This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft File: plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json) Hash identifier: /xzzkfmjbB4h5r3AO7OPtt1Dd1GDdPGZ8wbPrjz22r4= Subject key identifier: D2:C8:9F:44:F3:4F:1F:40:45:E0:D8:1E:94:24:23:9E:55:F8:B7:6D Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Certificate serial: 019B54BD883D8982D1FEBE82EE770D94646B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft Manifest number: 17A0 Signing time: Thu 25 Dec 2025 09:01:05 +0000 Manifest this update: Thu 25 Dec 2025 09:01:05 +0000 Manifest next update: Fri 26 Dec 2025 09:01:05 +0000 Files and hashes: 1: 2kqVVML4J6p32S1IZ9ese8rrNA8.roa (hash: Z5t0NXFzD5/SVB5g4VKI0FOYHuxiI1pejsxk/eO8RUY=) 2: 7ICukJCno7wPTI4Opav3OulQGYc.roa (hash: PA3kdCy1zhkZxeXYzpSwNS8Lc6gO1aAMaHcDwAB/zlk=) 3: FxcmiLw90HwD6v-zIS8fyho2YJk.roa (hash: dVrudewN+D6RoriyTNX+xlGTNvGmJTbMWvHDD/OWxyw=) 4: OEu5ipvpOLx1mjS_wILLKGz31L8.roa (hash: Q2sxz01wDrr3ZAHG0Y04l4+NHZqPRdGf0GS6aM12Hm0=) 5: SEB5OEPvww_MDPNqy0IOytIoU5Y.roa (hash: Hk1UHlI4MNvzvFdVBIIEujtjKPWtAbdmnPIpzDItuaM=) 6: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: 3F2X3a/1r27d2Hcz0by5jPAVdwCKBIw0IjRZDIn2CNg=) 7: tRPDFQwkqeY70X00aJumJ-RrQBw.roa (hash: xE1IIp9t6Le0FK50+hsN7HGx6bGGBI6DRxHK2qYkXVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:88:3d:89:82:d1:fe:be:82:ee:77:0d:94:64:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Validity Not Before: Dec 25 09:01:05 2025 GMT Not After : Dec 26 09:01:05 2025 GMT Subject: CN=d2c89f44f34f1f4045e0d81e9424239e55f8b76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:f4:12:55:59:5b:28:c2:13:45:e8:05:1a: 96:64:e2:75:16:fa:bd:20:51:93:45:e7:a8:0b:d1: 98:9a:2e:64:91:28:9a:4c:29:a3:e4:3d:0f:35:e6: 96:c7:cc:12:0a:1a:c8:42:d5:ce:9a:9a:d0:26:9d: 9f:b7:00:f9:e6:51:19:46:05:07:e6:ed:b0:1b:b2: b8:84:cf:27:da:28:6d:6f:65:94:a4:1f:e3:e4:22: 30:4e:83:44:0f:7b:5a:b7:e7:b4:61:6d:ae:f4:8c: 94:97:64:2b:73:77:99:8e:55:68:ae:dd:e8:33:e6: ef:01:20:d8:86:92:19:b6:ce:f9:6c:fb:f5:2b:e5: ec:1d:46:8b:38:66:40:e7:52:cd:93:14:00:3d:cf: f6:a3:06:00:4a:43:ff:dd:30:06:91:04:58:1e:10: 82:76:1b:85:3b:28:e7:94:a5:3c:f7:e6:76:3c:2c: 60:d9:78:82:3f:41:ab:6c:f8:3f:a9:a1:95:31:67: 23:e8:90:88:98:4c:a4:2a:b4:84:41:8b:14:d4:77: f2:b3:85:28:4b:3d:e8:d1:cd:91:a8:f7:6b:c1:ee: e7:11:c8:f0:35:1d:b0:64:2c:47:80:4c:fb:5c:84: 