This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json) Hash identifier: OKjfsL+H0Uc2aFc1aAp9NWXVWf1rb2qh1cxsly7416o= Subject key identifier: 02:7F:58:F6:33:45:61:02:9B:B4:5E:E3:F9:77:34:6C:1E:6B:C0:67 Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c Certificate serial: 019B077E080412E86AC6902F57B879EB4ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft Manifest number: 06D9 Signing time: Wed 10 Dec 2025 09:00:58 +0000 Manifest this update: Wed 10 Dec 2025 09:00:58 +0000 Manifest next update: Thu 11 Dec 2025 09:00:58 +0000 Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: zaxhEMB6xoKEPPbbCIRCGPjp0JJJIr8/LyvldYcjomY=) 2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=) 3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:08:04:12:e8:6a:c6:90:2f:57:b8:79:eb:4a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c Validity Not Before: Dec 10 09:00:58 2025 GMT Not After : Dec 11 09:00:58 2025 GMT Subject: CN=027f58f6334561029bb45ee3f977346c1e6bc067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:2a:48:c2:49:2d:ec:e8:90:cd:0a:44:4c: 50:4d:d2:7a:0d:e5:25:44:aa:f3:b3:a0:8d:29:32: 38:39:d3:d9:eb:2a:95:20:38:5c:e7:df:05:ff:46: 54:2d:ad:40:de:7f:09:fd:61:b3:a7:5a:14:e2:6c: b5:01:6e:6b:93:16:2a:5a:b7:61:f8:b5:ca:6f:df: 6e:7b:ff:fd:a2:bc:65:27:91:47:19:bf:97:01:4e: 9f:34:12:8a:8a:83:73:a3:34:af:10:87:54:d6:f3: 36:cc:49:40:90:4a:e0:c5:d5:43:49:e9:31:c0:97: f6:7b:7b:9e:74:4e:7a:c2:69:9e:8a:d2:66:4b:44: de:b6:95:bc:9b:8b:3c:40:53:cd:91:3e:d7:7f:4a: d8:a6:51:39:fa:5a:92:5d:83:0d:12:0d:32:30:94: 3e:79:4d:67:db:8c:51:16:39:83:1b:b3:50:58:72: 26:b5:21:2b:60:6c:5b:04:1e:1a:2d:03:b8:67:8a: 20:a8:79:49:3e:78:3c:b6:1a:8b:23:10:27:a9:24: a1:08:d2:fc:ac:a9:d1:97:23:89:56:3a:f8:63:0f: 8f:5c:82:51:8c:87:76:a0:8e:b3:c0:6c:37:1f:99: 01:d2:81:54:ff:18:8b:21:76:f4:18:77:89:7d:b1: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:58:F6:33:45:61:02:9B:B4:5E:E3:F9:77:34:6C:1E:6B:C0:67 X509v3 Authority Key Identifier: keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8d:44:6f:f5:c5:a3:70:fd:b0:75:4b:8b:c0:b7:8c:63:52: 7f:2d:ff:57:c3:0a:9a:29:10:99:df:57:12:1e:9d:60:87:2b: 63:83:46:1e:f2:c4:6a:70:47:cb:86:1d:f3:e1:10:44:90:9c: 97:e8:96:74:6b:b4:14:3d:af:5e:33:1a:ab:bd:80:9a:52:ff: 8e:af:59:b7:09:fb:65:bb:67:0a:c3:af:8b:7c:85:7a:4a:fd: 66:6c:37:2f:5d:9c:27:8f:7f:b1:28:22:25:6c:40:c5:79:8b: 9b:cb:90:a2:c1:a1:18:5d:36:49:a4:ac:ee:50:a2:82:cc:60: fe:f9:ec:52:36:eb:1b:1f:2d:41:51:59:f0:0c:43:19:d0:e6: 54:b5:c4:a4:f7:25:28:f2:05:d6:51:d4:10:09:02:b6:79:37: 38:5b:71:08:6d:4b:fd:59:12:94:ca:f5:e5:c4:c3:73:6a:0c: ac:b0:98:e2:34:be:d2:66:51:a3:f8:76:90:67:39:be:28:6f: 52:76:84:20:11:84:49:ac:02:65:e9:c6:a6:75:4c:71:1b:cc: 13:41:12:26:06:91:79:da:91:ea:c8:af:3e:39:8a:fb:02:bc: e1:4f:0d:e6:02:10:c1:f6:94:a9:89:ea:d0:2d:12:52:75:c0: be:b9:c1:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfggEEuhqxpAvV7h560rPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYmRjZTQ1YzQ4ODJjOGEzYTI1NzExMGM2YjFmMGQ0OWIx ODJhOWMwHhcNMjUxMjEwMDkwMDU4WhcNMjUxMjExMDkwMDU4WjAzMTEwLwYDVQQD EygwMjdmNThmNjMzNDU2MTAyOWJiNDVlZTNmOTc3MzQ2YzFlNmJjMDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xoqSMJJLezokM0KRExQTdJ6DeUl RKrzs6CNKTI4OdPZ6yqVIDhc598F/0ZULa1A3n8J/WGzp1oU4my1AW5rkxYqWrdh +LXKb99ue//9orxlJ5FHGb+XAU6fNBKKioNzozSvEIdU1vM2zElAkErgxdVDSekx wJf2e3uedE56wmmeitJmS0TetpW8m4s8QFPNkT7Xf0rYplE5+lqSXYMNEg0yMJQ+ eU1n24xRFjmDG7NQWHImtSErYGxbBB4aLQO4Z4ogqHlJPng8thqLIxAnqSShCNL8 rKnRlyOJVjr4Yw+PXIJRjId2oI6zwGw3H5kB0oFU/xiLIXb0GHeJfbH+sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ/WPYzRWECm7Re4/l3NGwea8BnMB8GA1UdIwQY MBaAFDy9zkXEiCyKOiVxEMax8NSbGCqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMt NWRiNDM5YjRjY2VlLzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMtNWRiNDM5YjRjY2Vl LzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUo1Eb/XF o3D9sHVLi8C3jGNSfy3/V8MKmikQmd9XEh6dYIcrY4NGHvLEanBHy4Yd8+EQRJCc l+iWdGu0FD2vXjMaq72AmlL/jq9Ztwn7ZbtnCsOvi3yFekr9Zmw3L12cJ49/sSgi JWxAxXmLm8uQosGhGF02SaSs7lCigsxg/vnsUjbrGx8tQVFZ8AxDGdDmVLXEpPcl KPIF1lHUEAkCtnk3OFtxCG1L/VkSlMr15cTDc2oMrLCY4jS+0mZRo/h2kGc5vihv UnaEIBGESawCZenGpnVMcRvME0ESJgaRedqR6sivPjmK+wK84U8N5gIQwfaUqYnq 0C0SUnXAvrnBww== -----END CERTIFICATE-----Generated at Wed Dec 10 18:22:19 2025 by rpki-client