This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json) Hash identifier: hNtsmiseLAoNigVvbH896m67UmJ7rNR4mXnYCr5OcSI= Subject key identifier: 74:04:B0:BC:0F:98:DD:EC:E3:DA:41:C2:DE:5F:F7:5A:BB:AB:DE:65 Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019B1BA996046B95D599283F0FB3E0BC2A1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft Manifest number: 08E9 Signing time: Sun 14 Dec 2025 07:00:57 +0000 Manifest this update: Sun 14 Dec 2025 07:00:57 +0000 Manifest next update: Mon 15 Dec 2025 07:00:57 +0000 Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=) 2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: VkHAH/zneOc0fhI53iGXI6h/6uRiFA8PmD8GTEPbGSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:96:04:6b:95:d5:99:28:3f:0f:b3:e0:bc:2a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Dec 14 07:00:57 2025 GMT Not After : Dec 15 07:00:57 2025 GMT Subject: CN=7404b0bc0f98ddece3da41c2de5ff75abbabde65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:2b:65:3a:4d:a4:02:57:5e:86:d7:c5:99: b7:3d:7b:52:33:c3:b1:3e:e9:d7:cf:00:76:a3:8a: db:20:60:e8:1f:36:a8:e8:28:7e:28:1f:9d:45:d6: 4f:d9:49:3b:50:86:fd:28:ec:85:ce:69:9c:01:d8: 42:63:98:b3:3a:79:2d:c2:c8:31:fb:00:13:4f:f2: 96:ff:25:17:1e:79:47:5d:f8:a6:58:60:13:42:d4: 01:ca:d3:71:df:92:44:01:6d:ce:17:1c:d8:fd:d4: 3a:4f:23:b6:0e:cc:a6:1d:ba:04:a1:bf:59:97:41: ad:9a:fb:4e:1a:43:c1:86:29:02:a9:a6:7e:7d:bb: 4f:a5:8b:4a:5a:e0:5a:01:da:fa:fc:92:cd:01:c7: 62:b8:4a:dc:7c:7f:50:8c:ca:ce:64:ac:b0:c2:79: df:87:d0:72:36:23:7a:e8:5d:ff:a2:48:d7:de:95: 63:1c:fc:f7:3a:62:e9:71:32:69:8b:63:1a:91:45: e5:19:43:60:d4:5c:f1:42:f4:d3:e8:f1:76:96:2c: fa:06:71:5b:41:c8:7a:88:1d:83:0c:6c:a2:96:4f: 2e:c8:06:45:b5:db:d6:57:23:d0:76:96:a7:10:62: 0f:43:a4:cc:2c:e7:32:e8:3f:df:77:76:94:08:67: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:B0:BC:0F:98:DD:EC:E3:DA:41:C2:DE:5F:F7:5A:BB:AB:DE:65 X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:2c:82:4c:14:4e:21:90:72:56:3a:71:ee:e1:c7:0a:51:25: 07:9b:a0:ea:17:20:a8:65:fe:18:76:18:8c:39:d8:94:56:30: 67:58:fb:00:85:94:90:06:21:36:f2:9c:ef:a4:12:33:de:72: 9c:1b:90:9f:c6:98:eb:e2:f9:9e:41:aa:bf:1f:6a:f4:f3:29: 48:41:30:f0:c6:5f:08:8e:88:1d:99:ff:d9:cd:02:9a:ae:f5: 31:96:c3:cb:d2:e0:56:64:1b:0b:47:ff:85:8c:e2:72:0c:95: bf:d1:2a:56:3d:72:35:fd:dc:c8:9c:3d:6a:79:f9:30:ef:57: 3e:29:fb:6b:d3:84:24:d7:fa:93:51:0e:ee:d1:04:88:aa:d5: ac:19:47:b8:7d:e3:68:b4:fe:1a:8b:30:e0:2d:dc:11:cb:21: 2d:0b:89:f5:63:84:5c:4a:c6:ab:bf:a7:65:2d:64:c3:92:b6: 76:fd:b2:08:e8:20:9e:06:89:fc:8e:b3:63:5d:93:c4:c4:e7: a4:07:21:90:ee:44:0b:fb:8e:42:04:c9:2a:26:5a:e2:f4:55: 5f:5a:57:a8:5b:ac:88:0a:36:da:96:6c:5e:e1:13:ae:96:f6: da:8a:f3:9b:2f:e1:39:02:8b:c0:10:c9:b7:a6:a3:40:1c:21: 7a:11:76:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqZYEa5XVmSg/D7PgvCocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjUxMjE0MDcwMDU3WhcNMjUxMjE1MDcwMDU3WjAzMTEwLwYDVQQD Eyg3NDA0YjBiYzBmOThkZGVjZTNkYTQxYzJkZTVmZjc1YWJiYWJkZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjporZTpNpAJXXobXxZm3PXtSM8Ox PunXzwB2o4rbIGDoHzao6Ch+KB+dRdZP2Uk7UIb9KOyFzmmcAdhCY5izOnktwsgx +wATT/KW/yUXHnlHXfimWGATQtQBytNx35JEAW3OFxzY/dQ6TyO2DsymHboEob9Z l0GtmvtOGkPBhikCqaZ+fbtPpYtKWuBaAdr6/JLNAcdiuErcfH9QjMrOZKywwnnf h9ByNiN66F3/okjX3pVjHPz3OmLpcTJpi2MakUXlGUNg1FzxQvTT6PF2liz6BnFb Qch6iB2DDGyilk8uyAZFtdvWVyPQdpanEGIPQ6TMLOcy6D/fd3aUCGd+SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQEsLwPmN3s49pBwt5f91q7q95lMB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSyCTBRO IZByVjpx7uHHClElB5ug6hcgqGX+GHYYjDnYlFYwZ1j7AIWUkAYhNvKc76QSM95y nBuQn8aY6+L5nkGqvx9q9PMpSEEw8MZfCI6IHZn/2c0Cmq71MZbDy9LgVmQbC0f/ hYzicgyVv9EqVj1yNf3cyJw9ann5MO9XPin7a9OEJNf6k1EO7tEEiKrVrBlHuH3j aLT+Gosw4C3cEcshLQuJ9WOEXErGq7+nZS1kw5K2dv2yCOggngaJ/I6zY12TxMTn pAchkO5EC/uOQgTJKiZa4vRVX1pXqFusiAo22pZsXuETrpb22orzmy/hOQKLwBDJ t6ajQBwhehF2eQ== -----END CERTIFICATE-----Generated at Sun Dec 14 17:26:11 2025 by rpki-client