This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft File: plBG2F7PIB--9R6L6hxO0z-Vsmg.mft (raw, json) Hash identifier: Yp+/zbOCr9zlodcIZ8+EBEJ9VuWNbNHWx2OMqzFZsug= Subject key identifier: BD:95:24:79:58:9C:CD:85:F2:A4:74:A0:0C:7C:BD:15:D9:FB:E1:E3 Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Certificate serial: 019BF4627646FAAAE3C12F764C531CAC8313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 09:00:52 +0000 Manifest this update: Sun 25 Jan 2026 09:00:52 +0000 Manifest next update: Mon 26 Jan 2026 09:00:52 +0000 Files and hashes: 1: 6TK55uf4E7Q4i5YH-VAZAMARA00.roa (hash: 3regBELSIWwrIEhCUAfpYTo6zV2ol5bwAAaJIBdpeUs=) 2: 9twuQnOJskBwmGMFoupLSFf36QU.roa (hash: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU=) 3: DijJx3m0K8IF-fNdq8vdHLvoRm0.roa (hash: 4C2y0rnH3pQ1yAQ2l/hvovIIpf4rpQHX/FcG3Oj/At8=) 4: I9QD5q-NiIfxJo1lRmq5OKOHN_Q.roa (hash: Qi/hyzakZZcN60BC7q1PWSyKEfO3DZwisLoDVX9bMS8=) 5: N7Z-KVIhy-3YXcEigFtIjfBgqyU.roa (hash: ua7m4lDdZT/nE5B7uMpIhoHMPNREsYJy7Na3JVYy+ho=) 6: VFqJkoKX_P2e5DUSDfyccrd5zpE.roa (hash: 76YyLGgvp5IErRkUR0VKzNy6NFnsufvCYMry5U68Xw8=) 7: plBG2F7PIB--9R6L6hxO0z-Vsmg.crl (hash: ybyEYpXy0NRExf/C4WYglgyV3epxKpSanSy/ip7eI4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:76:46:fa:aa:e3:c1:2f:76:4c:53:1c:ac:83:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Validity Not Before: Jan 25 09:00:52 2026 GMT Not After : Jan 26 09:00:52 2026 GMT Subject: CN=bd952479589ccd85f2a474a00c7cbd15d9fbe1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:37:f3:3c:ae:b1:06:0b:1e:7c:dd:fb:65:1b: 35:26:92:5d:67:66:aa:af:06:c1:bb:16:f0:00:56: 55:e8:55:00:8b:e7:3b:47:e3:88:17:7f:b9:ba:cd: 85:d5:4c:25:de:95:0f:a5:14:15:5d:7a:7a:2a:b8: 9d:68:9b:76:60:28:f8:3d:a5:10:45:aa:ee:cb:53: 5b:2a:93:8c:18:99:7d:67:8f:8c:ff:ce:15:41:25: c2:8c:59:d4:50:5c:9a:a0:f8:19:23:0b:24:5b:2e: 83:52:7d:ae:4a:1f:57:48:f7:99:d6:43:99:e6:f9: b1:2f:2a:7e:ef:20:c8:f6:bd:aa:42:26:c0:4a:6c: ac:44:35:fb:a7:38:84:7c:04:c6:16:51:53:e9:1e: fb:c1:1d:f2:53:94:b5:c6:1f:09:93:e2:14:b6:f3: dc:69:24:95:5b:14:01:67:f9:2c:21:b2:cb:06:67: ad:d3:ab:7c:07:eb:a0:20:47:b3:13:71:37:d7:c7: 19:2b:00:05:44:7b:58:4a:60:ec:f7:e4:93:84:28: fe:5c:f9:b1:31:50:4e:80:32:b8:b6:69:e0:40:b9: 85:11:ad:ee:d6:97:75:47:4a:97:91:a2:5b:78:06: 