This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json) Hash identifier: A2GBU0Sr4BW9DVh4UOwjFwu/Tucb3FCl/s/yqj1idPc= Subject key identifier: 9D:05:9A:EB:82:21:F6:D8:C5:5A:D9:23:1F:E3:0F:99:91:7F:DA:DD Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3 Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3 Certificate serial: 019B5ABFE3462BB411D053AD763F41EFA855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 13:01:23 +0000 Manifest this update: Fri 26 Dec 2025 13:01:23 +0000 Manifest next update: Sat 27 Dec 2025 13:01:23 +0000 Files and hashes: 1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: 5pj68lOflIMY+DUZLU3xU6YShNKy2pnSwAqKgOGaq+s=) 2: _Y1GXKJ5A67loqKl1i2V9S3MWKg.roa (hash: V3o7sWDlYKkS4Nqv4VMpbKGi6d6rMWmkClDxQRZCgxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e3:46:2b:b4:11:d0:53:ad:76:3f:41:ef:a8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3 Validity Not Before: Dec 26 13:01:23 2025 GMT Not After : Dec 27 13:01:23 2025 GMT Subject: CN=9d059aeb8221f6d8c55ad9231fe30f99917fdadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:53:0c:c0:d2:87:af:f8:38:49:92:da:47:fa: e1:cd:34:cd:2c:98:c9:20:92:5e:3a:e4:4e:89:d6: a6:f2:7f:8a:5b:23:d1:d1:53:63:53:06:d8:d8:6d: 1d:88:61:7b:2d:b2:a4:a9:26:89:0f:51:f9:c1:c8: 29:5f:65:38:3d:74:cb:b7:03:9a:4d:33:9b:31:c3: ef:b1:c7:dc:0b:25:c5:23:44:e3:52:ba:33:fa:92: a6:c3:18:a6:19:ad:06:68:7b:5f:7b:dc:92:a7:83: da:19:97:fd:61:28:6c:d3:c4:78:74:a4:09:ba:f5: b2:e7:f2:83:36:7b:7b:60:c5:7b:4b:3b:f4:48:5c: 28:50:ab:0d:a5:45:31:67:ad:4e:c8:9e:f1:8a:61: 93:cf:a8:1e:53:75:b4:34:f5:7e:d1:15:7c:d9:84: d3:fe:1e:d3:5b:5b:3e:0c:92:2b:3e:4a:31:40:1c: f9:a9:ba:76:ba:4c:5a:93:c7:49:03:2c:07:28:1c: d8:90:25:b8:86:fa:01:e6:ef:b7:81:1c:5c:68:e5: b5:28:81:01:13:db:71:ae:83:cb:de:56:a8:63:ea: 69:67:9c:62:31:3b:ab:63:d8:87:54:84:df:fd:f1: 87:68:15:b2:8c:f1:95:62:c4:14:fb:86:bf:b6:48: 9b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:05:9A:EB:82:21:F6:D8:C5:5A:D9:23:1F:E3:0F:99:91:7F:DA:DD X509v3 Authority Key Identifier: keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e9:6b:79:14:4c:d9:7c:77:f5:ff:d2:75:a2:29:fa:aa:c1: d5:aa:7d:1d:f2:7b:46:4f:39:8d:77:aa:81:15:77:e0:b9:81: 70:63:8f:ea:2f:01:ac:21:e8:95:28:5f:58:f4:7b:df:61:70: d6:17:54:59:0b:6a:51:da:3c:46:7b:d1:7a:ba:86:e6:25:ba: 23:48:ea:ce:2f:21:09:58:53:de:eb:64:24:f1:7c:d1:f5:6b: e5:ee:a2:d1:52:43:58:9a:fc:76:f0:70:1f:70:4d:30:bf:3f: 3a:ce:07:c0:ac:8c:de:4d:1f:8c:6c:76:1c:66:54:f1:81:ed: 2b:fe:60:92:53:51:78:3a:f5:9a:9f:f3:98:f2:9a:8f:7c:49: 06:26:cd:49:f3:0a:18:d5:ae:f3:71:cf:bd:70:ab:e1:6f:cf: 6a:47:44:2e:bb:d8:ba:13:61:35:5f:e5:7f:d6:b6:e5:62:50: 69:84:8d:65:54:95:a8:8a:76:ea:4e:c6:6f:41:a5:88:d2:b3: 27:ef:1f:cf:17:54:14:8e:f4:e7:29:c8:b4:2e:9e:25:b0:97: 02:08:66:a9:f1:30:66:47:b8:1d:ee:72:0d:92:0c:a1:d9:0d: fd:00:4e:68:9b:34:e8:a6:7e:b8:0c:bd:79:97:17:80:02:1b: ab:df:5b:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+NGK7QR0FOtdj9B76hVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNTBkMWRkMzFiYzc0NDliYWNjMTg2NGIwMWFmOTk0YzU0 N2VmZDMwHhcNMjUxMjI2MTMwMTIzWhcNMjUxMjI3MTMwMTIzWjAzMTEwLwYDVQQD Eyg5ZDA1OWFlYjgyMjFmNmQ4YzU1YWQ5MjMxZmUzMGY5OTkxN2ZkYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlMMwNKHr/g4SZLaR/rhzTTNLJjJ IJJeOuROidam8n+KWyPR0VNjUwbY2G0diGF7LbKkqSaJD1H5wcgpX2U4PXTLtwOa TTObMcPvscfcCyXFI0TjUroz+pKmwximGa0GaHtfe9ySp4PaGZf9YShs08R4dKQJ uvWy5/KDNnt7YMV7Szv0SFwoUKsNpUUxZ61OyJ7ximGTz6geU3W0NPV+0RV82YTT /h7TW1s+DJIrPkoxQBz5qbp2ukxak8dJAywHKBzYkCW4hvoB5u+3gRxcaOW1KIEB E9txroPL3laoY+ppZ5xiMTurY9iHVITf/fGHaBWyjPGVYsQU+4a/tkibIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0FmuuCIfbYxVrZIx/jD5mRf9rdMB8GA1UdIwQY MBaAFD5Q0d0xvHRJuswYZLAa+ZTFR+/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEt NGYwNjUwZGE1NDViLzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEtNGYwNjUwZGE1NDVi LzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhelreRRM 2Xx39f/SdaIp+qrB1ap9HfJ7Rk85jXeqgRV34LmBcGOP6i8BrCHolShfWPR732Fw 1hdUWQtqUdo8RnvRerqG5iW6I0jqzi8hCVhT3utkJPF80fVr5e6i0VJDWJr8dvBw H3BNML8/Os4HwKyM3k0fjGx2HGZU8YHtK/5gklNReDr1mp/zmPKaj3xJBibNSfMK GNWu83HPvXCr4W/PakdELrvYuhNhNV/lf9a25WJQaYSNZVSVqIp26k7Gb0GliNKz J+8fzxdUFI705ynItC6eJbCXAghmqfEwZke4He5yDZIModkN/QBOaJs06KZ+uAy9 eZcXgAIbq99bGw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:05 2025 by rpki-client