This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft File: PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json) Hash identifier: 4AA7/FVZ4kQvazeIVhfuA1mIIKO7kCAGlJhDMe1ANtw= Subject key identifier: 43:94:2F:62:9F:89:43:02:96:D2:15:B2:66:A8:DF:B2:1A:FD:BC:93 Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3 Certificate issuer: /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3 Certificate serial: 019AF465B24C42C1FAF39731C1DED1A52D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 16:01:36 +0000 Manifest this update: Sat 06 Dec 2025 16:01:36 +0000 Manifest next update: Sun 07 Dec 2025 16:01:36 +0000 Files and hashes: 1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: tc5ZHJOwaPeaSf7A14zXSr1ZUfx+FwxH8JjMpAeQAYw=) 2: _Y1GXKJ5A67loqKl1i2V9S3MWKg.roa (hash: V3o7sWDlYKkS4Nqv4VMpbKGi6d6rMWmkClDxQRZCgxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:b2:4c:42:c1:fa:f3:97:31:c1:de:d1:a5:2d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3 Validity Not Before: Dec 6 16:01:36 2025 GMT Not After : Dec 7 16:01:36 2025 GMT Subject: CN=43942f629f89430296d215b266a8dfb21afdbc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:63:8a:d5:b7:11:7f:0a:a4:ee:88:0c:a2: 27:b9:66:4e:4c:2e:9b:d4:78:c7:16:8d:fd:42:78: ff:93:f2:c0:b6:07:c9:54:2d:b9:c3:14:99:9b:98: 68:85:9c:9a:11:18:7f:55:78:2a:0d:2d:42:b0:e2: db:62:b6:f4:2b:0b:35:dc:13:f1:2c:6c:e3:e9:a3: 9d:90:1d:8f:a9:ae:f7:2c:84:bd:76:a1:d6:9a:34: ae:cd:f4:39:b6:19:b7:26:75:f4:69:bd:39:a2:69: b8:72:54:ea:c3:0f:50:13:e2:06:07:53:03:08:80: 14:b6:b9:c1:7c:55:d8:c3:6d:b7:97:67:12:e5:1d: 19:10:34:8b:09:e2:a7:df:62:cb:95:16:5a:07:51: 16:9d:ed:eb:10:3e:eb:f7:c5:e2:d6:ec:45:74:7e: e0:51:42:31:1a:99:6f:32:b9:58:6e:84:d9:bb:ac: 90:1d:68:8d:bd:08:fd:c4:e2:fd:51:c7:a4:23:91: 4b:ae:22:97:f2:ac:ee:0a:42:e1:45:0a:81:8a:7d: 50:fa:d1:3d:da:e4:98:d0:76:ea:73:61:ad:fc:b9: 45:45:7e:cb:88:e0:c6:14:bf:77:35:e9:d7:da:6e: 68:31:7f:a7:f7:53:a6:cc:60:0e:87:6f:d4:a4:14: 83:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:2F:62:9F:89:43:02:96:D2:15:B2:66:A8:DF:B2:1A:FD:BC:93 X509v3 Authority Key Identifier: keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a2:0a:56:c7:b9:05:5b:3e:58:ce:ad:d8:8f:f3:42:2b:74: 56:ae:8c:f6:33:5c:1f:12:88:2c:af:41:81:a4:2e:62:23:9c: 9a:38:ce:84:c1:81:c5:10:01:dd:3a:e6:09:25:21:6a:fd:0b: 54:68:c1:f1:eb:eb:43:41:21:f9:6d:ec:1d:72:9c:a4:d5:af: ae:e9:73:ed:a6:87:3b:8e:50:54:8a:b6:7c:46:4e:8d:4f:37: e4:d5:c3:de:44:9d:bb:ec:25:00:68:f3:bd:d5:78:ca:d8:2f: fa:46:c9:b4:6e:54:1f:43:73:ea:d8:3c:90:d6:98:dd:5a:3e: 87:7d:38:59:97:15:9f:6f:fe:ff:8c:d3:85:c7:4d:00:b1:c1: e3:c8:ed:1f:85:0e:b8:db:27:87:be:5e:d4:9f:ae:8c:0e:5d: 8f:c8:85:22:c4:15:f4:9b:8e:8a:57:af:7e:e5:c5:6e:b9:f8: b9:bf:4b:6c:62:76:73:cf:57:7e:35:c0:40:d5:1c:19:b6:82: 8f:b2:3e:6f:1b:d3:4d:29:68:20:af:8c:cf:c6:04:56:30:f3: cb:bb:59:9b:3b:a5:a9:18:e8:d2:1a:66:4b:aa:88:14:cf:71: b0:ed:68:48:2e:4d:82:71:67:2c:6c:4d:f6:46:80:07:bf:db: 02:c9:67:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZbJMQsH685cxwd7RpS2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNTBkMWRkMzFiYzc0NDliYWNjMTg2NGIwMWFmOTk0YzU0 N2VmZDMwHhcNMjUxMjA2MTYwMTM2WhcNMjUxMjA3MTYwMTM2WjAzMTEwLwYDVQQD Eyg0Mzk0MmY2MjlmODk0MzAyOTZkMjE1YjI2NmE4ZGZiMjFhZmRiYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/VjitW3EX8KpO6IDKInuWZOTC6b 1HjHFo39Qnj/k/LAtgfJVC25wxSZm5hohZyaERh/VXgqDS1CsOLbYrb0Kws13BPx LGzj6aOdkB2Pqa73LIS9dqHWmjSuzfQ5thm3JnX0ab05omm4clTqww9QE+IGB1MD CIAUtrnBfFXYw223l2cS5R0ZEDSLCeKn32LLlRZaB1EWne3rED7r98Xi1uxFdH7g UUIxGplvMrlYboTZu6yQHWiNvQj9xOL9UcekI5FLriKX8qzuCkLhRQqBin1Q+tE9 2uSY0Hbqc2Gt/LlFRX7LiODGFL93NenX2m5oMX+n91OmzGAOh2/UpBSD/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOUL2KfiUMCltIVsmao37Ia/byTMB8GA1UdIwQY MBaAFD5Q0d0xvHRJuswYZLAa+ZTFR+/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEt NGYwNjUwZGE1NDViLzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC82ZWMzOWMtYTlkNC00YTEyLTgxMGEtNGYwNjUwZGE1NDVi LzEvUGxEUjNURzhkRW02ekJoa3NCcjVsTVZINzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKIKVse5 BVs+WM6t2I/zQit0Vq6M9jNcHxKILK9BgaQuYiOcmjjOhMGBxRAB3TrmCSUhav0L VGjB8evrQ0Eh+W3sHXKcpNWvrulz7aaHO45QVIq2fEZOjU835NXD3kSdu+wlAGjz vdV4ytgv+kbJtG5UH0Nz6tg8kNaY3Vo+h304WZcVn2/+/4zThcdNALHB48jtH4UO uNsnh75e1J+ujA5dj8iFIsQV9JuOilevfuXFbrn4ub9LbGJ2c89XfjXAQNUcGbaC j7I+bxvTTSloIK+Mz8YEVjDzy7tZmzulqRjo0hpmS6qIFM9xsO1oSC5NgnFnLGxN 9kaAB7/bAslnyg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:45:03 2025 by rpki-client