This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft File: pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json) Hash identifier: 5FaiHuckAFRz172CDAQvJ3QHmDm2AotjTzMGHLbqh6Y= Subject key identifier: 29:88:90:13:A4:20:7C:66:A4:94:21:CB:CB:DB:EF:6A:52:4A:ED:5E Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd Certificate serial: 019B28C0A6CDA19C995B40A58505D8589B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 20:01:12 +0000 Manifest this update: Tue 16 Dec 2025 20:01:12 +0000 Manifest next update: Wed 17 Dec 2025 20:01:12 +0000 Files and hashes: 1: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (hash: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=) 2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: MkZXAICmTrJ0TUNK275UxbXfaAh/TTipBPzv8ZvIhc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:a6:cd:a1:9c:99:5b:40:a5:85:05:d8:58:9b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd Validity Not Before: Dec 16 20:01:12 2025 GMT Not After : Dec 17 20:01:12 2025 GMT Subject: CN=29889013a4207c66a49421cbcbdbef6a524aed5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:e7:05:9d:4c:12:b6:c9:3e:1f:3d:74:c9: 36:6b:97:f2:66:a9:6b:10:2d:62:84:44:b4:f8:21: de:d1:95:2c:f1:56:4b:a6:d8:bf:1c:75:c1:65:1c: ad:0a:5c:26:41:c8:ae:09:1a:03:9d:f5:b2:c8:23: da:14:90:1b:7b:e8:76:b6:f2:b5:15:83:65:0e:c8: ce:a8:a4:07:5f:0c:b1:76:aa:0a:43:93:9a:fb:21: 08:4a:26:72:70:8f:17:1d:99:0d:46:7c:95:33:03: 4d:a7:25:df:27:1e:14:f6:d3:74:cb:f1:5e:83:90: 7a:2a:d0:7f:e2:3d:14:ce:40:c9:b3:6b:87:9f:44: 76:e3:43:9d:31:23:8d:41:73:67:c8:61:15:4e:5e: 79:89:de:d3:73:bf:5a:55:ac:11:5c:61:4f:4f:54: d1:54:f0:be:39:80:24:a8:78:9d:e9:c4:f1:66:83: e4:55:45:5e:c8:2b:1a:84:fe:c7:a5:d5:aa:5b:e4: 80:b6:a4:d0:ca:30:9a:a3:52:d6:b9:66:7b:27:c0: 2e:7e:69:19:51:e9:8b:5f:70:64:fa:a7:a2:d8:41: 1f:45:99:ed:2f:48:77:c9:c2:d6:d3:53:25:1b:1e: de:b4:2f:12:98:61:2e:7f:66:a4:a9:c3:7f:f4:05: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:88:90:13:A4:20:7C:66:A4:94:21:CB:CB:DB:EF:6A:52:4A:ED:5E X509v3 Authority Key Identifier: keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b0:ea:ed:78:45:91:9f:a9:79:fd:17:20:fb:2d:0c:da:25: ba:4e:6c:f2:68:43:7e:3e:aa:d6:c8:f8:74:83:52:a1:b2:7a: 12:b0:5b:20:07:0c:b1:73:96:1b:9d:58:af:76:43:10:08:a1: e4:51:e1:3f:e0:2d:93:bb:1c:18:66:7d:8b:9d:81:9d:30:db: 4e:a6:26:c7:08:74:0c:de:4a:14:b7:6a:67:cb:b6:df:f4:bf: 3c:36:17:dc:37:a4:3f:d1:4f:be:08:bf:c4:3c:9b:0c:a1:23: 8a:9b:43:77:d7:8b:a6:81:33:35:d6:70:9d:bb:1c:db:d8:5f: 47:1a:42:1c:58:52:3a:b3:b5:81:2f:ed:93:dd:c3:fa:9a:a0: c2:d6:21:ee:49:74:02:6e:e8:8a:57:6d:87:cf:88:74:59:18: f9:95:10:14:94:5a:1b:57:9e:5a:bb:d2:9a:af:b1:cb:7a:60: 6e:fa:52:05:15:df:32:83:ed:6b:67:59:37:db:87:4b:ae:ec: ed:c7:0d:33:e3:33:1c:5a:3f:48:90:8e:b7:44:9d:a6:4e:5e: e0:53:34:6f:85:a9:b0:68:4c:64:89:fe:fe:a2:9d:86:8d:68: da:15:76:dd:a9:e8:29:b9:56:90:bc:66:db:1c:8d:dc:9b:0d: eb:5d:cc:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowKbNoZyZW0ClhQXYWJs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjJlMmM3NzUzNjUyYzc3ZGJiNzljYmUwNjliMmJhYjAz ZjYwZGQwHhcNMjUxMjE2MjAwMTEyWhcNMjUxMjE3MjAwMTEyWjAzMTEwLwYDVQQD EygyOTg4OTAxM2E0MjA3YzY2YTQ5NDIxY2JjYmRiZWY2YTUyNGFlZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3TnBZ1MErbJPh89dMk2a5fyZqlr EC1ihES0+CHe0ZUs8VZLpti/HHXBZRytClwmQciuCRoDnfWyyCPaFJAbe+h2tvK1 FYNlDsjOqKQHXwyxdqoKQ5Oa+yEISiZycI8XHZkNRnyVMwNNpyXfJx4U9tN0y/Fe g5B6KtB/4j0UzkDJs2uHn0R240OdMSONQXNnyGEVTl55id7Tc79aVawRXGFPT1TR VPC+OYAkqHid6cTxZoPkVUVeyCsahP7HpdWqW+SAtqTQyjCao1LWuWZ7J8AufmkZ UemLX3Bk+qei2EEfRZntL0h3ycLW01MlGx7etC8SmGEuf2akqcN/9AUdEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmIkBOkIHxmpJQhy8vb72pSSu1eMB8GA1UdIwQY MBaAFKTy4sd1NlLHfbt5y+BpsrqwP2DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQt OWQxYTJlMDkxMWI5LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQtOWQxYTJlMDkxMWI5 LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLDq7XhF kZ+pef0XIPstDNoluk5s8mhDfj6q1sj4dINSobJ6ErBbIAcMsXOWG51Yr3ZDEAih 5FHhP+Atk7scGGZ9i52BnTDbTqYmxwh0DN5KFLdqZ8u23/S/PDYX3DekP9FPvgi/ xDybDKEjiptDd9eLpoEzNdZwnbsc29hfRxpCHFhSOrO1gS/tk93D+pqgwtYh7kl0 Am7oildth8+IdFkY+ZUQFJRaG1eeWrvSmq+xy3pgbvpSBRXfMoPta2dZN9uHS67s 7ccNM+MzHFo/SJCOt0Sdpk5e4FM0b4WpsGhMZIn+/qKdho1o2hV23anoKblWkLxm 2xyN3JsN613Mhg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:18:34 2025 by rpki-client