This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json) Hash identifier: K4MdrCeKzPOuCj9YhC4j98ga4+K3pI97kdt+BryvZC4= Subject key identifier: 3D:A2:AB:FB:61:15:DE:6C:5C:4D:FC:83:2E:F8:F8:56:54:7F:C1:64 Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Certificate serial: 019B3E6D9D5C2BD10D2C69B7256FC1777574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft Manifest number: 08F2 Signing time: Sun 21 Dec 2025 01:02:09 +0000 Manifest this update: Sun 21 Dec 2025 01:02:09 +0000 Manifest next update: Mon 22 Dec 2025 01:02:09 +0000 Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: zjhg8AUAT5OUd9UOwHU/N4bN9NXjNYZ1aaTamUJVb6w=) 2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:9d:5c:2b:d1:0d:2c:69:b7:25:6f:c1:77:75:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Validity Not Before: Dec 21 01:02:09 2025 GMT Not After : Dec 22 01:02:09 2025 GMT Subject: CN=3da2abfb6115de6c5c4dfc832ef8f856547fc164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:0a:97:28:b1:c1:33:b9:7b:b1:e6:64:2c: 54:f3:d4:8d:33:6e:71:06:9e:81:e9:23:78:a7:93: d8:2c:84:8d:b2:16:d8:5e:49:9d:ff:c5:8f:94:9a: 93:37:ce:06:47:b2:ab:a5:3b:fb:5b:d7:bf:98:77: ea:eb:ca:1c:5c:dd:00:ba:a5:4b:34:c5:04:b6:24: b0:53:90:87:12:67:cb:2e:a8:2b:86:46:ab:6a:32: 41:4f:ea:43:04:53:c2:70:af:4a:8c:1f:cb:e3:5c: ad:bc:4b:89:da:6e:da:89:c7:c1:01:f3:8c:1e:19: 4e:7f:f4:a1:f8:63:40:bb:16:b4:4d:66:97:c7:1b: ab:a7:c5:ef:69:f0:5f:83:dd:b2:e5:f1:b1:3d:a4: 90:77:e1:0a:10:ea:24:36:bd:90:6b:b9:13:9c:59: 52:96:8c:a6:12:84:85:73:84:6a:3a:69:ca:0f:7c: 42:a8:0f:6d:6c:1a:38:ab:63:bb:00:10:73:d7:07: 52:49:f8:e4:77:c8:11:e9:74:5a:7c:6d:d8:5c:78: 8f:fd:92:5c:f0:39:ac:b8:d0:ae:e2:ec:3b:df:38: 5e:79:40:54:0f:4d:4f:f6:82:66:57:6d:75:5c:45: d2:85:24:c4:63:44:80:d4:cd:27:6e:b5:57:67:56: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A2:AB:FB:61:15:DE:6C:5C:4D:FC:83:2E:F8:F8:56:54:7F:C1:64 X509v3 Authority Key Identifier: keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5a:68:d1:09:ca:6e:2b:4a:28:47:ad:f3:ea:0c:25:e7:e9: b0:96:0f:99:a7:20:aa:39:4e:6d:d6:74:a7:1f:ee:65:18:17: e3:e1:43:e2:a7:6d:16:6c:56:83:0a:08:ef:f2:d8:32:95:5a: 33:67:05:6d:fe:19:9a:3a:c0:be:5a:dd:8b:3d:37:51:15:80: b7:e3:a0:99:39:2a:75:7e:13:f1:0c:f9:85:a7:da:1a:e4:08: 1f:e9:ad:80:fa:9e:dc:de:e1:0b:08:e8:e0:5c:27:0d:43:f5: d5:0f:2b:eb:d0:15:6f:68:61:b2:c7:12:35:a3:6a:e4:0a:40: d4:69:7d:90:65:8b:3c:1e:c1:02:5a:a7:0f:06:b5:8c:1a:1c: f8:b9:d6:68:77:41:5c:83:12:37:06:be:d2:9a:ab:a4:09:17: 08:d2:00:3b:61:27:20:86:fb:e5:c6:ab:60:67:c4:d7:2b:e6: 60:c0:95:35:54:fb:bf:a9:d2:bd:27:61:80:81:c3:92:22:a4: 55:1e:ae:75:21:7c:b3:ad:51:96:f6:e4:06:cc:6a:f7:ca:a9: 78:c2:08:0f:c1:c5:8c:4c:9a:55:a6:09:1d:d6:46:9f:b3:74: 49:fa:af:dc:8f:a7:40:c5:47:2f:f1:eb:44:b7:08:6c:ca:10: 94:34:ce:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZ1cK9ENLGm3JW/Bd3V0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl YjdiMjQwHhcNMjUxMjIxMDEwMjA5WhcNMjUxMjIyMDEwMjA5WjAzMTEwLwYDVQQD EygzZGEyYWJmYjYxMTVkZTZjNWM0ZGZjODMyZWY4Zjg1NjU0N2ZjMTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx34KlyixwTO5e7HmZCxU89SNM25x Bp6B6SN4p5PYLISNshbYXkmd/8WPlJqTN84GR7KrpTv7W9e/mHfq68ocXN0AuqVL NMUEtiSwU5CHEmfLLqgrhkarajJBT+pDBFPCcK9KjB/L41ytvEuJ2m7aicfBAfOM HhlOf/Sh+GNAuxa0TWaXxxurp8XvafBfg92y5fGxPaSQd+EKEOokNr2Qa7kTnFlS loymEoSFc4RqOmnKD3xCqA9tbBo4q2O7ABBz1wdSSfjkd8gR6XRafG3YXHiP/ZJc 8DmsuNCu4uw73zheeUBUD01P9oJmV211XEXShSTEY0SA1M0nbrVXZ1YZYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2iq/thFd5sXE38gy74+FZUf8FkMB8GA1UdIwQY MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3 LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFpo0QnK bitKKEet8+oMJefpsJYPmacgqjlObdZ0px/uZRgX4+FD4qdtFmxWgwoI7/LYMpVa M2cFbf4ZmjrAvlrdiz03URWAt+OgmTkqdX4T8Qz5hafaGuQIH+mtgPqe3N7hCwjo 4FwnDUP11Q8r69AVb2hhsscSNaNq5ApA1Gl9kGWLPB7BAlqnDwa1jBoc+LnWaHdB XIMSNwa+0pqrpAkXCNIAO2EnIIb75carYGfE1yvmYMCVNVT7v6nSvSdhgIHDkiKk VR6udSF8s61RlvbkBsxq98qpeMIID8HFjEyaVaYJHdZGn7N0Sfqv3I+nQMVHL/Hr RLcIbMoQlDTOJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:06:18 2025 by rpki-client