This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json) Hash identifier: i3fjUutJsdfjTM9C+jLhtgdQy5LPuqmgn9KliLY4940= Subject key identifier: 50:4D:55:E1:9E:86:57:1E:16:B9:CB:F1:8F:7D:85:86:F0:73:7F:12 Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Certificate serial: 019B46262B86D2427C351D9C407305A59B39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft Manifest number: 08F6 Signing time: Mon 22 Dec 2025 13:01:05 +0000 Manifest this update: Mon 22 Dec 2025 13:01:05 +0000 Manifest next update: Tue 23 Dec 2025 13:01:05 +0000 Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: /reVc3WrMsW2S8hHu3mVyrSqrkrA3QYsyKuRvOyJ1vI=) 2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:2b:86:d2:42:7c:35:1d:9c:40:73:05:a5:9b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Validity Not Before: Dec 22 13:01:05 2025 GMT Not After : Dec 23 13:01:05 2025 GMT Subject: CN=504d55e19e86571e16b9cbf18f7d8586f0737f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2c:ec:54:2a:c7:a4:85:a7:94:e2:28:6d:62: 68:bf:6b:bf:83:31:af:3d:0e:86:ed:8b:54:65:42: 8b:8d:6e:c1:0a:40:19:44:60:10:0d:40:8d:f8:28: 57:03:f3:00:cf:db:b6:02:39:3c:31:a2:af:19:a4: 2a:68:67:95:9b:10:1a:07:3c:b5:32:cb:ba:a3:9f: 14:82:22:85:4b:73:b7:25:33:fe:1b:49:0b:4a:a8: b1:54:e7:a6:e4:8c:a9:25:e0:c1:95:88:26:47:b5: 1e:66:1d:4b:67:e0:19:7b:06:f4:2b:6c:29:07:ed: a0:db:e6:68:bc:e6:54:65:73:08:c6:96:1b:ba:f2: 0b:8c:5e:03:e3:07:00:a6:43:87:7a:90:f8:8d:57: b4:d7:d3:0c:31:10:41:26:54:f7:3d:0c:19:cc:56: 99:ea:d4:e1:dd:f2:d0:ca:24:29:a9:f4:ff:3b:6a: 5d:ab:03:95:b9:01:b2:d9:a6:11:66:3e:98:f0:59: 88:94:13:3a:cf:4c:fe:75:3d:d7:cb:6a:39:33:63: 08:96:ba:43:60:04:09:7d:fb:fa:16:6e:be:60:a6: 5b:0c:46:59:a5:de:5c:1c:e9:e1:c9:04:9c:d6:c1: dc:79:b8:24:84:88:19:72:42:23:ed:8c:97:79:ed: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4D:55:E1:9E:86:57:1E:16:B9:CB:F1:8F:7D:85:86:F0:73:7F:12 X509v3 Authority Key Identifier: keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b3:ac:2d:8a:16:a8:85:d3:d1:1d:3a:00:b0:18:b2:22:b5: 7b:d2:d6:55:b8:b4:9b:c2:8f:88:a8:7a:2a:1e:cc:fc:c6:de: 09:c0:45:51:57:3e:24:09:3e:f5:8b:7d:ef:df:f3:3a:a2:87: 7a:41:ee:a6:a6:01:e9:86:c4:56:8c:dd:23:22:96:05:1c:9d: 08:3b:af:5f:e7:7e:b5:3e:88:02:03:cf:5b:25:61:5a:f9:fc: d8:01:52:89:55:6b:e1:1d:6c:5a:37:27:18:1e:34:da:03:5d: 53:27:e7:d2:f6:a6:7c:70:58:15:20:59:de:75:5d:e7:1a:95: c2:fb:21:2b:5b:9c:51:b7:4e:22:63:f3:45:4a:90:71:06:32: 05:08:3e:a7:b5:18:8f:fd:a1:e6:af:2b:5a:d2:7d:f3:4a:83: f3:0d:41:f1:ee:e7:0a:b8:57:5b:15:4f:c0:56:d6:a3:ed:57: 53:da:74:8c:b3:95:6c:2b:c7:13:c6:e0:f5:7b:a0:04:2c:53: ee:e1:7c:65:eb:8d:fc:f8:f2:e5:c6:c9:8e:23:da:91:a3:e4: 35:e4:20:03:4d:86:03:25:b7:ab:59:1f:08:1c:06:35:1a:b3: 80:fa:94:7d:35:2e:69:c9:08:6a:2e:1a:49:17:74:b1:be:94: 59:2c:ee:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJiuG0kJ8NR2cQHMFpZs5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl YjdiMjQwHhcNMjUxMjIyMTMwMTA1WhcNMjUxMjIzMTMwMTA1WjAzMTEwLwYDVQQD Eyg1MDRkNTVlMTllODY1NzFlMTZiOWNiZjE4ZjdkODU4NmYwNzM3ZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SzsVCrHpIWnlOIobWJov2u/gzGv PQ6G7YtUZUKLjW7BCkAZRGAQDUCN+ChXA/MAz9u2Ajk8MaKvGaQqaGeVmxAaBzy1 Msu6o58UgiKFS3O3JTP+G0kLSqixVOem5IypJeDBlYgmR7UeZh1LZ+AZewb0K2wp B+2g2+ZovOZUZXMIxpYbuvILjF4D4wcApkOHepD4jVe019MMMRBBJlT3PQwZzFaZ 6tTh3fLQyiQpqfT/O2pdqwOVuQGy2aYRZj6Y8FmIlBM6z0z+dT3Xy2o5M2MIlrpD YAQJffv6Fm6+YKZbDEZZpd5cHOnhyQSc1sHcebgkhIgZckIj7YyXee26OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBNVeGehlceFrnL8Y99hYbwc38SMB8GA1UdIwQY MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3 LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLOsLYoW qIXT0R06ALAYsiK1e9LWVbi0m8KPiKh6Kh7M/MbeCcBFUVc+JAk+9Yt979/zOqKH ekHupqYB6YbEVozdIyKWBRydCDuvX+d+tT6IAgPPWyVhWvn82AFSiVVr4R1sWjcn GB402gNdUyfn0vamfHBYFSBZ3nVd5xqVwvshK1ucUbdOImPzRUqQcQYyBQg+p7UY j/2h5q8rWtJ980qD8w1B8e7nCrhXWxVPwFbWo+1XU9p0jLOVbCvHE8bg9XugBCxT 7uF8ZeuN/Pjy5cbJjiPakaPkNeQgA02GAyW3q1kfCBwGNRqzgPqUfTUuackIai4a SRd0sb6UWSzuEQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:59:39 2025 by rpki-client