This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft File: _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json) Hash identifier: dPcKrpKeXDZRu549nK5d8NuflyqW1ffFDbjn79BpiBU= Subject key identifier: 09:BD:AA:1F:F7:DB:F9:A2:92:34:BF:AE:E3:01:30:34:1F:28:5C:B6 Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d Certificate serial: 019B30B0B3E74471C1DA5145EC5C4BD8203B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft Manifest number: 0A8E Signing time: Thu 18 Dec 2025 09:00:45 +0000 Manifest this update: Thu 18 Dec 2025 09:00:45 +0000 Manifest next update: Fri 19 Dec 2025 09:00:45 +0000 Files and hashes: 1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: asyUbucvUlMN8TTswvX59XZ0FuSkB7tLTFQhrxnnf7U=) 2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:b3:e7:44:71:c1:da:51:45:ec:5c:4b:d8:20:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d Validity Not Before: Dec 18 09:00:45 2025 GMT Not After : Dec 19 09:00:45 2025 GMT Subject: CN=09bdaa1ff7dbf9a29234bfaee30130341f285cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:1e:a2:3c:54:2d:dc:70:e5:b6:f1:04:a7: 87:5d:de:01:0e:c0:db:1b:36:c3:d9:1c:61:81:44: 8b:e8:44:f2:15:b2:d3:e8:f8:0a:3c:66:55:9a:68: 94:d4:8e:ea:89:2b:09:7e:61:bc:3a:13:99:6e:d6: 17:80:15:8b:3e:33:91:fd:8e:ea:fe:7e:63:e7:13: 2f:5c:e6:b6:f8:48:a5:c7:55:17:f8:c0:a8:46:24: 9e:7d:f7:e7:77:dc:1c:49:83:15:5d:19:4a:ba:61: b5:5d:22:6f:c1:96:45:c4:77:17:9e:3d:6d:37:92: 20:83:0d:86:c5:16:f1:49:71:7d:d8:89:fb:91:a3: bc:03:8c:16:c7:28:f7:a8:1f:28:da:41:92:32:e7: 2f:fd:ff:86:2b:c1:9c:48:e2:57:0e:ba:9f:bd:80: 0c:8f:4c:74:ba:77:d6:a2:eb:69:8d:1d:93:5d:2b: 8c:0b:71:0b:35:9b:4e:79:4d:78:b1:6d:47:60:ea: 89:c0:32:98:45:28:9a:29:93:cb:82:af:ea:52:d6: 80:9a:f2:2c:7e:7a:0f:69:c9:95:70:a9:44:1d:a2: 5f:83:33:e1:e2:28:0f:fe:d1:22:14:44:6d:5f:56: e5:13:03:60:01:67:dc:12:01:8b:e9:e8:a9:31:67: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BD:AA:1F:F7:DB:F9:A2:92:34:BF:AE:E3:01:30:34:1F:28:5C:B6 X509v3 Authority Key Identifier: keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:af:4d:52:d8:3a:2c:cb:4d:e1:37:b3:ea:c5:d3:3b:41:e9: 6d:de:ac:25:b1:45:47:1e:08:bd:2e:76:5f:df:20:8c:f9:e2: df:39:c3:c3:fe:b0:7c:6d:3b:79:5b:f6:c3:14:1e:b2:13:f5: 22:58:d8:48:a3:ef:1a:de:ed:61:c2:43:79:fc:b9:8f:37:b1: 4a:6a:9b:12:a6:4a:a1:88:92:d4:22:80:24:7e:ef:a3:34:8a: 33:01:eb:d6:43:dc:d9:83:aa:a8:bb:6e:f6:25:62:4b:81:5c: 7a:a4:52:7c:c1:db:b3:c8:68:27:21:7e:72:85:b2:fc:cc:5e: e2:be:f9:9d:2d:31:d5:2a:d0:ca:8b:6d:a5:ce:d1:94:47:b8: c5:75:56:6f:e3:f2:27:cb:41:c5:55:ab:1f:6a:21:35:35:7e: 26:8e:fb:88:bd:04:04:92:d9:cc:d0:6a:28:02:56:0d:43:19: d5:ee:33:02:5f:c2:97:69:56:39:cd:7c:86:82:9e:cd:ae:a6: af:9d:3f:aa:d7:63:7d:ea:f3:f5:35:90:38:2f:70:45:f5:e5: 14:c6:25:d8:73:bc:78:d0:97:ff:bb:0b:e7:8b:f8:b7:1c:0c: bb:0a:ed:42:15:b4:ac:0e:6d:83:1d:d9:8c:72:58:b1:49:34: ab:b9:a5:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsLPnRHHB2lFF7FxL2CA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5 NjFiNmQwHhcNMjUxMjE4MDkwMDQ1WhcNMjUxMjE5MDkwMDQ1WjAzMTEwLwYDVQQD EygwOWJkYWExZmY3ZGJmOWEyOTIzNGJmYWVlMzAxMzAzNDFmMjg1Y2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWweojxULdxw5bbxBKeHXd4BDsDb GzbD2RxhgUSL6ETyFbLT6PgKPGZVmmiU1I7qiSsJfmG8OhOZbtYXgBWLPjOR/Y7q /n5j5xMvXOa2+Eilx1UX+MCoRiSefffnd9wcSYMVXRlKumG1XSJvwZZFxHcXnj1t N5Iggw2GxRbxSXF92In7kaO8A4wWxyj3qB8o2kGSMucv/f+GK8GcSOJXDrqfvYAM j0x0unfWoutpjR2TXSuMC3ELNZtOeU14sW1HYOqJwDKYRSiaKZPLgq/qUtaAmvIs fnoPacmVcKlEHaJfgzPh4igP/tEiFERtX1blEwNgAWfcEgGL6eipMWdz7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm9qh/32/mikjS/ruMBMDQfKFy2MB8GA1UdIwQY MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt YjY4MzViNzMyYWQ2LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2 LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcK9NUtg6 LMtN4Tez6sXTO0Hpbd6sJbFFRx4IvS52X98gjPni3znDw/6wfG07eVv2wxQeshP1 IljYSKPvGt7tYcJDefy5jzexSmqbEqZKoYiS1CKAJH7vozSKMwHr1kPc2YOqqLtu 9iViS4FceqRSfMHbs8hoJyF+coWy/Mxe4r75nS0x1SrQyottpc7RlEe4xXVWb+Py J8tBxVWrH2ohNTV+Jo77iL0EBJLZzNBqKAJWDUMZ1e4zAl/Cl2lWOc18hoKeza6m r50/qtdjferz9TWQOC9wRfXlFMYl2HO8eNCX/7sL54v4txwMuwrtQhW0rA5tgx3Z jHJYsUk0q7mlbg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:30:24 2025 by rpki-client