This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File:                     pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier:          vj4YxYQKoroVKvD1o/lKFkzGMbC4yBZbsKJbSE/4QuU=
Subject key identifier:   AA:FC:6A:4D:EC:B6:13:22:D8:C1:5C:5E:05:20:D3:B0:45:40:3C:3A
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer:       /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial:       019AF2AD82539283C91E57DAA8BD95A55384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number:          1314
Signing time:             Sat 06 Dec 2025 08:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:48 +0000
Files and hashes:         1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
                          2: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: sFHeOLHRpF9a3p0qrBCZq0b2h+QNkHO/Q+xqQ0OCc84=)
                          3: q3I5uk601CP6yEVw9P03xUPnugY.roa (hash: ZDpLV11aWOXOyH1x/80gaRdd+gvEXhTdOywUgcsSS20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:82:53:92:83:c9:1e:57:da:a8:bd:95:a5:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
        Validity
            Not Before: Dec  6 08:00:48 2025 GMT
            Not After : Dec  7 08:00:48 2025 GMT
        Subject: CN=aafc6a4decb61322d8c15c5e0520d3b045403c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:1e:ee:96:80:52:cc:68:c6:97:95:59:9b:
                    57:c2:08:6d:ad:32:62:ab:06:d8:9e:fa:a0:32:9b:
                    9d:6a:88:60:1f:5e:08:c5:66:97:e7:55:b3:69:79:
                    ba:ab:98:95:fe:d6:99:f1:64:ac:92:00:3d:5b:68:
                    b2:a9:1e:67:7d:80:37:53:97:39:b2:14:2c:87:09:
                    05:ad:7e:f2:82:01:bd:b2:90:1b:d2:0f:1c:32:b4:
                    4c:4a:a8:40:fd:11:02:3b:7e:c5:a5:27:4c:92:e0:
                    92:f2:05:c1:5e:58:f9:05:39:f3:8f:7c:33:d7:b0:
                    bb:c0:cb:2a:71:a0:0c:cf:e7:5b:69:75:b1:06:30:
                    bb:ae:a9:22:e3:e8:40:c7:63:2a:e6:e7:8e:48:7d:
                    2a:7a:cd:11:05:21:90:4a:ca:19:89:0f:6c:d9:97:
                    4b:3c:9c:56:81:a1:5a:7f:ea:5e:3c:4d:c8:b7:20:
                    e5:49:cf:50:bd:43:21:70:87:8d:46:9f:df:88:8d:
                    86:ff:10:bb:84:b5:95:2c:3d:fb:d5:1b:48:6b:e6:
                    68:59:2a:6b:a1:31:b6:22:14:e3:2a:7b:ca:03:44:
                    51:70:67:ee:b9:cc:59:6c:5a:a4:18:c5:9e:a9:80:
                    69:02:05:2a:68:b4:b1:16:94:46:97:dc:ce:8c:01:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:6A:4D:EC:B6:13:22:D8:C1:5C:5E:05:20:D3:B0:45:40:3C:3A
            X509v3 Authority Key Identifier:
                keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:d9:af:ab:48:a2:77:b7:70:84:e1:73:04:36:6c:6f:78:
         ef:d4:60:b5:b7:59:0d:17:6c:a6:49:9e:58:ef:4b:fa:c1:75:
         42:ae:b5:5b:00:4b:e2:09:49:f3:90:5d:4c:f2:a6:bc:59:83:
         fc:bf:39:fd:9a:bb:1b:30:db:b2:4c:03:3d:ae:9e:50:80:1e:
         68:98:3a:43:59:39:a8:21:1a:e8:18:cb:c4:d5:6b:a0:32:14:
         ff:a4:3a:5e:d9:d0:ba:60:29:fe:97:6c:a5:ca:8f:ae:65:7d:
         d7:6f:41:fb:07:24:51:56:80:e8:11:df:3d:49:5b:01:2d:06:
         da:c2:32:ba:ce:67:71:52:06:31:1b:8b:75:78:7c:50:72:68:
         30:fb:0c:e1:15:2e:15:1d:ab:31:cb:5d:6f:54:c5:8f:db:56:
         74:46:6f:45:aa:76:14:86:56:e0:20:ae:1b:00:61:f0:8e:2e:
         d7:33:64:77:60:66:96:ff:3c:b9:5a:e5:fd:7a:1f:ff:c0:f1:
         f4:5f:0b:1e:f6:57:d3:f2:ff:96:cb:20:9c:bd:c1:1e:bd:f3:
         c1:14:c1:f4:87:5f:89:b5:f5:43:43:77:a3:fd:ec:2b:5e:db:
         b4:22:60:27:f0:58:25:b5:cb:72:e4:ab:b1:30:19:c0:84:e2:
         0f:f3:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:11 2025 by rpki-client