This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
File:                     576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft (raw, json)
Hash identifier:          BxJNf/5EvTYgCi/Ex4kc/vE9Nsa77w0CBU4nZEU5fkU=
Subject key identifier:   67:4F:2D:85:B4:EC:47:43:AB:6F:77:EB:AF:14:A5:52:98:F2:8B:25
Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Certificate issuer:       /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Certificate serial:       2F0359A86EACB0E3D1D7AD5D0AD20F54BB1E0468
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject info access:      rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
Manifest number:          D9
Signing time:             Sun 25 Jan 2026 03:33:48 +0000
Manifest this update:     Sun 25 Jan 2026 03:28:48 +0000
Manifest next update:     Mon 26 Jan 2026 18:50:48 +0000
Files and hashes:         1: 326131343a373538333a663830313a3a2f34382d3438203d3e20323032363733.roa (hash: xOYnFalGv0z3yUWe6ner4v8ODNTTrQtrbhGQRtgoXWc=)
                          2: 326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (hash: IkICwXXmYIH53Eafwhe+5p63oc0eGBQuzy6z5GFeHKE=)
                          3: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl (hash: tJGMVvzwRsNdEo8AJZpP+WJLGpsDG4WJehsSqSot1GQ=)
Validation:               OK
Signature path:           rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl
                          rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:03:59:a8:6e:ac:b0:e3:d1:d7:ad:5d:0a:d2:0f:54:bb:1e:04:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
        Validity
            Not Before: Jan 25 03:28:48 2026 GMT
            Not After : Jan 26 18:50:48 2026 GMT
        Subject: CN=674F2D85B4EC4743AB6F77EBAF14A55298F28B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:c8:34:a7:e2:65:24:72:23:88:b1:a5:10:
                    0f:8a:f9:d5:17:e6:53:5e:70:53:87:82:22:02:51:
                    9f:c4:66:51:72:05:d3:0a:64:b4:12:47:22:4f:86:
                    5c:13:ea:c9:93:1b:5b:4b:a8:5c:89:b6:b8:98:b9:
                    42:60:cb:ca:f2:c9:10:a3:33:3f:06:0e:e9:d8:60:
                    ff:80:e2:c1:1e:a9:1d:60:62:c0:52:ad:b3:39:1f:
                    74:c2:29:96:86:7c:ae:e4:62:2f:5e:f7:02:3b:0c:
                    4f:70:1d:ce:2b:16:41:79:58:75:1e:d9:41:c4:69:
                    75:21:3a:df:0b:82:0c:11:7b:b3:ea:2d:0c:41:9a:
                    9d:2e:ee:82:4c:5e:df:7c:fc:25:5f:5f:2f:2c:1d:
                    c1:d5:1a:d0:c8:fb:6d:a1:89:3e:25:e4:0d:db:43:
                    65:99:bf:f9:37:19:21:d1:7c:d3:7f:c4:92:3b:e6:
                    45:02:c2:b6:3a:0f:c8:0a:71:9c:cc:36:10:94:6f:
                    24:34:9c:06:fa:1e:f9:da:7b:0d:81:54:3f:7d:77:
                    da:54:d1:a4:f1:ab:63:9c:ff:99:88:0a:bb:72:f7:
                    58:7b:c0:ce:5c:7d:35:61:60:31:e3:77:bb:ad:7d:
                    8c:1c:a2:55:ba:ae:7c:2a:82:3c:d6:8d:93:4c:8e:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:2D:85:B4:EC:47:43:AB:6F:77:EB:AF:14:A5:52:98:F2:8B:25
            X509v3 Authority Key Identifier:
                keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:66:3f:a8:ea:38:42:9e:86:66:3e:76:80:b2:d1:fb:af:55:
         ce:ca:11:1b:17:9c:8f:85:3a:ef:0f:5a:39:83:37:6c:cf:87:
         df:39:4c:b5:a6:36:93:52:5e:c4:83:c6:f6:68:48:14:e2:7e:
         9b:ce:b1:1a:b4:35:2b:93:dc:96:a4:d4:64:17:d7:df:ec:8e:
         90:46:b4:e5:1e:82:91:1f:48:6e:11:0e:c2:4d:80:63:95:7c:
         43:b4:c2:4f:b4:9d:b5:50:df:b8:b5:92:88:53:6b:9e:cd:b2:
         29:a9:06:6e:95:86:91:c0:6d:00:31:cc:b1:59:a6:00:b9:b9:
         65:e0:b3:dc:04:19:a5:74:60:45:ae:dc:88:82:55:45:a3:84:
         fa:2d:8e:43:b8:05:fa:46:6a:68:0f:32:be:70:d1:c6:7a:a0:
         4b:e6:a3:e0:ff:27:9e:9d:d1:eb:8e:9d:95:6b:22:70:9a:6e:
         87:92:7e:b2:b8:56:f4:a2:63:0e:94:e8:c6:09:e6:d0:a8:a0:
         ea:2c:b6:e9:cb:f0:0a:3b:af:7c:62:69:a0:f3:cd:7b:c1:b2:
         36:49:14:e1:62:78:5e:76:14:ad:73:62:e0:ae:3a:10:13:0f:
         46:06:a7:4f:cc:fe:c5:db:68:c1:33:ed:9c:48:e9:25:b6:ee:
         bf:6f:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:05:03 2026 by rpki-client