This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json) Hash identifier: LNIRk3EmsMT4jlulSN0egoeMrzECLUzx3aekzfwDoG8= Subject key identifier: 09:72:22:26:4A:91:71:F2:99:02:F0:8D:4A:AB:CF:93:AD:DC:08:FF Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019AF12D8656BDA3A8E1B6E2D6034586AB89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft Manifest number: 08D3 Signing time: Sat 06 Dec 2025 01:01:23 +0000 Manifest this update: Sat 06 Dec 2025 01:01:23 +0000 Manifest next update: Sun 07 Dec 2025 01:01:23 +0000 Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=) 2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: BP9jW+Bh8r8Tem9cuKTGLwFzM1Inc2kTUdSCAwaJUxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:86:56:bd:a3:a8:e1:b6:e2:d6:03:45:86:ab:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Dec 6 01:01:23 2025 GMT Not After : Dec 7 01:01:23 2025 GMT Subject: CN=097222264a9171f29902f08d4aabcf93addc08ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:94:4c:bb:fd:05:73:52:aa:80:cf:57:be: b3:8e:7b:86:d1:2d:c5:59:be:ad:3b:25:c6:34:b4: e2:4d:1b:04:83:d6:b4:69:c8:64:15:40:b9:b2:05: cf:07:2e:f8:2e:25:de:72:7b:1b:d8:e7:35:5c:5f: 8d:db:b6:be:82:ec:70:64:ce:7f:5f:07:7e:0d:17: 19:40:78:1f:f3:f3:6e:37:b4:23:9c:f7:f7:4b:c8: 6f:4e:ca:9c:cf:dd:0f:b0:71:90:5f:ef:d6:bb:53: 8b:3f:f8:8f:83:1f:33:45:c6:e5:83:5b:08:18:91: ea:cf:c7:28:54:1e:09:b6:d4:c3:06:ff:bc:b1:2b: 36:46:5f:7b:a7:7f:d9:bc:6f:26:34:c4:04:30:62: 09:5d:2e:50:b8:bc:55:81:54:0f:ac:0d:65:c6:21: 14:09:81:37:07:b6:6d:14:bb:bb:19:b6:2d:35:64: ee:62:50:5a:f5:da:b7:e9:d9:77:58:ca:12:c4:9e: db:e2:3f:ee:85:82:14:47:28:87:a1:2d:8a:ff:62: da:c8:9a:b2:d8:73:4b:c3:89:c7:cb:de:b0:83:1c: 9c:d9:5b:54:e6:d9:bc:41:5c:8b:48:f5:96:5d:8b: c1:e5:ce:49:fc:7b:0c:9a:06:dc:be:cc:93:24:6e: 8d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:72:22:26:4A:91:71:F2:99:02:F0:8D:4A:AB:CF:93:AD:DC:08:FF X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d1:60:c0:9b:60:2c:b9:a9:45:9c:a6:d2:13:df:24:4e:2c: 86:80:c1:19:6d:0f:cf:da:b0:bf:b4:b3:67:8a:ce:2f:35:d5: a3:ee:39:5d:9f:08:07:43:2b:9e:ca:d0:af:0e:89:44:02:2b: 0a:bc:1e:70:a0:03:51:32:50:27:65:d2:7b:c2:89:1e:ca:cf: 30:f6:44:c3:63:e8:c5:27:88:a1:84:84:4f:a5:f2:ae:ea:89: ac:dc:37:91:1b:47:4e:dc:e7:17:c3:dd:65:c3:bd:6b:6c:f9: 9b:2a:48:d5:7c:be:95:71:6e:be:3d:f2:5a:52:6a:a8:ad:19: 27:80:60:b5:8f:af:ce:a2:3d:cb:b8:e4:65:07:47:aa:27:18: 08:ca:63:bf:c1:54:9c:64:7d:9a:68:46:0c:2f:71:27:ca:4f: 2c:10:75:f2:b4:4b:52:f4:a5:c7:f6:3b:c5:a2:2b:57:2d:99: c4:bd:34:e5:ee:38:97:e2:e8:97:0c:ea:73:60:b8:a4:66:61: 6c:85:03:32:ba:13:0b:c9:c1:0b:b0:04:12:97:4e:cc:33:ba: b0:ff:b0:9d:4d:d4:ab:7e:5d:84:c5:a3:1e:bb:82:e9:80:53: 2d:a5:c7:24:36:c2:c3:8e:e4:69:fb:ef:f7:08:48:8d:7e:e3: 0f:16:e3:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYZWvaOo4bbi1gNFhquJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjUxMjA2MDEwMTIzWhcNMjUxMjA3MDEwMTIzWjAzMTEwLwYDVQQD EygwOTcyMjIyNjRhOTE3MWYyOTkwMmYwOGQ0YWFiY2Y5M2FkZGMwOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHWUTLv9BXNSqoDPV76zjnuG0S3F Wb6tOyXGNLTiTRsEg9a0achkFUC5sgXPBy74LiXecnsb2Oc1XF+N27a+guxwZM5/ Xwd+DRcZQHgf8/NuN7QjnPf3S8hvTsqcz90PsHGQX+/Wu1OLP/iPgx8zRcblg1sI GJHqz8coVB4JttTDBv+8sSs2Rl97p3/ZvG8mNMQEMGIJXS5QuLxVgVQPrA1lxiEU CYE3B7ZtFLu7GbYtNWTuYlBa9dq36dl3WMoSxJ7b4j/uhYIURyiHoS2K/2LayJqy 2HNLw4nHy96wgxyc2VtU5tm8QVyLSPWWXYvB5c5J/HsMmgbcvsyTJG6NdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlyIiZKkXHymQLwjUqrz5Ot3Aj/MB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9FgwJtg LLmpRZym0hPfJE4shoDBGW0Pz9qwv7SzZ4rOLzXVo+45XZ8IB0MrnsrQrw6JRAIr CrwecKADUTJQJ2XSe8KJHsrPMPZEw2PoxSeIoYSET6XyruqJrNw3kRtHTtznF8Pd ZcO9a2z5mypI1Xy+lXFuvj3yWlJqqK0ZJ4BgtY+vzqI9y7jkZQdHqicYCMpjv8FU nGR9mmhGDC9xJ8pPLBB18rRLUvSlx/Y7xaIrVy2ZxL005e44l+Lolwzqc2C4pGZh bIUDMroTC8nBC7AEEpdOzDO6sP+wnU3Uq35dhMWjHruC6YBTLaXHJDbCw47kafvv 9whIjX7jDxbjSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:42 2025 by rpki-client