This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json) Hash identifier: wg0aBgHTf9/uuGbQWZLI57Xs0d2bZy9j8snJH0a5G9g= Subject key identifier: 40:D9:13:58:6F:72:E9:E2:09:8E:9A:6C:AB:68:65:AE:0E:FD:98:A0 Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Certificate serial: 019AF0883A8C37AA351C72CD01AB5F7AB7DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft Manifest number: 06AA Signing time: Fri 05 Dec 2025 22:00:50 +0000 Manifest this update: Fri 05 Dec 2025 22:00:50 +0000 Manifest next update: Sat 06 Dec 2025 22:00:50 +0000 Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: sL4gDE5/mEZOG6cglzVMVYe4mZ9ecK8tgp2EKqNmrdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:3a:8c:37:aa:35:1c:72:cd:01:ab:5f:7a:b7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Validity Not Before: Dec 5 22:00:50 2025 GMT Not After : Dec 6 22:00:50 2025 GMT Subject: CN=40d913586f72e9e2098e9a6cab6865ae0efd98a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:49:25:e1:6b:d7:fc:f0:8e:ab:81:aa:fe: a3:0f:d9:a4:ec:c2:40:59:de:04:9e:28:4f:ee:ee: 55:54:19:f3:7d:e4:cc:0c:d0:b7:07:c5:00:6d:db: 5b:8d:56:31:b4:8e:e0:f8:27:c0:3c:05:3a:c3:b4: 0b:20:e5:b9:e9:1e:d3:0c:4b:15:d4:38:5c:e3:3d: 5a:54:e1:cc:61:cb:84:1c:45:c1:c9:b4:30:48:9f: c7:9c:2c:c8:fb:31:a8:2f:17:3b:e9:df:ae:bc:4a: 3b:13:96:7a:12:e6:a1:ca:9c:1d:28:38:d3:9c:b1: c7:23:48:cb:16:b3:fc:94:e2:3f:11:4b:0b:12:88: bb:57:fe:82:e9:4c:eb:6a:df:cd:df:8d:11:5c:37: 75:77:11:f4:02:33:a7:56:5e:6c:e6:b3:38:48:9d: 0e:e3:b7:a6:4d:16:db:8c:da:a9:3d:5f:a4:fa:bc: ef:d2:0d:f6:ed:85:02:74:b4:4f:5a:e0:e3:81:09: ce:75:2a:8b:53:70:19:40:5d:fa:ba:17:b4:cf:f7: f7:46:e6:dd:00:fd:b6:a6:f2:81:75:ad:a3:70:02: d0:cd:e3:2c:e0:f5:3d:57:28:59:f2:bc:72:fe:09: 94:d6:9e:aa:92:46:97:c4:e2:99:c9:94:27:c9:95: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D9:13:58:6F:72:E9:E2:09:8E:9A:6C:AB:68:65:AE:0E:FD:98:A0 X509v3 Authority Key Identifier: keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9c:9e:55:a7:cd:69:0e:19:fc:9e:30:dc:36:43:a0:07:ba: ac:5f:f1:99:0d:8d:b1:67:76:f4:56:e6:65:f1:aa:10:ce:09: ec:77:68:84:8c:ca:3d:96:da:16:dd:21:81:f6:02:50:3a:84: 7d:11:f7:50:7f:dd:3e:a8:b3:af:ea:9d:27:b1:b2:51:11:f0: 96:d7:4b:80:71:da:73:3e:84:91:42:55:75:e3:68:58:9d:d5: 1f:36:7c:e7:68:2d:0c:f2:53:01:d5:dd:43:89:85:6e:49:49: 55:c0:df:a1:69:01:79:8f:da:b7:e8:3a:24:2d:9a:1c:55:11: 5f:6d:1a:82:a9:ee:6b:fc:58:4c:e6:71:b2:91:4c:87:6e:6d: fa:f4:54:d3:06:d1:b4:00:ef:ff:f8:25:84:6a:f0:e4:80:51: 42:fb:2a:70:e1:63:ac:0e:9b:be:ed:1a:81:8c:f5:f0:1d:ef: 6f:f4:ae:ce:63:cf:f0:25:35:c4:e2:ae:df:83:99:c9:22:e0: 27:3c:98:6c:42:a3:be:5f:50:95:b3:f9:d9:a8:b8:30:8c:77: e9:80:0c:91:fd:6f:fc:bc:15:25:18:8b:15:d4:07:b2:0b:7e: bb:30:14:9d:c1:5b:31:c0:9f:10:b8:1b:56:3c:75:99:6a:16: b2:e3:1f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDqMN6o1HHLNAatferfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYmM0ZGFmNjBjN2Q0NGU5NWQ2Y2I5MjA3YTlkZGVjNTlh NDRiZjcwHhcNMjUxMjA1MjIwMDUwWhcNMjUxMjA2MjIwMDUwWjAzMTEwLwYDVQQD Eyg0MGQ5MTM1ODZmNzJlOWUyMDk4ZTlhNmNhYjY4NjVhZTBlZmQ5OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGZJJeFr1/zwjquBqv6jD9mk7MJA Wd4EnihP7u5VVBnzfeTMDNC3B8UAbdtbjVYxtI7g+CfAPAU6w7QLIOW56R7TDEsV 1Dhc4z1aVOHMYcuEHEXBybQwSJ/HnCzI+zGoLxc76d+uvEo7E5Z6EuahypwdKDjT nLHHI0jLFrP8lOI/EUsLEoi7V/6C6Uzrat/N340RXDd1dxH0AjOnVl5s5rM4SJ0O 47emTRbbjNqpPV+k+rzv0g327YUCdLRPWuDjgQnOdSqLU3AZQF36uhe0z/f3Rubd AP22pvKBda2jcALQzeMs4PU9VyhZ8rxy/gmU1p6qkkaXxOKZyZQnyZUVJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDZE1hvcuniCY6abKtoZa4O/ZigMB8GA1UdIwQY MBaAFDy8Ta9gx9ROldbLkgep3exZpEv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYt YmY0OWE2ZDdiZTdjLzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYtYmY0OWE2ZDdiZTdj LzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJyeVafN aQ4Z/J4w3DZDoAe6rF/xmQ2NsWd29FbmZfGqEM4J7HdohIzKPZbaFt0hgfYCUDqE fRH3UH/dPqizr+qdJ7GyURHwltdLgHHacz6EkUJVdeNoWJ3VHzZ852gtDPJTAdXd Q4mFbklJVcDfoWkBeY/at+g6JC2aHFURX20agqnua/xYTOZxspFMh25t+vRU0wbR tADv//glhGrw5IBRQvsqcOFjrA6bvu0agYz18B3vb/SuzmPP8CU1xOKu34OZySLg JzyYbEKjvl9QlbP52ai4MIx36YAMkf1v/LwVJRiLFdQHsgt+uzAUncFbMcCfELgb Vjx1mWoWsuMfjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:06 2025 by rpki-client