This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json) Hash identifier: wpfqG+iaguBYP5fE0D1P5BWjtk+vAVal4uBde851TNg= Subject key identifier: F5:D5:4E:B3:C4:DF:DA:5A:C6:7C:2A:91:BA:AF:27:06:69:94:34:85 Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Certificate serial: 019B5A521BBDA4FA1793E26E5721635A3AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft Manifest number: 06E1 Signing time: Fri 26 Dec 2025 11:01:28 +0000 Manifest this update: Fri 26 Dec 2025 11:01:28 +0000 Manifest next update: Sat 27 Dec 2025 11:01:28 +0000 Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: HtRqU/n+eYPOk4oDiJziDmNT71htlulkNiNx47PnRWs=) 2: qPYgVakLNDaEGc5ONkGmhqVYYy0.asa (hash: Q6ggqq2IBO+TwQuRQrQoJwyiBwBG7kWAAk+owOZubuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:1b:bd:a4:fa:17:93:e2:6e:57:21:63:5a:3a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Validity Not Before: Dec 26 11:01:28 2025 GMT Not After : Dec 27 11:01:28 2025 GMT Subject: CN=f5d54eb3c4dfda5ac67c2a91baaf270669943485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:63:fc:2a:5d:03:6c:6d:fa:93:73:45:d2: e1:81:e7:f9:b2:a2:ae:88:dd:d6:f5:c9:05:36:fe: 29:43:1c:39:a0:f7:5c:3a:a8:8e:6f:93:4b:d3:c0: fb:2e:3d:96:19:4c:c6:39:84:cf:da:96:7a:41:62: d6:33:4c:c8:bd:e7:1a:01:b0:90:9e:d6:9d:2c:dc: 3c:71:ed:66:fa:6d:3f:7c:8c:48:8d:08:00:f3:d5: 50:ba:72:89:26:c8:db:61:b1:4a:a9:d4:38:10:5f: 25:03:60:88:05:cb:8c:38:c2:7d:86:76:22:43:43: 4b:14:71:ab:9d:cb:64:c9:e5:ec:7f:4f:c0:8b:72: 48:23:34:31:b8:77:06:1e:43:05:14:92:74:65:87: f7:99:7d:00:10:5c:2a:e2:7a:bf:be:32:7b:3e:81: 5d:26:db:d2:89:0a:1f:e3:95:78:d5:d2:06:e3:b3: d7:88:88:ee:60:50:4d:34:98:15:bb:87:31:28:1a: f0:a5:e9:06:d0:fc:b8:ed:ed:9d:3d:cf:c2:87:14: b9:89:ed:93:ea:3f:21:49:c3:ee:4a:0b:ed:76:62: 52:13:fb:8b:2f:4f:c2:56:5a:64:6d:d8:bf:c7:ab: 60:36:09:e4:ba:33:10:68:da:20:e5:2e:cf:3b:09: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D5:4E:B3:C4:DF:DA:5A:C6:7C:2A:91:BA:AF:27:06:69:94:34:85 X509v3 Authority Key Identifier: keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:89:fe:05:0b:69:92:37:52:31:b2:cd:c5:19:3b:b1:20:a8: 58:b5:df:9d:d9:46:a0:41:26:e1:3f:da:a4:a2:1d:8f:8c:8d: 1f:8e:bc:ce:34:d4:91:4e:44:88:b0:5d:53:be:16:d1:1c:2d: 24:a0:93:a6:1a:34:10:4e:de:a6:61:55:cf:34:54:5a:36:25: ce:2b:4f:0a:c6:42:0e:d6:41:58:45:2e:57:cd:fd:05:e8:3a: 9d:6d:f6:1e:98:ec:44:51:81:6e:e2:59:53:28:0e:69:4e:30: c3:d4:a9:93:49:27:bf:4a:60:fe:b2:12:1a:33:2b:cd:30:8c: ca:ed:3e:18:87:71:61:01:cd:ec:ae:e0:a0:0d:00:ed:8f:ce: 00:e8:24:be:e4:02:02:41:b0:80:74:58:b2:7e:05:93:2d:d7: 65:55:d4:2a:e5:63:4c:63:61:d0:17:62:e8:3b:16:1b:a6:1a: f3:e7:4b:b5:0d:9c:37:47:a9:47:ce:ca:5e:3f:b8:c0:59:fa: c9:02:88:56:4b:e6:f6:05:8a:ca:5e:8e:ba:2d:bc:de:33:a7: c6:89:75:43:a0:4c:30:1c:e7:fc:c3:07:b9:42:62:84:26:fb: 33:40:db:9a:bf:83:05:83:d6:08:0c:4d:28:f3:f2:f2:d1:cf: 05:be:c0:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUhu9pPoXk+JuVyFjWjrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYmM0ZGFmNjBjN2Q0NGU5NWQ2Y2I5MjA3YTlkZGVjNTlh NDRiZjcwHhcNMjUxMjI2MTEwMTI4WhcNMjUxMjI3MTEwMTI4WjAzMTEwLwYDVQQD EyhmNWQ1NGViM2M0ZGZkYTVhYzY3YzJhOTFiYWFmMjcwNjY5OTQzNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKtj/CpdA2xt+pNzRdLhgef5sqKu iN3W9ckFNv4pQxw5oPdcOqiOb5NL08D7Lj2WGUzGOYTP2pZ6QWLWM0zIvecaAbCQ ntadLNw8ce1m+m0/fIxIjQgA89VQunKJJsjbYbFKqdQ4EF8lA2CIBcuMOMJ9hnYi Q0NLFHGrnctkyeXsf0/Ai3JIIzQxuHcGHkMFFJJ0ZYf3mX0AEFwq4nq/vjJ7PoFd JtvSiQof45V41dIG47PXiIjuYFBNNJgVu4cxKBrwpekG0Py47e2dPc/ChxS5ie2T 6j8hScPuSgvtdmJSE/uLL0/CVlpkbdi/x6tgNgnkujMQaNog5S7POwnrbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXVTrPE39paxnwqkbqvJwZplDSFMB8GA1UdIwQY MBaAFDy8Ta9gx9ROldbLkgep3exZpEv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYt YmY0OWE2ZDdiZTdjLzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYtYmY0OWE2ZDdiZTdj LzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4n+BQtp kjdSMbLNxRk7sSCoWLXfndlGoEEm4T/apKIdj4yNH468zjTUkU5EiLBdU74W0Rwt JKCTpho0EE7epmFVzzRUWjYlzitPCsZCDtZBWEUuV839Beg6nW32HpjsRFGBbuJZ UygOaU4ww9Spk0knv0pg/rISGjMrzTCMyu0+GIdxYQHN7K7goA0A7Y/OAOgkvuQC AkGwgHRYsn4Fky3XZVXUKuVjTGNh0Bdi6DsWG6Ya8+dLtQ2cN0epR87KXj+4wFn6 yQKIVkvm9gWKyl6Oui283jOnxol1Q6BMMBzn/MMHuUJihCb7M0Dbmr+DBYPWCAxN KPPy8tHPBb7AqQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:46 2025 by rpki-client