This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft File: PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json) Hash identifier: bAKcwe+OuvDJzA+cjE1WaK0n13hDpV8edwCdgJ9zEPY= Subject key identifier: 25:79:3F:45:A1:0A:80:9C:4A:7E:6F:37:CC:D1:3A:DC:69:4E:D3:09 Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b Certificate serial: 019B50A9C288912B5649B70C4D04D3E06544 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft Manifest number: 03EE Signing time: Wed 24 Dec 2025 14:01:01 +0000 Manifest this update: Wed 24 Dec 2025 14:01:01 +0000 Manifest next update: Thu 25 Dec 2025 14:01:01 +0000 Files and hashes: 1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=) 2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: vkoYBIsazuFING0OAsnC2rGQ6ESgOzZM37M50eOtC70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:c2:88:91:2b:56:49:b7:0c:4d:04:d3:e0:65:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b Validity Not Before: Dec 24 14:01:01 2025 GMT Not After : Dec 25 14:01:01 2025 GMT Subject: CN=25793f45a10a809c4a7e6f37ccd13adc694ed309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:7b:50:8a:2a:88:b1:c7:c8:06:5f:98:26: f0:6f:93:51:52:b6:35:7c:b1:6f:d1:19:3e:24:b0: c4:d8:69:5d:7b:c9:27:a4:82:4b:1e:4e:06:ac:bb: f5:8f:0f:2a:e3:67:db:c2:70:81:ad:26:85:be:9d: bf:00:d0:dc:e2:71:4c:dc:48:77:a7:01:a3:a6:89: f0:d3:4a:64:76:13:93:74:05:9a:12:8d:f5:13:a2: 8c:81:34:e2:cd:68:02:97:e6:f0:cb:34:75:80:bd: f6:d9:86:87:a8:2a:31:94:1f:64:94:2c:68:d5:9a: 9a:d6:62:f8:96:0f:b4:50:33:02:83:ad:05:40:45: 36:ea:3e:ec:c3:63:dd:86:ed:a3:38:40:24:4c:52: 08:69:e8:25:ca:f6:76:3d:25:ce:aa:4a:c2:32:d8: 5f:91:3e:cd:c9:7e:56:e7:29:46:86:9d:af:28:50: 28:70:49:72:8d:f4:e6:3c:db:7f:68:d4:28:2d:f8: 05:37:c6:f9:bb:f1:e8:48:da:34:d7:eb:29:50:93: b7:2a:4b:d5:2d:54:0a:e1:d3:3e:44:06:61:95:32: 8c:e9:a3:88:f6:0a:78:f6:72:97:bc:0e:d6:25:65: 60:da:34:65:59:3b:06:f3:df:e8:28:2b:70:60:73: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:79:3F:45:A1:0A:80:9C:4A:7E:6F:37:CC:D1:3A:DC:69:4E:D3:09 X509v3 Authority Key Identifier: keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5b:87:0f:29:1b:97:86:99:f4:42:db:e4:1b:ca:16:9b:d4: 87:40:be:0f:65:93:2b:cd:90:36:64:7e:e8:33:7f:dd:01:d2: d3:88:6e:c4:ae:ee:a0:2f:7b:be:34:cc:06:9a:b3:f2:8a:fc: 6f:f4:2b:4b:40:92:95:71:bd:24:c8:dc:0b:3a:04:15:be:60: f9:34:b9:ef:1c:77:89:ad:86:dd:20:62:c6:9a:3b:1f:30:ca: 3c:f4:7e:5d:b8:31:ba:b7:7f:c1:3f:0f:75:1d:ac:bf:3b:fe: c5:9c:36:d4:7b:8a:1f:8b:c0:43:cd:73:2f:96:d5:0d:1f:a0: 2f:57:7d:d6:d2:78:41:2a:f3:1a:99:d5:93:74:23:ad:8c:87: ca:f2:88:d0:f3:82:30:b8:fe:15:83:83:97:02:20:78:a7:e6: 22:70:e1:ec:f4:ab:1c:61:5b:1b:fa:cd:73:07:34:1e:89:7f: 9b:03:7d:9a:53:88:49:5a:19:f1:af:5a:72:6b:a4:17:51:52: 58:ee:a0:91:4d:69:31:b4:86:aa:10:e7:6e:23:90:61:96:ff: b3:35:99:6a:25:84:d4:c7:07:a8:52:d6:e3:21:0a:fd:24:b2: 4b:e7:cd:b7:b1:ed:3e:22:4b:6d:c3:4f:51:ed:3b:46:bd:77: 69:32:c9:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqcKIkStWSbcMTQTT4GVEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3 NDZhN2IwHhcNMjUxMjI0MTQwMTAxWhcNMjUxMjI1MTQwMTAxWjAzMTEwLwYDVQQD EygyNTc5M2Y0NWExMGE4MDljNGE3ZTZmMzdjY2QxM2FkYzY5NGVkMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslp7UIoqiLHHyAZfmCbwb5NRUrY1 fLFv0Rk+JLDE2Glde8knpIJLHk4GrLv1jw8q42fbwnCBrSaFvp2/ANDc4nFM3Eh3 pwGjponw00pkdhOTdAWaEo31E6KMgTTizWgCl+bwyzR1gL322YaHqCoxlB9klCxo 1Zqa1mL4lg+0UDMCg60FQEU26j7sw2Pdhu2jOEAkTFIIaeglyvZ2PSXOqkrCMthf kT7NyX5W5ylGhp2vKFAocElyjfTmPNt/aNQoLfgFN8b5u/HoSNo01+spUJO3KkvV LVQK4dM+RAZhlTKM6aOI9gp49nKXvA7WJWVg2jRlWTsG89/oKCtwYHOqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV5P0WhCoCcSn5vN8zROtxpTtMJMB8GA1UdIwQY MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVuHDykb l4aZ9ELb5BvKFpvUh0C+D2WTK82QNmR+6DN/3QHS04huxK7uoC97vjTMBpqz8or8 b/QrS0CSlXG9JMjcCzoEFb5g+TS57xx3ia2G3SBixpo7HzDKPPR+Xbgxurd/wT8P dR2svzv+xZw21HuKH4vAQ81zL5bVDR+gL1d91tJ4QSrzGpnVk3QjrYyHyvKI0POC MLj+FYODlwIgeKfmInDh7PSrHGFbG/rNcwc0Hol/mwN9mlOISVoZ8a9acmukF1FS WO6gkU1pMbSGqhDnbiOQYZb/szWZaiWE1McHqFLW4yEK/SSyS+fNt7HtPiJLbcNP Ue07Rr13aTLJLQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:33:21 2025 by rpki-client