This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft File: lplI0P5Nf5nVS6i__NmaGmCK4NM.mft (raw, json) Hash identifier: XQ9kumJln5Eeg6vMDEIRSCxG4WqHqp3DjzIl811etoU= Subject key identifier: 18:D4:E4:71:F1:D6:25:5D:7A:E5:07:BD:C2:D2:C7:18:9C:A3:96:B4 Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3 Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3 Certificate serial: 019AF42E1781342FB46A349A41FC71E3A6AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: 0lLIFsMnJfjbMITyMtcjv5rwpaE.roa (hash: CF29X9QV8+/p4F0B+TvxRr6hYoLcahP5zhILwH1ecU8=) 2: B4HZRq24-rI189mz0dH0U8s_ltQ.roa (hash: A6pfIWVk2BahEy10SSDKRy1UWbMHkr6lU9e1Reqwdy0=) 3: FIOPjgBkgq7xEXRKyPRQ1Oqa0NU.roa (hash: UWt78DgDOwppGpFR4S+tA4PHXjI0OjWHkXa+j+bLBU4=) 4: HK20-4xA8hXC3VUWTBAr-y0NF0k.roa (hash: tOa/5dnYfrENcgkdAf/ulPnezPgqB/HRljD/FB3y1H8=) 5: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (hash: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=) 6: R_qbdcP3J6fNY4wBg9OY5tABKio.roa (hash: qGQBfwpujLWSfdD+BfOupXx9Us5BBEVEXuBPudsfsCw=) 7: lplI0P5Nf5nVS6i__NmaGmCK4NM.crl (hash: YUzaiLkKL1yu+OUgVDJ0DT956/Hvb/ICPUujHV0dsQk=) 8: sZG-sGNF2g_bzP7UHFWS46eQwHU.roa (hash: ZW7Hklpbp5glvilF6Rijbfiz4n0SIQTxH3Q9fTmMQy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:17:81:34:2f:b4:6a:34:9a:41:fc:71:e3:a6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3 Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=18d4e471f1d6255d7ae507bdc2d2c7189ca396b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:20:36:4e:67:bf:b2:47:b5:e3:77:db:aa: 37:e7:2f:10:a6:c1:99:6c:68:ac:80:4c:1a:84:ef: c8:9f:e7:22:85:88:5d:28:6c:51:43:ba:22:d3:6f: 77:9c:b8:ce:41:89:62:cb:19:4c:83:e9:f9:72:f1: a5:34:cb:21:59:b5:20:52:46:63:9e:29:c1:59:5a: 6c:1e:47:d8:40:8b:10:21:e1:c8:5b:21:1e:19:d8: cd:80:ed:5f:f0:2f:4a:7c:12:18:d8:d7:05:48:1d: 0d:1f:4b:fe:a4:eb:b9:0d:82:4b:44:d2:10:13:04: 75:31:0c:28:cf:70:10:a5:86:91:23:f1:b8:33:29: 93:ce:aa:fe:57:4f:5b:07:d1:ae:5d:cd:df:98:59: 12:9a:7e:08:fa:bb:d3:11:ca:79:0d:58:2b:99:27: 36:c6:35:78:fe:a4:88:e8:18:df:a4:79:74:e8:a1: 0f:63:e4:aa:d8:b5:48:27:c2:39:44:aa:16:f9:14: f1:cb:fe:5f:15:c2:77:63:a9:c5:38:8e:34:05:de: 3d:b1:1e:b8:e0:42:6a:52:e2:1a:4f:df:74:d1:89: 4b:3c:62:3f:43:c1:0c:97:8c:74:cc:f6:d7:24:42: 18:d6:9f:27:13:c8:52:4d:02:94:48:cb:e3:b7:92: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D4:E4:71:F1:D6:25:5D:7A:E5:07:BD:C2:D2:C7:18:9C:A3:96:B4 