This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft File: pPLix3U2Usd9u3nL4GmyurA_YN0.mft (raw, json) Hash identifier: reEgSB04uxq7SATxEJnGMDjq8PUV+9LqPsyfDnSSndI= Subject key identifier: 5D:C6:7C:BC:DA:5B:BB:BF:9E:72:A3:8E:D1:A2:24:9B:B6:F5:A4:51 Authority key identifier: A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD Certificate issuer: /CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd Certificate serial: 019AF2AD9DAEF9A71B8D60CF8A19A50DC164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: GDxm2zcd8Lnhjk0mCi0fCSfcw18.roa (hash: 2s+mStFbGwTH5aRw2Ej0hEDuLtxVhcXn931+yvpJuwg=) 2: pPLix3U2Usd9u3nL4GmyurA_YN0.crl (hash: 71RmIpKPyV19nYSxBNQ49fj7iw/Zxe7gS1SD5VaKKb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9d:ae:f9:a7:1b:8d:60:cf:8a:19:a5:0d:c1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2e2c7753652c77dbb79cbe069b2bab03f60dd Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=5dc67cbcda5bbbbf9e72a38ed1a2249bb6f5a451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:d3:92:78:9e:f9:ec:51:a3:43:d3:39:db: 82:29:1b:9a:b2:49:8b:9c:84:91:3f:97:96:cb:10: a7:f7:c7:1e:46:1a:f5:21:62:25:7e:e0:21:00:2c: b3:ae:4d:77:2d:ef:f8:84:f4:00:d2:03:40:89:4d: ea:86:04:5f:9d:32:ee:40:93:e9:21:06:b7:f0:6d: a7:1c:38:a5:83:58:d6:12:04:a2:72:3f:6b:2b:0c: 54:20:f8:5a:55:2c:85:e3:34:9b:f1:4a:57:53:37: 80:70:8f:86:38:3e:3b:10:a2:aa:1d:8b:1a:3f:14: 86:e4:5b:6b:85:37:af:e1:f7:7e:60:d6:26:cc:9e: be:ef:5a:f2:2c:13:1c:1f:e6:18:fe:e6:fa:bc:6f: c1:d9:90:14:73:69:a7:1a:ef:f0:17:13:55:07:61: 0d:c5:02:7c:8b:53:02:ba:09:7b:c1:36:d6:fa:68: f7:94:97:87:c7:62:9d:ef:2b:11:a5:e0:36:53:32: c4:d5:3a:be:9b:90:c6:64:23:cb:2c:18:2a:41:18: 3a:63:22:b0:d1:0f:ac:55:c2:72:fb:1c:47:57:e6: 85:b5:82:6c:b3:7d:af:bd:87:3c:84:dd:1e:f4:d6: d2:7c:43:da:42:c1:8c:c6:c0:92:9c:dc:28:6c:fa: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C6:7C:BC:DA:5B:BB:BF:9E:72:A3:8E:D1:A2:24:9B:B6:F5:A4:51 X509v3 Authority Key Identifier: keyid:A4:F2:E2:C7:75:36:52:C7:7D:BB:79:CB:E0:69:B2:BA:B0:3F:60:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPLix3U2Usd9u3nL4GmyurA_YN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5809a5-bbdc-43ea-94c4-9d1a2e0911b9/1/pPLix3U2Usd9u3nL4GmyurA_YN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:16:8a:32:ce:bb:8a:ec:a7:89:e5:2c:50:f1:9d:89:e4:3f: e3:68:bf:c7:6c:c2:54:c0:f9:ad:0b:ad:fa:91:9d:e4:f7:52: 80:04:de:33:c1:79:35:f2:be:1c:bf:38:7a:25:7f:fd:66:a6: 15:29:bc:00:c4:26:05:2a:d1:22:59:c0:00:5f:b5:a5:56:60: 6e:85:40:7c:ca:74:f4:08:94:4e:69:7f:7f:48:5c:bf:79:cc: 82:c6:1b:19:f2:49:d8:ef:a9:a0:95:1e:03:b3:5e:dc:42:fe: 88:4e:45:49:e5:bf:f7:39:fc:4f:33:96:db:8f:c7:4b:a0:88: 3d:b2:a5:14:9f:dc:f3:97:d6:8b:42:80:5c:3b:98:1d:db:33: 91:3c:dc:82:5b:e8:be:35:53:a9:ca:fb:31:77:05:eb:19:34: 8e:99:4d:28:f2:b0:5e:88:c4:d7:43:18:7e:d8:7a:7a:49:aa: 1d:70:b3:8b:42:09:69:0e:b6:af:c5:cf:b1:b6:b5:3d:59:88: 21:16:da:d2:5f:15:ac:1f:cc:57:94:47:f7:75:52:a5:cf:49: 47:c9:ad:d2:27:fe:ce:19:8a:55:1b:13:43:a6:fc:f8:24:61: 51:b2:13:ef:11:bb:d0:4f:8f:ee:60:54:bf:11:8a:15:b5:9a: 53:c3:d4:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZ2u+acbjWDPihmlDcFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZjJlMmM3NzUzNjUyYzc3ZGJiNzljYmUwNjliMmJhYjAz ZjYwZGQwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD Eyg1ZGM2N2NiY2RhNWJiYmJmOWU3MmEzOGVkMWEyMjQ5YmI2ZjVhNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxujTknie+exRo0PTOduCKRuaskmL nISRP5eWyxCn98ceRhr1IWIlfuAhACyzrk13Le/4hPQA0gNAiU3qhgRfnTLuQJPp IQa38G2nHDilg1jWEgSicj9rKwxUIPhaVSyF4zSb8UpXUzeAcI+GOD47EKKqHYsa PxSG5FtrhTev4fd+YNYmzJ6+71ryLBMcH+YY/ub6vG/B2ZAUc2mnGu/wFxNVB2EN xQJ8i1MCugl7wTbW+mj3lJeHx2Kd7ysRpeA2UzLE1Tq+m5DGZCPLLBgqQRg6YyKw 0Q+sVcJy+xxHV+aFtYJss32vvYc8hN0e9NbSfEPaQsGMxsCSnNwobPrp1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3GfLzaW7u/nnKjjtGiJJu29aRRMB8GA1UdIwQY MBaAFKTy4sd1NlLHfbt5y+BpsrqwP2DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQt OWQxYTJlMDkxMWI5LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS81ODA5YTUtYmJkYy00M2VhLTk0YzQtOWQxYTJlMDkxMWI5 LzEvcFBMaXgzVTJVc2Q5dTNuTDRHbXl1ckFfWU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxaKMs67 iuynieUsUPGdieQ/42i/x2zCVMD5rQut+pGd5PdSgATeM8F5NfK+HL84eiV//Wam FSm8AMQmBSrRIlnAAF+1pVZgboVAfMp09AiUTml/f0hcv3nMgsYbGfJJ2O+poJUe A7Ne3EL+iE5FSeW/9zn8TzOW24/HS6CIPbKlFJ/c85fWi0KAXDuYHdszkTzcglvo vjVTqcr7MXcF6xk0jplNKPKwXojE10MYfth6ekmqHXCzi0IJaQ62r8XPsba1PVmI IRba0l8VrB/MV5RH93VSpc9JR8mt0if+zhmKVRsTQ6b8+CRhUbIT7xG70E+P7mBU vxGKFbWaU8PU6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:47 2025 by rpki-client