This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json) Hash identifier: MedZp49zEcqyCJdb2FzldwnZtewbgk3oKR3RjywFECY= Subject key identifier: 98:57:4F:94:54:FC:52:3D:47:0E:D0:B8:41:1D:64:E1:02:EB:97:42 Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019BF83F92FBA2B7215B00FB4A0BCFFD8B73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft Manifest number: 095C Signing time: Mon 26 Jan 2026 03:01:14 +0000 Manifest this update: Mon 26 Jan 2026 03:01:14 +0000 Manifest next update: Tue 27 Jan 2026 03:01:14 +0000 Files and hashes: 1: Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa (hash: kYGqmXXjuRtKcO0c+iMXi0qsCWcYdXw5YIPgbA3A38U=) 2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: SXii+DIKINkyWxOTnWp4J+1pDsEb8VZVvacs1RgwKww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:92:fb:a2:b7:21:5b:00:fb:4a:0b:cf:fd:8b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Jan 26 03:01:14 2026 GMT Not After : Jan 27 03:01:14 2026 GMT Subject: CN=98574f9454fc523d470ed0b8411d64e102eb9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:84:57:76:9c:c7:ce:5d:4f:48:53:52:4e: 4d:d3:4a:bf:5e:37:4b:1a:4b:65:cb:3c:45:f6:bc: 5b:ed:f1:b5:f7:64:a9:05:ef:8a:71:9a:d1:3b:e0: 45:2e:7e:2e:75:4a:d8:cb:9c:33:f2:51:06:1c:82: 65:eb:ef:cd:cc:a6:47:2c:5b:96:7c:01:c6:f3:d3: 66:81:13:7a:5e:06:93:3c:fa:10:d8:1d:40:f1:e7: aa:b5:65:00:6b:48:9b:7d:24:80:f5:c4:fd:a3:e5: ce:63:51:3a:6f:ff:25:50:87:2a:17:6e:34:91:39: 1c:f3:28:95:74:b5:4c:e8:5b:db:18:55:f4:d0:a8: c1:ff:2b:d5:74:66:47:39:75:48:a9:c3:ff:33:5a: 4e:0d:31:ab:48:b3:b0:d0:f3:b8:64:a2:08:9d:a0: 96:4a:3d:52:86:4e:af:4f:4c:29:eb:5b:e5:23:ff: 68:11:2e:ac:09:bb:d1:16:5f:21:3f:d1:32:3b:3f: 51:e9:cd:7e:ec:74:9a:5a:32:fc:40:f0:d0:ec:72: 0c:87:79:01:bd:8e:76:04:9e:41:3a:71:ee:de:46: fd:5b:c8:80:44:60:33:d7:f0:f2:33:6b:ab:2a:17: e5:21:ff:b5:74:f1:6f:e5:a7:f8:d5:8b:dc:47:aa: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:57:4F:94:54:FC:52:3D:47:0E:D0:B8:41:1D:64:E1:02:EB:97:42 X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9a:a2:f7:ae:61:91:3d:01:c7:7c:0b:86:e7:73:54:e3:53: 6e:4d:ac:a2:96:78:50:d8:2f:e3:4a:38:47:41:65:29:35:75: 3d:e8:21:28:ca:cc:4b:66:6e:5a:57:df:50:91:d5:b6:77:28: 65:20:92:5f:c8:e9:2b:20:c7:f6:32:98:d9:5e:d8:df:40:a2: 3a:a3:79:8e:29:d5:df:0a:60:d6:3c:24:ae:42:4e:07:4f:1c: 1b:3c:ce:a5:2d:9b:77:ff:33:d1:7a:f2:76:c7:68:4a:17:d5: dd:f5:60:a8:55:33:25:b9:8f:5c:c9:f9:e7:ea:40:75:66:bc: d5:43:af:5e:f0:28:85:13:77:32:5b:1b:d2:4a:0d:3d:d1:27: 43:01:b8:c1:30:c0:41:35:63:d1:d6:20:0d:96:70:4d:db:ba: 8e:17:b0:a1:c4:a9:42:e8:14:65:cc:97:36:04:6c:be:9c:a5: 83:63:c1:d7:27:dc:15:77:b1:4c:87:29:1f:f5:7b:99:7b:87: 8e:93:c9:9a:2e:fd:4b:dc:7b:94:bc:67:f4:4a:c2:83:28:51: 43:7f:79:9d:6f:c5:53:e6:c9:e8:4a:ac:2d:02:2c:99:5b:cd: 09:11:70:cf:f4:0a:e0:67:bf:e0:29:e2:1b:0c:ff:44:f7:9c: a6:60:cf:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P5L7orchWwD7SgvP/YtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjYwMTI2MDMwMTE0WhcNMjYwMTI3MDMwMTE0WjAzMTEwLwYDVQQD Eyg5ODU3NGY5NDU0ZmM1MjNkNDcwZWQwYjg0MTFkNjRlMTAyZWI5NzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1WEV3acx85dT0hTUk5N00q/XjdL GktlyzxF9rxb7fG192SpBe+KcZrRO+BFLn4udUrYy5wz8lEGHIJl6+/NzKZHLFuW fAHG89NmgRN6XgaTPPoQ2B1A8eeqtWUAa0ibfSSA9cT9o+XOY1E6b/8lUIcqF240 kTkc8yiVdLVM6FvbGFX00KjB/yvVdGZHOXVIqcP/M1pODTGrSLOw0PO4ZKIInaCW Sj1Shk6vT0wp61vlI/9oES6sCbvRFl8hP9EyOz9R6c1+7HSaWjL8QPDQ7HIMh3kB vY52BJ5BOnHu3kb9W8iARGAz1/DyM2urKhflIf+1dPFv5af41YvcR6rwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhXT5RU/FI9Rw7QuEEdZOEC65dCMB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppqi965h kT0Bx3wLhudzVONTbk2sopZ4UNgv40o4R0FlKTV1PeghKMrMS2ZuWlffUJHVtnco ZSCSX8jpKyDH9jKY2V7Y30CiOqN5jinV3wpg1jwkrkJOB08cGzzOpS2bd/8z0Xry dsdoShfV3fVgqFUzJbmPXMn55+pAdWa81UOvXvAohRN3Mlsb0koNPdEnQwG4wTDA QTVj0dYgDZZwTdu6jhewocSpQugUZcyXNgRsvpylg2PB1yfcFXexTIcpH/V7mXuH jpPJmi79S9x7lLxn9ErCgyhRQ395nW/FU+bJ6EqsLQIsmVvNCRFwz/QK4Ge/4Cni Gwz/RPecpmDPeg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:34 2026 by rpki-client