This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier: 4VRfiqLgYff+ZDoeHLrQq9RP4l0H6FXx9UG8i8L0R/g=
Subject key identifier: A9:B9:36:EB:AA:B4:29:0D:87:9B:AD:41:62:33:D8:F1:25:63:DE:3D
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial: 019B3C7E48C914C0F021A118ED6F0919E982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number: 08F1
Signing time: Sat 20 Dec 2025 16:01:07 +0000
Manifest this update: Sat 20 Dec 2025 16:01:07 +0000
Manifest next update: Sun 21 Dec 2025 16:01:07 +0000
Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: ePalvr/HLity/SIgzrHFA84pqBAmfJ5eGCHa7zBKcuM=)
2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3c:7e:48:c9:14:c0:f0:21:a1:18:ed:6f:09:19:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Validity
Not Before: Dec 20 16:01:07 2025 GMT
Not After : Dec 21 16:01:07 2025 GMT
Subject: CN=a9b936ebaab4290d879bad416233d8f12563de3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:f3:a5:d2:82:a7:d8:50:1b:46:dc:68:18:
1e:86:4e:9f:4b:53:4d:03:2c:a0:83:e8:3f:bc:1c:
51:f5:70:1c:2c:96:89:c1:96:c6:e8:81:92:cc:e4:
69:90:63:01:5b:ad:ac:4f:f2:4e:d2:b2:ec:22:44:
35:ae:a1:cd:a9:02:a0:df:e0:98:77:a5:9c:61:61:
59:fb:f4:e1:f9:b3:3f:22:e7:6d:75:79:9e:c0:59:
f7:39:34:45:21:58:bb:2f:3e:80:d2:3d:6d:70:ec:
af:d5:0e:60:8e:da:47:66:95:11:53:fc:a0:63:15:
40:9a:f2:36:24:13:a3:c7:24:55:eb:d9:c7:2d:eb:
2d:22:93:b5:b0:c3:64:00:ed:3c:55:e5:91:0a:05:
bf:32:5a:27:5b:c9:72:48:5d:8d:41:56:4b:8a:fa:
13:27:18:9f:03:a0:72:30:9c:f1:79:75:c7:0d:33:
f4:15:f4:92:0f:88:88:eb:87:b1:19:cf:09:a1:56:
e1:a8:79:12:b9:cd:af:d3:62:3a:8c:d6:ec:de:6c:
54:ce:72:03:b2:0a:d5:9d:99:67:cc:22:a1:65:c4:
8c:b8:bc:71:fb:73:a6:0a:fc:56:11:14:a0:11:3b:
12:78:ff:47:79:f5:4f:d9:2c:a3:2b:51:a8:ac:2a:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:36:EB:AA:B4:29:0D:87:9B:AD:41:62:33:D8:F1:25:63:DE:3D
X509v3 Authority Key Identifier:
keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:08:b6:9e:e3:20:90:d6:02:8c:7b:d9:88:35:70:4b:a4:dd:
c0:8a:1c:5a:6b:67:36:79:95:70:cf:03:f2:1a:23:51:86:89:
43:7c:2f:b2:fa:27:d2:05:bf:51:5b:d1:3c:29:b0:2d:3f:7b:
9d:8b:c3:cb:a8:d6:e1:e4:d6:ea:2b:f5:a6:36:59:7a:8d:e6:
f1:b5:e6:97:93:67:12:c5:ee:e0:1b:86:29:4d:7b:ec:91:9a:
ad:d6:06:b3:9e:2a:62:09:54:01:31:95:cd:f2:d2:5b:de:94:
cb:a0:25:81:12:95:02:f4:5a:18:dd:ba:f0:a4:de:52:15:91:
69:92:7f:f1:42:26:84:04:cb:7d:16:ee:e3:7d:ae:fe:10:ca:
14:cc:b9:3f:a7:4b:18:6e:50:53:e6:1c:52:aa:68:16:c6:2c:
66:8a:b9:cf:ab:6e:b8:b2:f9:9b:3e:da:fd:2a:2d:62:fb:fd:
95:35:1b:0b:8d:93:ba:62:50:90:ce:c4:e5:e7:fd:91:2d:81:
c2:29:87:16:ec:76:6c:c7:fc:80:b0:f3:31:db:c3:2f:c0:4f:
d6:89:2a:55:01:25:8d:8c:95:e6:c7:1c:b7:74:2e:f0:36:b1:
c9:6d:94:46:e6:7f:d2:0c:ea:f1:a2:e6:31:d9:17:0d:6d:61:
6d:72:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:26:56 2025 by rpki-client