This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json) Hash identifier: Naj/wE15rN8de9HC2zl0/q8LcdyM+eOdlgBd6ijUlXI= Subject key identifier: EA:F7:4D:64:DA:4E:DC:4F:43:F2:AE:CA:02:7E:14:3C:B9:EA:47:4C Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8 Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8 Certificate serial: 019AF12DF12ACFD4D04B659564E239D677F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: 6wzuDNBc4N40GmIfDFqlh0V70Yvl/+901wpfvIgcCg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f1:2a:cf:d4:d0:4b:65:95:64:e2:39:d6:77:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=eaf74d64da4edc4f43f2aeca027e143cb9ea474c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:96:23:d1:aa:e4:32:6a:66:a8:7a:20:c4:2b: c0:be:cc:1e:0c:7b:44:53:a3:3c:1a:4b:28:3f:20: fa:5f:2f:f1:fd:1f:5c:ad:92:e5:e6:12:13:03:7d: 1c:48:d7:65:23:57:b1:60:d6:1d:ac:fa:d5:d1:7c: fd:e0:53:32:59:bc:ad:67:e5:f2:20:ef:64:ae:e4: 8e:2f:bb:cb:b7:c1:29:d4:14:d6:29:34:b3:87:46: ae:17:b5:07:46:bd:74:53:31:02:a5:6f:50:04:ed: 4a:6c:86:77:a6:03:c2:e7:af:c5:cc:65:63:cf:eb: 65:61:9f:66:36:93:c2:15:f8:b0:bb:6e:a7:98:8f: c7:84:68:a4:9f:09:e1:9e:a2:fa:5b:46:52:09:56: 7e:ed:0d:05:51:47:95:a6:3b:73:b7:af:ca:a8:3f: 5f:77:bb:86:da:6c:f9:61:04:82:ef:aa:ea:90:34: 28:12:45:24:11:a6:cd:8d:5e:aa:46:e4:bb:d8:32: ef:5e:a8:12:02:2e:c1:2f:d6:2d:96:e8:2d:df:97: cc:34:28:f2:6a:a3:aa:cb:d7:29:9f:1f:74:c7:e7: 9e:85:b7:6e:0d:c7:29:46:10:17:b5:36:bb:9c:9b: fa:be:11:b6:67:cb:b8:a1:b3:b4:fa:0f:b3:08:e5: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F7:4D:64:DA:4E:DC:4F:43:F2:AE:CA:02:7E:14:3C:B9:EA:47:4C X509v3 Authority Key Identifier: keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6a:b0:83:99:f5:53:94:35:de:e8:86:8a:55:8e:6e:6e:e2: df:0d:99:a3:7e:3a:5e:cc:18:25:90:4d:bc:71:d4:e5:4d:ce: 6d:72:98:d3:4e:44:b0:45:7f:47:ad:5d:b9:8f:ec:5f:c9:5c: ef:ac:ea:3c:f6:7a:23:9e:75:b8:7c:f4:68:1c:3d:d9:70:54: d1:c1:5f:b7:78:65:7a:dd:38:9a:f3:f9:08:06:a5:74:3c:a6: 37:46:e4:3c:45:3b:38:04:02:79:d6:af:07:67:00:fb:db:fe: a5:9a:fd:48:a6:46:e8:e4:a8:bf:4a:fc:ca:03:e3:aa:69:69: e9:5d:7b:91:20:71:f6:2b:12:d4:1d:a7:00:09:18:a8:a8:77: 10:19:07:3e:db:9c:ca:c4:14:4e:5c:4b:8d:dc:68:21:bc:6f: e5:9e:c2:05:38:66:ae:bf:ed:da:e9:f2:ff:f4:cf:62:3d:2d: 3b:26:71:d9:4a:11:56:7b:2f:59:02:89:aa:f3:07:55:f9:ff: e6:29:ce:4f:d2:14:ee:8b:76:e7:d6:9c:74:6f:3d:fd:06:0d: 09:a7:ba:70:26:96:29:3d:0e:9b:c1:55:41:e4:22:b9:de:8f: e9:8c:ef:0f:e6:66:37:0a:be:12:34:ae:37:5b:02:8b:30:53: e9:9f:38:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfEqz9TQS2WVZOI51nfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjRjOGFiODNiNmQ5MmE3NGViZGNkZTg4YmMyMTk1N2M1 N2YxZTgwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EyhlYWY3NGQ2NGRhNGVkYzRmNDNmMmFlY2EwMjdlMTQzY2I5ZWE0NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZYj0arkMmpmqHogxCvAvsweDHtE U6M8GksoPyD6Xy/x/R9crZLl5hITA30cSNdlI1exYNYdrPrV0Xz94FMyWbytZ+Xy IO9kruSOL7vLt8Ep1BTWKTSzh0auF7UHRr10UzECpW9QBO1KbIZ3pgPC56/FzGVj z+tlYZ9mNpPCFfiwu26nmI/HhGiknwnhnqL6W0ZSCVZ+7Q0FUUeVpjtzt6/KqD9f d7uG2mz5YQSC76rqkDQoEkUkEabNjV6qRuS72DLvXqgSAi7BL9Ytlugt35fMNCjy aqOqy9cpnx90x+eehbduDccpRhAXtTa7nJv6vhG2Z8u4obO0+g+zCOUBjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr3TWTaTtxPQ/KuygJ+FDy56kdMMB8GA1UdIwQY MBaAFKS0yKuDttkqdOvc3oi8IZV8V/HoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hNWY5ZjYtMzYwNy00NWQzLTk5NGIt NTQxZTQ1MDMxNGJjLzEvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hNWY5ZjYtMzYwNy00NWQzLTk5NGItNTQxZTQ1MDMxNGJj LzEvcExUSXE0TzIyU3AwNjl6ZWlMd2hsWHhYOGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWqwg5n1 U5Q13uiGilWObm7i3w2Zo346XswYJZBNvHHU5U3ObXKY005EsEV/R61duY/sX8lc 76zqPPZ6I551uHz0aBw92XBU0cFft3hlet04mvP5CAaldDymN0bkPEU7OAQCedav B2cA+9v+pZr9SKZG6OSov0r8ygPjqmlp6V17kSBx9isS1B2nAAkYqKh3EBkHPtuc ysQUTlxLjdxoIbxv5Z7CBThmrr/t2uny//TPYj0tOyZx2UoRVnsvWQKJqvMHVfn/ 5inOT9IU7ot259acdG89/QYNCae6cCaWKT0Om8FVQeQiud6P6YzvD+ZmNwq+EjSu N1sCizBT6Z84DA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:18 2025 by rpki-client