This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json) Hash identifier: obs2/xrWRSznyDS2ixmjU5JF89B+g2ERI5jsTnix+5c= Subject key identifier: D1:FD:E8:CA:13:DC:A8:3C:42:A2:9D:B9:70:56:F4:71:2F:7C:32:9D Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019B32D74F644E76BDB2443CDBD039FB6CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft Manifest number: 08F5 Signing time: Thu 18 Dec 2025 19:02:09 +0000 Manifest this update: Thu 18 Dec 2025 19:02:09 +0000 Manifest next update: Fri 19 Dec 2025 19:02:09 +0000 Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=) 2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: 7+hd3lPOliVKW1gfFEHsPR8+o/vNvkS4sgqaHEL01BM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:4f:64:4e:76:bd:b2:44:3c:db:d0:39:fb:6c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Dec 18 19:02:09 2025 GMT Not After : Dec 19 19:02:09 2025 GMT Subject: CN=d1fde8ca13dca83c42a29db97056f4712f7c329d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d4:e2:9c:15:ce:e0:73:76:7b:a4:2b:fb:60: d2:76:01:60:2a:55:58:21:fc:28:85:ab:84:08:8d: 85:5f:c6:01:eb:2f:de:22:54:66:ef:ae:54:79:d6: 8c:f5:62:84:51:9f:71:f3:85:a1:d0:d2:cc:70:f9: c3:2f:2f:91:8e:6e:11:6d:60:4d:55:58:d9:76:cc: df:36:7c:88:7d:f8:1d:35:1a:5e:65:fd:98:f0:3b: 49:a4:e6:ab:b8:77:9f:e8:52:5d:ed:c9:c9:f4:d8: 6c:4b:bf:92:d7:c2:a4:60:95:55:09:a4:46:dd:a4: 05:ad:0a:45:ec:5b:89:2f:38:5b:46:be:de:f7:91: d4:15:44:f5:33:cd:cc:d1:dc:51:49:a5:80:1a:4a: 08:56:26:cc:83:62:3f:52:dc:2f:6d:a4:6c:c6:58: 49:c5:af:e2:eb:7e:05:c8:2f:20:b9:4d:f5:1b:57: 25:38:26:f5:74:35:f7:50:e0:23:7d:91:27:43:2d: 86:20:42:16:af:df:d2:74:77:62:22:5e:8e:d1:6c: c9:23:0b:05:85:36:07:80:3f:ef:e5:fc:6e:c9:ba: fb:1d:33:55:eb:2a:b8:d9:6b:22:79:ac:08:e9:f2: 32:18:ef:c9:31:81:82:d6:0d:0b:c6:97:73:06:86: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:E8:CA:13:DC:A8:3C:42:A2:9D:B9:70:56:F4:71:2F:7C:32:9D X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8c:a4:05:60:bf:9a:2d:ca:e8:cc:7e:9a:6b:f0:cb:70:bb: e9:c1:67:e2:eb:84:3a:d9:5d:a8:13:ba:65:6e:34:45:88:07: e4:71:a4:45:f5:1f:a6:3c:46:6c:ab:30:d7:71:77:aa:67:61: d9:1c:a6:cc:a1:d5:3a:a1:3c:72:4b:67:22:b1:cb:a4:d2:fb: 84:68:52:27:e8:7f:cc:6e:71:30:00:f7:eb:79:ec:51:17:00: 3b:5c:0e:07:f5:0d:09:dd:bf:6c:58:81:71:80:f1:e3:36:56: 4b:32:b7:ae:e3:ab:f2:6c:eb:63:b2:98:82:7a:bc:54:7d:81: 80:b6:fb:85:79:33:f7:48:da:1d:ae:16:f0:66:02:1b:9c:7f: 61:0b:88:77:93:d3:84:be:20:b0:7f:46:f1:1c:91:83:4a:26: 25:61:b6:b7:b3:3e:b0:f9:68:1e:2b:32:16:85:18:f8:41:23: 1e:14:98:2c:4f:f3:be:d2:0b:8b:33:8d:59:60:26:6c:46:be: 15:2c:92:7c:92:75:5d:b9:d4:97:bf:15:aa:7a:72:b9:fc:0c: 1a:15:b4:0d:7b:4f:25:53:fd:34:e9:66:6b:76:af:7a:27:e2: ff:a0:ce:8c:1c:0b:d9:bc:80:c5:b7:9a:9c:55:c2:89:ef:d8: 4c:f3:3f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy109kTna9skQ829A5+2yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjUxMjE4MTkwMjA5WhcNMjUxMjE5MTkwMjA5WjAzMTEwLwYDVQQD EyhkMWZkZThjYTEzZGNhODNjNDJhMjlkYjk3MDU2ZjQ3MTJmN2MzMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNTinBXO4HN2e6Qr+2DSdgFgKlVY IfwohauECI2FX8YB6y/eIlRm765UedaM9WKEUZ9x84Wh0NLMcPnDLy+Rjm4RbWBN VVjZdszfNnyIffgdNRpeZf2Y8DtJpOaruHef6FJd7cnJ9NhsS7+S18KkYJVVCaRG 3aQFrQpF7FuJLzhbRr7e95HUFUT1M83M0dxRSaWAGkoIVibMg2I/UtwvbaRsxlhJ xa/i634FyC8guU31G1clOCb1dDX3UOAjfZEnQy2GIEIWr9/SdHdiIl6O0WzJIwsF hTYHgD/v5fxuybr7HTNV6yq42WsieawI6fIyGO/JMYGC1g0LxpdzBobUZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH96MoT3Kg8QqKduXBW9HEvfDKdMB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIykBWC/ mi3K6Mx+mmvwy3C76cFn4uuEOtldqBO6ZW40RYgH5HGkRfUfpjxGbKsw13F3qmdh 2RymzKHVOqE8cktnIrHLpNL7hGhSJ+h/zG5xMAD363nsURcAO1wOB/UNCd2/bFiB cYDx4zZWSzK3ruOr8mzrY7KYgnq8VH2BgLb7hXkz90jaHa4W8GYCG5x/YQuId5PT hL4gsH9G8RyRg0omJWG2t7M+sPloHisyFoUY+EEjHhSYLE/zvtILizONWWAmbEa+ FSySfJJ1XbnUl78VqnpyufwMGhW0DXtPJVP9NOlma3aveifi/6DOjBwL2byAxbea nFXCie/YTPM/Xw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:55:33 2025 by rpki-client