This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft File: pLZdoXU_tO7tuG_ah906-mnYYtA.mft (raw, json) Hash identifier: GZVAhJyTe1Kxf32+7Cogb6db0RENGOx789Tp6w0yDck= Subject key identifier: B4:51:A6:5B:4E:EE:AC:89:93:03:59:68:7C:26:15:FF:78:4D:8A:10 Authority key identifier: A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0 Certificate issuer: /CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0 Certificate serial: 019AF31CB608904DE5292849742DDC1C5D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft Manifest number: 0ADC Signing time: Sat 06 Dec 2025 10:02:16 +0000 Manifest this update: Sat 06 Dec 2025 10:02:16 +0000 Manifest next update: Sun 07 Dec 2025 10:02:16 +0000 Files and hashes: 1: 9VAtH6rT9AmgMjM5y2MsDg-1uuk.roa (hash: wQrCWKGL3Sn9wGoFnk6i9VJ1UdYXoGTZv1+i2lw0LfY=) 2: pLZdoXU_tO7tuG_ah906-mnYYtA.crl (hash: FS1etsQxcGLc7J9vIKHICl3o9GsNoMO3EPPYvU5ccow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b6:08:90:4d:e5:29:28:49:74:2d:dc:1c:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b65da1753fb4eeedb86fda87dd3afa69d862d0 Validity Not Before: Dec 6 10:02:16 2025 GMT Not After : Dec 7 10:02:16 2025 GMT Subject: CN=b451a65b4eeeac89930359687c2615ff784d8a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e9:1f:13:93:63:e1:df:34:48:44:55:57:a3: 8c:06:04:51:8a:b4:c7:1f:c1:4b:41:6d:f3:d1:b3: da:20:a2:f5:d8:f1:3a:8c:6e:79:e3:4e:c8:c1:89: 28:36:ec:62:2b:2b:52:fe:76:ac:0d:ee:f2:80:c5: 51:b4:ab:c0:d4:7c:2c:79:7f:78:06:a8:c9:4d:06: 2a:52:7f:32:d1:a6:66:1c:26:62:a3:63:a6:26:f8: 63:a7:fe:48:f3:e9:32:16:c5:74:47:30:90:18:4c: 3b:f3:38:3d:10:d0:63:57:01:ab:e7:06:4a:46:a6: 66:a2:42:c5:39:54:10:ce:9a:8c:b7:2b:07:83:24: 9d:24:86:b3:38:df:a0:db:56:91:89:fe:0e:78:6b: f1:a1:05:19:f1:7e:0b:f5:a7:b8:3d:1a:ed:6d:dc: 72:2e:b1:9d:d5:5b:7a:fe:0e:9a:e4:82:d3:5f:3a: 10:44:4c:4b:32:0d:6c:6a:3e:33:f0:25:74:d5:be: ee:dd:b7:b6:8d:90:29:83:c0:6c:5f:28:af:84:d4: 4e:0d:47:30:40:ea:7d:72:fa:03:ad:69:70:5c:3c: 42:85:b6:67:a7:5d:f0:16:ec:7c:53:77:35:00:f4: 2c:f7:26:b4:de:e8:91:16:5b:3f:c2:14:cf:a1:ef: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:51:A6:5B:4E:EE:AC:89:93:03:59:68:7C:26:15:FF:78:4D:8A:10 X509v3 Authority Key Identifier: keyid:A4:B6:5D:A1:75:3F:B4:EE:ED:B8:6F:DA:87:DD:3A:FA:69:D8:62:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZdoXU_tO7tuG_ah906-mnYYtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2a57be-be77-4428-8e93-ba5201ea5f83/1/pLZdoXU_tO7tuG_ah906-mnYYtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c5:c3:4c:de:7d:d9:3e:e7:ef:f9:08:13:81:c8:c5:50:18: 