This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft File: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json) Hash identifier: eawnmzFGLCknf0vnQurqOE5OJIOXAIbnzpxfWoEqtd4= Subject key identifier: 54:8D:61:68:D9:D6:99:49:13:9C:F4:FC:5B:BC:4F:D4:95:8C:D0:9F Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 Certificate issuer: /CN=a4b707300e869467be5e5273222d90e0b618f924 Certificate serial: 019ABA07D34FFDD3843B13414D948717A7E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft Manifest number: 0139 Signing time: Tue 25 Nov 2025 08:01:06 +0000 Manifest this update: Tue 25 Nov 2025 08:01:06 +0000 Manifest next update: Wed 26 Nov 2025 08:01:06 +0000 Files and hashes: 1: AxTL5BScJRGplpNW74DWcKj7QGE.roa (hash: Tyrri95TWx80Zrp2m4wcSxu+fjugZnCuLxz4W2k0N7E=) 2: FzYunAfXIbAtMm8QIW2Ik_u5Pxo.roa (hash: Xg8cJgDDQk7BXhyX/Ij+B4fnpVtV86uWM+NQF821ZPs=) 3: MR_f-x3g7wcjluP2eCx_et2XgAo.roa (hash: bnbauqYg41qtiywoh5HUkv8me54R7s04AvQU8Lpnw6o=) 4: P5sDSR0HZnHki4I0AlMWpThVrhE.roa (hash: e88MDF3UQ11sNY2bgPKcHFav86x/WiIPqzESbe9NCCs=) 5: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: pNRfBLWvKj4GqJBGJEKsWeaVAo1I+fR8wUt4sAs7wcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:07:d3:4f:fd:d3:84:3b:13:41:4d:94:87:17:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924 Validity Not Before: Nov 25 08:01:06 2025 GMT Not After : Nov 26 08:01:06 2025 GMT Subject: CN=548d6168d9d69949139cf4fc5bbc4fd4958cd09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:0f:d1:09:d4:40:4c:51:80:e7:54:94:65: 97:f2:e6:67:b8:39:94:75:df:63:fc:f8:7c:c9:9c: 49:c5:d8:42:a5:7f:c4:90:45:04:ed:ad:b9:f7:9c: 8d:42:33:d6:c2:7b:6d:02:35:27:8a:a1:07:06:38: 5c:0b:f8:52:82:d7:53:23:8e:16:95:57:53:ff:38: 9d:3c:41:53:35:ea:44:f4:09:65:41:e8:b7:70:de: 13:21:3d:e2:8e:5e:c8:db:86:55:35:20:86:f1:cf: 5d:23:ec:e2:6a:c3:2d:3c:a1:9c:ac:ae:cb:1c:c9: b1:06:1f:cc:b7:3d:70:c5:f6:8d:32:2d:19:94:ad: 5c:96:50:7e:f2:31:c5:41:6b:52:0b:74:41:d4:be: 59:d1:fe:f2:bd:f9:b5:99:f1:38:47:18:55:24:8b: 88:d5:b8:1f:72:f2:61:de:6f:ac:05:6c:a8:7c:e9: 55:f6:89:64:8d:8e:ee:84:e3:d6:c8:f0:9e:9f:2b: d5:e2:78:c8:f5:a9:81:c5:bb:8c:aa:16:49:64:10: 64:c7:91:09:52:b3:bb:32:8c:77:e9:b1:5a:21:90: 83:f9:92:91:03:40:64:be:0d:9a:ac:4d:54:f3:ed: 