jan 2026 18:00:42 +0000 Manifest next update: Mon 26 Jan 2026 18:00:42 +0000 Files and hashes: 1: 4Fk1AAYm7kxoJmqBYu75IgemFgg.roa (hash: Di0GwsWhWJ6sbzzm5sR6T5tgoqL/5gCIPZyyW+P5jP0=) 2: PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl (hash: qYG4j/VxZ6WaS80O6/mP6qPw6hKQ0MyPYDMY7MRlZ3A=) 3: dNrcINwqLQh0eW3Ca7c-IwPCVgk.roa (hash: UrG5aSlbcyotr3fAavA5LJMulEP1WncwUE1M+lPxfSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:b3:d5:55:36:6d:61:99:b8:3c:c3:88:5f:47:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c361707514c4420ce82bce1bb71995c25171be3 Validity Not Before: Jan 25 18:00:42 2026 GMT Not After : Jan 26 18:00:42 2026 GMT Subject: CN=9dadf43c2abbc6b0ae198bb70c9af5d4d8401826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:53:27:3c:45:08:02:5b:82:71:1e:25:e6: 4e:62:95:42:ae:ae:fb:45:b0:73:fe:93:cf:23:6b: 26:20:7d:4e:af:98:74:ee:73:57:55:4e:5b:8d:52: 61:d9:23:09:5e:59:ec:6d:a0:b9:03:5d:23:80:d3: e0:4e:b3:e9:f5:ca:b4:73:96:52:bd:c2:c7:60:03: ab:55:aa:bd:18:dd:9e:e9:fa:ce:49:49:b0:d6:88: b9:f6:16:c3:3c:fd:b8:c7:0c:79:43:ac:53:a6:90: 71:15:c8:53:67:81:44:de:9e:20:e8:a3:e2:80:bf: 50:00:d3:51:b8:70:5b:a4:69:fd:b9:b3:2e:ce:e3: e4:2e:56:1e:51:e6:b3:5f:f6:2b:8e:e6:5a:c6:5a: 4d:6a:0a:c8:6d:76:e3:97:1f:46:b2:ae:d7:71:c8: a6:b7:c9:41:4b:86:62:86:24:52:dd:47:90:4e:f8: 79:73:4b:0b:d1:2b:62:97:c8:6d:65:8a:86:0a:2d: c0:f8:ee:65:a0:b9:de:3a:20:2c:ab:50:aa:bd:21: c7:5e:8d:f6:0e:20:a2:80:23:06:3a:da:9b:71:bd: 6c:10:34:2e:78:69:95:49:a5:4e:a8:67:69:57:68: d4:23:56:5b:ab:af:05:d1:85:18:64:d2:2e:38:10: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AD:F4:3C:2A:BB:C6:B0:AE:19:8B:B7:0C:9A:F5:D4:D8:40:18:26 X509v3 Authority Key Identifier: keyid:3C:36:17:07:51:4C:44:20:CE:82:BC:E1:BB:71:99:5C:25:17:1B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDYXB1FMRCDOgrzhu3GZXCUXG-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b8c098-838c-4253-8288-9b937357974d/1/PDYXB1FMRCDOgrzhu3GZXCUXG-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:14:94:95:48:f8:6a:38:ab:75:98:36:ad:b9:bf:32:3e:bf: b5:ce:0d:15:73:31:5d:2c:9e:3a:30:65:69:54:12:ce:a9:53: 1f:26:82:71:15:6d:23:87:a5:75:2a:1d:af:71:50:a0:25:6a: 99:9a:24:59:35:16:dc:b8:9f:f7:80:8a:bb:c9:bf:15:f7:02: 82:0e:5a:fd:f2:0a:cb:01:43:f5:39:5a:2a:31:f5:75:10:4e: 0f:fc:44:db:43:95:ca:fd:89:d5:29:99:1b:87:e0:f6:87:44: 0a:c4:5e:31:97:c3:26:28:d5:3c:14:9c:06:6e:be:3c:c6:ba: 3f:fd:c5:19:c4:b7:89:7c:46:1f:f4:e8:b6:17:7f:21:c8:a6: 14:88:18:cc:21:b9:db:b0:3c:90:ae:4b:4c:f2:f9:f3:9a:80: 41:07:54:b3:37:df:5b:f8:72:ed:ae:f0:10:6d:57:cd:8d:a5: 83:a8:e5:85:ae:3f:aa:ac:69:0f:d3:1e:5b:7d:0e:9f:aa:2c: a2:ed:d2:59:d4:74:6c:08:b1:90:40:cb:e9:2e:24:0b:c9:2e: 9a:b6:0c:cb:6a:eb:45:0e:08:d8:b5:26:6e:34:02:82:79:ee: e5:d4:18:34:90:fb:dd:fa:d2:54:7e:85:5c:7a:6c:eb:b1:b2: af:63:38:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2ULPVVTZtYZm4PMOIX0cOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMzYxNzA3NTE0YzQ0MjBjZTgyYmNlMWJiNzE5OTVjMjUx NzFiZTMwHhcNMjYwMTI1MTgwMDQyWhcNMjYwMTI2MTgwMDQyWjAzMTEwLwYDVQQD Eyg5ZGFkZjQzYzJhYmJjNmIwYWUxOThiYjcwYzlhZjVkNGQ4NDAxODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXVTJzxFCAJbgnEeJeZOYpVCrq77 RbBz/pPPI2smIH1Or5h07nNXVU5bjVJh2SMJXlnsbaC5A10jgNPgTrPp9cq0c5ZS vcLHYAOrVaq9GN2e6frOSUmw1oi59hbDPP24xwx5Q6xTppBxFchTZ4FE3p4g6KPi gL9QANNRuHBbpGn9ubMuzuPkLlYeUeazX/YrjuZaxlpNagrIbXbjlx9Gsq7Xccim t8lBS4ZihiRS3UeQTvh5c0sL0Stil8htZYqGCi3A+O5loLneOiAsq1CqvSHHXo32 DiCigCMGOtqbcb1sEDQueGmVSaVOqGdpV2jUI1Zbq68F0YUYZNIuOBBXMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2t9Dwqu8awrhmLtwya9dTYQBgmMB8GA1UdIwQY MBaAFDw2FwdRTEQgzoK84btxmVwlFxvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgt OWI5MzczNTc5NzRkLzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iOGMwOTgtODM4Yy00MjUzLTgyODgtOWI5MzczNTc5NzRk LzEvUERZWEIxRk1SQ0RPZ3J6aHUzR1pYQ1VYRy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRSUlUj4 ajirdZg2rbm/Mj6/tc4NFXMxXSyeOjBlaVQSzqlTHyaCcRVtI4eldSodr3FQoCVq mZokWTUW3Lif94CKu8m/FfcCgg5a/fIKywFD9TlaKjH1dRBOD/xE20OVyv2J1SmZ G4fg9odECsReMZfDJijVPBScBm6+PMa6P/3FGcS3iXxGH/Tothd/IcimFIgYzCG5 27A8kK5LTPL585qAQQdUszffW/hy7a7wEG1XzY2lg6jlha4/qqxpD9MeW30On6os ou3SWdR0bAixkEDL6S4kC8kumrYMy2rrRQ4I2LUmbjQCgnnu5dQYNJD73frSVH6F XHps67Gyr2M4Yw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:21 2026 by rpki-client