This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft File: PplTRJPLqcidveJi-HoVh6Sqmd8.mft (raw, json) Hash identifier: 9KDFnX8gAwPLMpBX6oiHZBn0Ik7StJapFnOYdnnDq9U= Subject key identifier: 8D:58:3A:5C:01:AD:3E:99:5D:79:0A:8C:EB:7C:4C:A8:2D:FE:A6:52 Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df Certificate serial: 019B5A5153F958CA4C7A3D370DBD4EF2275C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft Manifest number: 01CA Signing time: Fri 26 Dec 2025 11:00:37 +0000 Manifest this update: Fri 26 Dec 2025 11:00:37 +0000 Manifest next update: Sat 27 Dec 2025 11:00:37 +0000 Files and hashes: 1: OGmt6hTizBTWFlQiZVVHVA04Y3U.roa (hash: xCC8yaYb4MbRSmuBq04Jv3nbwpYcLxsiyEFiClMW7jI=) 2: PplTRJPLqcidveJi-HoVh6Sqmd8.crl (hash: PFjVIL5btlg7EJVtaMjBlnhdcC/fmk8pI3ndQi90Beo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:53:f9:58:ca:4c:7a:3d:37:0d:bd:4e:f2:27:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df Validity Not Before: Dec 26 11:00:37 2025 GMT Not After : Dec 27 11:00:37 2025 GMT Subject: CN=8d583a5c01ad3e995d790a8ceb7c4ca82dfea652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:76:9a:7c:8d:e9:91:b2:50:de:62:7a:60: 40:51:2a:a1:85:75:3e:3a:b7:d3:50:22:35:9b:5d: 09:2e:4f:d2:bb:4e:a9:41:25:e4:dc:a8:1b:4c:bc: f8:a8:45:0e:87:38:62:9f:49:da:3c:33:32:16:dc: 53:f3:1f:b3:b6:5d:59:aa:b5:44:8a:7e:01:f8:57: 52:f5:6e:c3:1e:59:3a:4a:25:c9:61:27:eb:08:ba: ea:2b:18:29:dd:42:dd:4e:96:c8:c8:4e:42:16:7a: a2:33:75:1f:5f:19:38:7e:51:83:5d:1e:48:c6:e3: c2:dd:1d:47:67:a9:04:4b:9d:77:52:52:42:5f:0c: ba:3a:f9:1b:29:64:7b:eb:cb:77:c5:47:64:b6:a0: 83:72:39:a3:99:b3:5b:f8:9b:8a:5b:9b:24:a3:bc: 21:d4:51:72:d3:2d:f9:96:bf:48:68:f3:a9:af:13: 6d:5b:08:e3:73:55:85:18:88:a6:8d:46:e7:d9:aa: de:c3:32:ff:94:e2:75:56:98:f6:0e:4b:6b:88:9b: 23:e0:ce:6c:6a:66:d5:0f:7c:a2:4b:32:b9:44:1e: 5c:35:d4:02:c3:7e:15:84:64:a4:81:8a:11:97:77: 92:8d:bd:46:5a:65:78:22:8a:b2:07:e8:54:09:73: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:58:3A:5C:01:AD:3E:99:5D:79:0A:8C:EB:7C:4C:A8:2D:FE:A6:52 X509v3 Authority Key Identifier: keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ce:2f:b7:e0:1d:50:ee:7e:cf:17:5d:aa:6a:dc:d6:6a:cf: 72:b9:b1:b3:8f:c0:51:ba:ca:bf:83:4a:26:ed:2f:d7:d3:c5: f7:28:5f:40:3b:58:2f:25:e9:7e:8d:f2:19:7d:ac:fc:8e:91: e6:68:b1:47:24:84:f7:7c:52:61:6f:62:64:18:c0:e9:fe:be: 14:d3:06:45:cf:9c:e0:fd:28:7d:d3:24:b2:45:05:45:c6:8f: cd:1c:83:95:90:2f:38:0a:62:ee:b2:f9:26:ba:62:18:5a:86: e1:71:75:b6:5e:52:aa:eb:82:42:3a:23:c7:2c:ee:51:cb:92: 71:8d:eb:0a:8a:14:9e:d5:bd:e5:32:42:77:7d:b6:07:3b:7d: 8f:20:29:ff:65:ff:e2:f3:34:46:3a:08:60:52:a6:c1:46:44: 55:cb:40:46:f8:b5:82:ad:0e:a0:de:8d:92:a8:de:c1:e7:13: 0b:aa:ea:94:ab:4d:ea:3f:07:fd:12:5c:92:0e:be:e3:79:47: 63:91:1e:de:7e:ee:b2:83:7f:b5:49:99:e2:13:7b:a3:e0:ed: e0:b3:b8:02:68:89:5a:23:39:c7:10:70:58:fd:99:78:b6:32: 24:4e:bb:79:b5:48:8a:25:4c:ea:b9:f7:01:37:35:96:7b:ab: 33:85:1e:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVP5WMpMej03Db1O8idcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOTk1MzQ0OTNjYmE5Yzg5ZGJkZTI2MmY4N2ExNTg3YTRh YTk5ZGYwHhcNMjUxMjI2MTEwMDM3WhcNMjUxMjI3MTEwMDM3WjAzMTEwLwYDVQQD Eyg4ZDU4M2E1YzAxYWQzZTk5NWQ3OTBhOGNlYjdjNGNhODJkZmVhNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy12mnyN6ZGyUN5iemBAUSqhhXU+ OrfTUCI1m10JLk/Su06pQSXk3KgbTLz4qEUOhzhin0naPDMyFtxT8x+ztl1ZqrVE in4B+FdS9W7DHlk6SiXJYSfrCLrqKxgp3ULdTpbIyE5CFnqiM3UfXxk4flGDXR5I xuPC3R1HZ6kES513UlJCXwy6OvkbKWR768t3xUdktqCDcjmjmbNb+JuKW5sko7wh 1FFy0y35lr9IaPOprxNtWwjjc1WFGIimjUbn2arewzL/lOJ1Vpj2DktriJsj4M5s ambVD3yiSzK5RB5cNdQCw34VhGSkgYoRl3eSjb1GWmV4IoqyB+hUCXOvtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1YOlwBrT6ZXXkKjOt8TKgt/qZSMB8GA1UdIwQY MBaAFD6ZU0STy6nInb3iYvh6FYekqpnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODct NWVkMDc3ZWI4YmUwLzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODctNWVkMDc3ZWI4YmUw LzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM4vt+Ad UO5+zxddqmrc1mrPcrmxs4/AUbrKv4NKJu0v19PF9yhfQDtYLyXpfo3yGX2s/I6R 5mixRySE93xSYW9iZBjA6f6+FNMGRc+c4P0ofdMkskUFRcaPzRyDlZAvOApi7rL5 JrpiGFqG4XF1tl5SquuCQjojxyzuUcuScY3rCooUntW95TJCd322Bzt9jyAp/2X/ 4vM0RjoIYFKmwUZEVctARvi1gq0OoN6NkqjewecTC6rqlKtN6j8H/RJckg6+43lH Y5Ee3n7usoN/tUmZ4hN7o+Dt4LO4AmiJWiM5xxBwWP2ZeLYyJE67ebVIiiVM6rn3 ATc1lnurM4UeWA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:58 2025 by rpki-client