This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json) Hash identifier: Sssq55CLdRReQANkaDfGA4hZ3+INdvKNkPjB/6tn6+k= Subject key identifier: 72:2D:E6:27:1E:4A:38:55:01:E0:65:F8:4D:39:A3:57:31:45:EF:19 Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc Certificate serial: 019AF31BAA28CE9A855CB1E4E5D12742D3E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft Manifest number: 0C39 Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: Ipk7gybdEORiGT9SoUCrH/KBxGQrd3Sgthm7p+oKxb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:aa:28:ce:9a:85:5c:b1:e4:e5:d1:27:42:d3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=722de6271e4a385501e065f84d39a3573145ef19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c4:dd:9d:cb:1d:12:5b:f9:74:9f:ee:b2:82: 25:d5:cb:03:da:b3:be:1f:59:5d:28:81:a2:8a:80: a7:d1:6e:65:7d:34:bf:ef:01:46:10:a7:f8:64:12: 45:98:52:6a:9b:87:fb:fe:c5:c0:ac:ba:d4:b8:39: 18:0f:02:21:29:8c:71:c8:fb:a1:47:c1:fa:db:07: 58:fb:41:13:3f:2b:a1:08:f3:c6:f6:b6:7f:38:25: 91:6a:69:64:04:f0:3f:52:47:aa:23:96:1e:e5:e4: 7c:ba:2b:d0:56:56:12:f0:e2:6f:68:bf:8f:c5:3a: e3:3e:32:c1:e7:ec:4c:02:40:35:b4:5d:4f:d5:ee: b7:7c:d8:b7:79:c6:9c:42:7b:60:f0:f0:6c:04:b7: a0:ac:ba:2e:5a:d8:4b:40:da:63:b5:95:53:ff:09: bb:db:33:0e:ef:52:98:66:d1:a5:ee:d3:f3:94:39: a0:f8:b1:4a:b2:d0:fd:1b:44:d3:75:2d:78:a7:88: 44:f0:38:e0:df:95:c5:5b:82:0e:e2:9a:cf:6e:7f: e2:a1:8b:ae:2d:3d:b2:25:54:8c:e5:95:de:cb:b9: 50:06:be:9a:59:02:d8:2b:e2:5e:3f:18:63:02:85: f2:c1:96:13:d6:bf:5a:29:ea:85:e0:1c:fd:2f:c1: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2D:E6:27:1E:4A:38:55:01:E0:65:F8:4D:39:A3:57:31:45:EF:19 X509v3 Authority Key Identifier: keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8d:b8:9e:59:67:77:a8:3d:f9:c2:f5:1d:10:a1:82:f2:a1: 89:4b:c6:d3:d1:ad:51:b7:e7:fb:0b:76:1b:26:a8:6f:d5:13: 0d:b3:77:c8:88:1e:13:8b:6a:68:94:63:31:56:6e:61:95:fa: ea:07:ae:8a:40:21:bd:cc:22:81:e0:6c:2e:ed:7b:79:e8:45: 3f:21:ad:b2:20:96:e9:1c:5f:8b:ea:58:72:94:d9:e5:b6:84: fc:7c:a5:e5:31:61:04:3f:60:11:30:1d:a9:5a:8a:05:85:70: a5:b6:35:e5:27:92:fc:58:1e:26:17:de:57:c3:ff:4d:0b:fd: a9:b6:0f:b6:71:ff:2d:1d:a8:d3:47:af:99:3a:0c:7e:3c:31: 55:b0:77:53:cd:d6:3b:cd:52:51:e7:b2:97:66:e0:06:b2:f2: f0:85:8e:13:c7:68:de:8d:73:55:b5:c8:4b:1b:5a:f5:ba:f7: e3:be:81:82:1a:ca:fe:81:da:c9:a6:f1:f1:8e:36:ce:f8:0a: b8:01:d1:91:31:c6:41:72:21:21:32:90:38:89:32:a6:2a:8c: 52:6b:b5:6c:60:a4:37:56:cf:62:1c:b1:c5:86:2c:99:79:e8: 84:8e:75:7e:26:97:4c:60:1c:93:87:8c:94:2b:73:56:9d:2b: 6b:f8:71:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6oozpqFXLHk5dEnQtPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTY4MzA0OTkzNzg2OThlM2U2ZTY1OTc5OTNjZDNiMDBl MWRjY2MwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD Eyg3MjJkZTYyNzFlNGEzODU1MDFlMDY1Zjg0ZDM5YTM1NzMxNDVlZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcTdncsdElv5dJ/usoIl1csD2rO+ H1ldKIGiioCn0W5lfTS/7wFGEKf4ZBJFmFJqm4f7/sXArLrUuDkYDwIhKYxxyPuh R8H62wdY+0ETPyuhCPPG9rZ/OCWRamlkBPA/UkeqI5Ye5eR8uivQVlYS8OJvaL+P xTrjPjLB5+xMAkA1tF1P1e63fNi3ecacQntg8PBsBLegrLouWthLQNpjtZVT/wm7 2zMO71KYZtGl7tPzlDmg+LFKstD9G0TTdS14p4hE8Djg35XFW4IO4prPbn/ioYuu LT2yJVSM5ZXey7lQBr6aWQLYK+JePxhjAoXywZYT1r9aKeqF4Bz9L8GmlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIt5iceSjhVAeBl+E05o1cxRe8ZMB8GA1UdIwQY MBaAFKZWgwSZN4aY4+bmWXmTzTsA4dzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt NjU2NDcwMzQzNGUyLzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy LzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI24nlln d6g9+cL1HRChgvKhiUvG09GtUbfn+wt2Gyaob9UTDbN3yIgeE4tqaJRjMVZuYZX6 6geuikAhvcwigeBsLu17eehFPyGtsiCW6Rxfi+pYcpTZ5baE/Hyl5TFhBD9gETAd qVqKBYVwpbY15SeS/FgeJhfeV8P/TQv9qbYPtnH/LR2o00evmToMfjwxVbB3U83W O81SUeeyl2bgBrLy8IWOE8do3o1zVbXISxta9br3476BghrK/oHayabx8Y42zvgK uAHRkTHGQXIhITKQOIkypiqMUmu1bGCkN1bPYhyxxYYsmXnohI51fiaXTGAck4eM lCtzVp0ra/hxmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:39 2025 by rpki-client