This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json) Hash identifier: wLxtpl813P2cl6ntgVyzE+EwiJ4BSlREB2II/dOlkRs= Subject key identifier: 83:62:BA:70:03:77:70:05:AF:BD:00:F5:D7:5D:17:23:39:FF:C3:F9 Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3 Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3 Certificate serial: 019B2287D236AB43E79BA64D498137B4D629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 15:01:25 +0000 Manifest this update: Mon 15 Dec 2025 15:01:25 +0000 Manifest next update: Tue 16 Dec 2025 15:01:25 +0000 Files and hashes: 1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=) 2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=) 3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=) 4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=) 5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=) 6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=) 7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: qnanImh72pKaC2fVKUXB8mDtXH19lLW6owqk5hcflIQ=) 8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:d2:36:ab:43:e7:9b:a6:4d:49:81:37:b4:d6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3 Validity Not Before: Dec 15 15:01:25 2025 GMT Not After : Dec 16 15:01:25 2025 GMT Subject: CN=8362ba7003777005afbd00f5d75d172339ffc3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a3:5b:fe:3c:95:55:ef:a8:65:67:11:a6:de: f5:a9:a5:57:1a:3e:a5:30:79:31:75:46:c4:41:bb: 20:57:e9:42:ae:dc:c8:0e:28:fe:2a:89:d7:12:14: 4d:1d:24:fd:a3:a0:c4:0b:5d:30:1a:b5:5b:35:12: 52:c3:8b:29:c3:9d:4f:49:da:85:85:31:ee:e6:84: 22:c0:57:0f:d2:08:f0:09:0b:da:30:fe:d7:d6:b3: 2e:af:bf:94:b9:46:c3:61:eb:c5:26:db:6f:d5:9b: 55:ae:16:f4:ac:37:64:34:93:37:76:ed:ac:d8:77: 74:16:4c:27:fe:d3:8d:bf:84:5e:c9:85:f8:46:f4: 7f:f7:9e:b0:0c:5e:21:e6:33:9f:ca:17:cc:5f:2b: dc:9f:e6:97:d5:72:41:d5:e1:21:d7:a7:db:ee:e6: 60:95:4f:19:18:7a:0a:2c:06:d9:1e:82:07:8f:e7: b0:e7:4c:91:56:11:ef:3c:83:1b:2a:3b:3e:75:b4: 15:c5:ba:ed:3b:fb:65:8b:11:1e:82:05:95:84:f9: 9d:fa:3e:fc:09:77:57:22:c5:10:c8:6f:f2:05:10: de:da:49:6c:ad:16:86:c3:08:9f:c9:46:c8:2e:0f: 91:ee:bf:3b:7d:9e:af:6f:86:ca:66:fb:ac:11:ed: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:62:BA:70:03:77:70:05:AF:BD:00:F5:D7:5D:17:23:39:FF:C3:F9 X509v3 Authority Key Identifier: keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:84:99:8b:b4:43:8c:03:2e:a6:a8:c9:df:c9:5e:fb:ea:23: 4d:a0:0e:68:13:c1:d2:d7:02:30:39:04:30:cb:94:f3:bf:c5: ed:ac:1b:a6:d3:f6:6b:00:26:9c:9f:6d:85:a3:c4:32:a4:ed: 77:4a:ff:ee:31:07:58:c1:94:3f:15:b9:5e:38:40:1c:f0:b0: 94:60:11:41:9b:e6:88:b0:b1:57:f4:f0:1a:0b:23:de:51:54: e5:92:de:24:fe:4d:7c:42:b9:85:5c:00:bb:91:cb:98:f8:42: 57:0b:b2:21:39:98:e6:57:f7:ce:b0:5e:5c:b9:1d:67:8b:22: e8:b8:03:22:79:4e:58:d1:33:2e:94:eb:97:ce:ff:88:17:b2: 8e:41:50:ed:38:e2:e8:f2:48:75:d1:09:e6:dd:a4:10:5a:23: ae:3d:65:d9:cc:c4:80:6e:f7:86:11:72:f6:85:36:b6:28:7b: cf:8f:56:66:eb:d2:03:32:2b:9e:57:1a:33:eb:db:e6:ab:30: ca:b9:85:33:5c:90:6c:ea:4d:c6:3b:99:b2:2f:c1:3c:52:7a: 68:d8:00:9a:50:da:96:b9:b5:04:75:56:95:9e:3f:39:8b:86: d6:96:93:4d:33:99:e7:98:c1:22:e7:f0:0e:76:e4:c8:ed:68: 64:ec:44:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih9I2q0Pnm6ZNSYE3tNYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OTk0OGQwZmU0ZDdmOTlkNTRiYThiZmZjZDk5YTFhNjA4 YWUwZDMwHhcNMjUxMjE1MTUwMTI1WhcNMjUxMjE2MTUwMTI1WjAzMTEwLwYDVQQD Eyg4MzYyYmE3MDAzNzc3MDA1YWZiZDAwZjVkNzVkMTcyMzM5ZmZjM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qNb/jyVVe+oZWcRpt71qaVXGj6l MHkxdUbEQbsgV+lCrtzIDij+KonXEhRNHST9o6DEC10wGrVbNRJSw4spw51PSdqF hTHu5oQiwFcP0gjwCQvaMP7X1rMur7+UuUbDYevFJttv1ZtVrhb0rDdkNJM3du2s 2Hd0Fkwn/tONv4ReyYX4RvR/956wDF4h5jOfyhfMXyvcn+aX1XJB1eEh16fb7uZg lU8ZGHoKLAbZHoIHj+ew50yRVhHvPIMbKjs+dbQVxbrtO/tlixEeggWVhPmd+j78 CXdXIsUQyG/yBRDe2klsrRaGwwifyUbILg+R7r87fZ6vb4bKZvusEe17iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINiunADd3AFr70A9dddFyM5/8P5MB8GA1UdIwQY MBaAFJaZSND+TX+Z1Uuov/zZmhpgiuDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAt NTNjYzVkYWY1MmNmLzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAtNTNjYzVkYWY1MmNm LzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYSZi7RD jAMupqjJ38le++ojTaAOaBPB0tcCMDkEMMuU87/F7awbptP2awAmnJ9thaPEMqTt d0r/7jEHWMGUPxW5XjhAHPCwlGARQZvmiLCxV/TwGgsj3lFU5ZLeJP5NfEK5hVwA u5HLmPhCVwuyITmY5lf3zrBeXLkdZ4si6LgDInlOWNEzLpTrl87/iBeyjkFQ7Tji 6PJIddEJ5t2kEFojrj1l2czEgG73hhFy9oU2tih7z49WZuvSAzIrnlcaM+vb5qsw yrmFM1yQbOpNxjuZsi/BPFJ6aNgAmlDalrm1BHVWlZ4/OYuG1paTTTOZ55jBIufw DnbkyO1oZOxEVg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:50:00 2025 by rpki-client