This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json) Hash identifier: MP98QYuNqfOcRdCRbtzQq/4s3UpFA2RQNA4XPr7v50w= Subject key identifier: 8F:42:03:D8:BD:36:94:DB:70:61:03:DD:EC:13:26:72:E1:7C:E5:D5 Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019B4DE099A9D46534D2A4D105FCCE6E9137 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft Manifest number: 0903 Signing time: Wed 24 Dec 2025 01:02:03 +0000 Manifest this update: Wed 24 Dec 2025 01:02:03 +0000 Manifest next update: Thu 25 Dec 2025 01:02:03 +0000 Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=) 2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: RSqWrd3Ud2ni3AH9ueYokpElOUonMFwwG+pldAdiP14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:99:a9:d4:65:34:d2:a4:d1:05:fc:ce:6e:91:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Dec 24 01:02:03 2025 GMT Not After : Dec 25 01:02:03 2025 GMT Subject: CN=8f4203d8bd3694db706103ddec132672e17ce5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:32:ed:84:bd:1e:e4:fe:43:28:e0:4a:af: 49:f0:b3:52:36:27:04:96:17:29:3e:6e:b5:af:72: c7:54:7f:bd:32:77:48:57:9a:36:e2:13:4f:2f:f4: f0:03:9f:4b:61:6e:04:08:de:84:80:1c:69:31:7b: 17:9e:4d:a8:93:bd:ae:a5:09:99:44:0c:bd:69:d1: 4a:ce:16:b6:68:63:0c:26:61:26:01:ec:b4:f1:9a: 88:c6:f7:5d:96:c3:b2:8f:be:35:7b:02:82:13:e6: 8e:ff:35:94:81:1a:ef:82:1b:4d:3e:8b:c3:39:7c: 4e:e7:be:60:db:ff:bb:98:da:51:3f:be:8f:b1:7f: 99:13:24:b1:38:db:74:59:3a:18:b1:36:0b:c7:1d: e4:09:cb:73:d3:06:af:45:e3:6b:5e:1c:ba:91:27: 27:f8:da:fa:f9:e5:69:fc:f6:a9:64:ac:12:b3:7a: 2e:ba:4a:49:a4:76:88:4f:04:be:50:8f:ee:4f:6f: 62:e1:12:38:b7:8a:5a:7e:9d:62:1d:c2:b8:be:db: 23:12:a3:7a:76:5b:7d:7e:e9:f1:c0:22:fa:04:d1: a6:d5:d0:96:2e:87:2f:1e:db:7b:7a:a3:61:36:59: 03:d4:bc:e5:05:e3:33:99:2d:00:d4:77:c9:2f:eb: 87:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:03:D8:BD:36:94:DB:70:61:03:DD:EC:13:26:72:E1:7C:E5:D5 X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:13:0b:8c:c7:40:cc:57:78:09:5c:00:44:22:d5:db:50:8a: ce:63:a8:5c:6a:90:ab:fa:78:d5:43:f7:94:d2:d8:28:e3:a7: dc:86:21:48:6a:ab:21:1c:30:49:6a:bc:4f:8a:8d:2c:e9:50: f8:b4:6d:04:0e:36:2d:57:84:d7:cb:bc:1a:86:89:be:5c:be: cb:62:a7:f2:f6:13:e2:ef:a2:6f:53:74:7b:52:da:59:46:41: 9a:6d:00:68:bb:40:8a:3e:50:ae:9c:2e:bb:63:53:d1:46:04: 3d:1d:62:9e:d8:32:2a:29:b3:7d:2c:21:4e:5d:0c:82:41:20: 8c:59:50:2d:42:c2:6b:bb:a8:cf:92:47:de:78:35:c0:7c:c5: 44:d1:a3:d6:ea:8d:f0:e1:88:cf:da:15:10:81:9c:15:b2:f0: 95:26:99:1c:0c:b1:7d:24:4c:98:59:1a:96:44:b0:0b:3b:8d: e4:8b:63:2d:be:a7:8b:a5:bd:61:58:c0:81:d8:05:4d:1d:e6: e4:06:1c:c1:5d:10:35:7a:2d:a9:39:09:e8:a4:2c:9c:19:3c: 26:aa:da:b7:f9:60:ce:f4:85:a1:4b:0a:27:b5:36:18:fe:6f: 2f:1e:c8:bb:2c:d9:88:48:68:0a:43:11:3a:40:97:24:bd:eb: 2b:d7:03:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Jmp1GU00qTRBfzObpE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjUxMjI0MDEwMjAzWhcNMjUxMjI1MDEwMjAzWjAzMTEwLwYDVQQD Eyg4ZjQyMDNkOGJkMzY5NGRiNzA2MTAzZGRlYzEzMjY3MmUxN2NlNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrEy7YS9HuT+QyjgSq9J8LNSNicE lhcpPm61r3LHVH+9MndIV5o24hNPL/TwA59LYW4ECN6EgBxpMXsXnk2ok72upQmZ RAy9adFKzha2aGMMJmEmAey08ZqIxvddlsOyj741ewKCE+aO/zWUgRrvghtNPovD OXxO575g2/+7mNpRP76PsX+ZEySxONt0WToYsTYLxx3kCctz0wavReNrXhy6kScn +Nr6+eVp/PapZKwSs3ouukpJpHaITwS+UI/uT29i4RI4t4pafp1iHcK4vtsjEqN6 dlt9funxwCL6BNGm1dCWLocvHtt7eqNhNlkD1LzlBeMzmS0A1HfJL+uHcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9CA9i9NpTbcGED3ewTJnLhfOXVMB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRMLjMdA zFd4CVwARCLV21CKzmOoXGqQq/p41UP3lNLYKOOn3IYhSGqrIRwwSWq8T4qNLOlQ +LRtBA42LVeE18u8GoaJvly+y2Kn8vYT4u+ib1N0e1LaWUZBmm0AaLtAij5Qrpwu u2NT0UYEPR1intgyKimzfSwhTl0MgkEgjFlQLULCa7uoz5JH3ng1wHzFRNGj1uqN 8OGIz9oVEIGcFbLwlSaZHAyxfSRMmFkalkSwCzuN5ItjLb6ni6W9YVjAgdgFTR3m 5AYcwV0QNXotqTkJ6KQsnBk8Jqrat/lgzvSFoUsKJ7U2GP5vLx7IuyzZiEhoCkMR OkCXJL3rK9cDDg== -----END CERTIFICATE-----Generated at Wed Dec 24 11:25:16 2025 by rpki-client