X509v3 Authority Key Identifier: keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bf:4f:a9:81:d6:b3:59:80:12:d5:0c:9b:e2:c4:0f:8e:d9: 96:ef:45:5e:c3:37:74:af:4c:2f:b3:d6:93:33:f7:2d:16:01: dd:94:45:7b:a8:d0:0b:22:83:a1:90:11:a4:94:23:c9:e5:21: 69:cc:17:29:44:e5:b0:4d:e9:88:68:c7:cf:3a:f9:19:54:5a: b5:9c:49:3b:48:c4:dc:9f:4c:22:26:cb:45:4b:cb:51:66:49: 77:8e:13:14:9f:3d:c3:ed:f4:56:00:cb:0e:e1:6a:4a:02:ab: dc:6a:d0:13:bd:75:14:55:35:62:29:69:71:a2:5d:9e:92:48: f5:ec:b1:e5:51:60:40:9c:c1:c5:ec:e8:28:48:2a:f6:c9:4c: 82:d1:41:5e:d4:a3:78:be:eb:62:2c:b7:7c:0c:94:cd:11:85: e2:dc:07:ef:d6:83:68:cf:b1:8a:bc:e2:3a:43:3d:34:81:b1: 0d:14:9a:5b:8a:9c:2a:50:42:53:84:3e:91:0e:e0:f4:b1:44: a8:74:f1:ab:85:3a:49:f1:c2:69:59:05:e5:26:c4:5f:8b:61: 84:88:bd:cd:10:37:cc:13:ed:47:e4:42:77:0b:21:71:47:7e: 36:c2:8d:8a:9a:0a:66:df:dd:0a:f7:ba:53:e0:d7:63:f1:b3: 67:36:12:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LheBNC+0ajSaQfxx46arMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OTk0OGQwZmU0ZDdmOTlkNTRiYThiZmZjZDk5YTFhNjA4 YWUwZDMwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD EygxOGQ0ZTQ3MWYxZDYyNTVkN2FlNTA3YmRjMmQyYzcxODljYTM5NmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x8gNk5nv7JHteN326o35y8QpsGZ bGisgEwahO/In+cihYhdKGxRQ7oi0293nLjOQYliyxlMg+n5cvGlNMshWbUgUkZj ninBWVpsHkfYQIsQIeHIWyEeGdjNgO1f8C9KfBIY2NcFSB0NH0v+pOu5DYJLRNIQ EwR1MQwoz3AQpYaRI/G4MymTzqr+V09bB9GuXc3fmFkSmn4I+rvTEcp5DVgrmSc2 xjV4/qSI6BjfpHl06KEPY+Sq2LVIJ8I5RKoW+RTxy/5fFcJ3Y6nFOI40Bd49sR64 4EJqUuIaT9900YlLPGI/Q8EMl4x0zPbXJEIY1p8nE8hSTQKUSMvjt5LpKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjU5HHx1iVdeuUHvcLSxxico5a0MB8GA1UdIwQY MBaAFJaZSND+TX+Z1Uuov/zZmhpgiuDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAt NTNjYzVkYWY1MmNmLzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAtNTNjYzVkYWY1MmNm LzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAer9PqYHW s1mAEtUMm+LED47Zlu9FXsM3dK9ML7PWkzP3LRYB3ZRFe6jQCyKDoZARpJQjyeUh acwXKUTlsE3piGjHzzr5GVRatZxJO0jE3J9MIibLRUvLUWZJd44TFJ89w+30VgDL DuFqSgKr3GrQE711FFU1YilpcaJdnpJI9eyx5VFgQJzBxezoKEgq9slMgtFBXtSj eL7rYiy3fAyUzRGF4twH79aDaM+xirziOkM9NIGxDRSaW4qcKlBCU4Q+kQ7g9LFE qHTxq4U6SfHCaVkF5SbEX4thhIi9zRA3zBPtR+RCdwshcUd+NsKNipoKZt/dCve6 U+DXY/GzZzYSxg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:04:22 2025 by rpki-client