This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json) Hash identifier: g4yafdo9eLNcqmMuzEmbQTQUHzy6QRNU20VSg9nejB8= Subject key identifier: C4:65:B6:68:0A:1B:DD:A9:AF:78:19:7C:63:0D:E4:D5:BD:80:5B:6E Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b Certificate serial: 019B0F00A2C51EE63758367358DB48B476D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft Manifest number: 03CC Signing time: Thu 11 Dec 2025 20:00:58 +0000 Manifest this update: Thu 11 Dec 2025 20:00:58 +0000 Manifest next update: Fri 12 Dec 2025 20:00:58 +0000 Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=) 2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: x9+cw89ZvdDDkctpHj/QdExeZXSs10EW5EdkiZT3FmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a2:c5:1e:e6:37:58:36:73:58:db:48:b4:76:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b Validity Not Before: Dec 11 20:00:58 2025 GMT Not After : Dec 12 20:00:58 2025 GMT Subject: CN=c465b6680a1bdda9af78197c630de4d5bd805b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:27:c5:38:b5:db:ba:97:b5:44:f6:f9:45: 69:eb:1a:9b:da:d2:af:81:1e:3e:c8:3c:e3:58:bb: cc:c9:31:42:0b:7c:e2:2e:0a:b8:d9:ef:5e:b9:cc: 99:47:2d:30:3e:ea:08:50:95:1e:cc:07:df:1b:94: ff:88:13:d7:7e:b1:e8:f7:60:eb:21:d9:3a:fa:2a: 26:cc:3e:78:c5:e0:19:4e:ac:e2:f2:85:d3:48:57: 20:60:f5:45:b8:37:3d:d5:a0:81:67:d7:9a:90:12: af:24:f8:97:d7:01:5b:d5:7e:ce:ab:84:cb:85:cf: b4:1e:60:5e:af:97:c1:9b:e9:76:36:66:2a:48:0f: ca:94:9e:0f:d6:84:04:6e:3d:ba:ab:c5:10:b6:52: a0:52:38:17:06:0c:33:ab:6d:67:65:16:25:17:46: 83:64:77:ac:ae:be:42:19:ea:86:ad:3e:5b:d0:91: f8:69:da:65:d1:02:01:e1:e1:d4:95:b5:01:50:05: c8:f1:ff:ec:33:f5:c1:d4:4c:c0:bf:06:e9:2b:68: 17:8d:f8:1e:32:89:cc:f2:de:14:33:07:27:81:94: 9c:53:87:bc:86:16:67:f0:14:9c:7b:eb:74:48:4c: a7:fe:c8:9c:d3:90:d4:11:e5:4e:94:81:af:25:f8: 43:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:65:B6:68:0A:1B:DD:A9:AF:78:19:7C:63:0D:E4:D5:BD:80:5B:6E X509v3 Authority Key Identifier: keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0a:4a:1e:8f:47:2b:17:d2:c8:aa:92:70:5e:25:25:86:a4: 35:7e:df:af:e7:37:fe:b8:7e:b5:01:11:48:92:9c:8e:05:14: 41:1e:6f:bc:28:c7:b3:07:58:4a:8e:f2:f6:e3:cb:eb:53:88: 6d:3d:b6:e8:4a:58:7b:0e:54:68:99:fb:07:43:bd:8c:7f:f2: 8a:b7:36:1a:15:cc:5e:05:b9:ef:07:05:5d:eb:8a:21:95:88: 01:14:e5:be:1d:57:ac:a3:1a:b8:da:d0:66:61:31:d3:1a:8e: 8e:05:65:84:70:ff:42:7a:0d:33:fd:01:b6:f7:20:09:af:84: f8:00:f2:02:e2:7c:ab:66:0b:11:3d:4b:c5:e9:89:e4:b1:cf: 64:3f:43:5c:e1:c0:61:0d:79:44:ed:1c:2a:ad:9d:d2:58:e8: 83:4c:fa:fa:e6:2a:f4:4d:fe:50:a2:fe:fb:93:69:d8:43:43: c5:e4:1d:bb:63:b0:32:8c:f1:5e:0d:61:f2:2a:e0:f3:bf:76: be:25:47:4c:65:c5:a3:72:c1:a9:c6:d8:9e:41:2d:d5:6b:87: 8d:b0:39:8a:cf:4a:e5:3a:fd:be:cb:48:c2:21:24:03:84:82: 76:98:83:da:8a:29:f4:5f:2f:2e:7a:5e:09:23:85:37:c5:d2: fb:19:c2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKLFHuY3WDZzWNtItHbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3 NDZhN2IwHhcNMjUxMjExMjAwMDU4WhcNMjUxMjEyMjAwMDU4WjAzMTEwLwYDVQQD EyhjNDY1YjY2ODBhMWJkZGE5YWY3ODE5N2M2MzBkZTRkNWJkODA1YjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze0nxTi127qXtUT2+UVp6xqb2tKv gR4+yDzjWLvMyTFCC3ziLgq42e9eucyZRy0wPuoIUJUezAffG5T/iBPXfrHo92Dr Idk6+iomzD54xeAZTqzi8oXTSFcgYPVFuDc91aCBZ9eakBKvJPiX1wFb1X7Oq4TL hc+0HmBer5fBm+l2NmYqSA/KlJ4P1oQEbj26q8UQtlKgUjgXBgwzq21nZRYlF0aD ZHesrr5CGeqGrT5b0JH4adpl0QIB4eHUlbUBUAXI8f/sM/XB1EzAvwbpK2gXjfge MonM8t4UMwcngZScU4e8hhZn8BSce+t0SEyn/sic05DUEeVOlIGvJfhDVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRltmgKG92pr3gZfGMN5NW9gFtuMB8GA1UdIwQY MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwpKHo9H KxfSyKqScF4lJYakNX7fr+c3/rh+tQERSJKcjgUUQR5vvCjHswdYSo7y9uPL61OI bT226EpYew5UaJn7B0O9jH/yirc2GhXMXgW57wcFXeuKIZWIARTlvh1XrKMauNrQ ZmEx0xqOjgVlhHD/QnoNM/0BtvcgCa+E+ADyAuJ8q2YLET1LxemJ5LHPZD9DXOHA YQ15RO0cKq2d0ljog0z6+uYq9E3+UKL++5Np2ENDxeQdu2OwMozxXg1h8irg8792 viVHTGXFo3LBqcbYnkEt1WuHjbA5is9K5Tr9vstIwiEkA4SCdpiD2oop9F8vLnpe CSOFN8XS+xnCBw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:39 2025 by rpki-client