8a:22:08:29:db:65:e3:1e:66:f2:4d:56:3d:2f:88: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:24:79:58:9C:CD:85:F2:A4:74:A0:0C:7C:BD:15:D9:FB:E1:E3 X509v3 Authority Key Identifier: keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:81:a6:85:f8:db:2f:7f:8e:93:56:ef:03:85:44:24:42:35: 4f:97:18:85:df:f1:6f:3a:d7:0e:ba:82:05:3d:06:35:0b:03: ae:12:df:84:63:29:52:1f:16:04:a4:9c:4c:8d:ab:ed:f2:8f: bf:f4:88:63:d2:a8:f1:fb:49:fe:c6:04:90:e1:d5:f8:4e:22: c4:5b:20:a4:e9:83:db:ea:d3:76:2a:17:e8:9f:c0:b6:57:91: 5f:56:ef:f4:db:06:f1:00:78:ad:42:6a:44:f9:11:be:ab:ae: 16:ef:d9:9a:3e:90:75:9a:7f:68:3e:26:0d:cb:5b:33:8b:d1: 95:67:33:8c:0f:f1:9a:0e:8f:95:ca:ee:45:1a:1d:9d:b3:09: 29:d7:c9:54:37:f3:c1:12:40:9f:c6:0d:89:90:00:4f:a7:74: 60:a1:75:7d:e7:67:1e:71:2b:8a:68:f2:cc:53:88:64:8e:be: 9c:4c:b6:41:08:20:c9:3d:f1:71:24:63:87:1b:85:a7:3a:00: 1f:c2:2c:50:6b:e6:d2:bf:bc:8e:2e:46:d0:9f:fd:31:40:01: d3:33:6d:65:d7:c3:7f:70:24:ff:8a:ea:fe:37:52:24:cb:3e: 8f:95:f8:69:06:7e:d3:a6:f8:29:ac:c8:92:08:b3:94:c5:6b: 8c:df:46:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YnZG+qrjwS92TFMcrIMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5 NWIyNjgwHhcNMjYwMTI1MDkwMDUyWhcNMjYwMTI2MDkwMDUyWjAzMTEwLwYDVQQD EyhiZDk1MjQ3OTU4OWNjZDg1ZjJhNDc0YTAwYzdjYmQxNWQ5ZmJlMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DfzPK6xBgsefN37ZRs1JpJdZ2aq rwbBuxbwAFZV6FUAi+c7R+OIF3+5us2F1Uwl3pUPpRQVXXp6KridaJt2YCj4PaUQ Raruy1NbKpOMGJl9Z4+M/84VQSXCjFnUUFyaoPgZIwskWy6DUn2uSh9XSPeZ1kOZ 5vmxLyp+7yDI9r2qQibASmysRDX7pziEfATGFlFT6R77wR3yU5S1xh8Jk+IUtvPc aSSVWxQBZ/ksIbLLBmet06t8B+ugIEezE3E318cZKwAFRHtYSmDs9+SThCj+XPmx MVBOgDK4tmngQLmFEa3u1pd1R0qXkaJbeAaKIggp22XjHmbyTVY9L4jR/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2VJHlYnM2F8qR0oAx8vRXZ++HjMB8GA1UdIwQY MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt YmNjZDMyYWY5N2ZlLzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIGmhfjb L3+Ok1bvA4VEJEI1T5cYhd/xbzrXDrqCBT0GNQsDrhLfhGMpUh8WBKScTI2r7fKP v/SIY9Ko8ftJ/sYEkOHV+E4ixFsgpOmD2+rTdioX6J/AtleRX1bv9NsG8QB4rUJq RPkRvquuFu/Zmj6QdZp/aD4mDctbM4vRlWczjA/xmg6PlcruRRodnbMJKdfJVDfz wRJAn8YNiZAAT6d0YKF1fednHnErimjyzFOIZI6+nEy2QQggyT3xcSRjhxuFpzoA H8IsUGvm0r+8ji5G0J/9MUAB0zNtZdfDf3Ak/4rq/jdSJMs+j5X4aQZ+06b4KazI kgizlMVrjN9GpA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:25 2026 by rpki-client