This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json) Hash identifier: ZPiTBwgjBFsAhamdkDvgtKP4WV7yFI6CO7FeLPDUebs= Subject key identifier: 18:BD:B7:A8:64:80:45:71:C9:ED:1C:AA:24:F1:95:6A:93:04:CE:BC Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c Certificate serial: 019AF2400AD0172CCFE247F68C21DB0C88A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft Manifest number: 06CE Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: 2eW44M3vg0ZR8QjYvpFhNPRZsm2Gh3G5A/rOCB9UD4w=) 2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=) 3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0a:d0:17:2c:cf:e2:47:f6:8c:21:db:0c:88:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=18bdb7a864804571c9ed1caa24f1956a9304cebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:0e:63:b1:4e:a4:8a:e5:39:26:4f:96:95: ee:ff:86:99:6c:1d:74:ca:f1:e9:09:af:da:36:a7: 05:01:82:f9:e1:36:14:35:6b:68:a0:70:35:25:56: f6:29:b3:fa:e7:85:e9:21:1e:16:2e:da:6b:67:4b: c3:96:9f:40:cb:9d:7e:4b:dd:f8:0a:4b:49:c6:40: 39:c3:ac:80:4f:b4:a3:8d:44:0a:79:7a:0d:cf:f3: cd:bd:9f:f7:23:f6:8e:f6:a9:91:53:04:9c:19:d5: 98:aa:a3:f3:98:44:df:ce:23:23:e2:69:82:41:30: ad:83:67:3f:85:fa:da:31:21:dc:0d:ce:14:a2:c0: 78:de:93:de:40:52:1f:27:10:08:b7:dc:35:39:7e: ef:1f:78:4f:e6:ac:3e:50:d2:cd:c1:e3:44:34:06: 92:d3:51:1c:5e:be:13:b7:fa:b3:33:99:71:6e:6a: 5a:8a:44:b3:74:a4:1d:8e:32:a4:f5:af:11:83:a1: 7f:85:76:6a:58:41:10:f4:83:8c:fa:10:9e:fb:a8: f2:35:c1:74:11:5d:0e:30:e7:47:01:1d:eb:a6:90: bd:5c:a4:b9:c7:5d:9d:4a:dc:fe:ea:18:f4:a5:f9: 9a:81:ab:9e:30:fa:bb:2d:50:b8:f5:6a:16:ea:f0: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:B7:A8:64:80:45:71:C9:ED:1C:AA:24:F1:95:6A:93:04:CE:BC X509v3 Authority Key Identifier: keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e4:eb:d2:b5:1c:23:59:d8:8c:f6:85:dc:d4:62:96:30:e8: 2b:5f:8c:2e:bb:ad:5a:6a:4a:bb:5d:00:60:c3:b9:ed:f3:a6: 6a:23:8e:e6:03:19:57:d0:c7:6d:22:0b:bc:cb:21:a7:f5:3d: 3a:5c:83:d7:03:98:16:aa:cf:6c:e2:6a:6a:39:9a:3f:1d:0e: ec:97:da:75:6d:1c:19:d5:2c:2b:24:94:da:1f:a9:6d:f2:df: df:b7:dd:2f:04:39:c0:63:61:b9:00:01:3b:44:75:41:8c:39: 10:9d:a9:2f:73:7c:43:a2:33:b2:25:b7:cb:5b:98:8f:70:7b: 80:e0:d2:03:34:0a:ef:ac:c2:51:3e:e5:c3:64:74:dd:cc:3f: d1:49:50:fd:33:30:62:37:99:9b:77:e1:5a:bf:31:e7:b1:55: 72:9d:ab:b4:0e:df:1e:49:a1:c0:b7:ad:da:55:01:3b:74:92: e0:b1:d3:40:c0:d9:e9:67:9b:e8:bf:47:7a:e3:ca:1f:2b:a3: f2:48:07:9c:80:2d:dd:9d:02:3e:d7:ff:3a:39:b4:5e:fa:5b: 8e:6c:a9:d2:50:b6:b0:4d:8b:03:06:d4:b8:7f:e7:fd:2c:b7: cb:89:2a:0d:77:68:57:45:ec:63:0e:84:9c:6f:51:dd:b8:7a: c2:b8:ec:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQArQFyzP4kf2jCHbDIipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYmRjZTQ1YzQ4ODJjOGEzYTI1NzExMGM2YjFmMGQ0OWIx ODJhOWMwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD EygxOGJkYjdhODY0ODA0NTcxYzllZDFjYWEyNGYxOTU2YTkzMDRjZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4cOY7FOpIrlOSZPlpXu/4aZbB10 yvHpCa/aNqcFAYL54TYUNWtooHA1JVb2KbP654XpIR4WLtprZ0vDlp9Ay51+S934 CktJxkA5w6yAT7SjjUQKeXoNz/PNvZ/3I/aO9qmRUwScGdWYqqPzmETfziMj4mmC QTCtg2c/hfraMSHcDc4UosB43pPeQFIfJxAIt9w1OX7vH3hP5qw+UNLNweNENAaS 01EcXr4Tt/qzM5lxbmpaikSzdKQdjjKk9a8Rg6F/hXZqWEEQ9IOM+hCe+6jyNcF0 EV0OMOdHAR3rppC9XKS5x12dStz+6hj0pfmagaueMPq7LVC49WoW6vCuOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi9t6hkgEVxye0cqiTxlWqTBM68MB8GA1UdIwQY MBaAFDy9zkXEiCyKOiVxEMax8NSbGCqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMt NWRiNDM5YjRjY2VlLzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMtNWRiNDM5YjRjY2Vl LzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+Tr0rUc I1nYjPaF3NRiljDoK1+MLrutWmpKu10AYMO57fOmaiOO5gMZV9DHbSILvMshp/U9 OlyD1wOYFqrPbOJqajmaPx0O7JfadW0cGdUsKySU2h+pbfLf37fdLwQ5wGNhuQAB O0R1QYw5EJ2pL3N8Q6IzsiW3y1uYj3B7gODSAzQK76zCUT7lw2R03cw/0UlQ/TMw YjeZm3fhWr8x57FVcp2rtA7fHkmhwLet2lUBO3SS4LHTQMDZ6Web6L9HeuPKHyuj 8kgHnIAt3Z0CPtf/Ojm0Xvpbjmyp0lC2sE2LAwbUuH/n/Sy3y4kqDXdoV0XsYw6E nG9R3bh6wrjsag== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:11 2025 by rpki-client