82:c2:d5:fc:38:db:37:3e:1d:68:16:4b:fd:1e:be: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C8:9F:44:F3:4F:1F:40:45:E0:D8:1E:94:24:23:9E:55:F8:B7:6D X509v3 Authority Key Identifier: keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:79:52:09:a5:be:58:76:1a:62:7e:fd:01:0d:e8:48:fa:a4: df:23:89:67:27:85:12:6c:c4:cb:9a:24:52:4f:11:64:3a:d0: 13:70:a2:87:17:21:d0:63:f3:42:68:01:55:f6:7d:ee:61:55: 07:ff:f6:de:a5:af:10:84:32:a7:35:59:c1:84:c4:aa:32:b7: 3e:ad:55:14:46:16:99:31:bc:bf:b3:88:f8:6e:f3:47:65:49: 17:93:04:8f:8c:28:cb:77:98:ba:26:0f:55:bb:37:2e:f7:3f: 1d:a9:a8:50:6e:08:c8:8b:16:f8:7d:43:4d:13:26:6f:15:b0: 43:5a:ad:7f:5b:46:03:70:8c:17:5e:96:8b:f3:eb:d4:e4:4a: 82:12:c5:8d:ca:48:24:87:93:a9:cf:b7:61:04:c4:ef:65:79: 1c:15:ad:6f:6a:6c:7a:f2:36:c9:50:a5:7e:ef:8a:ec:80:01: 1a:a7:87:ff:a9:9e:26:00:25:b0:e2:fb:1f:fc:f6:89:76:05: a3:1d:c1:d1:67:07:5b:0b:a2:0e:4e:f0:8c:00:6e:58:6d:70: 83:29:13:e5:88:27:34:b1:11:c8:42:b1:84:62:c2:b2:fe:6f: fd:9e:9a:2c:66:e7:3b:a8:3c:0a:60:d5:7e:80:88:03:8d:24: 28:e9:d7:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvYg9iYLR/r6C7ncNlGRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5 NWIyNjgwHhcNMjUxMjI1MDkwMTA1WhcNMjUxMjI2MDkwMTA1WjAzMTEwLwYDVQQD EyhkMmM4OWY0NGYzNGYxZjQwNDVlMGQ4MWU5NDI0MjM5ZTU1ZjhiNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Af0ElVZWyjCE0XoBRqWZOJ1Fvq9 IFGTReeoC9GYmi5kkSiaTCmj5D0PNeaWx8wSChrIQtXOmprQJp2ftwD55lEZRgUH 5u2wG7K4hM8n2ihtb2WUpB/j5CIwToNED3tat+e0YW2u9IyUl2Qrc3eZjlVort3o M+bvASDYhpIZts75bPv1K+XsHUaLOGZA51LNkxQAPc/2owYASkP/3TAGkQRYHhCC dhuFOyjnlKU89+Z2PCxg2XiCP0GrbPg/qaGVMWcj6JCImEykKrSEQYsU1Hfys4Uo Sz3o0c2RqPdrwe7nEcjwNR2wZCxHgEz7XISCwtX8ONs3Ph1oFkv9Hr78gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLIn0TzTx9AReDYHpQkI55V+LdtMB8GA1UdIwQY MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt YmNjZDMyYWY5N2ZlLzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnlSCaW+ WHYaYn79AQ3oSPqk3yOJZyeFEmzEy5okUk8RZDrQE3Cihxch0GPzQmgBVfZ97mFV B//23qWvEIQypzVZwYTEqjK3Pq1VFEYWmTG8v7OI+G7zR2VJF5MEj4woy3eYuiYP Vbs3Lvc/HamoUG4IyIsW+H1DTRMmbxWwQ1qtf1tGA3CMF16Wi/Pr1ORKghLFjcpI JIeTqc+3YQTE72V5HBWtb2psevI2yVClfu+K7IABGqeH/6meJgAlsOL7H/z2iXYF ox3B0WcHWwuiDk7wjABuWG1wgykT5YgnNLERyEKxhGLCsv5v/Z6aLGbnO6g8CmDV foCIA40kKOnXpw== -----END CERTIFICATE-----Generated at Thu Dec 25 11:17:07 2025 by rpki-client