This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: zP5fwVzxo6/x19KnJq6BCVcQfwwXHW1mOQhRlCJmV3c= Subject key identifier: A3:95:2F:03:44:4C:B6:C2:A9:ED:9A:40:D6:1F:25:9A:62:3D:D6:88 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B42EEA7F1E58D9E84B66DBAEF5B1E8680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 22:01:35 +0000 Manifest this update: Sun 21 Dec 2025 22:01:35 +0000 Manifest next update: Mon 22 Dec 2025 22:01:35 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 3: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 4: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 5: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 6: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 7: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 8: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 9: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 10: l4Qn1DLaoWGHSM-0zESfzSh4Fw8.roa (hash: W8F0siH2pbAIwect+ZY/d1YQO550SRj2/v8w6HmnQfY=) 11: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 12: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: EOVL0Xsb9Ufmut+DF4W+Jt4nSS9ppHl6wR4FRuty6uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:a7:f1:e5:8d:9e:84:b6:6d:ba:ef:5b:1e:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Dec 21 22:01:35 2025 GMT Not After : Dec 22 22:01:35 2025 GMT Subject: CN=a3952f03444cb6c2a9ed9a40d61f259a623dd688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:1f:24:86:59:c8:de:7a:9e:eb:58:89:4b: 52:98:84:91:92:f6:f5:da:1c:da:9a:5c:c9:dd:82: 6b:34:c3:bf:be:1e:ea:97:07:03:49:bb:4e:70:fb: 38:58:19:2e:c5:8d:3e:2e:bc:f0:22:17:43:2a:2b: 41:99:93:21:9b:a8:8e:c5:fb:c3:d8:06:92:88:0c: 90:5b:0b:7f:0e:c3:de:11:6b:51:14:34:c3:54:79: ae:44:d6:19:f0:79:72:e9:2b:61:68:b0:95:5e:58: b9:18:0f:91:26:e4:98:10:b1:9f:13:17:04:ff:cf: 92:4f:be:d5:64:12:38:39:52:65:7a:83:0a:ad:fe: ec:10:e0:5a:71:2d:cf:ac:88:bd:82:15:94:1b:17: 09:ef:00:80:0c:cc:b0:25:66:f1:67:84:87:e2:3a: 82:a7:0e:21:0e:b9:68:22:f4:b0:c2:a7:42:74:a8: aa:c4:94:68:56:0a:51:aa:c0:49:ce:50:5d:43:ec: f2:4f:5a:2e:6b:40:02:f5:16:ad:87:c3:8b:87:56: 12:35:ce:af:6c:31:4b:2d:3d:39:6c:b7:58:03:e3: f8:51:90:71:5d:25:b6:c5:58:6c:c8:c3:4c:83:31: cc:0a:e4:38:39:16:25:55:74:b1:c2:d5:04:e5:aa: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:2F:03:44:4C:B6:C2:A9:ED:9A:40:D6:1F:25:9A:62:3D:D6:88 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:91:29:1b:97:7e:57:30:97:c8:ea:2d:46:eb:c0:65:82:ee: 23:bf:dd:50:24:7a:70:1d:83:17:39:70:81:91:68:39:c1:88: 50:37:c0:c0:4b:5d:0f:a5:0d:9d:d5:12:30:60:1c:b5:4b:17: 65:c7:16:5a:ae:e6:c3:24:ba:e9:71:bb:e8:79:45:8c:03:9b: 67:20:a8:3c:39:57:fa:78:d8:c8:5d:aa:57:aa:1b:c4:c9:c0: e3:71:89:d3:ca:ab:6a:be:af:da:3d:65:4c:26:a9:01:98:68: 57:33:fd:fb:09:de:f2:3c:21:10:68:96:5a:e7:7a:c9:2e:d8: 78:3c:e1:03:3d:1b:7b:df:01:17:6e:a7:54:0a:1c:f9:a7:6e: 6c:e3:e1:c1:86:f3:2e:99:9c:45:16:1b:89:fb:64:c9:69:81: 85:87:bc:d8:d2:66:98:0b:bf:32:c8:86:2f:43:70:01:01:6a: 5f:7e:75:e2:e2:a6:19:97:2b:b8:a7:27:8b:93:88:32:d1:f9: 1b:63:5f:af:28:b5:16:d2:bc:6c:44:c8:11:a3:02:0b:7f:ee: 46:6b:fa:6f:50:68:87:ed:96:8e:26:14:85:0f:dc:02:91:15: f6:66:5f:61:4c:0e:b6:bf:c8:58:c2:f7:ae:f5:48:bd:16:77: 68:b4:60:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7qfx5Y2ehLZtuu9bHoaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUxMjIxMjIwMTM1WhcNMjUxMjIyMjIwMTM1WjAzMTEwLwYDVQQD EyhhMzk1MmYwMzQ0NGNiNmMyYTllZDlhNDBkNjFmMjU5YTYyM2RkNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4fJIZZyN56nutYiUtSmISRkvb1 2hzamlzJ3YJrNMO/vh7qlwcDSbtOcPs4WBkuxY0+LrzwIhdDKitBmZMhm6iOxfvD 2AaSiAyQWwt/DsPeEWtRFDTDVHmuRNYZ8Hly6SthaLCVXli5GA+RJuSYELGfExcE /8+ST77VZBI4OVJleoMKrf7sEOBacS3PrIi9ghWUGxcJ7wCADMywJWbxZ4SH4jqC pw4hDrloIvSwwqdCdKiqxJRoVgpRqsBJzlBdQ+zyT1oua0AC9Rath8OLh1YSNc6v bDFLLT05bLdYA+P4UZBxXSW2xVhsyMNMgzHMCuQ4ORYlVXSxwtUE5apKrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOVLwNETLbCqe2aQNYfJZpiPdaIMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpEpG5d+ VzCXyOotRuvAZYLuI7/dUCR6cB2DFzlwgZFoOcGIUDfAwEtdD6UNndUSMGActUsX ZccWWq7mwyS66XG76HlFjAObZyCoPDlX+njYyF2qV6obxMnA43GJ08qrar6v2j1l TCapAZhoVzP9+wne8jwhEGiWWud6yS7YeDzhAz0be98BF26nVAoc+adubOPhwYbz LpmcRRYbiftkyWmBhYe82NJmmAu/MsiGL0NwAQFqX3514uKmGZcruKcni5OIMtH5 G2Nfryi1FtK8bETIEaMCC3/uRmv6b1Boh+2WjiYUhQ/cApEV9mZfYUwOtr/IWML3 rvVIvRZ3aLRgmw== -----END CERTIFICATE-----Generated at Mon Dec 22 05:50:01 2025 by rpki-client