This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json) Hash identifier: hxvSBtO8BCT02FYLcgYuZboYdEvHGteXM+eFC+Jq47E= Subject key identifier: 68:5F:83:03:42:ED:8E:53:48:B4:D5:45:D1:4C:B2:74:02:1B:73:5D Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b Certificate serial: 019AF209229CB4CD3AF133105FB881F73E61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft Manifest number: 03BD Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=) 2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: N2dmKzdggwe8akD5PwZuyIgkzRy4OWPT/ALv3/3XLSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:22:9c:b4:cd:3a:f1:33:10:5f:b8:81:f7:3e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=685f830342ed8e5348b4d545d14cb274021b735d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:94:2b:94:93:bd:59:72:c2:4d:b4:dd:68: 58:d5:02:a9:0c:55:18:39:0d:41:74:a9:56:9e:74: 4d:b8:59:92:7e:da:e6:b6:de:7e:29:6f:72:4d:56: d9:2d:60:fc:c1:05:93:13:c7:ca:e6:0a:a3:31:de: 3a:ac:6e:0e:3f:2c:36:81:4b:39:a3:47:a3:d0:a0: 7f:f2:24:1c:38:b6:f3:f7:0a:e6:72:78:c6:8e:fe: 04:27:09:8c:ff:f8:8d:d2:46:a6:21:d9:18:98:d4: 72:2e:5b:35:10:6a:62:08:96:c8:58:f6:30:ec:61: fc:32:c7:01:62:5a:b1:26:fe:21:b3:95:4f:a5:85: 99:7b:9c:60:7b:4a:41:e6:d1:7e:0c:57:4c:ea:94: ab:36:34:c6:83:00:92:e9:a9:a2:cc:eb:ca:45:d6: 58:86:29:1e:82:57:38:cf:eb:cf:1e:82:0d:1c:8d: 2b:e5:3a:ef:d2:e0:ac:a5:1a:4b:e2:1b:c4:bf:03: b0:b6:05:05:5f:32:67:c2:a6:86:e6:5b:ca:e8:26: 96:78:9d:ac:15:c1:da:68:1e:75:17:1e:ed:b1:6b: 3c:74:3b:42:1e:fd:2b:98:31:e9:9d:01:6a:5d:a8: ad:92:f1:8b:aa:01:09:d6:6c:a3:47:6f:95:22:6a: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:83:03:42:ED:8E:53:48:B4:D5:45:D1:4C:B2:74:02:1B:73:5D X509v3 Authority Key Identifier: keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:84:4b:97:4e:da:fb:d1:72:60:c0:08:f8:12:37:45:61: 54:bb:26:db:86:e1:02:53:13:3d:e9:20:c6:97:7e:c9:75:7b: 69:ea:d0:2f:91:75:6f:cd:24:c0:73:c0:d5:bb:fc:10:57:80: 3a:e7:a0:6a:65:e3:7a:31:e9:cf:23:50:c2:35:4a:e3:9f:85: b3:df:20:5d:9d:45:70:bc:dc:f7:4b:a5:09:96:e8:23:41:b1: 65:f8:92:72:1c:2f:fe:2b:40:5b:15:01:76:eb:9e:ea:ef:22: bd:a1:da:42:dc:21:ce:f0:23:d2:57:3d:37:39:73:28:eb:ea: 2a:9e:a0:6c:4e:df:4a:a9:f7:52:53:02:8c:0b:86:d9:5a:c1: 5f:54:93:b0:9d:ab:46:5c:a5:a0:f8:37:ea:a7:7b:2d:4c:9c: 38:dd:e4:1f:7d:80:3d:df:f1:73:3a:2f:0e:d9:9f:33:f9:5f: d0:5c:bc:8f:4c:c5:a4:4c:38:6c:99:19:9f:f2:7d:40:d2:a1: a0:15:47:7e:ab:0b:57:f4:94:20:e6:57:ce:28:fe:a8:7c:a3: 3b:0f:e9:82:da:d9:9b:72:af:2c:aa:e3:78:85:e4:0e:4c:30: 82:08:7e:9c:38:0d:7d:8c:11:47:3f:69:a8:08:4a:6f:7b:10: dc:7e:a9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSKctM068TMQX7iB9z5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3 NDZhN2IwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD Eyg2ODVmODMwMzQyZWQ4ZTUzNDhiNGQ1NDVkMTRjYjI3NDAyMWI3MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsiUK5STvVlywk203WhY1QKpDFUY OQ1BdKlWnnRNuFmSftrmtt5+KW9yTVbZLWD8wQWTE8fK5gqjMd46rG4OPyw2gUs5 o0ej0KB/8iQcOLbz9wrmcnjGjv4EJwmM//iN0kamIdkYmNRyLls1EGpiCJbIWPYw 7GH8MscBYlqxJv4hs5VPpYWZe5xge0pB5tF+DFdM6pSrNjTGgwCS6amizOvKRdZY hikeglc4z+vPHoINHI0r5Trv0uCspRpL4hvEvwOwtgUFXzJnwqaG5lvK6CaWeJ2s FcHaaB51Fx7tsWs8dDtCHv0rmDHpnQFqXaitkvGLqgEJ1myjR2+VImopOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhfgwNC7Y5TSLTVRdFMsnQCG3NdMB8GA1UdIwQY MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsOES5dO 2vvRcmDACPgSN0VhVLsm24bhAlMTPekgxpd+yXV7aerQL5F1b80kwHPA1bv8EFeA OuegamXjejHpzyNQwjVK45+Fs98gXZ1FcLzc90ulCZboI0GxZfiSchwv/itAWxUB duue6u8ivaHaQtwhzvAj0lc9NzlzKOvqKp6gbE7fSqn3UlMCjAuG2VrBX1STsJ2r RlyloPg36qd7LUycON3kH32APd/xczovDtmfM/lf0Fy8j0zFpEw4bJkZn/J9QNKh oBVHfqsLV/SUIOZXzij+qHyjOw/pgtrZm3KvLKrjeIXkDkwwggh+nDgNfYwRRz9p qAhKb3sQ3H6pSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:16 2025 by rpki-client