This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File:                     pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier:          uE9WAn8Vr8JuemFiL21Bc7KjPqQfla4E6BCUPULkclk=
Subject key identifier:   C9:A9:A1:E9:90:C7:9B:52:36:56:A1:B7:E6:18:9E:C1:43:6D:C9:66
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer:       /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial:       019B4F5FEC59DF4DFDD7EE0F223F8A966ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number:          1344
Signing time:             Wed 24 Dec 2025 08:00:45 +0000
Manifest this update:     Wed 24 Dec 2025 08:00:45 +0000
Manifest next update:     Thu 25 Dec 2025 08:00:45 +0000
Files and hashes:         1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
                          2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: oLltwaSaB9AZPLUHqlrgxfObr8122ZlzES43LCE9LUo=)
                          3: q3I5uk601CP6yEVw9P03xUPnugY.roa (hash: ZDpLV11aWOXOyH1x/80gaRdd+gvEXhTdOywUgcsSS20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4f:5f:ec:59:df:4d:fd:d7:ee:0f:22:3f:8a:96:6e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
        Validity
            Not Before: Dec 24 08:00:45 2025 GMT
            Not After : Dec 25 08:00:45 2025 GMT
        Subject: CN=c9a9a1e990c79b523656a1b7e6189ec1436dc966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:a2:1d:23:f4:93:46:62:a0:d2:7f:c5:c6:
                    be:04:c9:0a:a4:f2:17:42:2a:dd:a2:4d:91:89:4e:
                    2c:d7:27:56:92:53:2a:0a:0c:0a:c2:38:9b:49:70:
                    b5:3f:69:fb:0e:2f:5d:11:26:e5:63:51:06:6f:ca:
                    ba:6e:3b:3f:14:a4:40:de:0c:3d:1a:98:bd:29:22:
                    e5:19:e7:fa:8c:f5:4d:ab:69:97:61:db:14:e9:3c:
                    9d:19:08:11:db:e6:86:54:79:4d:90:74:72:17:01:
                    f9:11:67:85:3b:b8:53:5f:75:b5:99:34:76:3e:bb:
                    bd:ed:dc:d6:63:30:d0:f4:68:0b:1a:0c:84:f8:f4:
                    32:73:f6:07:8a:75:9a:10:08:1a:f4:9a:5a:f4:84:
                    c4:7b:23:1f:f3:ac:58:e7:d2:9e:f7:06:af:7d:12:
                    06:cc:43:8d:66:10:18:a2:40:57:bd:a4:0f:eb:e3:
                    f9:fa:95:be:98:82:c6:cc:0a:bd:07:3f:da:cb:d4:
                    2c:bf:6d:c0:4e:41:09:aa:e0:38:88:88:64:6e:c4:
                    16:42:67:ae:de:33:9f:2f:3d:a6:b4:ea:e9:e0:c0:
                    f0:ef:5e:e8:71:28:a8:5b:71:0b:cb:63:72:52:c5:
                    2f:f1:0f:29:8a:1c:dd:a7:c9:64:9b:40:e3:97:eb:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:A1:E9:90:C7:9B:52:36:56:A1:B7:E6:18:9E:C1:43:6D:C9:66
            X509v3 Authority Key Identifier:
                keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:04:de:2b:c2:45:20:30:66:7f:13:3e:f2:dd:06:3b:12:
         5b:5a:43:fe:d3:d6:1f:59:8b:ac:5f:11:76:66:12:03:f6:c5:
         b2:1f:83:fb:7c:1a:8d:bc:46:1e:37:61:b6:81:b6:69:94:39:
         ab:cd:db:38:d5:d9:fe:17:ee:a7:51:d7:75:ca:00:e8:ed:c0:
         16:44:18:7e:35:e8:66:01:72:43:15:80:99:60:87:4d:4c:a4:
         3f:3a:3d:f1:65:ff:b0:8d:12:80:35:6e:65:f7:93:d0:5d:1a:
         de:fe:c5:9b:14:52:52:c3:99:1b:ff:82:c5:0d:d5:ce:bf:7f:
         19:f9:19:ea:87:fb:da:54:98:fb:4d:0a:27:3c:2c:6f:06:40:
         50:2e:be:b2:2c:3e:2c:dc:86:ee:60:d7:92:ab:26:32:1a:f6:
         47:e1:eb:54:85:ce:b4:5c:40:34:91:57:d8:ce:a8:73:f9:d7:
         bb:19:82:55:c9:bb:3f:31:6a:4f:82:28:2c:6d:1a:3a:ba:e0:
         b9:ad:bd:26:ec:0e:fc:04:5b:fd:d5:94:b7:9c:67:5e:a3:21:
         83:f4:70:7b:a3:ef:15:53:09:db:a7:0c:01:0e:9c:93:ce:cf:
         29:9a:1f:31:2f:4b:0b:05:b1:71:bd:eb:8b:77:79:cc:3a:44:
         7f:96:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:35:42 2025 by rpki-client