2a:c2:ab:bc:8e:f7:1b:c8:f6:11:05:ea:3d:8c:29: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8D:61:68:D9:D6:99:49:13:9C:F4:FC:5B:BC:4F:D4:95:8C:D0:9F X509v3 Authority Key Identifier: keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:83:be:86:90:94:4d:a1:5c:78:2f:5b:79:d1:b2:2c:8b:99: 13:8b:fc:fc:e5:78:57:1e:ad:63:ec:2e:78:2d:66:ef:a8:bb: 73:58:ee:c8:74:9d:da:e4:9f:42:53:ae:ff:c7:f6:f2:08:ee: 85:6a:00:ec:7f:84:b4:ff:0e:c6:d8:46:70:80:5b:7e:d1:5e: 62:28:62:f8:c3:b1:e6:b2:5b:ea:66:6c:70:7b:81:af:bb:2b: b4:19:2a:a0:b5:a0:98:8f:bf:8f:c0:aa:6b:8f:ca:e9:4e:02: df:71:e0:f3:00:5f:5f:fe:0d:33:85:01:8e:4b:5b:9e:58:9a: 47:ce:4c:aa:64:21:03:b3:47:0d:c9:2c:a8:e9:99:11:ad:fd: a6:96:35:05:0c:12:34:99:5d:99:d0:73:9d:8d:bb:0f:6b:fb: 66:b9:4f:11:bc:a4:24:8a:04:d4:2a:a7:ac:7f:d7:0c:80:26: 6b:20:64:71:f9:c9:50:28:df:9c:a2:b6:0a:c2:b4:e1:83:10: 7e:60:eb:00:a4:d8:f4:88:94:fd:b4:0c:ec:d9:af:81:93:81: 2a:48:b0:8b:82:10:82:2c:1d:b6:61:fb:fc:a6:b9:0e:7d:71: 53:ec:c4:ff:30:f5:b4:8e:7b:b7:dd:f6:74:5f:dd:9e:fe:86: b5:88:a6:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6B9NP/dOEOxNBTZSHF6fgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx OGY5MjQwHhcNMjUxMTI1MDgwMTA2WhcNMjUxMTI2MDgwMTA2WjAzMTEwLwYDVQQD Eyg1NDhkNjE2OGQ5ZDY5OTQ5MTM5Y2Y0ZmM1YmJjNGZkNDk1OGNkMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ucP0QnUQExRgOdUlGWX8uZnuDmU dd9j/Ph8yZxJxdhCpX/EkEUE7a2595yNQjPWwnttAjUniqEHBjhcC/hSgtdTI44W lVdT/zidPEFTNepE9AllQei3cN4TIT3ijl7I24ZVNSCG8c9dI+ziasMtPKGcrK7L HMmxBh/Mtz1wxfaNMi0ZlK1cllB+8jHFQWtSC3RB1L5Z0f7yvfm1mfE4RxhVJIuI 1bgfcvJh3m+sBWyofOlV9olkjY7uhOPWyPCenyvV4njI9amBxbuMqhZJZBBkx5EJ UrO7Mox36bFaIZCD+ZKRA0Bkvg2arE1U8+0qwqu8jvcbyPYRBeo9jCk69QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSNYWjZ1plJE5z0/Fu8T9SVjNCfMB8GA1UdIwQY MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct M2U1NWM0OWYyZDRlLzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYO+hpCU TaFceC9bedGyLIuZE4v8/OV4Vx6tY+wueC1m76i7c1juyHSd2uSfQlOu/8f28gju hWoA7H+EtP8OxthGcIBbftFeYihi+MOx5rJb6mZscHuBr7srtBkqoLWgmI+/j8Cq a4/K6U4C33Hg8wBfX/4NM4UBjktbnliaR85MqmQhA7NHDcksqOmZEa39ppY1BQwS NJldmdBznY27D2v7ZrlPEbykJIoE1CqnrH/XDIAmayBkcfnJUCjfnKK2CsK04YMQ fmDrAKTY9IiU/bQM7NmvgZOBKkiwi4IQgiwdtmH7/Ka5Dn1xU+zE/zD1tI57t932 dF/dnv6GtYimJA== -----END CERTIFICATE-----Generated at Tue Nov 25 14:17:07 2025 by rpki-client