29:58:f9:8f:95:18:ae:5c:21:46:b9:47:0d:82:15:e4:71:d8: 9b:ed:cf:25:ac:56:30:d4:66:dc:23:94:62:5b:24:ae:87:2f: f1:b6:fe:26:9d:58:62:40:cf:25:87:a1:14:45:2a:a5:f7:ee: 37:bf:f3:fa:40:61:55:5e:ec:2b:e6:ef:d1:2c:ad:df:d3:1f: 58:b5:2f:4e:8a:dc:00:f9:cb:b6:97:88:3a:45:ad:5b:0c:39: 4b:88:49:58:42:a2:1a:04:64:d0:28:b1:0f:c8:6b:c3:3b:12: 77:78:5d:31:49:f1:bc:00:5f:c0:95:d3:25:7b:67:fc:4c:32: e6:5f:1c:2c:5c:0b:57:82:17:da:b4:b1:a7:6f:58:9e:29:da: ac:ae:bd:8e:a0:39:9e:8c:c4:09:8b:4d:c8:1c:8a:41:51:b9: d0:13:b2:4f:06:49:e2:34:2a:ba:72:5f:b8:cb:2e:68:46:c3: 28:79:36:81:c0:f2:bf:0a:39:cf:69:b4:e1:9f:2d:d0:94:97: 46:6c:3e:cf:a3:30:67:e0:4a:65:e7:6e:8b:af:82:ea:c3:93: f9:6a:e2:6c:14:26:3c:86:f8:bd:be:0e:a8:2c:5f:46:c0:15: 9d:cd:2f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLYIkE3lKShJdC3cHF0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY1ZGExNzUzZmI0ZWVlZGI4NmZkYTg3ZGQzYWZhNjlk ODYyZDAwHhcNMjUxMjA2MTAwMjE2WhcNMjUxMjA3MTAwMjE2WjAzMTEwLwYDVQQD EyhiNDUxYTY1YjRlZWVhYzg5OTMwMzU5Njg3YzI2MTVmZjc4NGQ4YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+kfE5Nj4d80SERVV6OMBgRRirTH H8FLQW3z0bPaIKL12PE6jG55407IwYkoNuxiKytS/nasDe7ygMVRtKvA1HwseX94 BqjJTQYqUn8y0aZmHCZio2OmJvhjp/5I8+kyFsV0RzCQGEw78zg9ENBjVwGr5wZK RqZmokLFOVQQzpqMtysHgySdJIazON+g21aRif4OeGvxoQUZ8X4L9ae4PRrtbdxy LrGd1Vt6/g6a5ILTXzoQRExLMg1saj4z8CV01b7u3be2jZApg8BsXyivhNRODUcw QOp9cvoDrWlwXDxChbZnp13wFux8U3c1APQs9ya03uiRFls/whTPoe8kGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRRpltO7qyJkwNZaHwmFf94TYoQMB8GA1UdIwQY MBaAFKS2XaF1P7Tu7bhv2ofdOvpp2GLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMt YmE1MjAxZWE1ZjgzLzEvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yYTU3YmUtYmU3Ny00NDI4LThlOTMtYmE1MjAxZWE1Zjgz LzEvcExaZG9YVV90Tzd0dUdfYWg5MDYtbW5ZWXRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcXDTN59 2T7n7/kIE4HIxVAYKVj5j5UYrlwhRrlHDYIV5HHYm+3PJaxWMNRm3COUYlskrocv 8bb+Jp1YYkDPJYehFEUqpffuN7/z+kBhVV7sK+bv0Syt39MfWLUvTorcAPnLtpeI OkWtWww5S4hJWEKiGgRk0CixD8hrwzsSd3hdMUnxvABfwJXTJXtn/Ewy5l8cLFwL V4IX2rSxp29YninarK69jqA5nozECYtNyByKQVG50BOyTwZJ4jQqunJfuMsuaEbD KHk2gcDyvwo5z2m04Z8t0JSXRmw+z6MwZ+BKZedui6+C6sOT+WribBQmPIb4vb4O qCxfRsAVnc0vmg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:19:21 2025 by rpki-client