This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft File: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft (raw, json) Hash identifier: xsKNANRqi9oif1Zv8BQEHQTCWI0oooFArlJNGSJES9g= Subject key identifier: ED:4B:ED:BF:AB:73:E8:E0:64:73:D4:63:20:C8:5B:96:58:C1:09:25 Authority key identifier: A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0 Certificate issuer: /CN=a65f995603663a569430ccc617287e919df144a0 Certificate serial: 019B529821382667E13AD0FD716FB2CE71D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft Manifest number: 12B2 Signing time: Wed 24 Dec 2025 23:01:00 +0000 Manifest this update: Wed 24 Dec 2025 23:01:00 +0000 Manifest next update: Thu 25 Dec 2025 23:01:00 +0000 Files and hashes: 1: bOKc5OfkNTYPFxlTts0wqCFe3RM.roa (hash: V84JFOGtu1RZTKKpVLc0/478v9UFmxFvSlNuGf0rXZ4=) 2: pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl (hash: W2uH9Ohz87980tMgDAQmebq/jsTb3SANpBuqr0LNJ7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:21:38:26:67:e1:3a:d0:fd:71:6f:b2:ce:71:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65f995603663a569430ccc617287e919df144a0 Validity Not Before: Dec 24 23:01:00 2025 GMT Not After : Dec 25 23:01:00 2025 GMT Subject: CN=ed4bedbfab73e8e06473d46320c85b9658c10925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:78:95:14:b5:ac:99:3a:6e:3c:bc:04:81: bc:bc:b6:ee:b8:11:08:50:7e:09:c8:f5:f4:35:61: 1d:34:df:c6:5b:90:f7:16:eb:37:85:29:0b:39:fb: a8:27:1c:55:a3:27:ca:cd:27:ff:b0:b7:1f:ea:6f: 7d:66:55:35:f9:0a:83:82:ec:4f:d1:72:5d:60:47: 10:96:0c:a1:c0:cc:47:64:bc:b2:de:6d:80:5e:1a: e3:b5:13:73:e3:c0:53:f8:d5:f0:26:56:bd:75:80: cd:29:22:2d:3b:90:e7:c1:37:21:6c:9e:dc:62:61: 65:87:19:6a:8a:3f:1c:d0:69:0d:5a:a6:ab:da:56: 04:c7:3b:ba:5b:ff:70:3e:d8:06:c4:b5:3d:0b:97: 38:60:ac:8c:37:4d:8a:e6:c1:69:fe:c2:21:cd:4d: 13:4f:d6:2a:f3:8f:46:1f:17:96:b3:d2:94:e3:1d: e2:dc:40:93:07:a2:99:98:91:47:87:f8:13:8a:12: 75:a3:0d:2e:2b:cb:6a:69:27:23:1e:a0:29:98:70: 4d:7a:46:f7:b7:b6:0b:ba:11:c4:f2:30:33:a8:f8: 34:21:10:91:94:6c:a4:e7:b4:4c:f2:4e:7c:85:61: 7c:b1:65:92:0c:55:57:bf:f0:97:e0:84:36:30:dc: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4B:ED:BF:AB:73:E8:E0:64:73:D4:63:20:C8:5B:96:58:C1:09:25 X509v3 Authority Key Identifier: keyid:A6:5F:99:56:03:66:3A:56:94:30:CC:C6:17:28:7E:91:9D:F1:44:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/58a19b-70c4-4a0e-b8ab-58c3f418f3fd/1/pl-ZVgNmOlaUMMzGFyh-kZ3xRKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:26:5a:e3:fb:4f:48:fd:a0:71:61:34:14:89:e3:93:f4:26: