This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json) Hash identifier: 4URilrqSmFfZUySKn3wt0QGh9du8PWuLemUbQQCwFyA= Subject key identifier: E5:E7:92:33:91:C1:C0:4B:2C:DE:34:B9:BB:8A:7C:00:FD:E9:88:02 Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f Certificate serial: 019B34C5A39797C02D62CADC165DCF1F0506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft Manifest number: 04ED Signing time: Fri 19 Dec 2025 04:02:06 +0000 Manifest this update: Fri 19 Dec 2025 04:02:06 +0000 Manifest next update: Sat 20 Dec 2025 04:02:06 +0000 Files and hashes: 1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=) 2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: hXboTh+iDf/oTLtoAVhC8x32dhI5hBhHED86mI9RU08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:a3:97:97:c0:2d:62:ca:dc:16:5d:cf:1f:05:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f Validity Not Before: Dec 19 04:02:06 2025 GMT Not After : Dec 20 04:02:06 2025 GMT Subject: CN=e5e7923391c1c04b2cde34b9bb8a7c00fde98802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:fb:7a:8d:63:cb:62:f2:5d:44:4e:ec:4d: 26:a9:fe:00:13:a0:41:86:49:1b:0f:cd:04:48:2b: 3d:03:97:6a:c5:d5:67:07:e9:f2:b8:bd:27:ec:51: d5:a6:f7:3e:bc:d9:56:22:10:0e:3b:f4:7a:b2:93: 19:c0:af:c1:1a:48:04:1f:bf:36:2b:91:7c:ef:01: 04:a5:2c:0f:a9:1e:7c:55:85:39:f9:6e:64:2e:74: c7:5e:63:12:f8:96:37:e1:56:f1:34:14:8a:7d:f5: 04:09:e8:52:e3:8e:f7:c3:cc:1d:af:36:a1:33:49: 19:3f:8e:cd:81:29:a7:f8:b9:f8:1e:9a:1c:dd:a6: b1:10:09:d2:02:41:d2:b3:b3:c4:c6:5c:02:36:0a: 12:f9:38:cb:56:e2:16:ee:81:7b:f1:9a:70:54:20: 03:09:cc:c2:ae:7b:ad:17:3b:72:11:3d:dd:6e:11: 96:9a:09:07:95:97:b8:42:da:b5:f5:80:91:51:8d: 3b:d8:7c:29:d1:4d:b4:bd:39:8b:d3:80:5a:ad:8f: 28:58:be:fe:b2:5d:b7:20:37:14:35:df:51:76:91: 00:7c:08:03:3d:d0:fc:d5:a3:7e:c3:14:09:ba:d2: b2:9a:69:8b:8e:d0:29:65:f1:0c:bc:d4:af:cb:17: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E7:92:33:91:C1:C0:4B:2C:DE:34:B9:BB:8A:7C:00:FD:E9:88:02 X509v3 Authority Key Identifier: keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fb:05:d2:38:66:65:f9:33:66:c4:03:4e:e6:dc:ba:ce:8f: 5b:c1:65:97:5f:f0:42:f5:37:e0:a0:7e:e4:d9:ce:9d:69:d2: 3f:d1:be:45:cc:5e:43:51:2a:d2:75:20:8c:32:d4:8f:e2:4f: 53:0d:98:65:74:ae:ca:76:60:e9:a1:d2:d3:af:c0:2b:3e:94: ae:1a:35:35:c1:0d:b8:90:7f:b2:c6:20:72:91:f1:ea:07:69: 36:04:fb:76:f5:b6:bb:b5:05:46:31:a3:6c:5c:9c:17:a0:84: c3:25:97:d2:5c:8b:f8:83:f9:62:f3:e7:3b:16:14:53:ea:9d: 14:6c:e0:b7:c5:26:e0:89:0e:6a:47:6c:f6:db:57:81:52:d9: 87:26:3c:da:61:13:37:c0:08:92:1b:24:b6:79:cb:cb:31:9e: 9a:4f:b1:67:d4:1f:3e:8c:15:0c:96:12:c6:3c:3d:dd:d3:91: f1:d3:b9:96:42:ce:cf:32:b1:e4:93:c2:a9:3e:19:6d:c0:cf: 44:cb:7d:f3:f5:ee:4c:e4:4f:e5:b9:7b:53:a3:de:ff:4e:86: d8:4b:e9:1d:a2:57:b0:c7:95:72:31:a0:80:ff:fe:3c:90:77: 30:09:e2:f3:7c:90:8d:ed:25:f4:36:87:25:0a:e3:ff:de:a2: 67:3e:db:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xaOXl8AtYsrcFl3PHwUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWRiODllOGJiNjYwZjIxZWI1YzRhZjNiOWFkZDUyZDU3 ZWI4OWYwHhcNMjUxMjE5MDQwMjA2WhcNMjUxMjIwMDQwMjA2WjAzMTEwLwYDVQQD EyhlNWU3OTIzMzkxYzFjMDRiMmNkZTM0YjliYjhhN2MwMGZkZTk4ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2f7eo1jy2LyXURO7E0mqf4AE6BB hkkbD80ESCs9A5dqxdVnB+nyuL0n7FHVpvc+vNlWIhAOO/R6spMZwK/BGkgEH782 K5F87wEEpSwPqR58VYU5+W5kLnTHXmMS+JY34VbxNBSKffUECehS4473w8wdrzah M0kZP47NgSmn+Ln4Hpoc3aaxEAnSAkHSs7PExlwCNgoS+TjLVuIW7oF78ZpwVCAD CczCrnutFztyET3dbhGWmgkHlZe4Qtq19YCRUY072Hwp0U20vTmL04BarY8oWL7+ sl23IDcUNd9RdpEAfAgDPdD81aN+wxQJutKymmmLjtApZfEMvNSvyxcHbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXnkjORwcBLLN40ubuKfAD96YgCMB8GA1UdIwQY MBaAFKZduJ6LtmDyHrXErzua3VLVfrifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2It YTM1NzhjOTQ0MDQwLzEvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2ItYTM1NzhjOTQ0MDQw LzEvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfsF0jhm ZfkzZsQDTubcus6PW8Fll1/wQvU34KB+5NnOnWnSP9G+RcxeQ1Eq0nUgjDLUj+JP Uw2YZXSuynZg6aHS06/AKz6Urho1NcENuJB/ssYgcpHx6gdpNgT7dvW2u7UFRjGj bFycF6CEwyWX0lyL+IP5YvPnOxYUU+qdFGzgt8Um4IkOakds9ttXgVLZhyY82mET N8AIkhsktnnLyzGemk+xZ9QfPowVDJYSxjw93dOR8dO5lkLOzzKx5JPCqT4ZbcDP RMt98/XuTORP5bl7U6Pe/06G2EvpHaJXsMeVcjGggP/+PJB3MAni83yQje0l9DaH JQrj/96iZz7bzg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:31:32 2025 by rpki-client