This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft File: Pl96BiMXb2x_xmVMATvzmcqQxXg.mft (raw, json) Hash identifier: YSXF3wQhJHmmKs3FyOxT3wtH+6LhlNOd6seoK0w1wgs= Subject key identifier: FD:69:97:FC:66:93:1E:24:75:CA:5F:DF:01:B8:5C:F0:B0:24:EB:A1 Authority key identifier: 3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78 Certificate issuer: /CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578 Certificate serial: 019AF4D2920B736F6C8B6700910D4728BF2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft Manifest number: 010A Signing time: Sat 06 Dec 2025 18:00:31 +0000 Manifest this update: Sat 06 Dec 2025 18:00:31 +0000 Manifest next update: Sun 07 Dec 2025 18:00:31 +0000 Files and hashes: 1: Pl96BiMXb2x_xmVMATvzmcqQxXg.crl (hash: WN7pBT1VpEL6YU3OYFOS4EhMxI/tO4dxg6IzKLbZp0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:92:0b:73:6f:6c:8b:67:00:91:0d:47:28:bf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578 Validity Not Before: Dec 6 18:00:31 2025 GMT Not After : Dec 7 18:00:31 2025 GMT Subject: CN=fd6997fc66931e2475ca5fdf01b85cf0b024eba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:79:2f:9d:24:01:55:54:d5:d0:a5:41:ea: cb:68:fd:0b:39:3f:77:f3:81:b1:c2:4b:e1:49:0c: 86:cb:49:59:4e:c0:9b:f5:54:fe:a6:7e:91:f4:f9: 16:16:23:a9:e2:6c:09:49:03:a6:3c:cb:1e:fb:fe: a9:7b:21:fc:a8:f0:ab:4e:ec:4d:55:49:cf:c5:f3: 13:35:fc:07:6d:27:c6:53:37:8c:ad:cd:a2:7e:72: e0:f0:5d:91:97:a4:14:63:66:46:65:e3:91:f3:cb: cb:b1:9d:5d:8a:6f:87:1b:0e:c9:3e:d1:0f:ee:d9: 47:08:f5:14:e8:45:d9:b9:25:6f:8c:59:98:25:76: 34:e5:7a:dd:1a:2e:7d:39:c0:29:7a:3e:02:be:cf: db:b1:ef:ae:75:6c:47:8c:61:d3:e1:37:b8:57:55: 2b:01:9a:3a:7c:19:13:f0:df:4f:e9:3a:9d:80:00: a0:35:94:70:2c:ce:a8:91:51:8c:66:af:be:24:c8: d0:2c:04:4f:ce:56:e1:04:1c:d5:2c:55:da:23:5e: c7:36:d5:cd:6b:82:e9:33:19:8c:da:81:d6:12:d7: 13:1f:37:34:71:23:04:64:ca:08:84:22:ac:43:af: b2:3b:33:dd:f2:10:08:ba:df:a1:21:ba:50:06:90: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:69:97:FC:66:93:1E:24:75:CA:5F:DF:01:B8:5C:F0:B0:24:EB:A1 X509v3 Authority Key Identifier: keyid:3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e5:48:b9:0a:e0:11:5a:03:16:94:fc:1c:64:51:c5:f9:be: ee:4e:7f:93:15:04:16:09:e6:82:a4:4e:79:36:45:59:c0:06: 22:79:80:e1:81:14:4a:98:0a:8b:f6:0d:a0:26:be:e9:2c:a7: 06:b3:9c:34:28:35:29:f0:92:96:b0:bd:1b:e7:6a:72:73:90: d1:4b:b1:79:12:7d:d3:d4:fe:c8:f7:6e:34:ee:ce:41:4a:d2: 81:19:71:b3:41:15:01:d1:4c:dc:e2:8a:c7:a3:e8:e4:6e:cf: 69:c9:44:9b:97:2e:c8:ef:a3:30:55:aa:9d:87:e2:e9:1a:73: f9:66:d1:5d:a3:5a:1b:c8:56:3d:c4:5e:84:69:cf:42:9a:68: 4e:5c:42:ca:58:59:ab:cd:4c:85:e1:76:de:43:df:59:8b:0e: dd:ef:c7:3b:2a:85:04:67:fa:35:e8:e0:f3:5d:d2:ee:c2:b5: 6e:00:27:4c:43:e9:9a:03:53:39:26:81:48:bf:41:98:a5:42: b9:74:8e:94:b1:81:0b:55:10:31:f6:c0:07:ab:c4:80:ee:35: 89:c4:da:d1:c6:d7:73:49:80:8f:36:1a:2b:6d:0a:e0:d7:d2: 72:6e:c4:3d:d3:4b:b2:dc:73:60:fb:e0:43:b4:db:dc:bc:e3: 51:3f:e8:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00pILc29si2cAkQ1HKL8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNWY3YTA2MjMxNzZmNmM3ZmM2NjU0YzAxM2JmMzk5Y2E5 MGM1NzgwHhcNMjUxMjA2MTgwMDMxWhcNMjUxMjA3MTgwMDMxWjAzMTEwLwYDVQQD EyhmZDY5OTdmYzY2OTMxZTI0NzVjYTVmZGYwMWI4NWNmMGIwMjRlYmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY15L50kAVVU1dClQerLaP0LOT93 84GxwkvhSQyGy0lZTsCb9VT+pn6R9PkWFiOp4mwJSQOmPMse+/6peyH8qPCrTuxN VUnPxfMTNfwHbSfGUzeMrc2ifnLg8F2Rl6QUY2ZGZeOR88vLsZ1dim+HGw7JPtEP 7tlHCPUU6EXZuSVvjFmYJXY05XrdGi59OcApej4Cvs/bse+udWxHjGHT4Te4V1Ur AZo6fBkT8N9P6TqdgACgNZRwLM6okVGMZq++JMjQLARPzlbhBBzVLFXaI17HNtXN a4LpMxmM2oHWEtcTHzc0cSMEZMoIhCKsQ6+yOzPd8hAIut+hIbpQBpCKXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1pl/xmkx4kdcpf3wG4XPCwJOuhMB8GA1UdIwQY MBaAFD5fegYjF29sf8ZlTAE785nKkMV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGw5NkJpTVhiMnhfeG1WTUFUdnptY3FReFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iNzA2OGYtNmRjOS00NmFkLTk0M2It MmZmNmI1ZTMwNGJkLzEvUGw5NkJpTVhiMnhfeG1WTUFUdnptY3FReFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9iNzA2OGYtNmRjOS00NmFkLTk0M2ItMmZmNmI1ZTMwNGJk LzEvUGw5NkJpTVhiMnhfeG1WTUFUdnptY3FReFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+VIuQrg EVoDFpT8HGRRxfm+7k5/kxUEFgnmgqROeTZFWcAGInmA4YEUSpgKi/YNoCa+6Syn BrOcNCg1KfCSlrC9G+dqcnOQ0UuxeRJ909T+yPduNO7OQUrSgRlxs0EVAdFM3OKK x6Po5G7PaclEm5cuyO+jMFWqnYfi6Rpz+WbRXaNaG8hWPcRehGnPQppoTlxCylhZ q81MheF23kPfWYsO3e/HOyqFBGf6Nejg813S7sK1bgAnTEPpmgNTOSaBSL9BmKVC uXSOlLGBC1UQMfbAB6vEgO41icTa0cbXc0mAjzYaK20K4NfScm7EPdNLstxzYPvg Q7Tb3LzjUT/oSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:28 2025 by rpki-client