This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: 9nX4rgyOyahh56ApjCHSzKn/lA3hq6eAi5+uvWHUFM4= Subject key identifier: AF:C4:EA:B1:6E:0A:48:E2:92:46:4F:C7:14:87:D6:4B:0C:9C:65:48 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019AF2E4264C948E917ADFE9A7528A426F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 09:00:29 +0000 Manifest this update: Sat 06 Dec 2025 09:00:29 +0000 Manifest next update: Sun 07 Dec 2025 09:00:29 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: R2ZSqYnIg6A3ZrnAWdvXrTd4fUE.roa (hash: O7SlLNijkA8S/dhctG8xaw+pF4vgkSrZrlUPSUPxkJo=) 8: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 12: lnK6iGp_rX8PMUKSiljxpWHcznE.roa (hash: NuNWM3spqhFNLKVEy7DsiU66ELXIb6dfwzeE1LPbvYY=) 13: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: Oni5UlZ/VzYjsbuunAZOUUZPUEUE0g/jvwmeIwNHdfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:26:4c:94:8e:91:7a:df:e9:a7:52:8a:42:6f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Dec 6 09:00:29 2025 GMT Not After : Dec 7 09:00:29 2025 GMT Subject: CN=afc4eab16e0a48e292464fc71487d64b0c9c6548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:27:68:2a:17:5a:63:02:4c:80:a5:49:26: 81:6e:dc:76:6b:b6:65:cb:17:3f:a9:bb:49:2a:c4: 76:0c:19:ee:c3:ef:08:bb:a3:c8:bc:de:6f:fe:32: 5e:af:1d:d5:34:b1:34:a0:8e:50:93:90:c1:2d:1b: 3c:38:f8:ea:57:ab:ca:b1:6b:32:75:65:6b:e9:d7: 51:26:18:7a:05:fa:4d:3a:34:8c:86:bc:0b:9d:8c: cc:4b:a7:21:b9:dd:55:1d:5f:16:1d:4e:65:d1:5f: e2:6b:ed:d8:42:a7:49:f1:a2:7e:89:12:a2:f6:43: fc:de:ec:38:e6:84:4a:24:45:44:56:da:01:9c:6d: 52:55:b2:a9:6c:19:e0:0c:4c:48:8c:da:28:5b:5f: c6:97:6f:0d:ad:81:57:de:d1:2b:92:66:5d:5c:6f: 5a:81:93:a5:d9:24:d6:aa:72:e9:55:fa:53:8a:8f: f9:1f:5a:0c:98:dc:59:4d:b6:02:b2:b8:48:ab:6e: 56:70:01:db:13:1e:a6:b6:47:82:60:8b:26:c4:d8: 43:fb:59:5e:09:d8:f0:31:a8:fe:22:7c:a8:be:bd: 28:38:9f:1c:3d:84:f6:42:99:ce:7d:69:87:3f:15: 60:97:cb:26:b6:a6:ae:e3:04:6b:38:ea:2f:33:1a: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C4:EA:B1:6E:0A:48:E2:92:46:4F:C7:14:87:D6:4B:0C:9C:65:48 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:91:c9:92:c0:32:0a:80:ae:ce:78:96:13:26:b6:8c:9f:ef: 0e:09:8f:0d:f6:48:13:46:5b:8e:a8:f2:54:77:c7:66:03:55: b2:0f:83:6a:4a:14:8e:f5:88:1e:7a:d1:0e:f6:09:9e:2e:69: a9:ce:ec:56:90:88:68:d9:d1:82:f8:c4:22:0e:43:86:10:b5: 05:87:b4:c6:c6:7d:a6:96:a2:68:ea:f4:84:d4:39:cb:67:1e: c1:62:f0:6b:6d:87:4e:58:a6:4e:a7:7a:c7:d9:de:6f:3b:36: c4:cd:20:7d:84:ca:60:e5:f4:8a:b2:7b:3b:0a:eb:fd:84:44: 82:e0:d0:c4:80:65:1c:06:98:ac:13:44:d8:7a:c8:91:9c:d6: 1f:53:c4:d5:43:b6:c6:cc:ca:97:d1:62:a9:24:8d:c8:aa:b7: bc:41:f7:65:a8:66:67:2e:77:35:2e:df:8b:da:70:bb:af:e9: af:b7:16:7e:57:53:f4:4b:60:30:1b:61:5a:13:17:75:ee:cc: d6:38:e5:ed:8a:e1:e4:6f:97:46:16:9b:52:5b:a0:0e:18:33: 41:e2:38:22:01:c7:6f:2d:35:72:28:e7:af:6f:3c:ec:11:18: 05:86:06:83:28:b0:c6:a9:8b:7a:9c:2e:1a:8f:cb:c0:1f:5d: 8f:9f:2f:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CZMlI6Ret/pp1KKQm8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUxMjA2MDkwMDI5WhcNMjUxMjA3MDkwMDI5WjAzMTEwLwYDVQQD EyhhZmM0ZWFiMTZlMGE0OGUyOTI0NjRmYzcxNDg3ZDY0YjBjOWM2NTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8MnaCoXWmMCTIClSSaBbtx2a7Zl yxc/qbtJKsR2DBnuw+8Iu6PIvN5v/jJerx3VNLE0oI5Qk5DBLRs8OPjqV6vKsWsy dWVr6ddRJhh6BfpNOjSMhrwLnYzMS6chud1VHV8WHU5l0V/ia+3YQqdJ8aJ+iRKi 9kP83uw45oRKJEVEVtoBnG1SVbKpbBngDExIjNooW1/Gl28NrYFX3tErkmZdXG9a gZOl2STWqnLpVfpTio/5H1oMmNxZTbYCsrhIq25WcAHbEx6mtkeCYIsmxNhD+1le CdjwMaj+Inyovr0oOJ8cPYT2QpnOfWmHPxVgl8smtqau4wRrOOovMxp3HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/E6rFuCkjikkZPxxSH1ksMnGVIMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZHJksAy CoCuzniWEya2jJ/vDgmPDfZIE0ZbjqjyVHfHZgNVsg+DakoUjvWIHnrRDvYJni5p qc7sVpCIaNnRgvjEIg5DhhC1BYe0xsZ9ppaiaOr0hNQ5y2cewWLwa22HTlimTqd6 x9nebzs2xM0gfYTKYOX0irJ7Owrr/YREguDQxIBlHAaYrBNE2HrIkZzWH1PE1UO2 xszKl9FiqSSNyKq3vEH3ZahmZy53NS7fi9pwu6/pr7cWfldT9EtgMBthWhMXde7M 1jjl7Yrh5G+XRhabUlugDhgzQeI4IgHHby01cijnr2887BEYBYYGgyiwxqmLepwu Go/LwB9dj58v5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:20 2025 by rpki-client