This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json) Hash identifier: +L/GiI5yo4+i+3MCgcli0UBYECLDyAts5hmCPX2XKBU= Subject key identifier: B5:1F:C0:70:EA:1A:8C:6F:B7:EA:CA:17:D6:81:DF:42:D0:12:74:79 Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019B3C7E1BC63AC5FDE9A94FC0324E3AA6A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft Manifest number: 08FA Signing time: Sat 20 Dec 2025 16:00:56 +0000 Manifest this update: Sat 20 Dec 2025 16:00:56 +0000 Manifest next update: Sun 21 Dec 2025 16:00:56 +0000 Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=) 2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: rMW5CJmPXId+AXUX9xQO5XqIW4gu30of0gk2oiHT89A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:1b:c6:3a:c5:fd:e9:a9:4f:c0:32:4e:3a:a6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Dec 20 16:00:56 2025 GMT Not After : Dec 21 16:00:56 2025 GMT Subject: CN=b51fc070ea1a8c6fb7eaca17d681df42d0127479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:bf:d2:1d:74:1d:14:0e:57:6a:f6:b3:6b: 47:e9:40:1d:e6:cb:c0:43:86:ea:81:56:ac:53:7e: a9:46:f4:a6:bf:e5:9b:b3:26:18:c2:1b:86:d2:70: c8:0c:b4:b6:68:47:58:27:b4:fb:d3:31:64:89:ba: bb:be:ee:0e:01:cd:ae:2e:2c:3c:f0:19:9b:90:8c: 73:7a:80:41:15:95:d9:01:99:61:92:87:8a:af:50: e1:2f:dd:12:3d:66:02:b8:3b:fd:73:b0:ac:11:a7: 11:3f:09:b9:93:db:84:df:a4:e2:7f:e4:47:1c:c9: f5:dc:fe:33:38:8a:69:f4:91:b5:61:1a:48:08:58: 8b:73:e7:e6:e3:d6:23:7f:06:ae:63:a9:da:04:fc: 8c:2b:1f:98:83:a2:43:0a:aa:80:ce:5a:d4:d2:a8: 9b:a6:eb:03:74:99:32:56:e3:4a:66:c0:60:d6:ab: 6e:bb:9d:c2:3d:29:70:44:25:0b:08:ad:83:68:d3: bf:06:1b:67:4e:09:20:96:d7:e5:db:2b:84:c9:65: c7:cb:52:c0:55:e3:c4:35:94:14:d0:db:cd:58:22: d7:dd:b2:44:2b:5b:63:e3:01:d1:df:15:2f:6e:5b: 09:db:7c:20:15:9d:0d:6b:19:3c:b3:74:d0:43:32: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1F:C0:70:EA:1A:8C:6F:B7:EA:CA:17:D6:81:DF:42:D0:12:74:79 X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9d:5d:f1:df:79:5c:d7:4b:40:c4:06:dd:38:56:ef:93:43: bc:87:7d:20:75:69:a9:c2:85:65:51:7e:b4:a1:33:b4:4c:34: 22:5f:06:1b:e6:44:a8:3d:0a:61:f9:65:df:9d:cf:cd:a3:0c: 1c:e2:89:07:a4:cd:2f:5b:f4:33:d8:34:12:7a:68:60:dd:4e: 8b:eb:4c:ec:c0:99:ce:24:ba:5b:16:49:03:10:e3:6d:61:c9: 6f:4d:23:ac:a7:9a:a9:78:b9:93:5d:c5:7e:37:fc:45:ac:32: e7:99:ce:74:68:49:a6:ae:65:1c:1e:35:39:50:c6:93:e1:4a: 93:b0:57:77:f2:86:fb:b7:73:13:a0:f8:89:cc:02:ba:f1:11: 03:33:4c:b0:9a:97:20:92:cc:2e:28:c6:ee:13:ab:6a:e5:c2: 2b:64:4a:01:74:91:48:d3:12:b3:cb:98:31:5b:f3:35:13:14: 22:0a:68:c2:10:83:a7:d4:56:2a:0b:21:85:4c:09:fb:cb:47: 4f:56:e7:b7:6e:d5:df:c6:6b:f2:23:c2:d6:0b:15:29:77:2c: cc:f4:22:28:d0:fd:98:4b:ae:00:92:d5:bf:94:05:cb:63:17: f4:7a:ba:9f:7c:c9:e6:a3:61:94:44:a8:22:46:f2:50:28:83: 6d:ac:28:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhvGOsX96alPwDJOOqalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjUxMjIwMTYwMDU2WhcNMjUxMjIxMTYwMDU2WjAzMTEwLwYDVQQD EyhiNTFmYzA3MGVhMWE4YzZmYjdlYWNhMTdkNjgxZGY0MmQwMTI3NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxq/0h10HRQOV2r2s2tH6UAd5svA Q4bqgVasU36pRvSmv+WbsyYYwhuG0nDIDLS2aEdYJ7T70zFkibq7vu4OAc2uLiw8 8BmbkIxzeoBBFZXZAZlhkoeKr1DhL90SPWYCuDv9c7CsEacRPwm5k9uE36Tif+RH HMn13P4zOIpp9JG1YRpICFiLc+fm49YjfwauY6naBPyMKx+Yg6JDCqqAzlrU0qib pusDdJkyVuNKZsBg1qtuu53CPSlwRCULCK2DaNO/BhtnTgkgltfl2yuEyWXHy1LA VePENZQU0NvNWCLX3bJEK1tj4wHR3xUvblsJ23wgFZ0Naxk8s3TQQzIviwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUfwHDqGoxvt+rKF9aB30LQEnR5MB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ1d8d95 XNdLQMQG3ThW75NDvId9IHVpqcKFZVF+tKEztEw0Il8GG+ZEqD0KYfll353PzaMM HOKJB6TNL1v0M9g0EnpoYN1Oi+tM7MCZziS6WxZJAxDjbWHJb00jrKeaqXi5k13F fjf8Rawy55nOdGhJpq5lHB41OVDGk+FKk7BXd/KG+7dzE6D4icwCuvERAzNMsJqX IJLMLijG7hOrauXCK2RKAXSRSNMSs8uYMVvzNRMUIgpowhCDp9RWKgshhUwJ+8tH T1bnt27V38Zr8iPC1gsVKXcszPQiKND9mEuuAJLVv5QFy2MX9Hq6n3zJ5qNhlESo IkbyUCiDbawoxA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:30 2025 by rpki-client