This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft File: PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json) Hash identifier: wxVpqouwGiiDSX2KZ2EWfEdKm53XX6uFsIQoPUucfgQ= Subject key identifier: 4A:96:D5:89:E2:2F:E0:46:01:29:4E:C0:01:3F:AF:A0:06:16:D7:BF Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c Certificate serial: 019B3D9101335F41F6ACC47EE5719DEB345E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft Manifest number: 06F5 Signing time: Sat 20 Dec 2025 21:01:11 +0000 Manifest this update: Sat 20 Dec 2025 21:01:11 +0000 Manifest next update: Sun 21 Dec 2025 21:01:11 +0000 Files and hashes: 1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: LQAHXKhgqVqIcjNUYvhZZrI60TKXIQekmhF9gQ757uM=) 2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=) 3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:01:33:5f:41:f6:ac:c4:7e:e5:71:9d:eb:34:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c Validity Not Before: Dec 20 21:01:11 2025 GMT Not After : Dec 21 21:01:11 2025 GMT Subject: CN=4a96d589e22fe04601294ec0013fafa00616d7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:39:6b:ed:6f:07:e4:e6:97:6e:be:73:cd: 80:e0:44:00:84:27:71:3a:ba:04:db:5a:44:3b:68: 81:56:bd:c6:d2:e0:51:1f:17:72:38:27:a7:6b:c3: fb:0f:6d:e9:57:41:39:32:43:91:f1:48:ef:07:06: 97:3f:58:3a:03:cf:ab:b6:fc:66:75:5e:d6:ea:50: 63:0c:23:68:d6:aa:0c:5b:2c:4f:45:d9:19:eb:86: 3f:c3:27:a1:b8:ad:e9:a1:1a:c6:00:f3:78:58:d4: 3f:d3:f2:49:32:7a:db:61:cb:2d:b6:e4:41:71:0a: c7:ba:16:48:21:e5:f1:be:a2:af:98:ae:81:7b:41: 8e:d9:86:47:03:7e:8f:d4:ea:d3:1e:5a:8e:2e:b8: 94:48:99:90:3c:4f:11:e7:88:3e:d0:39:bd:af:27: f2:8b:3d:52:54:bd:45:30:e2:62:e3:19:9d:e9:38: 44:00:a0:73:d9:f6:84:b1:de:2b:08:2f:3b:25:ce: 23:42:f9:be:43:22:41:f4:63:99:6c:c8:cd:6b:79: 8b:a7:6d:e4:17:17:ac:99:b4:70:f3:9b:f1:8d:33: ba:f7:49:2b:c6:d6:86:dc:0e:a3:db:07:5b:70:9b: ee:c2:98:e2:a7:a9:e7:38:6c:c2:d7:1a:a3:a3:25: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:96:D5:89:E2:2F:E0:46:01:29:4E:C0:01:3F:AF:A0:06:16:D7:BF X509v3 Authority Key Identifier: keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d0:7e:0b:c7:c2:41:01:ae:7f:89:94:70:b5:79:d7:45:41: 88:e6:9b:fa:bd:45:5b:c6:c4:f3:11:5c:60:a1:24:62:f8:ee: 79:9c:07:68:60:90:b4:d2:ec:61:04:d4:b3:36:19:b7:a3:7f: 43:0e:9b:cf:6f:17:12:4f:c5:d1:ec:89:39:06:26:2b:c9:30: 8e:ce:52:bb:29:17:ed:99:8a:fb:c4:c2:a9:2f:15:1e:fb:4c: d2:f2:9f:f7:28:89:17:c5:f4:91:57:49:ba:14:72:93:0c:ae: 51:7a:d2:ea:79:cd:13:3d:f9:fe:31:34:fb:4a:ed:45:9b:9b: 18:de:1c:2e:bb:7d:97:33:51:b2:50:d6:ce:65:f9:99:1e:24: 84:48:84:24:59:98:26:44:aa:51:08:09:11:af:42:f7:83:68: 45:74:99:36:fa:2d:c0:be:4c:1e:02:67:c2:69:90:28:0b:1e: f3:98:31:82:d9:4a:d5:23:b5:79:63:5d:7f:b2:f6:84:63:ea: 40:20:f2:33:dc:e2:49:c7:04:d8:e5:86:e8:93:3e:17:e3:49: 9f:a7:54:6c:ba:3d:03:05:37:6b:b4:fb:5f:e2:e5:08:24:35: 42:aa:fd:b5:74:8b:8b:48:4f:a0:2d:3e:a0:4b:fe:e1:d1:a6: 68:a1:bc:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQEzX0H2rMR+5XGd6zReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYmRjZTQ1YzQ4ODJjOGEzYTI1NzExMGM2YjFmMGQ0OWIx ODJhOWMwHhcNMjUxMjIwMjEwMTExWhcNMjUxMjIxMjEwMTExWjAzMTEwLwYDVQQD Eyg0YTk2ZDU4OWUyMmZlMDQ2MDEyOTRlYzAwMTNmYWZhMDA2MTZkN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9E5a+1vB+Tml26+c82A4EQAhCdx OroE21pEO2iBVr3G0uBRHxdyOCena8P7D23pV0E5MkOR8UjvBwaXP1g6A8+rtvxm dV7W6lBjDCNo1qoMWyxPRdkZ64Y/wyehuK3poRrGAPN4WNQ/0/JJMnrbYcsttuRB cQrHuhZIIeXxvqKvmK6Be0GO2YZHA36P1OrTHlqOLriUSJmQPE8R54g+0Dm9ryfy iz1SVL1FMOJi4xmd6ThEAKBz2faEsd4rCC87Jc4jQvm+QyJB9GOZbMjNa3mLp23k FxesmbRw85vxjTO690krxtaG3A6j2wdbcJvuwpjip6nnOGzC1xqjoyXcjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqW1YniL+BGASlOwAE/r6AGFte/MB8GA1UdIwQY MBaAFDy9zkXEiCyKOiVxEMax8NSbGCqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMt NWRiNDM5YjRjY2VlLzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYzk0NjktMTZmZS00ZTdiLTg4MjMtNWRiNDM5YjRjY2Vl LzEvUEwzT1JjU0lMSW82SlhFUXhySHcxSnNZS3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdB+C8fC QQGuf4mUcLV510VBiOab+r1FW8bE8xFcYKEkYvjueZwHaGCQtNLsYQTUszYZt6N/ Qw6bz28XEk/F0eyJOQYmK8kwjs5SuykX7ZmK+8TCqS8VHvtM0vKf9yiJF8X0kVdJ uhRykwyuUXrS6nnNEz35/jE0+0rtRZubGN4cLrt9lzNRslDWzmX5mR4khEiEJFmY JkSqUQgJEa9C94NoRXSZNvotwL5MHgJnwmmQKAse85gxgtlK1SO1eWNdf7L2hGPq QCDyM9ziSccE2OWG6JM+F+NJn6dUbLo9AwU3a7T7X+LlCCQ1Qqr9tXSLi0hPoC0+ oEv+4dGmaKG8Sg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:59:38 2025 by rpki-client