This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft File: pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json) Hash identifier: ciZcOSPMPYsDO75xnmuFtkBSD3phD5IkxXMHUzKcKcM= Subject key identifier: 06:5B:94:DF:83:DB:BC:EA:ED:1A:44:9B:DF:96:13:DA:8A:4C:6B:86 Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Certificate serial: 019B34FB821D6095556192A7FFC3B8AF425D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft Manifest number: 11DE Signing time: Fri 19 Dec 2025 05:00:56 +0000 Manifest this update: Fri 19 Dec 2025 05:00:56 +0000 Manifest next update: Sat 20 Dec 2025 05:00:56 +0000 Files and hashes: 1: WVsTj7MenBGl38xhkFqi5Z0aczs.roa (hash: 7b6SsFE3NdlNY/Clv2Hjf1UktFQZh/V54AuKRqY5yFI=) 2: Z7WMX0zmtWSwL1nl_bRrocAt96g.roa (hash: vascd8IZpBAaNc+5SLZNF4hkGl3zooaWaRamiX+4Grw=) 3: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: crTSYyZD7t1cTIHdYDJE9/A11KK6H+zzS6efI8/cDRA=) 4: zGOXqDkKzJdU0p47Wrv4dob9WRY.roa (hash: h/PYhmoQAY7EhuYv56qskYi6sqC9Lx5gg5uwdXV3h5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:82:1d:60:95:55:61:92:a7:ff:c3:b8:af:42:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Validity Not Before: Dec 19 05:00:56 2025 GMT Not After : Dec 20 05:00:56 2025 GMT Subject: CN=065b94df83dbbceaed1a449bdf9613da8a4c6b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d7:31:64:31:c2:fb:c6:6b:e1:e6:d6:3d:4d: 99:c0:b9:ae:1e:db:f0:f5:0d:2e:b8:3c:f2:98:c4: d3:1a:c8:56:d7:c7:a6:20:6b:4a:77:55:7c:59:b0: 28:54:d1:d0:f9:69:6c:a1:23:eb:b5:f5:1e:c6:54: ce:c6:9c:8a:4c:cc:9d:44:e6:dc:22:69:5c:07:35: f6:98:34:52:f9:67:c9:21:bc:3c:02:4f:3e:d5:33: 24:b9:e0:1f:a1:97:93:ab:a9:12:2e:3b:a5:7e:c1: 95:db:da:0b:0d:a2:ff:90:97:f2:43:e7:fb:f9:05: 25:12:71:2f:e1:a6:3d:f7:61:73:e4:4c:33:b3:49: 70:72:36:01:3a:0d:ac:ce:3b:07:e2:3d:27:11:8d: 9e:ba:e5:5b:c4:ce:33:03:78:5c:4e:3b:53:8a:ec: 05:10:c7:93:51:83:e2:23:ac:9f:12:75:25:69:43: 9f:1f:5d:bb:d5:a9:c9:d7:10:0e:87:49:25:8b:61: 40:a3:48:c3:66:3e:2c:2b:5b:e1:c6:6b:38:de:89: 33:34:be:96:89:c0:07:fd:da:82:ff:65:33:d5:e3: 18:97:80:1e:e7:b2:36:74:a8:ef:60:3e:8e:5d:3c: 7e:17:d3:0b:40:fe:4e:24:2d:8a:74:0d:03:a5:77: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:94:DF:83:DB:BC:EA:ED:1A:44:9B:DF:96:13:DA:8A:4C:6B:86 X509v3 Authority Key Identifier: keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2f:79:31:0f:a3:24:84:d0:35:09:b6:ab:0f:26:49:1c:51: 97:58:ea:b2:03:f1:0b:59:2e:7d:3c:f1:51:cc:82:68:46:c3: 6c:c4:e0:a8:ef:07:17:d3:9b:57:c2:ae:74:a6:ed:31:d4:93: 92:db:8a:b7:51:89:cf:1e:c2:67:a5:aa:b3:a4:18:3d:1a:57: 09:4f:c6:d7:55:05:55:71:02:6b:21:49:96:a3:ac:2e:5d:61: a0:c2:6d:ff:f0:17:8e:b5:c6:bb:81:f8:1c:dd:e5:4b:94:8c: 0b:e1:48:91:31:51:c4:05:56:59:12:ed:bc:3a:63:d5:d5:c6: f1:a3:3d:6f:4a:d6:fb:74:71:15:3c:ec:34:0e:77:1d:48:1e: 61:c4:44:c9:73:c6:f6:af:9d:99:72:04:89:39:2f:04:bd:2a: c2:20:42:3e:0f:30:26:f5:a8:e9:38:1f:27:7a:75:73:f6:dc: 04:99:ea:fe:ee:7b:3f:02:5c:76:22:4e:b0:26:8e:d5:4c:98: 5f:ec:fe:fb:b3:f4:a9:0b:93:7f:f6:bd:7c:7f:1f:9f:3d:47: 92:a2:7a:09:54:d1:91:96:c1:fc:78:3f:2d:d8:e8:5b:92:51: 28:47:45:6b:8f:3e:d4:a9:e4:ff:3b:bd:9d:bf:5e:85:e0:62: 86:b5:d8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+4IdYJVVYZKn/8O4r0JdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj MTZkZDAwHhcNMjUxMjE5MDUwMDU2WhcNMjUxMjIwMDUwMDU2WjAzMTEwLwYDVQQD EygwNjViOTRkZjgzZGJiY2VhZWQxYTQ0OWJkZjk2MTNkYThhNGM2Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtcxZDHC+8Zr4ebWPU2ZwLmuHtvw 9Q0uuDzymMTTGshW18emIGtKd1V8WbAoVNHQ+WlsoSPrtfUexlTOxpyKTMydRObc ImlcBzX2mDRS+WfJIbw8Ak8+1TMkueAfoZeTq6kSLjulfsGV29oLDaL/kJfyQ+f7 +QUlEnEv4aY992Fz5Ewzs0lwcjYBOg2szjsH4j0nEY2euuVbxM4zA3hcTjtTiuwF EMeTUYPiI6yfEnUlaUOfH1271anJ1xAOh0kli2FAo0jDZj4sK1vhxms43okzNL6W icAH/dqC/2Uz1eMYl4Ae57I2dKjvYD6OXTx+F9MLQP5OJC2KdA0DpXfdaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZblN+D27zq7RpEm9+WE9qKTGuGMB8GA1UdIwQY MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt NjJkNDJmZTZmZDNjLzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC95MQ+j JITQNQm2qw8mSRxRl1jqsgPxC1kufTzxUcyCaEbDbMTgqO8HF9ObV8KudKbtMdST ktuKt1GJzx7CZ6Wqs6QYPRpXCU/G11UFVXECayFJlqOsLl1hoMJt//AXjrXGu4H4 HN3lS5SMC+FIkTFRxAVWWRLtvDpj1dXG8aM9b0rW+3RxFTzsNA53HUgeYcREyXPG 9q+dmXIEiTkvBL0qwiBCPg8wJvWo6TgfJ3p1c/bcBJnq/u57PwJcdiJOsCaO1UyY X+z++7P0qQuTf/a9fH8fnz1HkqJ6CVTRkZbB/Hg/LdjoW5JRKEdFa48+1Knk/zu9 nb9eheBihrXYnw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:32 2025 by rpki-client