This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json) Hash identifier: PYsp77SyP/obwi//WsT/O0f1zfiOCac8yWadV0oNgvg= Subject key identifier: 35:CE:37:DE:70:51:FB:0E:FD:DA:B4:50:74:01:9E:A5:4F:84:84:AE Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019B4437B08052A722BD28F2D42AC55DDBD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft Manifest number: 08FE Signing time: Mon 22 Dec 2025 04:00:58 +0000 Manifest this update: Mon 22 Dec 2025 04:00:58 +0000 Manifest next update: Tue 23 Dec 2025 04:00:58 +0000 Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=) 2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: Vrq4j+oeH0vRSb1OXKu/OpwFUpk/FRNitH2vd67elXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:b0:80:52:a7:22:bd:28:f2:d4:2a:c5:5d:db:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Dec 22 04:00:58 2025 GMT Not After : Dec 23 04:00:58 2025 GMT Subject: CN=35ce37de7051fb0efddab45074019ea54f8484ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d5:b6:82:32:0d:ce:ce:cc:c3:d4:8e:d4:5a: 44:b1:8f:7b:59:e6:87:46:b2:41:4f:3c:78:a1:6f: 4d:66:d6:1b:28:4a:22:d8:d7:d6:ee:49:d3:ff:bc: 62:73:a6:51:8f:b0:6f:33:47:73:b2:0d:b8:d5:79: 23:ff:d3:c0:87:eb:5e:2e:27:d1:80:99:6a:80:09: e6:2a:61:fa:25:fe:6a:df:da:a8:4c:ca:77:3c:1e: 85:6f:06:87:3c:0d:b1:52:99:87:67:8a:ee:69:70: b0:eb:de:c1:b1:4f:45:da:3e:86:61:79:9a:70:4f: 05:d7:5e:a2:f7:e5:4c:69:6e:da:c7:99:4e:fd:06: a4:07:c6:f9:7d:26:c9:3b:98:f0:a8:93:7d:bd:49: 10:d7:60:23:b8:cb:e6:cf:c5:50:c0:04:5d:8f:d4: fa:ff:48:65:92:8f:04:24:cc:38:35:bc:3e:4b:1d: b1:fa:d9:be:ac:fa:2d:41:36:14:70:19:3c:3f:d6: e9:89:3a:74:b0:ca:d3:51:8e:91:83:d6:2d:1b:89: 52:d9:56:ce:14:82:e3:7c:17:06:75:85:07:ca:03: c6:7b:43:9b:84:e7:92:65:ed:41:29:56:ee:27:33: 1f:54:2f:98:c4:61:26:72:ee:7d:84:07:01:9d:cb: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CE:37:DE:70:51:FB:0E:FD:DA:B4:50:74:01:9E:A5:4F:84:84:AE X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:79:f3:ec:29:e5:4d:ea:26:1e:cf:e4:91:d5:3b:2b:ea:05: 7e:d8:e9:c7:af:91:04:9f:2e:92:b0:3f:28:62:89:67:e1:5d: ab:71:c3:6e:d6:c8:fd:d0:a5:0e:d9:37:1f:1e:95:5b:06:23: 5f:16:32:3e:ff:61:1d:71:b1:48:f4:d8:d4:59:6d:dd:ef:c8: 61:93:19:e1:d4:fb:e2:3c:6f:dd:56:6b:66:ba:c3:1f:40:0d: 0b:e1:1b:08:3d:a9:d4:37:2d:74:b9:fb:a2:8a:73:76:42:12: e7:f7:b2:69:56:44:b1:a1:83:c8:47:8e:01:6d:f2:55:7b:97: 7a:87:15:e1:80:37:cc:14:51:a2:1f:7a:50:bf:07:2b:b8:78: 91:b6:95:df:d1:c0:ed:74:42:15:10:31:ec:a5:95:43:b3:3f: ce:3c:ec:c4:f8:83:12:f4:b8:97:67:34:44:05:52:a1:f6:f2: df:a2:04:45:3c:2e:b9:5d:89:88:f8:cb:a5:1d:a7:14:64:fd: 1d:19:c6:44:e9:ae:f3:53:58:2e:d3:88:1f:f4:fe:09:7c:0a: 1c:81:f8:e1:33:5d:d1:8b:66:e4:45:35:cb:71:81:99:64:27: 79:55:41:de:95:25:4b:51:f5:5b:15:dd:bc:e2:c6:8b:07:18: 27:a7:70:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN7CAUqcivSjy1CrFXdvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjUxMjIyMDQwMDU4WhcNMjUxMjIzMDQwMDU4WjAzMTEwLwYDVQQD EygzNWNlMzdkZTcwNTFmYjBlZmRkYWI0NTA3NDAxOWVhNTRmODQ4NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tW2gjINzs7Mw9SO1FpEsY97WeaH RrJBTzx4oW9NZtYbKEoi2NfW7knT/7xic6ZRj7BvM0dzsg241Xkj/9PAh+teLifR gJlqgAnmKmH6Jf5q39qoTMp3PB6FbwaHPA2xUpmHZ4ruaXCw697BsU9F2j6GYXma cE8F116i9+VMaW7ax5lO/QakB8b5fSbJO5jwqJN9vUkQ12AjuMvmz8VQwARdj9T6 /0hlko8EJMw4Nbw+Sx2x+tm+rPotQTYUcBk8P9bpiTp0sMrTUY6Rg9YtG4lS2VbO FILjfBcGdYUHygPGe0ObhOeSZe1BKVbuJzMfVC+YxGEmcu59hAcBncs4TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXON95wUfsO/dq0UHQBnqVPhISuMB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3nz7Cnl TeomHs/kkdU7K+oFftjpx6+RBJ8ukrA/KGKJZ+Fdq3HDbtbI/dClDtk3Hx6VWwYj XxYyPv9hHXGxSPTY1Flt3e/IYZMZ4dT74jxv3VZrZrrDH0ANC+EbCD2p1DctdLn7 oopzdkIS5/eyaVZEsaGDyEeOAW3yVXuXeocV4YA3zBRRoh96UL8HK7h4kbaV39HA 7XRCFRAx7KWVQ7M/zjzsxPiDEvS4l2c0RAVSofby36IERTwuuV2JiPjLpR2nFGT9 HRnGROmu81NYLtOIH/T+CXwKHIH44TNd0Ytm5EU1y3GBmWQneVVB3pUlS1H1WxXd vOLGiwcYJ6dwbg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:07 2025 by rpki-client