db:f4:8e:1c:89:55:91:2d:39:7b:02:72:13:a0:1b:a5:f0:dd: a2:e8:fa:6e:26:2e:27:0a:12:d1:d7:4e:20:70:b1:89:68:e8: df:b1:78:55:3b:a6:f9:e0:a8:ee:42:30:c9:6d:2b:42:5a:56: 1d:56:a9:e5:79:62:8d:d6:4d:eb:97:04:ab:f5:20:57:91:ea: 0a:05:78:d9:8d:67:16:bb:01:ab:84:48:f0:af:a1:46:17:97: 17:5b:b1:f7:70:13:70:aa:83:a0:8f:54:38:59:06:a6:ba:ae: a0:59:91:96:6f:67:5b:4f:af:f0:38:27:8d:e0:91:88:58:d9: a6:5f:f8:27:6b:27:de:c1:b8:c7:c2:b2:67:df:b5:b4:ea:be: 61:4a:e5:c1:60:8f:e3:3a:8a:3d:45:da:5c:23:e2:21:17:b5: e5:a2:33:62:21:b2:54:e0:91:ba:ce:d7:33:d0:07:3c:53:83: b2:37:6d:fa:e9:4f:08:ac:6a:be:df:0d:1b:34:29:c1:00:fc: b6:79:2d:38:c1:28:a6:4d:d6:d4:aa:e8:c6:16:6e:cf:14:db: 52:e8:be:6b:cb:f3:d8:ca:1a:c5:22:fc:77:46:89:72:20:96: 62:99:63:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmCE4JmfhOtD9cW+yznHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWY5OTU2MDM2NjNhNTY5NDMwY2NjNjE3Mjg3ZTkxOWRm MTQ0YTAwHhcNMjUxMjI0MjMwMTAwWhcNMjUxMjI1MjMwMTAwWjAzMTEwLwYDVQQD EyhlZDRiZWRiZmFiNzNlOGUwNjQ3M2Q0NjMyMGM4NWI5NjU4YzEwOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0p4lRS1rJk6bjy8BIG8vLbuuBEI UH4JyPX0NWEdNN/GW5D3Fus3hSkLOfuoJxxVoyfKzSf/sLcf6m99ZlU1+QqDguxP 0XJdYEcQlgyhwMxHZLyy3m2AXhrjtRNz48BT+NXwJla9dYDNKSItO5DnwTchbJ7c YmFlhxlqij8c0GkNWqar2lYExzu6W/9wPtgGxLU9C5c4YKyMN02K5sFp/sIhzU0T T9Yq849GHxeWs9KU4x3i3ECTB6KZmJFHh/gTihJ1ow0uK8tqaScjHqApmHBNekb3 t7YLuhHE8jAzqPg0IRCRlGyk57RM8k58hWF8sWWSDFVXv/CX4IQ2MNwyPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1L7b+rc+jgZHPUYyDIW5ZYwQklMB8GA1UdIwQY MBaAFKZfmVYDZjpWlDDMxhcofpGd8USgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwtWlZnTm1PbGFVTU16R0Z5aC1rWjN4UktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC81OGExOWItNzBjNC00YTBlLWI4YWIt NThjM2Y0MThmM2ZkLzEvcGwtWlZnTm1PbGFVTU16R0Z5aC1rWjN4UktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC81OGExOWItNzBjNC00YTBlLWI4YWItNThjM2Y0MThmM2Zk LzEvcGwtWlZnTm1PbGFVTU16R0Z5aC1rWjN4UktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSZa4/tP SP2gcWE0FInjk/Qm2/SOHIlVkS05ewJyE6AbpfDdouj6biYuJwoS0ddOIHCxiWjo 37F4VTum+eCo7kIwyW0rQlpWHVap5XlijdZN65cEq/UgV5HqCgV42Y1nFrsBq4RI 8K+hRheXF1ux93ATcKqDoI9UOFkGprquoFmRlm9nW0+v8DgnjeCRiFjZpl/4J2sn 3sG4x8KyZ9+1tOq+YUrlwWCP4zqKPUXaXCPiIRe15aIzYiGyVOCRus7XM9AHPFOD sjdt+ulPCKxqvt8NGzQpwQD8tnktOMEopk3W1KroxhZuzxTbUui+a8vz2MoaxSL8 d0aJciCWYplj7w== -----END CERTIFICATE-----Generated at Thu Dec 25 00:57:01 2025 by rpki-client