This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json) Hash identifier: Vgfsad5PjDViiVXKQAghP9b8CdEijOLs8IiFw60/fpc= Subject key identifier: AC:7F:99:04:02:48:9D:7C:BB:A3:57:6B:B9:6D:90:12:68:49:ED:A1 Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad Certificate serial: 019AF208F7BD2A54917B8A43F23B9FEE1E2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft Manifest number: 06B8 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: 1bFhG2wRiLwgbLzz7MRCIDC7U1xTtbbcjrrP8LNJmto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f7:bd:2a:54:91:7b:8a:43:f2:3b:9f:ee:1e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=ac7f990402489d7cbba3576bb96d90126849eda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bf:5f:3d:44:86:3e:a9:60:d6:20:35:19:85: e1:57:b2:2e:ff:c1:89:a7:b2:d8:8b:13:5b:20:50: 16:74:a3:e5:ba:92:5f:bd:d8:52:70:bd:f8:aa:ba: 2b:59:2f:00:7e:cb:15:2e:96:43:65:15:1f:4d:2b: ba:b6:a0:03:79:7d:63:6b:d9:4c:a3:67:a3:71:8b: 59:55:1c:35:05:20:83:7f:5f:fc:c7:91:dc:43:f1: ee:82:a9:9f:32:29:10:1e:3d:f2:42:a5:31:32:12: 30:03:ef:fa:f9:2e:ec:31:a8:1e:ab:b1:17:ce:42: be:81:ca:bb:b1:bb:b9:32:d1:a7:40:9f:18:38:41: 0b:2c:96:0a:aa:32:bb:8d:40:5e:71:fc:88:95:cc: c0:f2:2d:44:e7:60:63:d2:ba:b6:67:31:96:75:ea: 4a:77:30:33:50:e6:40:e0:8a:f6:09:ec:e5:f7:ab: f0:d5:07:ef:9c:51:5c:2b:76:ea:52:dd:9b:96:5c: 46:94:c1:13:1c:86:4f:ef:80:58:10:e1:24:d3:07: 82:4b:83:4f:3c:5c:6d:d8:62:01:d8:11:3e:d7:ff: 28:cd:83:5b:07:b9:cf:10:16:ab:2e:2b:35:80:05: d6:7f:68:22:0f:3c:16:78:45:4a:f8:c5:d4:65:ad: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7F:99:04:02:48:9D:7C:BB:A3:57:6B:B9:6D:90:12:68:49:ED:A1 X509v3 Authority Key Identifier: keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c1:b3:c6:e9:16:b2:1c:cf:cd:00:8d:4b:19:96:dc:12:4b: bc:a4:7d:eb:98:cf:d9:14:4f:e2:9b:83:fc:81:fe:50:cb:ed: 2f:7a:d4:70:52:25:e0:f7:82:6d:7a:1b:3b:d2:93:8d:d8:53: 89:e1:60:52:15:8a:85:ea:af:4f:e8:c0:c5:b4:63:e9:d1:42: a6:d3:8b:92:bd:c7:5e:1b:60:c1:f9:3c:cb:21:99:96:dd:b4: d5:8b:5a:ef:cc:40:44:45:48:b0:94:55:cb:89:e9:60:0d:b7: db:11:9e:60:e8:33:8e:52:bd:bd:4b:e3:be:cf:09:76:3f:53: 94:a3:31:98:cb:1e:04:a2:b3:a4:35:43:12:c0:84:09:4a:99: e6:af:2a:20:86:e4:6c:f5:ae:02:11:31:61:e4:b8:d5:bb:d9: 6c:75:07:32:d5:9d:b3:9e:68:6c:0f:c9:2a:a1:4c:44:8b:6f: 9e:0f:0f:bb:22:42:10:84:2c:7e:7b:5d:87:80:57:ba:90:f6: 3f:cc:5e:26:65:5e:2f:29:80:ed:9a:b4:d8:b6:43:c2:49:24: 17:f9:c1:d0:d8:93:d2:bc:a3:80:53:09:a3:f2:78:81:70:70: 1a:bb:82:61:19:59:25:28:3e:77:19:f0:02:cf:8a:29:1d:57: c3:8c:9b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPe9KlSRe4pD8juf7h4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNTdjZWZhZTY5MzAwZmRmNTAzNWU2OTdjNWFlYzJkZTlj ODVkYWQwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EyhhYzdmOTkwNDAyNDg5ZDdjYmJhMzU3NmJiOTZkOTAxMjY4NDllZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8r9fPUSGPqlg1iA1GYXhV7Iu/8GJ p7LYixNbIFAWdKPlupJfvdhScL34qrorWS8AfssVLpZDZRUfTSu6tqADeX1ja9lM o2ejcYtZVRw1BSCDf1/8x5HcQ/HugqmfMikQHj3yQqUxMhIwA+/6+S7sMageq7EX zkK+gcq7sbu5MtGnQJ8YOEELLJYKqjK7jUBecfyIlczA8i1E52Bj0rq2ZzGWdepK dzAzUOZA4Ir2Cezl96vw1QfvnFFcK3bqUt2bllxGlMETHIZP74BYEOEk0weCS4NP PFxt2GIB2BE+1/8ozYNbB7nPEBarLis1gAXWf2giDzwWeEVK+MXUZa1ixwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx/mQQCSJ18u6NXa7ltkBJoSe2hMB8GA1UdIwQY MBaAFD5XzvrmkwD99QNeaXxa7C3pyF2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGxmTy11YVRBUDMxQTE1cGZGcnNMZW5JWGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NGVmZGItMGM4ZC00OWIzLThiOTkt MzY0OWJiNmE0ODMxLzEvUGxmTy11YVRBUDMxQTE1cGZGcnNMZW5JWGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi81NGVmZGItMGM4ZC00OWIzLThiOTktMzY0OWJiNmE0ODMx LzEvUGxmTy11YVRBUDMxQTE1cGZGcnNMZW5JWGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8GzxukW shzPzQCNSxmW3BJLvKR965jP2RRP4puD/IH+UMvtL3rUcFIl4PeCbXobO9KTjdhT ieFgUhWKheqvT+jAxbRj6dFCptOLkr3HXhtgwfk8yyGZlt201Yta78xAREVIsJRV y4npYA232xGeYOgzjlK9vUvjvs8Jdj9TlKMxmMseBKKzpDVDEsCECUqZ5q8qIIbk bPWuAhExYeS41bvZbHUHMtWds55obA/JKqFMRItvng8PuyJCEIQsfntdh4BXupD2 P8xeJmVeLymA7Zq02LZDwkkkF/nB0NiT0ryjgFMJo/J4gXBwGruCYRlZJSg+dxnw As+KKR1Xw4ybPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:52 2025 by rpki-client