This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft File: pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json) Hash identifier: fhjY+aJeTGi+ajbdIuGFKwJZC+lz3JXCYps+PMvsOJQ= Subject key identifier: 8B:04:C5:04:48:D8:B0:4F:ED:99:C5:C8:47:09:AB:8E:B4:B7:9F:09 Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9 Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9 Certificate serial: 019B07EBC934FA9B896A89525831638E090C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft Manifest number: 131F Signing time: Wed 10 Dec 2025 11:00:51 +0000 Manifest this update: Wed 10 Dec 2025 11:00:51 +0000 Manifest next update: Thu 11 Dec 2025 11:00:51 +0000 Files and hashes: 1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=) 2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: bB3QIU0Ug7JcA6HHxkLJD71grZqjKGntZCWEBjSR50I=) 3: q3I5uk601CP6yEVw9P03xUPnugY.roa (hash: ZDpLV11aWOXOyH1x/80gaRdd+gvEXhTdOywUgcsSS20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:eb:c9:34:fa:9b:89:6a:89:52:58:31:63:8e:09:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9 Validity Not Before: Dec 10 11:00:51 2025 GMT Not After : Dec 11 11:00:51 2025 GMT Subject: CN=8b04c50448d8b04fed99c5c84709ab8eb4b79f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:c6:35:12:b0:5b:3d:b5:50:b9:e9:55:21: 30:17:7f:00:78:8b:c3:19:7e:81:d7:a7:d9:be:27: 8c:37:b5:3c:bc:fa:77:a3:cf:8e:97:cc:6c:4e:16: a7:9d:aa:7e:0c:34:14:89:ce:7a:5f:fd:05:6d:b4: ee:1e:40:13:aa:14:33:2a:a3:99:39:51:df:cd:43: 43:c0:ea:5d:c5:bc:0c:8e:58:46:0b:0d:de:02:ef: 78:79:df:b0:98:d8:45:2b:8d:c8:33:80:4b:45:53: 52:19:f1:1d:d1:25:e8:5d:d5:58:35:aa:34:6b:65: 9c:ee:ba:34:47:e5:15:7a:99:1d:22:ec:c6:f2:9b: d4:75:25:13:52:79:34:96:f1:d4:27:44:62:b9:3b: 9a:32:05:cd:a1:c7:b1:f7:16:08:55:62:52:aa:cf: e8:12:b9:cb:de:1f:00:b9:2f:2e:e6:a2:ca:e5:8f: ca:aa:2a:4f:bf:6c:55:f4:3b:ed:0e:d2:25:31:e4: 9c:ed:38:08:75:3c:6b:29:e2:dd:de:f9:ec:59:4b: ac:6d:89:0f:09:b9:ab:66:dc:f1:3f:d0:bf:c2:84: 66:48:1a:f3:15:11:d4:f6:df:16:9e:cc:e3:b2:67: 07:a0:b3:45:8a:5b:a0:7b:b5:a8:fd:fe:be:0c:ef: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:04:C5:04:48:D8:B0:4F:ED:99:C5:C8:47:09:AB:8E:B4:B7:9F:09 X509v3 Authority Key Identifier: keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:87:c8:79:82:4e:dd:b0:27:f6:01:96:0a:2d:e2:ed:48:02: 71:66:24:cc:fd:c6:6f:5e:50:4c:9a:e9:10:6e:60:fc:14:36: bd:94:7b:b0:4f:6d:a3:7c:ff:76:df:06:d4:4d:2f:fe:59:95: d9:a9:01:df:96:46:3e:d0:b0:c6:cf:2a:8e:0d:25:26:f0:f9: a6:e5:a9:7c:c5:ad:b2:cf:c7:b5:25:60:c8:0f:6e:55:e8:10: ed:18:17:3b:a3:3b:aa:8d:6a:42:bd:ab:98:0a:e6:96:c8:bf: db:e9:b7:d3:6a:d7:b2:0f:be:2f:eb:3d:3b:f9:7c:74:25:5b: 38:73:a8:ff:f6:0d:ea:29:40:89:37:b8:1d:fd:28:b9:6e:cf: 2c:ee:e4:22:cb:71:24:4f:5a:b7:52:3b:4a:c4:64:29:3f:9d: ef:0a:bb:58:33:03:b8:23:b5:cf:c7:40:a6:90:eb:94:aa:9e: e4:37:bd:f4:98:ce:1d:3d:8d:bc:29:9a:3b:fe:82:f8:dc:7e: c0:81:a3:bf:65:fc:fd:75:24:de:de:83:38:70:38:1a:16:31: 34:6e:be:28:23:f1:76:61:6c:09:6f:1b:b4:91:07:e5:8d:7c: 9a:84:32:41:8b:ee:9f:cc:e4:9f:2a:38:8e:a3:ac:59:a5:d5: ec:bd:5e:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH68k0+puJaolSWDFjjgkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2 NTVhYTkwHhcNMjUxMjEwMTEwMDUxWhcNMjUxMjExMTEwMDUxWjAzMTEwLwYDVQQD Eyg4YjA0YzUwNDQ4ZDhiMDRmZWQ5OWM1Yzg0NzA5YWI4ZWI0Yjc5ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPrGNRKwWz21ULnpVSEwF38AeIvD GX6B16fZvieMN7U8vPp3o8+Ol8xsThannap+DDQUic56X/0FbbTuHkATqhQzKqOZ OVHfzUNDwOpdxbwMjlhGCw3eAu94ed+wmNhFK43IM4BLRVNSGfEd0SXoXdVYNao0 a2Wc7ro0R+UVepkdIuzG8pvUdSUTUnk0lvHUJ0RiuTuaMgXNocex9xYIVWJSqs/o ErnL3h8AuS8u5qLK5Y/KqipPv2xV9DvtDtIlMeSc7TgIdTxrKeLd3vnsWUusbYkP CbmrZtzxP9C/woRmSBrzFRHU9t8WnszjsmcHoLNFiluge7Wo/f6+DO+vjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsExQRI2LBP7ZnFyEcJq460t58JMB8GA1UdIwQY MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut YzY5NGYwZWFjYmE2LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2 LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYfIeYJO 3bAn9gGWCi3i7UgCcWYkzP3Gb15QTJrpEG5g/BQ2vZR7sE9to3z/dt8G1E0v/lmV 2akB35ZGPtCwxs8qjg0lJvD5puWpfMWtss/HtSVgyA9uVegQ7RgXO6M7qo1qQr2r mArmlsi/2+m302rXsg++L+s9O/l8dCVbOHOo//YN6ilAiTe4Hf0ouW7PLO7kIstx JE9at1I7SsRkKT+d7wq7WDMDuCO1z8dAppDrlKqe5De99JjOHT2NvCmaO/6C+Nx+ wIGjv2X8/XUk3t6DOHA4GhYxNG6+KCPxdmFsCW8btJEH5Y18moQyQYvun8zknyo4 jqOsWaXV7L1eOQ== -----END CERTIFICATE-----Generated at Wed Dec 10 13:32:37 2025 by rpki-client