This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft File: plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft (raw, json) Hash identifier: dYlZFe8PqKY+gcZSkVOqd41fYjpaRyl8u4gkt/9nC/4= Subject key identifier: 69:EE:20:65:43:57:85:2A:F6:23:66:4C:EE:16:46:C1:D2:41:98:57 Authority key identifier: A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC Certificate issuer: /CN=a656830499378698e3e6e6597993cd3b00e1dccc Certificate serial: 019B9D0DC9C01F8958FD9C33BF67C4920593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft Manifest number: 0C91 Signing time: Thu 08 Jan 2026 10:01:25 +0000 Manifest this update: Thu 08 Jan 2026 10:01:25 +0000 Manifest next update: Fri 09 Jan 2026 10:01:25 +0000 Files and hashes: 1: plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl (hash: dFZOdb3vSJ76hURqGGDlQDBZTFdKehYGtsX0M98zeiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:0d:c9:c0:1f:89:58:fd:9c:33:bf:67:c4:92:05:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a656830499378698e3e6e6597993cd3b00e1dccc Validity Not Before: Jan 8 10:01:25 2026 GMT Not After : Jan 9 10:01:25 2026 GMT Subject: CN=69ee20654357852af623664cee1646c1d2419857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:ae:d9:c7:99:3c:01:f5:f3:ed:c1:fc:e3: d2:68:e1:cb:87:e0:7f:56:77:85:61:28:09:f3:9a: ba:cb:bd:f3:89:5c:60:62:bb:b9:04:4c:0d:88:0b: 93:67:b4:2a:bf:db:59:a6:65:3c:18:8b:12:1a:a4: 87:87:26:cf:72:72:38:32:9b:14:3a:e8:6a:a8:7d: ae:8c:7e:b1:c1:c8:ff:34:99:d0:f3:08:ab:92:2f: ba:d5:8b:ab:36:92:d6:97:c9:7c:a8:81:c8:6e:12: 9e:73:05:34:51:29:99:e7:d5:98:04:a0:ec:bc:e1: d1:10:c5:70:8e:84:e7:fe:7d:6d:e9:88:84:f8:e9: 89:d6:d0:67:83:1e:ad:0e:80:85:5b:dd:c5:b6:20: 33:9a:82:3e:6e:b2:5d:db:8b:43:85:40:35:19:48: 44:87:75:4f:8f:54:58:6b:d3:06:18:d6:92:40:79: 58:a3:77:33:3f:f4:86:d3:03:d2:ff:39:71:19:01: 32:10:dc:86:ab:c1:01:31:b9:4f:40:c0:cb:7e:1f: b7:d4:1e:81:46:d2:0d:9d:ed:ce:83:d1:66:f4:94: d4:ca:a5:95:cd:16:36:83:5f:d7:78:88:8b:78:4e: ee:a5:01:97:db:8d:ac:90:5d:81:fd:22:30:de:c0: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EE:20:65:43:57:85:2A:F6:23:66:4C:EE:16:46:C1:D2:41:98:57 X509v3 Authority Key Identifier: keyid:A6:56:83:04:99:37:86:98:E3:E6:E6:59:79:93:CD:3B:00:E1:DC:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plaDBJk3hpjj5uZZeZPNOwDh3Mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/plaDBJk3hpjj5uZZeZPNOwDh3Mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:28:f1:96:25:df:e2:76:40:bc:30:98:bb:87:6e:32:11:5f: f2:92:48:2c:c5:17:f1:7f:49:3f:68:d3:37:0a:1d:68:89:73: 10:5f:86:dc:73:7d:aa:ca:93:23:08:45:75:8a:9c:4e:e4:67: 37:59:65:3f:83:dd:46:4b:13:87:96:5a:3a:44:24:29:e4:2a: 65:34:ee:a8:83:23:86:b6:12:24:ed:f8:ae:8c:a6:de:80:ad: 62:7c:da:6d:12:8b:19:ff:3a:3b:6b:ba:63:d3:de:37:3b:00: 84:aa:57:51:e6:c9:12:61:59:dd:ce:53:7e:2a:f2:29:c6:38: 27:7e:51:52:2b:6b:b7:f2:7d:e5:f8:a9:bf:fa:32:8d:88:bd: 48:ec:6f:2d:40:0e:f9:13:22:76:d3:ed:3b:e4:a9:e9:37:5a: fb:3e:0f:b0:cf:2d:08:25:42:d3:bd:5e:4f:3b:c3:a1:48:a8: 7b:8f:d7:b9:b5:98:fc:90:15:9e:e4:78:73:ab:ec:04:d6:5d: 42:42:af:2b:b4:5a:34:c0:12:26:01:bd:71:29:29:80:34:b0: 57:c3:b2:15:6a:3d:37:38:9f:e2:ef:68:b6:5f:89:96:16:dd: fb:d5:ce:d7:40:9e:05:a9:f1:e1:05:f0:93:c3:16:9e:59:4a: 75:18:07:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZudDcnAH4lY/Zwzv2fEkgWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTY4MzA0OTkzNzg2OThlM2U2ZTY1OTc5OTNjZDNiMDBl MWRjY2MwHhcNMjYwMTA4MTAwMTI1WhcNMjYwMTA5MTAwMTI1WjAzMTEwLwYDVQQD Eyg2OWVlMjA2NTQzNTc4NTJhZjYyMzY2NGNlZTE2NDZjMWQyNDE5ODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUiu2ceZPAH18+3B/OPSaOHLh+B/ VneFYSgJ85q6y73ziVxgYru5BEwNiAuTZ7Qqv9tZpmU8GIsSGqSHhybPcnI4MpsU OuhqqH2ujH6xwcj/NJnQ8wirki+61YurNpLWl8l8qIHIbhKecwU0USmZ59WYBKDs vOHREMVwjoTn/n1t6YiE+OmJ1tBngx6tDoCFW93FtiAzmoI+brJd24tDhUA1GUhE h3VPj1RYa9MGGNaSQHlYo3czP/SG0wPS/zlxGQEyENyGq8EBMblPQMDLfh+31B6B RtINne3Og9Fm9JTUyqWVzRY2g1/XeIiLeE7upQGX242skF2B/SIw3sCneQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnuIGVDV4Uq9iNmTO4WRsHSQZhXMB8GA1UdIwQY MBaAFKZWgwSZN4aY4+bmWXmTzTsA4dzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt NjU2NDcwMzQzNGUyLzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy LzEvcGxhREJKazNocGpqNXVaWmVaUE5Pd0RoM013LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSjxliXf 4nZAvDCYu4duMhFf8pJILMUX8X9JP2jTNwodaIlzEF+G3HN9qsqTIwhFdYqcTuRn N1llP4PdRksTh5ZaOkQkKeQqZTTuqIMjhrYSJO34roym3oCtYnzabRKLGf86O2u6 Y9PeNzsAhKpXUebJEmFZ3c5TfiryKcY4J35RUitrt/J95fipv/oyjYi9SOxvLUAO +RMidtPtO+Sp6Tda+z4PsM8tCCVC071eTzvDoUioe4/XubWY/JAVnuR4c6vsBNZd QkKvK7RaNMASJgG9cSkpgDSwV8OyFWo9Nzif4u9otl+Jlhbd+9XO10CeBanx4QXw k8MWnllKdRgHJw== -----END CERTIFICATE-----Generated at Thu Jan 8 13:36:17 2026 by rpki-client