This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft File: pl24nou2YPIetcSvO5rdUtV-uJ8.mft (raw, json) Hash identifier: zetmk6RH1Tdbb8RZ0WPNLZ6XawV/dRK1W7YU84ZkzaA= Subject key identifier: 54:2D:F8:3D:B0:EA:8C:FC:A9:CB:F3:86:A9:B3:07:FA:E8:32:4F:63 Authority key identifier: A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F Certificate issuer: /CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f Certificate serial: 019AF50BB10829C06D9325365DFC5F8E4103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft Manifest number: 04CC Signing time: Sat 06 Dec 2025 19:02:55 +0000 Manifest this update: Sat 06 Dec 2025 19:02:55 +0000 Manifest next update: Sun 07 Dec 2025 19:02:55 +0000 Files and hashes: 1: dz9PyU4ctyXKZ49cHOyHFCLYwcU.roa (hash: 3Y8oozkK4fYw8w+acos4s7WtEJkSyImOIymISL/lshA=) 2: pl24nou2YPIetcSvO5rdUtV-uJ8.crl (hash: kzbAq7jpG/1OJn2jF7++masBPz1MzN46mrcSBZxhtFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:b1:08:29:c0:6d:93:25:36:5d:fc:5f:8e:41:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65db89e8bb660f21eb5c4af3b9add52d57eb89f Validity Not Before: Dec 6 19:02:55 2025 GMT Not After : Dec 7 19:02:55 2025 GMT Subject: CN=542df83db0ea8cfca9cbf386a9b307fae8324f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:88:e7:42:eb:ac:48:69:0b:0f:18:79:ad: e8:d1:26:81:a0:c5:5b:7b:54:46:19:21:bf:ed:e6: 5b:85:1c:fb:8a:57:d0:b9:e5:ec:bb:10:8e:31:d9: fb:ff:cd:59:9f:cf:eb:16:a0:37:fc:cc:ef:4e:33: 2d:e5:19:21:16:fd:bb:d9:9b:1e:fb:20:57:3c:48: f1:c6:90:65:5d:aa:03:56:14:31:1a:e0:25:38:d3: 53:e0:1a:46:ce:19:27:fc:c6:9a:09:d0:4a:24:67: 3f:52:61:0f:86:c5:aa:9f:04:59:c4:70:5c:82:2e: 32:03:a9:b4:5d:ab:b7:b4:ea:d2:52:de:ba:20:ff: 21:62:ae:8a:b9:02:7f:b0:fe:d9:17:07:cd:2c:da: ca:a3:64:74:3f:db:ef:ba:95:f3:92:52:1c:ce:ec: 31:64:5d:49:aa:f0:67:b9:59:7d:b1:42:96:15:02: d1:4e:f7:6f:7e:fb:5c:86:bf:77:d5:e7:6e:ac:4c: 57:6c:10:d7:14:e9:8b:16:66:c5:fe:1d:f8:da:41: 6b:8e:7f:a7:d0:12:3f:3e:3a:35:53:2d:9f:50:78: ee:3d:31:bc:f2:3a:b5:bf:66:81:b7:2f:3c:3b:d1: c4:c7:5a:f0:51:22:87:96:b8:2f:9f:89:08:56:4c: c4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2D:F8:3D:B0:EA:8C:FC:A9:CB:F3:86:A9:B3:07:FA:E8:32:4F:63 X509v3 Authority Key Identifier: keyid:A6:5D:B8:9E:8B:B6:60:F2:1E:B5:C4:AF:3B:9A:DD:52:D5:7E:B8:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl24nou2YPIetcSvO5rdUtV-uJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3b06a3-caf4-4d6c-bb7b-a3578c944040/1/pl24nou2YPIetcSvO5rdUtV-uJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:0d:c6:67:52:c4:98:d0:92:ca:ed:b2:32:3a:ee:48:76:aa: 