This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft File: Pl96BiMXb2x_xmVMATvzmcqQxXg.mft (raw, json) Hash identifier: ovFEJ/gT8GZOkZvY+8v0c7IJFWqZXhwToJdJM1JHTDY= Subject key identifier: 34:6D:42:84:C1:BA:E4:8A:59:F8:15:C6:33:85:1F:69:37:7D:52:A0 Authority key identifier: 3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78 Certificate issuer: /CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578 Certificate serial: 019B593EE5A38347CAAE99FE323F1EF15515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft Manifest number: 013E Signing time: Fri 26 Dec 2025 06:00:52 +0000 Manifest this update: Fri 26 Dec 2025 06:00:52 +0000 Manifest next update: Sat 27 Dec 2025 06:00:52 +0000 Files and hashes: 1: Pl96BiMXb2x_xmVMATvzmcqQxXg.crl (hash: tfY/r6lUQlSMj275giFrXkIDxWcXYCFtluWBdyVko+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e5:a3:83:47:ca:ae:99:fe:32:3f:1e:f1:55:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578 Validity Not Before: Dec 26 06:00:52 2025 GMT Not After : Dec 27 06:00:52 2025 GMT Subject: CN=346d4284c1bae48a59f815c633851f69377d52a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:aa:10:6d:73:fa:62:ec:1d:71:37:7e:1d: 70:a3:3b:80:7f:50:10:f0:75:9a:bb:fc:90:33:0b: 9b:98:8f:e6:78:80:6e:e5:52:c3:2b:9a:fb:c1:15: a7:3d:af:a3:73:80:0f:ab:c2:57:57:92:19:7e:d3: f5:31:e2:ab:88:98:a3:62:b2:ba:45:58:9d:26:1d: f5:51:8b:87:21:dc:19:e6:1d:7c:e4:c3:15:b6:cf: d4:1f:07:27:6b:3c:3e:a5:55:9c:d9:b8:98:61:69: d9:82:39:fa:3b:c1:0c:9c:3a:b2:9b:9c:b7:6d:bc: e4:77:d2:36:9c:4f:1e:68:65:43:57:3f:26:e1:b5: 46:18:65:aa:db:15:9a:86:d7:3e:0e:26:f2:c4:e0: 14:8e:87:fd:88:29:c4:79:10:67:1b:dd:37:6e:e8: 23:24:52:57:af:fe:e7:4d:14:e4:46:03:21:80:74: cb:0c:e8:89:e2:0f:c6:64:9b:39:c1:16:d0:cf:49: 03:0a:e0:df:ae:ac:f4:db:26:88:41:a7:d5:f0:d6: ad:4a:6d:23:05:31:f0:1f:91:3a:31:aa:93:2c:da: da:f9:e7:dc:67:62:70:aa:53:6c:ad:2a:94:1f:b6: 91:bd:a2:55:18:17:11:80:ec:af:f7:fe:58:ba:36: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6D:42:84:C1:BA:E4:8A:59:F8:15:C6:33:85:1F:69:37:7D:52:A0 X509v3 Authority Key Identifier: keyid:3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c0:b2:46:20:6a:59:e7:0a:d5:fe:dc:e0:ee:cc:72:e2:d5: 32:49:a8:bc:b3:95:21:04:46:bd:00:c5:4f:0f:7d:35:0c:64: 18:5e:13:52:de:37:5c:f7:2f:3d:97:91:ad:b9:59:46:0e:f4: fb:23:ea:8c:8d:30:00:3c:be:0a:ef:33:a6:16:2a:0d:30:f6: fc:be:a1:e4:3d:ca:06:ab:5a:76:b9:f0:8b:6c:a2:bb:9b:15: 92:79:a0:c4:cf:21:92:8a:65:3e:90:35:8f:3d:47:5a:65:a9: 30:e8:1e:76:8b:16:27:e8:68:51:e7:6d:db:d8:4d:26:6a:d9: b1:f8:69:27:c3:df:65:67:02:34:4c:11:b7:c4:7d:1f:58:f6: 15:a5:c5:19:bb:16:58:b3:59:4b:5a:db:e1:4f:62:3f:c7:3d: 51:e5:e2:16:2f:e2:0f:56:0d:0a:47:80:a4:27:ab:f8:44:c2: 51:68:64:a7:9c:ba:7f:5d:a3:47:57:21:82:5f:8c:4d:55:48: f7:9a:ff:03:7c:20:12:79:ff:8d:33:d8:fa:17:12:f6:a4:10: e8:08:37:95:cf:86:50:58:89:fe:f6:f1:cc:e3:43:83:c4:9a: fb:9f:49:5c:46:21:96:b3:aa:98:6d:a1:bc:0e:0b:1e:09:1a: 4d:c1:a8:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPuWjg0fKrpn+Mj8e8VUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNWY3YTA2MjMxNzZmNmM3ZmM2NjU0YzAxM2JmMzk5Y2E5 MGM1NzgwHhcNMjUxMjI2MDYwMDUyWhcNMjUxMjI3MDYwMDUyWjAzMTEwLwYDVQQD EygzNDZkNDI4NGMxYmFlNDhhNTlmODE1YzYzMzg1MWY2OTM3N2Q1MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1uqEG1z+mLsHXE3fh1wozuAf1AQ 8HWau/yQMwubmI/meIBu5VLDK5r7wRWnPa+jc4APq8JXV5IZftP1MeKriJijYrK6 RVidJh31UYuHIdwZ5h185MMVts/UHwcnazw+pVWc2biYYWnZgjn6O8EMnDqym5y3 bbzkd9I2nE8eaGVDVz8m4bVGGGWq2xWahtc+DibyxOAUjof9iCnEeRBnG903bugj JFJXr/7nTRTkRgMhgHTLDOiJ4g/GZJs5wRbQz0kDCuDfrqz02yaIQafV8NatSm0j BTHwH5E6MaqTLNra+efcZ2JwqlNsrSqUH7aRvaJVGBcRgOyv9/5YujYCzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRtQoTBuuSKWfgVxjOFH2k3fVKgMB8GA1UdIwQY MBaAFD5fegYjF29sf8ZlTAE785nKkMV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGw5NkJpTVhiMnhfeG1WTUFUdnptY3FReFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iNzA2OGYtNmRjOS00NmFkLTk0M2It MmZmNmI1ZTMwNGJkLzEvUGw5NkJpTVhiMnhfeG1WTUFUdnptY3FReFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iNzA2OGYtNmRjOS00NmFkLTk0M2ItMmZmNmI1ZTMwNGJk LzEvUGw5NkJpTVhiMnhfeG1WTUFUdnptY3FReFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMCyRiBq WecK1f7c4O7McuLVMkmovLOVIQRGvQDFTw99NQxkGF4TUt43XPcvPZeRrblZRg70 +yPqjI0wADy+Cu8zphYqDTD2/L6h5D3KBqtadrnwi2yiu5sVknmgxM8hkoplPpA1 jz1HWmWpMOgedosWJ+hoUedt29hNJmrZsfhpJ8PfZWcCNEwRt8R9H1j2FaXFGbsW WLNZS1rb4U9iP8c9UeXiFi/iD1YNCkeApCer+ETCUWhkp5y6f12jR1chgl+MTVVI 95r/A3wgEnn/jTPY+hcS9qQQ6Ag3lc+GUFiJ/vbxzONDg8Sa+59JXEYhlrOqmG2h vA4LHgkaTcGoEQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:39 2025 by rpki-client