This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: fzyeG+A9VEBShGyfqtnbDjrN2DhVORpBB1HqOvNCtqM= Subject key identifier: 12:A9:15:06:15:BB:2B:F0:BF:95:E1:74:B6:5C:6A:44:96:41:BB:87 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B3569CCF9155BECCF004F2FFB87A97500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 07:01:24 +0000 Manifest this update: Fri 19 Dec 2025 07:01:24 +0000 Manifest next update: Sat 20 Dec 2025 07:01:24 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 3: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 4: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 5: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 6: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 7: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 8: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 9: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 10: l4Qn1DLaoWGHSM-0zESfzSh4Fw8.roa (hash: W8F0siH2pbAIwect+ZY/d1YQO550SRj2/v8w6HmnQfY=) 11: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 12: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: O2wNHvcjLgbDlc2yTY08KbiLUyRfD1SnNF7On5jZ/P8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:cc:f9:15:5b:ec:cf:00:4f:2f:fb:87:a9:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Dec 19 07:01:24 2025 GMT Not After : Dec 20 07:01:24 2025 GMT Subject: CN=12a9150615bb2bf0bf95e174b65c6a449641bb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:6c:16:7d:15:74:78:fe:ff:fd:f4:74:23: 49:4a:a8:c9:b6:0a:77:d2:68:ee:24:05:e6:3e:bb: 13:4c:da:d1:1f:80:ef:2e:dc:f2:94:d6:ba:b6:ae: 6e:e4:dd:9e:20:f6:38:ae:03:47:8a:bd:9f:0f:4a: 64:6b:e7:e5:9c:c3:50:f7:b2:7c:91:8f:07:92:a8: ee:a3:52:df:85:e2:01:c1:3e:43:3d:05:0c:ea:41: 34:de:b4:2f:2b:68:58:4f:dc:12:c0:b4:b0:48:1b: 88:8d:07:f7:6c:5f:78:ca:5c:10:42:48:f4:e8:7a: 28:25:d0:62:15:43:4f:2b:66:68:33:58:f9:c8:21: bb:d2:ad:fa:92:8d:cb:af:74:b1:52:f2:91:e7:7a: e7:28:9c:88:9a:fe:2c:b6:68:5e:03:a3:1d:14:8e: 67:f6:24:de:bf:58:78:88:d5:84:03:04:95:57:09: c4:10:07:10:82:f2:f2:4b:c0:75:00:bc:5f:e3:ef: f9:5a:f3:08:85:89:89:6e:d3:f1:60:9e:2f:78:a4: df:38:f9:2e:d5:04:6d:ff:f8:e0:b3:f4:89:7e:d1: ff:a5:66:32:ad:35:2d:f1:ca:20:11:b0:7c:52:05: a3:cb:f3:e8:b7:8f:4e:53:b9:ab:59:69:5c:82:83: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A9:15:06:15:BB:2B:F0:BF:95:E1:74:B6:5C:6A:44:96:41:BB:87 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:83:71:4b:a3:51:20:3e:26:11:2a:e8:cf:8f:2b:4f:34:86: e6:cc:b8:c9:4f:fa:2c:53:14:f5:9d:3d:fe:09:5d:5a:26:ea: 21:b4:8e:0d:fa:fc:6d:ff:68:85:6b:78:fa:1d:d9:40:46:91: ea:39:32:42:40:8c:ec:b0:22:4f:b6:43:bd:24:c8:71:9a:67: e3:64:73:a7:90:33:cb:86:93:23:79:b6:8e:34:98:ed:cc:22: f2:73:2b:9c:c4:6d:44:73:f8:53:f5:26:db:d4:cc:bc:b7:3b: 0d:91:dc:b6:ef:60:93:af:d5:ca:57:51:41:2a:4d:3e:f3:02: 32:e9:f5:2b:de:82:29:ca:d5:09:c9:41:ee:3a:9f:6a:d5:35: 8d:26:c4:b6:c5:60:db:5b:d2:e8:14:e4:7d:44:ae:6b:64:1e: 5e:9a:7a:6e:f8:b3:c9:32:db:7c:07:fa:93:c3:5f:f3:db:7a: 0a:8c:64:0e:50:87:0a:dd:3e:ef:ce:a7:39:8e:79:1b:a3:a1: 2e:da:c8:a0:7d:54:6b:6f:9a:75:a8:05:45:c3:f1:fa:ec:b7: 8d:5f:9e:a3:47:69:66:68:be:ca:a6:ef:00:82:49:1b:77:20: 61:e2:1b:60:b0:d6:32:1a:07:9b:40:e0:4c:1c:bd:e2:43:87: 14:ae:e8:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1acz5FVvszwBPL/uHqXUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUxMjE5MDcwMTI0WhcNMjUxMjIwMDcwMTI0WjAzMTEwLwYDVQQD EygxMmE5MTUwNjE1YmIyYmYwYmY5NWUxNzRiNjVjNmE0NDk2NDFiYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3tsFn0VdHj+//30dCNJSqjJtgp3 0mjuJAXmPrsTTNrRH4DvLtzylNa6tq5u5N2eIPY4rgNHir2fD0pka+flnMNQ97J8 kY8Hkqjuo1LfheIBwT5DPQUM6kE03rQvK2hYT9wSwLSwSBuIjQf3bF94ylwQQkj0 6HooJdBiFUNPK2ZoM1j5yCG70q36ko3Lr3SxUvKR53rnKJyImv4stmheA6MdFI5n 9iTev1h4iNWEAwSVVwnEEAcQgvLyS8B1ALxf4+/5WvMIhYmJbtPxYJ4veKTfOPku 1QRt//jgs/SJftH/pWYyrTUt8cogEbB8UgWjy/Pot49OU7mrWWlcgoOEsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKpFQYVuyvwv5XhdLZcakSWQbuHMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYNxS6NR ID4mESroz48rTzSG5sy4yU/6LFMU9Z09/gldWibqIbSODfr8bf9ohWt4+h3ZQEaR 6jkyQkCM7LAiT7ZDvSTIcZpn42Rzp5Azy4aTI3m2jjSY7cwi8nMrnMRtRHP4U/Um 29TMvLc7DZHctu9gk6/VyldRQSpNPvMCMun1K96CKcrVCclB7jqfatU1jSbEtsVg 21vS6BTkfUSua2QeXpp6bvizyTLbfAf6k8Nf89t6CoxkDlCHCt0+786nOY55G6Oh LtrIoH1Ua2+adagFRcPx+uy3jV+eo0dpZmi+yqbvAIJJG3cgYeIbYLDWMhoHm0Dg TBy94kOHFK7oHA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:54:13 2025 by rpki-client