This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft File: PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json) Hash identifier: d3KlYAHmrXJtctFKa+aDjN4c5Vy2Om+mGOjjleS5sP4= Subject key identifier: 6F:2F:15:A3:2E:5D:2E:0C:D4:82:CD:58:E7:53:7A:19:1E:C1:7F:F2 Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Certificate serial: 019B548675812FF926C3FD49EC6EA2E36B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft Manifest number: 06DE Signing time: Thu 25 Dec 2025 08:00:56 +0000 Manifest this update: Thu 25 Dec 2025 08:00:56 +0000 Manifest next update: Fri 26 Dec 2025 08:00:56 +0000 Files and hashes: 1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: J3sn8WxfWrHiR4Tu8m+i204fEZtBvSPedJ81I6pLjhg=) 2: qPYgVakLNDaEGc5ONkGmhqVYYy0.asa (hash: Q6ggqq2IBO+TwQuRQrQoJwyiBwBG7kWAAk+owOZubuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:75:81:2f:f9:26:c3:fd:49:ec:6e:a2:e3:6b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Validity Not Before: Dec 25 08:00:56 2025 GMT Not After : Dec 26 08:00:56 2025 GMT Subject: CN=6f2f15a32e5d2e0cd482cd58e7537a191ec17ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:30:85:20:0e:df:68:cb:4b:f6:3c:09:11: 45:ac:90:f3:04:2d:66:0d:2c:38:e1:65:74:1a:9b: 5a:e2:55:36:37:8c:54:1b:16:cf:85:a0:63:77:d8: d5:70:f8:21:b2:db:d3:88:6a:53:2b:30:40:4b:b2: 72:ef:ab:f1:74:b1:ee:18:bc:72:37:04:4b:46:2a: ed:63:14:66:af:71:81:91:81:0f:fe:f6:d3:cc:fc: b4:35:ac:44:9b:f5:e2:49:fd:79:a7:d9:a4:eb:04: ec:9c:65:62:6b:20:3d:dd:6e:e0:3f:cd:66:8e:16: 03:33:bc:de:a9:ec:d8:3c:41:fd:21:69:61:96:c7: fa:5f:65:7b:c7:27:2b:10:17:42:86:da:36:8c:cb: e8:ff:76:db:ef:85:8f:7b:f8:17:15:a1:22:6b:d9: 38:66:f3:88:98:c6:92:2b:71:8e:f7:b7:8b:58:61: cc:4c:20:39:76:7e:6f:3a:78:d1:fd:38:4a:6b:11: 6b:52:2b:14:cf:4d:54:bc:24:35:de:69:8f:61:7d: 2a:61:ad:29:1b:a5:08:3d:00:fb:a7:58:ad:77:49: fe:c0:95:12:98:d6:08:12:67:a5:d9:0b:a3:c6:6b: 83:8c:ed:91:9a:5e:57:45:83:c1:0e:3e:2b:e9:06: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:15:A3:2E:5D:2E:0C:D4:82:CD:58:E7:53:7A:19:1E:C1:7F:F2 X509v3 Authority Key Identifier: keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7d:55:a4:21:68:c0:a3:dc:e2:48:bf:f3:46:0a:50:be:ea: 5c:aa:75:70:99:dd:40:0a:2e:03:57:e3:f7:23:46:ba:08:29: 8a:52:2f:80:01:6d:4e:13:27:b8:d9:20:3b:c6:ea:58:c6:d7: 4b:bc:df:1b:1e:4f:c2:19:65:a1:3f:7f:e4:95:68:31:58:b5: f2:8a:7a:6e:57:ad:c2:a6:4c:ec:99:73:57:fe:f7:19:43:e5: 8c:70:15:87:51:97:66:14:8b:3b:f0:12:82:8f:8c:cc:01:f6: 53:26:b8:eb:5a:28:ac:26:2b:aa:34:3b:46:b1:3a:98:49:36: 24:81:20:7b:f2:0f:be:9c:17:8b:9d:a1:5d:68:ac:50:a4:9d: 65:94:1b:bb:86:99:9f:a2:e5:c7:26:28:d4:a9:e8:a4:01:60: a7:55:cf:91:b2:9a:f5:5c:5e:84:ae:29:b7:a1:1c:83:67:ea: e2:c0:19:b6:fe:3b:28:ee:b9:74:5f:41:fb:41:f7:92:5f:5c: 53:59:b9:7b:3c:91:1e:3f:2e:c1:ab:c5:43:a8:93:84:2f:f3: 8b:a5:b2:44:f7:82:86:59:6b:08:29:2e:df:4f:15:f6:dc:74: 0a:68:b8:6e:a0:70:c2:b8:be:7e:26:fa:1d:07:4b:79:c4:56: bb:fb:9e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhnWBL/kmw/1J7G6i42tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYmM0ZGFmNjBjN2Q0NGU5NWQ2Y2I5MjA3YTlkZGVjNTlh NDRiZjcwHhcNMjUxMjI1MDgwMDU2WhcNMjUxMjI2MDgwMDU2WjAzMTEwLwYDVQQD Eyg2ZjJmMTVhMzJlNWQyZTBjZDQ4MmNkNThlNzUzN2ExOTFlYzE3ZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCowhSAO32jLS/Y8CRFFrJDzBC1m DSw44WV0Gpta4lU2N4xUGxbPhaBjd9jVcPghstvTiGpTKzBAS7Jy76vxdLHuGLxy NwRLRirtYxRmr3GBkYEP/vbTzPy0NaxEm/XiSf15p9mk6wTsnGViayA93W7gP81m jhYDM7zeqezYPEH9IWlhlsf6X2V7xycrEBdChto2jMvo/3bb74WPe/gXFaEia9k4 ZvOImMaSK3GO97eLWGHMTCA5dn5vOnjR/ThKaxFrUisUz01UvCQ13mmPYX0qYa0p G6UIPQD7p1itd0n+wJUSmNYIEmel2QujxmuDjO2Rml5XRYPBDj4r6QadqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8vFaMuXS4M1ILNWOdTehkewX/yMB8GA1UdIwQY MBaAFDy8Ta9gx9ROldbLkgep3exZpEv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYt YmY0OWE2ZDdiZTdjLzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYtYmY0OWE2ZDdiZTdj LzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABH1VpCFo wKPc4ki/80YKUL7qXKp1cJndQAouA1fj9yNGuggpilIvgAFtThMnuNkgO8bqWMbX S7zfGx5PwhlloT9/5JVoMVi18op6bletwqZM7JlzV/73GUPljHAVh1GXZhSLO/AS go+MzAH2Uya461oorCYrqjQ7RrE6mEk2JIEge/IPvpwXi52hXWisUKSdZZQbu4aZ n6LlxyYo1KnopAFgp1XPkbKa9VxehK4pt6Ecg2fq4sAZtv47KO65dF9B+0H3kl9c U1m5ezyRHj8uwavFQ6iThC/zi6WyRPeChllrCCku308V9tx0Cmi4bqBwwri+fib6 HQdLecRWu/uedg== -----END CERTIFICATE-----Generated at Thu Dec 25 15:42:39 2025 by rpki-client