This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft File: pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json) Hash identifier: EoxA98yNPdcpTm+5QeseTFxOC0Iru+0fmMpZPj86ixs= Subject key identifier: 2A:98:D6:BC:C6:05:40:6A:E8:D1:66:9E:D7:AB:89:0E:D1:63:21:BB Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Certificate serial: 019AF352C784E2DD0D52384AA019331AE17C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft Manifest number: 11BC Signing time: Sat 06 Dec 2025 11:01:19 +0000 Manifest this update: Sat 06 Dec 2025 11:01:19 +0000 Manifest next update: Sun 07 Dec 2025 11:01:19 +0000 Files and hashes: 1: WVsTj7MenBGl38xhkFqi5Z0aczs.roa (hash: 7b6SsFE3NdlNY/Clv2Hjf1UktFQZh/V54AuKRqY5yFI=) 2: Z7WMX0zmtWSwL1nl_bRrocAt96g.roa (hash: vascd8IZpBAaNc+5SLZNF4hkGl3zooaWaRamiX+4Grw=) 3: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: 2URHd0SoE2vmUoeXBVkScmaIm36U3JPGunZypPckeig=) 4: zGOXqDkKzJdU0p47Wrv4dob9WRY.roa (hash: h/PYhmoQAY7EhuYv56qskYi6sqC9Lx5gg5uwdXV3h5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c7:84:e2:dd:0d:52:38:4a:a0:19:33:1a:e1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0 Validity Not Before: Dec 6 11:01:19 2025 GMT Not After : Dec 7 11:01:19 2025 GMT Subject: CN=2a98d6bcc605406ae8d1669ed7ab890ed16321bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:f8:68:b3:10:4f:e4:a3:84:84:56:2d:46: 85:1b:cc:03:a6:7a:47:7a:5b:da:ad:6a:44:13:73: e0:48:da:db:03:df:90:e0:aa:5d:71:6e:0c:36:70: 87:a4:53:54:e9:2f:8f:85:a2:8d:ce:92:dc:c5:46: 1b:65:f8:11:14:8f:d9:ea:81:ad:10:3b:33:18:bf: 24:47:ad:49:80:e9:17:09:29:81:1c:b8:05:02:f0: f2:ac:8e:e9:d8:f6:35:f8:73:7f:cf:90:e9:9c:29: c6:19:5b:c9:11:e6:b3:0e:8e:3e:1f:64:97:c1:66: cf:99:e5:b7:69:67:32:61:96:06:9c:13:05:67:7c: c9:28:f1:79:39:ef:10:37:d0:32:6d:8a:d9:6c:e8: 0c:22:82:00:9b:76:2b:2a:5f:a4:c2:ac:c7:b3:ca: 49:78:a0:83:17:ab:48:ae:e7:4f:16:9e:34:65:02: ea:22:d1:ba:61:56:79:5f:30:d9:a7:25:d0:87:c7: b6:88:b3:1d:8b:8f:16:f5:32:10:57:1b:05:18:74: 24:f4:c9:e0:a5:f1:ae:aa:81:8f:57:99:0e:b3:cd: 0f:23:b8:31:c8:d1:cb:f3:08:b7:6c:fe:a1:a9:74: f0:da:03:41:1c:6d:d6:be:4e:53:a1:bb:4a:0a:37: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:D6:BC:C6:05:40:6A:E8:D1:66:9E:D7:AB:89:0E:D1:63:21:BB X509v3 Authority Key Identifier: keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:78:01:01:ed:cd:55:b9:c5:76:c9:dc:7f:6b:f4:96:64:e4: d7:9d:64:71:70:38:f7:d4:95:1f:33:d3:e4:2c:24:cb:56:a3: f5:ef:31:e0:09:d3:d9:9a:33:49:85:93:10:ef:a9:11:b0:f9: 57:b4:50:6d:1b:e1:c4:6b:42:0c:9a:2a:21:ba:5e:d2:8f:03: ec:a1:b3:0f:fe:ea:eb:af:a3:5e:12:42:c0:79:ac:21:ac:7c: 6b:20:90:01:6a:66:10:b7:4a:6c:37:03:c6:23:f1:31:b0:74: 0c:57:13:91:3d:67:bc:71:05:af:c7:bc:a9:cf:e2:f1:1e:e7: 3c:e1:58:44:bd:99:60:bb:c7:8a:76:18:77:d0:1e:ab:2c:1d: 92:ec:74:55:94:d4:ec:81:c4:79:5b:c4:85:75:b4:f8:25:67: 94:5d:f0:0c:d5:6a:e7:7a:be:62:9d:96:b6:46:8b:a6:f4:79: 2e:2c:7b:e1:12:90:06:e3:7c:2e:d2:7a:aa:98:d2:69:fa:14: 91:ad:d0:30:7d:b6:d7:3d:7a:40:cb:f9:40:d3:f2:31:54:d7: 5f:7d:90:d8:8c:02:c4:31:fe:0f:48:43:66:81:cd:73:20:c1: c3:42:c8:1e:2f:bb:90:aa:6d:d7:b4:fa:57:30:8d:dd:d1:1a: e0:8b:68:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUseE4t0NUjhKoBkzGuF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj MTZkZDAwHhcNMjUxMjA2MTEwMTE5WhcNMjUxMjA3MTEwMTE5WjAzMTEwLwYDVQQD EygyYTk4ZDZiY2M2MDU0MDZhZThkMTY2OWVkN2FiODkwZWQxNjMyMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEj4aLMQT+SjhIRWLUaFG8wDpnpH elvarWpEE3PgSNrbA9+Q4KpdcW4MNnCHpFNU6S+PhaKNzpLcxUYbZfgRFI/Z6oGt EDszGL8kR61JgOkXCSmBHLgFAvDyrI7p2PY1+HN/z5DpnCnGGVvJEeazDo4+H2SX wWbPmeW3aWcyYZYGnBMFZ3zJKPF5Oe8QN9AybYrZbOgMIoIAm3YrKl+kwqzHs8pJ eKCDF6tIrudPFp40ZQLqItG6YVZ5XzDZpyXQh8e2iLMdi48W9TIQVxsFGHQk9Mng pfGuqoGPV5kOs80PI7gxyNHL8wi3bP6hqXTw2gNBHG3Wvk5TobtKCjd2KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqY1rzGBUBq6NFmnteriQ7RYyG7MB8GA1UdIwQY MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt NjJkNDJmZTZmZDNjLzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3gBAe3N VbnFdsncf2v0lmTk151kcXA499SVHzPT5Cwky1aj9e8x4AnT2ZozSYWTEO+pEbD5 V7RQbRvhxGtCDJoqIbpe0o8D7KGzD/7q66+jXhJCwHmsIax8ayCQAWpmELdKbDcD xiPxMbB0DFcTkT1nvHEFr8e8qc/i8R7nPOFYRL2ZYLvHinYYd9Aeqywdkux0VZTU 7IHEeVvEhXW0+CVnlF3wDNVq53q+Yp2WtkaLpvR5Lix74RKQBuN8LtJ6qpjSafoU ka3QMH221z16QMv5QNPyMVTXX32Q2IwCxDH+D0hDZoHNcyDBw0LIHi+7kKpt17T6 VzCN3dEa4Ito4A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:37 2025 by rpki-client