This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft File: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json) Hash identifier: ifB5iZZAKnC4fMfUuLqKzPTnSBetzj3PxBOln/8KfIE= Subject key identifier: EF:D4:E8:C0:43:DE:E5:DA:F1:02:21:49:AB:7E:4C:C4:3C:64:15:CC Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924 Certificate serial: 019B3F48085125C7DF33854D1663661D3970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft Manifest number: 017E Signing time: Sun 21 Dec 2025 05:00:43 +0000 Manifest this update: Sun 21 Dec 2025 05:00:43 +0000 Manifest next update: Mon 22 Dec 2025 05:00:43 +0000 Files and hashes: 1: AxTL5BScJRGplpNW74DWcKj7QGE.roa (hash: Tyrri95TWx80Zrp2m4wcSxu+fjugZnCuLxz4W2k0N7E=) 2: FzYunAfXIbAtMm8QIW2Ik_u5Pxo.roa (hash: Xg8cJgDDQk7BXhyX/Ij+B4fnpVtV86uWM+NQF821ZPs=) 3: MR_f-x3g7wcjluP2eCx_et2XgAo.roa (hash: bnbauqYg41qtiywoh5HUkv8me54R7s04AvQU8Lpnw6o=) 4: P5sDSR0HZnHki4I0AlMWpThVrhE.roa (hash: e88MDF3UQ11sNY2bgPKcHFav86x/WiIPqzESbe9NCCs=) 5: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: Sv+wWFgYHGfdtA4OoM93z0KaCdspRgjmkFKT3/KXdNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:08:51:25:c7:df:33:85:4d:16:63:66:1d:39:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924 Validity Not Before: Dec 21 05:00:43 2025 GMT Not After : Dec 22 05:00:43 2025 GMT Subject: CN=efd4e8c043dee5daf1022149ab7e4cc43c6415cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:7d:d9:4d:da:be:d0:e3:d1:e8:26:46:fe: 91:59:e7:ca:f1:23:54:99:57:5a:73:30:12:15:d1: 8a:b5:c5:c4:e1:2b:47:3a:17:20:70:af:59:18:e3: 02:67:14:c5:ea:c1:f9:59:e8:66:dc:04:cc:2c:33: 28:86:98:97:20:6d:a5:81:30:e6:cb:13:3d:64:cb: d8:db:57:fa:58:39:f8:f4:e0:46:3a:64:40:2b:03: 2d:f5:66:4f:c3:cd:3b:38:7f:b8:72:cc:4e:f8:ec: 4e:d7:e4:a0:5c:9e:5b:ce:70:3b:93:d2:93:84:5b: 13:36:c3:e1:f2:12:28:1f:30:72:09:24:54:68:80: fa:74:b3:cf:6f:4a:06:7b:13:50:d1:18:ea:1e:7e: 72:06:d0:1d:6b:3e:e1:6e:9e:4e:ff:f9:d2:20:d1: 5a:74:69:ab:ad:4b:24:fa:8a:d8:50:3c:0b:ac:1e: 7a:49:4c:b3:ec:29:5b:a5:0e:5f:12:59:18:c9:ce: 33:86:f0:02:d0:5f:bc:42:3a:a6:06:98:4a:32:69: 2c:ea:06:0a:94:f2:d1:c1:9d:95:bb:72:b1:b9:0a: 74:bc:0a:e8:b5:9d:18:de:b2:88:63:ff:b8:ab:70: e1:9e:a6:38:6e:19:fa:ad:12:99:93:4d:65:c0:b6: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:E8:C0:43:DE:E5:DA:F1:02:21:49:AB:7E:4C:C4:3C:64:15:CC X509v3 Authority Key Identifier: keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:06:2f:b2:f9:b3:d5:38:2f:bc:86:22:c8:23:bd:db:fe: a9:d2:a8:f5:1a:9f:c9:a2:ff:d2:09:91:9f:2c:00:10:de:f1: 66:01:72:43:bf:c0:ad:43:44:5c:07:0b:f8:c0:80:84:d7:7f: e4:4d:d2:90:97:4c:b7:8b:a6:7a:34:c5:33:92:72:11:97:da: 32:e2:0a:b3:72:f5:88:31:a2:b9:c5:8c:36:c2:47:31:8a:0c: fa:11:8d:5c:9c:16:eb:97:16:ea:59:aa:9d:65:70:92:3d:66: 8b:95:0d:bd:29:01:bf:f1:5e:04:07:06:4e:0a:36:b4:e1:b2: 3b:d2:9f:cc:36:9e:99:25:49:7a:b6:19:75:b1:9c:d1:0f:d2: fa:8f:0e:c3:ab:52:7e:e2:e5:2c:33:93:54:fc:49:75:24:ba: 09:6e:f1:61:7b:b6:22:9d:8e:c5:62:ba:67:bd:e3:12:0c:3e: 0f:43:ad:dd:1e:29:5a:8b:65:9b:5f:c0:a2:df:e1:70:87:1d: be:1a:25:2c:87:d4:54:79:8a:be:81:73:37:e5:61:0b:b3:ae: d1:9b:a3:d5:84:6d:46:3f:a9:41:df:32:18:38:e2:d5:62:c7: f8:11:47:73:1d:46:f6:e2:39:c1:4c:16:e2:55:f1:71:a2:e0: 52:ec:93:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SAhRJcffM4VNFmNmHTlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx OGY5MjQwHhcNMjUxMjIxMDUwMDQzWhcNMjUxMjIyMDUwMDQzWjAzMTEwLwYDVQQD EyhlZmQ0ZThjMDQzZGVlNWRhZjEwMjIxNDlhYjdlNGNjNDNjNjQxNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo192U3avtDj0egmRv6RWefK8SNU mVdaczASFdGKtcXE4StHOhcgcK9ZGOMCZxTF6sH5Wehm3ATMLDMohpiXIG2lgTDm yxM9ZMvY21f6WDn49OBGOmRAKwMt9WZPw807OH+4csxO+OxO1+SgXJ5bznA7k9KT hFsTNsPh8hIoHzByCSRUaID6dLPPb0oGexNQ0RjqHn5yBtAdaz7hbp5O//nSINFa dGmrrUsk+orYUDwLrB56SUyz7ClbpQ5fElkYyc4zhvAC0F+8QjqmBphKMmks6gYK lPLRwZ2Vu3KxuQp0vArotZ0Y3rKIY/+4q3DhnqY4bhn6rRKZk01lwLb73QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/U6MBD3uXa8QIhSat+TMQ8ZBXMMB8GA1UdIwQY MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct M2U1NWM0OWYyZDRlLzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbMGL7L5 s9U4L7yGIsgjvdv+qdKo9RqfyaL/0gmRnywAEN7xZgFyQ7/ArUNEXAcL+MCAhNd/ 5E3SkJdMt4umejTFM5JyEZfaMuIKs3L1iDGiucWMNsJHMYoM+hGNXJwW65cW6lmq nWVwkj1mi5UNvSkBv/FeBAcGTgo2tOGyO9KfzDaemSVJerYZdbGc0Q/S+o8Ow6tS fuLlLDOTVPxJdSS6CW7xYXu2Ip2OxWK6Z73jEgw+D0Ot3R4pWotlm1/Aot/hcIcd vholLIfUVHmKvoFzN+VhC7Ou0Zuj1YRtRj+pQd8yGDji1WLH+BFHcx1G9uI5wUwW 4lXxcaLgUuyTiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:10 2025 by rpki-client