This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json) Hash identifier: 4VRfiqLgYff+ZDoeHLrQq9RP4l0H6FXx9UG8i8L0R/g= Subject key identifier: A9:B9:36:EB:AA:B4:29:0D:87:9B:AD:41:62:33:D8:F1:25:63:DE:3D Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Certificate serial: 019B3C7E48C914C0F021A118ED6F0919E982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft Manifest number: 08F1 Signing time: Sat 20 Dec 2025 16:01:07 +0000 Manifest this update: Sat 20 Dec 2025 16:01:07 +0000 Manifest next update: Sun 21 Dec 2025 16:01:07 +0000 Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: ePalvr/HLity/SIgzrHFA84pqBAmfJ5eGCHa7zBKcuM=) 2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:48:c9:14:c0:f0:21:a1:18:ed:6f:09:19:e9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Validity Not Before: Dec 20 16:01:07 2025 GMT Not After : Dec 21 16:01:07 2025 GMT Subject: CN=a9b936ebaab4290d879bad416233d8f12563de3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:f3:a5:d2:82:a7:d8:50:1b:46:dc:68:18: 1e:86:4e:9f:4b:53:4d:03:2c:a0:83:e8:3f:bc:1c: 51:f5:70:1c:2c:96:89:c1:96:c6:e8:81:92:cc:e4: 69:90:63:01:5b:ad:ac:4f:f2:4e:d2:b2:ec:22:44: 35:ae:a1:cd:a9:02:a0:df:e0:98:77:a5:9c:61:61: 59:fb:f4:e1:f9:b3:3f:22:e7:6d:75:79:9e:c0:59: f7:39:34:45:21:58:bb:2f:3e:80:d2:3d:6d:70:ec: af:d5:0e:60:8e:da:47:66:95:11:53:fc:a0:63:15: 40:9a:f2:36:24:13:a3:c7:24:55:eb:d9:c7:2d:eb: 2d:22:93:b5:b0:c3:64:00:ed:3c:55:e5:91:0a:05: bf:32:5a:27:5b:c9:72:48:5d:8d:41:56:4b:8a:fa: 13:27:18:9f:03:a0:72:30:9c:f1:79:75:c7:0d:33: f4:15:f4:92:0f:88:88:eb:87:b1:19:cf:09:a1:56: e1:a8:79:12:b9:cd:af:d3:62:3a:8c:d6:ec:de:6c: 54:ce:72:03:b2:0a:d5:9d:99:67:cc:22:a1:65:c4: 8c:b8:bc:71:fb:73:a6:0a:fc:56:11:14:a0:11:3b: 12:78:ff:47:79:f5:4f:d9:2c:a3:2b:51:a8:ac:2a: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B9:36:EB:AA:B4:29:0D:87:9B:AD:41:62:33:D8:F1:25:63:DE:3D X509v3 Authority Key Identifier: keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:08:b6:9e:e3:20:90:d6:02:8c:7b:d9:88:35:70:4b:a4:dd: c0:8a:1c:5a:6b:67:36:79:95:70:cf:03:f2:1a:23:51:86:89: 43:7c:2f:b2:fa:27:d2:05:bf:51:5b:d1:3c:29:b0:2d:3f:7b: 9d:8b:c3:cb:a8:d6:e1:e4:d6:ea:2b:f5:a6:36:59:7a:8d:e6: f1:b5:e6:97:93:67:12:c5:ee:e0:1b:86:29:4d:7b:ec:91:9a: ad:d6:06:b3:9e:2a:62:09:54:01:31:95:cd:f2:d2:5b:de:94: cb:a0:25:81:12:95:02:f4:5a:18:dd:ba:f0:a4:de:52:15:91: 69:92:7f:f1:42:26:84:04:cb:7d:16:ee:e3:7d:ae:fe:10:ca: 14:cc:b9:3f:a7:4b:18:6e:50:53:e6:1c:52:aa:68:16:c6:2c: 66:8a:b9:cf:ab:6e:b8:b2:f9:9b:3e:da:fd:2a:2d:62:fb:fd: 95:35:1b:0b:8d:93:ba:62:50:90:ce:c4:e5:e7:fd:91:2d:81: c2:29:87:16:ec:76:6c:c7:fc:80:b0:f3:31:db:c3:2f:c0:4f: d6:89:2a:55:01:25:8d:8c:95:e6:c7:1c:b7:74:2e:f0:36:b1: c9:6d:94:46:e6:7f:d2:0c:ea:f1:a2:e6:31:d9:17:0d:6d:61: 6d:72:cf:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fkjJFMDwIaEY7W8JGemCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl YjdiMjQwHhcNMjUxMjIwMTYwMTA3WhcNMjUxMjIxMTYwMTA3WjAzMTEwLwYDVQQD EyhhOWI5MzZlYmFhYjQyOTBkODc5YmFkNDE2MjMzZDhmMTI1NjNkZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHDzpdKCp9hQG0bcaBgehk6fS1NN Ayygg+g/vBxR9XAcLJaJwZbG6IGSzORpkGMBW62sT/JO0rLsIkQ1rqHNqQKg3+CY d6WcYWFZ+/Th+bM/IudtdXmewFn3OTRFIVi7Lz6A0j1tcOyv1Q5gjtpHZpURU/yg YxVAmvI2JBOjxyRV69nHLestIpO1sMNkAO08VeWRCgW/MlonW8lySF2NQVZLivoT JxifA6ByMJzxeXXHDTP0FfSSD4iI64exGc8JoVbhqHkSuc2v02I6jNbs3mxUznID sgrVnZlnzCKhZcSMuLxx+3OmCvxWERSgETsSeP9HefVP2SyjK1GorCrQmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm5NuuqtCkNh5utQWIz2PElY949MB8GA1UdIwQY MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3 LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgi2nuMg kNYCjHvZiDVwS6TdwIocWmtnNnmVcM8D8hojUYaJQ3wvsvon0gW/UVvRPCmwLT97 nYvDy6jW4eTW6iv1pjZZeo3m8bXml5NnEsXu4BuGKU177JGardYGs54qYglUATGV zfLSW96Uy6AlgRKVAvRaGN268KTeUhWRaZJ/8UImhATLfRbu432u/hDKFMy5P6dL GG5QU+YcUqpoFsYsZoq5z6tuuLL5mz7a/SotYvv9lTUbC42TumJQkM7E5ef9kS2B wimHFux2bMf8gLDzMdvDL8BP1okqVQEljYyV5scct3Qu8DaxyW2URuZ/0gzq8aLm MdkXDW1hbXLPAg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:26:56 2025 by rpki-client