This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json) Hash identifier: Uh8mmB3sX6xdtQVprKzXU+xtDVA/IX8jwwROX+Ibgec= Subject key identifier: D7:27:64:40:10:A0:F8:BD:CC:86:68:67:FA:E9:0D:89:F6:61:99:EE Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3 Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3 Certificate serial: 019B43933FB35DFF0F3F22674E4C5F5BF100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 01:01:22 +0000 Manifest this update: Mon 22 Dec 2025 01:01:22 +0000 Manifest next update: Tue 23 Dec 2025 01:01:22 +0000 Files and hashes: 1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: E2Zf9gps3HdvVv5pLeFZwBOM81E02ZO913+rR1tW+ig=) 2: _Y1GXKJ5A67loqKl1i2V9S3MWKg.roa (hash: V3o7sWDlYKkS4Nqv4VMpbKGi6d6rMWmkClDxQRZCgxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:3f:b3:5d:ff:0f:3f:22:67:4e:4c:5f:5b:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3 Validity Not Before: Dec 22 01:01:22 2025 GMT Not After : Dec 23 01:01:22 2025 GMT Subject: CN=d727644010a0f8bdcc866867fae90d89f66199ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:c0:dd:ba:ac:a5:f8:96:92:58:15:6a:8b: 8c:ed:ca:cc:7f:ad:40:c9:a0:af:65:19:f3:ce:f7: 35:71:fa:bb:c2:be:04:c4:c9:7b:26:06:2c:2e:1b: ab:f1:04:dd:7f:ab:e3:86:79:34:e4:a3:b1:ad:47: 26:aa:f3:98:0c:b3:71:f0:79:f0:91:85:e4:cb:5f: 92:aa:26:f8:7a:6a:71:e2:f3:37:14:25:e4:c8:94: fb:9c:eb:7f:7a:6a:34:94:14:d7:e8:35:d7:1f:12: 7c:7f:46:57:3e:13:7a:63:a3:6f:0c:f8:13:d6:0f: 02:bd:03:7b:3f:50:f8:b2:6f:0a:65:76:2b:9c:3c: a9:81:6a:16:3e:2e:18:8f:d5:40:a0:61:25:87:81: 01:5d:a8:1e:5f:cb:65:9e:c3:40:c2:bc:26:a2:a5: f6:a4:6c:f3:fb:43:6d:cd:ce:33:60:7b:3d:58:37: 98:8d:5e:2b:a3:ad:f2:35:48:ac:80:d1:38:ff:82: 08:56:a7:52:15:45:54:82:49:6b:95:e4:85:e3:5b: 6a:cd:42:ad:61:dc:39:26:ff:60:e3:4b:45:70:e8: dc:ea:e3:ed:93:28:b3:1b:d6:68:5a:fe:ab:29:52: 2a:c6:17:5e:40:ef:c4:22:c5:c5:37:d5:90:93:d4: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:64:40:10:A0:F8:BD:CC:86:68:67:FA:E9:0D:89:F6:61:99:EE X509v3 Authority Key Identifier: keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:8e:40:a5:fd:3d:ee:f2:ce:dc:e1:56:f8:0f:7b:fe:09: 75:be:b7:dd:51:81:a3:cc:37:30:2e:63:ea:88:7a:3e:64:cc: 8d:da:91:ec:b4:57:2c:47:d2:3e:f2:07:80:6d:d1:96:0a:a8: 0e:b6:b3:3c:bc:42:31:8c:86:8c:19:67:c8:ce:fe:bf:c9:f4: 59:e0:2e:d0:45:7c:64:79:ab:8d:63:db:f0:a4:76:46:8c:8a: 95:ff:f6:b7:7f:b5:7f:91:1c:bb:d7:96:ca:f0:06:a0:27:48: 43:92:a2:f4:37:dd:18:97:8e:5d:17:a9:ca:2d:d6:19:28:f4: 71:3c:32:78:95:82:3a:82:91:84:a9:fe:12:6c:d6:01:0a:1f: 61:30:09:d3:0f:d2:95:63:41:fd:f8:81:16:8b:21:3c:c8:86: f1:57:ab:d9:01:0b:7d:4e:33:f1:ea:e2:76:76:cf:a8:34:89: 3f:56:91:d5:f8:a8:cb:6d:cf:d4:4e:56:eb:3e:dc:ba:f9:bf: b6:e9:98:15:8a:95:69:f0:ef:77:62:d5:44:45:f1:1a:cc:56: e6:a3:55:66:bd:77:a5:4d:bf:e6:73:fd:da:5b:17:b5:00:64: e0:b9:7b:5e:10:4d:8c:7c:b2:8e:17:6d:4b:59:e7:fc:ba:79: f7:1c:3e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkz+zXf8PPyJnTkxfW/EAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNTBkMWRkMzFiYzc0NDliYWNjMTg2NGIwMWFmOTk0YzU0 N2VmZDMwHhcNMjUxMjIyMDEwMTIyWhcNMjUxMjIzMDEwMTIyWjAzMTEwLwYDVQQD EyhkNzI3NjQ0MDEwYTBmOGJkY2M4NjY4NjdmYWU5MGQ4OWY2NjE5OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH7A3bqspfiWklgVaouM7crMf61A yaCvZRnzzvc1cfq7wr4ExMl7JgYsLhur8QTdf6vjhnk05KOxrUcmqvOYDLNx8Hnw kYXky1+Sqib4empx4vM3FCXkyJT7nOt/emo0lBTX6DXXHxJ8f0ZXPhN6Y6NvDPgT 1g8CvQN7P1D4sm8KZXYrnDypgWoWPi4Yj9VAoGElh4EBXageX8tlnsNAwrwmoqX2 pGzz+0Ntzc4zYHs9WDeYjV4ro63yNUisgNE4/4IIVqdSFUVUgklrleSF41tqzUKt Ydw5Jv9g40tFcOjc6uPtkyizG9ZoWv6rKVIqxhdeQO/EIsXFN9WQk9RoXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcnZEAQoPi9zIZoZ/rpDYn2YZnuMB8GA1UdIwQY MBaAFD5Q0d0xvHRJuswYZLAa+ZTFR+/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEt NGYwNjUwZGE1NDViLzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEtNGYwNjUwZGE1NDVi LzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBKOQKX9 Pe7yztzhVvgPe/4Jdb633VGBo8w3MC5j6oh6PmTMjdqR7LRXLEfSPvIHgG3Rlgqo DrazPLxCMYyGjBlnyM7+v8n0WeAu0EV8ZHmrjWPb8KR2RoyKlf/2t3+1f5Ecu9eW yvAGoCdIQ5Ki9DfdGJeOXRepyi3WGSj0cTwyeJWCOoKRhKn+EmzWAQofYTAJ0w/S lWNB/fiBFoshPMiG8Ver2QELfU4z8eridnbPqDSJP1aR1fioy23P1E5W6z7cuvm/ tumYFYqVafDvd2LVREXxGsxW5qNVZr13pU2/5nP92lsXtQBk4Ll7XhBNjHyyjhdt S1nn/Lp59xw+4g== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:00 2025 by rpki-client