79:4e:15:bc:a3:c4:d2:7b:0e:5f:3e:42:9e:e3:10:d7:76:89: 9a:90:43:86:98:41:57:9f:de:8a:23:a7:6a:10:40:7a:da:a9: 74:3b:37:fc:18:cd:02:8a:61:05:9e:d8:11:97:d7:6a:37:aa: c2:cc:4c:40:69:1d:63:86:fe:5f:86:f5:16:a2:5b:ed:7c:22: 50:da:db:e2:1d:e5:75:03:37:ed:97:48:77:90:47:45:7d:b5: 8b:75:5c:db:1a:5b:09:f3:da:e4:ef:bb:0e:c4:01:57:b1:38: f0:05:bf:70:3c:f6:7c:43:32:6d:42:d2:15:be:54:14:67:19: f6:5e:25:e5:0a:39:cf:03:45:d0:66:4e:87:f3:71:2d:83:89: 44:46:b6:cc:90:96:92:39:59:56:80:7a:2a:76:b1:23:d2:a6: 96:a4:69:03:e7:8f:ab:8c:e3:65:25:63:50:c1:63:eb:18:f7: eb:7f:bb:61:d8:d5:ef:f7:dc:f6:e4:b7:be:60:a3:8e:71:80: 1b:31:5b:01:76:01:79:14:e9:5a:b9:21:66:b8:99:27:ef:05: ee:63:34:7e:1a:30:57:d8:9a:f0:88:d9:7f:39:2b:32:55:d1: cc:98:1c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C7EIKcBtkyU2XfxfjkEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWRiODllOGJiNjYwZjIxZWI1YzRhZjNiOWFkZDUyZDU3 ZWI4OWYwHhcNMjUxMjA2MTkwMjU1WhcNMjUxMjA3MTkwMjU1WjAzMTEwLwYDVQQD Eyg1NDJkZjgzZGIwZWE4Y2ZjYTljYmYzODZhOWIzMDdmYWU4MzI0ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAyI50LrrEhpCw8Yea3o0SaBoMVb e1RGGSG/7eZbhRz7ilfQueXsuxCOMdn7/81Zn8/rFqA3/MzvTjMt5RkhFv272Zse +yBXPEjxxpBlXaoDVhQxGuAlONNT4BpGzhkn/MaaCdBKJGc/UmEPhsWqnwRZxHBc gi4yA6m0Xau3tOrSUt66IP8hYq6KuQJ/sP7ZFwfNLNrKo2R0P9vvupXzklIczuwx ZF1JqvBnuVl9sUKWFQLRTvdvfvtchr931edurExXbBDXFOmLFmbF/h342kFrjn+n 0BI/Pjo1Uy2fUHjuPTG88jq1v2aBty88O9HEx1rwUSKHlrgvn4kIVkzEwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQt+D2w6oz8qcvzhqmzB/roMk9jMB8GA1UdIwQY MBaAFKZduJ6LtmDyHrXErzua3VLVfrifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2It YTM1NzhjOTQ0MDQwLzEvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zYjA2YTMtY2FmNC00ZDZjLWJiN2ItYTM1NzhjOTQ0MDQw LzEvcGwyNG5vdTJZUElldGNTdk81cmRVdFYtdUo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAug3GZ1LE mNCSyu2yMjruSHaqeU4VvKPE0nsOXz5CnuMQ13aJmpBDhphBV5/eiiOnahBAetqp dDs3/BjNAophBZ7YEZfXajeqwsxMQGkdY4b+X4b1FqJb7XwiUNrb4h3ldQM37ZdI d5BHRX21i3Vc2xpbCfPa5O+7DsQBV7E48AW/cDz2fEMybULSFb5UFGcZ9l4l5Qo5 zwNF0GZOh/NxLYOJREa2zJCWkjlZVoB6KnaxI9KmlqRpA+ePq4zjZSVjUMFj6xj3 63+7YdjV7/fc9uS3vmCjjnGAGzFbAXYBeRTpWrkhZriZJ+8F7mM0fhowV9ia8IjZ fzkrMlXRzJgcLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:52 2025 by rpki-client