This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json) Hash identifier: MMT6ePodkjAQsB73CQ5B/ryxfyf8U7I1QT2g3jMTNuY= Subject key identifier: 21:E0:5B:19:54:1A:97:43:22:DB:8A:C3:35:3B:47:7A:A0:B4:60:29 Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad Certificate serial: 019B5A5190073C227B3022BE53D9FB2829FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft Manifest number: 06EE Signing time: Fri 26 Dec 2025 11:00:53 +0000 Manifest this update: Fri 26 Dec 2025 11:00:53 +0000 Manifest next update: Sat 27 Dec 2025 11:00:53 +0000 Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: RDbZSPB/pcWpe3VTxltUcYbru29k1yhhtiOEKmr/bXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:90:07:3c:22:7b:30:22:be:53:d9:fb:28:29:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad Validity Not Before: Dec 26 11:00:53 2025 GMT Not After : Dec 27 11:00:53 2025 GMT Subject: CN=21e05b19541a974322db8ac3353b477aa0b46029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:9a:4e:78:03:d7:aa:66:90:02:9f:77:d2: 0c:b3:f9:f4:ad:fb:36:37:0f:a1:89:b3:f9:42:00: 5b:79:b8:70:ae:2e:16:43:3d:a2:95:5e:d9:8c:7f: 8a:61:49:79:9c:9c:66:bc:12:4d:33:43:81:0d:13: 79:0e:03:03:fd:dc:b8:a4:20:90:a4:df:b7:ad:eb: 6a:14:76:37:02:c6:1e:55:c0:04:cd:0c:bc:a4:65: 16:b9:df:59:d5:6a:fe:09:9c:64:ca:9d:ee:67:19: bd:4f:b9:2e:99:e6:5d:f0:0e:71:b0:9f:f2:22:4b: fb:e3:0b:f4:00:d5:a3:ff:48:2b:3b:cf:8a:97:5f: b6:82:13:08:92:fe:2c:d9:eb:d5:0b:00:1a:27:79: 73:ac:89:51:45:20:48:06:89:8d:ef:fd:c5:a0:87: f6:8b:17:36:7a:5e:55:f8:5d:02:bb:fa:b5:6b:ac: 4f:c2:73:f5:94:e8:e6:7e:cd:01:d3:cf:aa:bc:b8: 80:95:81:cb:a0:ff:5e:bf:1b:40:a6:b4:1c:82:92: 82:84:86:b5:c0:9b:7c:2e:7b:01:20:27:c0:45:81: 76:32:5c:72:bf:94:cc:04:f1:f5:d8:0c:96:80:fa: ab:bc:e7:9c:f9:e2:f2:50:69:a4:56:e5:52:e7:d3: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E0:5B:19:54:1A:97:43:22:DB:8A:C3:35:3B:47:7A:A0:B4:60:29 X509v3 Authority Key Identifier: keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:40:f9:0e:ba:95:a6:70:1b:c7:be:d6:71:0e:de:1e:41:bb: c4:b3:04:2f:1a:ce:57:32:d5:81:4b:c6:90:00:e7:4f:22:72: 16:9a:70:c1:d9:9b:06:b1:da:aa:92:17:05:bd:7d:a6:8d:76: 8b:e3:9b:5f:cb:33:45:58:67:61:2f:2a:d8:d2:0a:0c:a6:c4: f3:3d:b6:ba:fd:28:95:0c:17:66:be:06:b7:9d:18:2b:ad:08: 28:c7:40:73:bb:f4:54:87:e0:d0:ea:f5:f2:18:0f:5a:8b:37: ca:d9:ca:07:c6:b9:57:7d:56:e2:ff:a6:72:6a:9e:ec:26:76: 5a:5d:56:d0:98:37:7e:3b:b2:42:69:b2:25:b2:87:41:fa:0b: d4:6b:6c:ae:53:ef:82:30:60:94:fd:82:01:7f:54:2e:d6:46: 47:1d:2b:75:96:a9:9d:2b:52:61:e6:ed:87:72:0a:17:9d:21: c2:72:1e:1a:c1:e9:9f:e7:0b:8e:8f:b3:4f:b5:1b:78:21:56: 24:5c:44:29:fa:13:a4:74:88:fc:e2:05:9f:f2:a0:1a:75:02: b6:91:2f:77:12:e8:8a:50:f2:90:f4:fd:fd:02:54:2a:ca:bc: d8:b1:6e:bc:0d:35:bb:d8:a7:7e:2a:79:69:73:05:ca:8b:35: ba:39:0d:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZAHPCJ7MCK+U9n7KCn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNTdjZWZhZTY5MzAwZmRmNTAzNWU2OTdjNWFlYzJkZTlj ODVkYWQwHhcNMjUxMjI2MTEwMDUzWhcNMjUxMjI3MTEwMDUzWjAzMTEwLwYDVQQD EygyMWUwNWIxOTU0MWE5NzQzMjJkYjhhYzMzNTNiNDc3YWEwYjQ2MDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ2aTngD16pmkAKfd9IMs/n0rfs2 Nw+hibP5QgBbebhwri4WQz2ilV7ZjH+KYUl5nJxmvBJNM0OBDRN5DgMD/dy4pCCQ pN+3retqFHY3AsYeVcAEzQy8pGUWud9Z1Wr+CZxkyp3uZxm9T7kumeZd8A5xsJ/y Ikv74wv0ANWj/0grO8+Kl1+2ghMIkv4s2evVCwAaJ3lzrIlRRSBIBomN7/3FoIf2 ixc2el5V+F0Cu/q1a6xPwnP1lOjmfs0B08+qvLiAlYHLoP9evxtAprQcgpKChIa1 wJt8LnsBICfARYF2Mlxyv5TMBPH12AyWgPqrvOec+eLyUGmkVuVS59PTLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHgWxlUGpdDItuKwzU7R3qgtGApMB8GA1UdIwQY MBaAFD5XzvrmkwD99QNeaXxa7C3pyF2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGxmTy11YVRBUDMxQTE1cGZGcnNMZW5JWGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NGVmZGItMGM4ZC00OWIzLThiOTkt MzY0OWJiNmE0ODMxLzEvUGxmTy11YVRBUDMxQTE1cGZGcnNMZW5JWGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81NGVmZGItMGM4ZC00OWIzLThiOTktMzY0OWJiNmE0ODMx LzEvUGxmTy11YVRBUDMxQTE1cGZGcnNMZW5JWGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJED5DrqV pnAbx77WcQ7eHkG7xLMELxrOVzLVgUvGkADnTyJyFppwwdmbBrHaqpIXBb19po12 i+ObX8szRVhnYS8q2NIKDKbE8z22uv0olQwXZr4Gt50YK60IKMdAc7v0VIfg0Or1 8hgPWos3ytnKB8a5V31W4v+mcmqe7CZ2Wl1W0Jg3fjuyQmmyJbKHQfoL1GtsrlPv gjBglP2CAX9ULtZGRx0rdZapnStSYebth3IKF50hwnIeGsHpn+cLjo+zT7UbeCFW JFxEKfoTpHSI/OIFn/KgGnUCtpEvdxLoilDykPT9/QJUKsq82LFuvA01u9infip5 aXMFyos1ujkN0Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:20 2025 by rpki-client