This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft File: _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json) Hash identifier: kDlZ04eBVw1S1XPT+aF6JP0S16Zb6Op7ff94ks1PQYU= Subject key identifier: CC:99:5E:40:58:C9:B4:2B:82:70:CF:61:3E:BE:0E:D8:9E:14:0C:FA Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d Certificate serial: 019B593EED34C61503EE8AA20E45ADEB2EEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft Manifest number: 0AA3 Signing time: Fri 26 Dec 2025 06:00:54 +0000 Manifest this update: Fri 26 Dec 2025 06:00:54 +0000 Manifest next update: Sat 27 Dec 2025 06:00:54 +0000 Files and hashes: 1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: wGiYthl4Gxom3OvHmVU9tWPzJx2zs9Lhlni2dybAxm0=) 2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:ed:34:c6:15:03:ee:8a:a2:0e:45:ad:eb:2e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d Validity Not Before: Dec 26 06:00:54 2025 GMT Not After : Dec 27 06:00:54 2025 GMT Subject: CN=cc995e4058c9b42b8270cf613ebe0ed89e140cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:66:dc:29:4d:2e:7f:24:90:3f:f7:95:36:14: f4:1c:f1:8d:21:07:08:5e:05:14:df:3c:96:ec:db: d1:f4:4e:37:f9:30:3f:4f:08:ae:e3:01:85:dc:b8: ea:3b:29:85:1a:9a:3c:40:34:eb:ae:27:6f:79:dd: 24:70:38:c7:91:05:42:6a:92:0c:8d:33:0c:46:41: ad:72:e0:06:49:6b:25:3c:6f:99:85:36:86:21:dc: 96:57:65:d0:d4:52:8d:57:ce:d5:72:a7:a4:0d:dd: 85:e1:68:3e:a5:9a:a8:c6:49:fc:ab:94:bc:cb:6e: 4a:3d:61:3b:0e:c1:49:03:91:77:fa:26:bc:c7:7f: 4f:c9:6b:c3:7c:c7:b3:c8:7b:65:bf:35:f4:b6:60: 4f:63:62:7c:b9:52:f3:6c:83:93:56:28:1c:99:6a: a1:80:4a:86:5e:84:7f:e2:fc:c0:ee:92:79:ff:b1: 79:d7:0f:d7:16:35:93:2b:72:95:98:5a:0e:d2:3e: 13:7d:19:e9:8c:04:5e:36:12:2c:61:87:7b:83:8f: 4c:f3:a4:fc:80:36:4b:dd:2d:86:ea:ba:52:72:eb: 53:08:10:51:0c:ba:25:cd:e5:66:f2:cd:96:c8:64: a6:b6:81:d3:7c:b2:64:25:6e:b0:90:0a:2e:f4:72: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:99:5E:40:58:C9:B4:2B:82:70:CF:61:3E:BE:0E:D8:9E:14:0C:FA X509v3 Authority Key Identifier: keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:46:62:2e:4e:a5:f5:9a:ba:77:68:d0:56:98:22:85:04:e1: dc:93:8d:f9:1b:a5:42:ce:7d:b7:50:60:61:f8:66:b1:d7:d4: b9:fa:93:18:bf:29:37:56:4b:7a:96:43:aa:40:70:4a:a9:70: 72:39:4e:41:18:0b:6d:be:e6:f6:96:7b:1c:b0:73:ac:ce:d1: 64:a2:64:f3:30:9a:dc:ee:3c:4b:aa:fe:3b:a2:0e:58:cc:13: 4c:58:28:43:4d:1e:c4:e6:86:6b:df:8b:6d:86:0f:71:d0:38: d5:c7:3d:4f:47:1b:01:6f:07:ae:56:a0:93:e1:9b:0d:4c:37: c2:54:78:a9:4f:aa:ab:c0:21:70:36:58:f2:3d:5b:28:21:07: c7:0f:84:eb:ab:dc:d7:66:54:37:bc:2e:39:e0:32:0c:b3:15: 59:9f:55:da:36:15:e9:ba:c7:ea:9c:cb:e6:3d:92:3b:25:15: 3b:59:90:24:b3:5d:99:44:c9:d7:6f:6d:aa:25:b2:11:1d:69: 6f:f4:91:65:31:fa:c3:d8:c6:fb:fe:33:67:fd:2a:d4:39:4b: 44:41:ae:ce:a8:36:06:19:dc:28:d1:1a:28:2c:e5:6a:28:9f: 84:5e:51:6c:f2:cc:ce:78:e7:28:2c:96:da:93:63:91:6c:68: b5:d2:c4:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPu00xhUD7oqiDkWt6y7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5 NjFiNmQwHhcNMjUxMjI2MDYwMDU0WhcNMjUxMjI3MDYwMDU0WjAzMTEwLwYDVQQD EyhjYzk5NWU0MDU4YzliNDJiODI3MGNmNjEzZWJlMGVkODllMTQwY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2bcKU0ufySQP/eVNhT0HPGNIQcI XgUU3zyW7NvR9E43+TA/Twiu4wGF3LjqOymFGpo8QDTrridved0kcDjHkQVCapIM jTMMRkGtcuAGSWslPG+ZhTaGIdyWV2XQ1FKNV87VcqekDd2F4Wg+pZqoxkn8q5S8 y25KPWE7DsFJA5F3+ia8x39PyWvDfMezyHtlvzX0tmBPY2J8uVLzbIOTVigcmWqh gEqGXoR/4vzA7pJ5/7F51w/XFjWTK3KVmFoO0j4TfRnpjAReNhIsYYd7g49M86T8 gDZL3S2G6rpScutTCBBRDLolzeVm8s2WyGSmtoHTfLJkJW6wkAou9HK2xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyZXkBYybQrgnDPYT6+DtieFAz6MB8GA1UdIwQY MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt YjY4MzViNzMyYWQ2LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2 LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0ZiLk6l 9Zq6d2jQVpgihQTh3JON+RulQs59t1BgYfhmsdfUufqTGL8pN1ZLepZDqkBwSqlw cjlOQRgLbb7m9pZ7HLBzrM7RZKJk8zCa3O48S6r+O6IOWMwTTFgoQ00exOaGa9+L bYYPcdA41cc9T0cbAW8Hrlagk+GbDUw3wlR4qU+qq8AhcDZY8j1bKCEHxw+E66vc 12ZUN7wuOeAyDLMVWZ9V2jYV6brH6pzL5j2SOyUVO1mQJLNdmUTJ129tqiWyER1p b/SRZTH6w9jG+/4zZ/0q1DlLREGuzqg2BhncKNEaKCzlaiifhF5RbPLMznjnKCyW 2pNjkWxotdLE6g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:05 2025 by rpki-client