This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json) Hash identifier: KFoOoVgNwE00lZRsLyQRyCRsC3nMoWYCLqyiwOJdN6A= Subject key identifier: F9:31:C5:CF:64:CE:B4:00:18:17:10:3E:59:1E:9D:5D:58:69:5A:F1 Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Certificate serial: 019C0F6CD08177026E299CAFEEC2FAD0270C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft Manifest number: 095F Signing time: Fri 30 Jan 2026 15:01:55 +0000 Manifest this update: Fri 30 Jan 2026 15:01:55 +0000 Manifest next update: Sat 31 Jan 2026 15:01:55 +0000 Files and hashes: 1: HiYbhZWhCJJeXZ2C1QF9HZFYuTg.roa (hash: J5Ar7UkCjCgNu5FTWi596RRrK/CIdvUtNz5mbXSomXk=) 2: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: CVSN1LAyXXluwy5vrGYLvcduHoARM+mK1iX9Xt9pXAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:6c:d0:81:77:02:6e:29:9c:af:ee:c2:fa:d0:27:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Validity Not Before: Jan 30 15:01:55 2026 GMT Not After : Jan 31 15:01:55 2026 GMT Subject: CN=f931c5cf64ceb4001817103e591e9d5d58695af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7e:3b:01:d0:c9:0c:7b:42:eb:65:c5:35:4a: 29:ed:01:e9:aa:f2:61:bc:44:ae:d1:b5:f3:43:58: 77:d6:39:86:b1:df:41:e1:3e:f8:9c:a2:8e:4e:30: 91:5a:6a:41:2a:d8:66:d7:c2:2c:86:bb:d2:3a:8a: 98:05:f4:68:28:51:62:15:63:e9:fa:38:7a:a8:cc: 1c:d8:5e:fe:8f:d1:6b:fe:5f:82:99:71:99:a0:e2: c6:cd:ef:d4:4d:53:a5:ce:cd:e7:f0:ad:ba:1f:82: c6:3e:7e:54:43:44:b8:55:7d:e8:d3:62:88:19:f5: ef:d2:2e:4a:ba:99:60:bf:71:fd:7b:32:34:38:3a: 0f:50:35:fd:89:32:69:ae:e4:a4:6b:b3:b3:52:16: 7a:a7:04:93:04:6b:f4:36:69:72:e2:5b:0d:75:51: 53:87:e8:61:21:c1:5a:05:c8:fd:c8:ee:e3:1c:ae: b4:4e:72:d6:0b:f9:e0:df:ce:c8:90:b2:e6:1e:a0: 53:4c:a7:ce:97:01:4d:ce:96:89:ac:75:0b:85:95: 34:51:15:6b:59:58:49:04:8f:e1:36:7c:ad:43:58: 01:16:69:9e:a2:71:68:a8:69:0f:1b:79:42:43:a2: 93:f1:d1:3c:da:7a:16:ee:0d:31:78:05:9f:a1:6d: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:C5:CF:64:CE:B4:00:18:17:10:3E:59:1E:9D:5D:58:69:5A:F1 X509v3 Authority Key Identifier: keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3f:c1:20:fe:8c:9d:52:3c:d1:5e:8f:81:41:4f:a8:ec:9f: 39:92:3d:75:98:6e:bf:2c:35:06:22:24:76:78:85:27:0e:e8: ca:8d:ab:d0:ca:4d:3e:de:4e:39:a6:ac:ad:5a:2f:a4:c3:1e: de:7d:89:f1:73:63:a3:e7:d6:e9:d9:b0:3e:71:bb:a6:54:11: 40:5a:f9:fe:92:47:31:8c:3c:a0:9c:e6:a3:1a:c1:98:eb:4f: 7b:79:33:7a:78:b5:4b:4d:b6:f4:97:28:81:07:8f:3c:0c:6d: b1:28:c9:c3:da:13:8b:f9:b6:44:b0:a6:5b:4f:b5:97:0a:9e: 2c:52:47:f5:e1:f3:80:af:d3:d8:ad:57:21:4a:5b:69:bf:4e: 88:e0:72:c7:eb:1e:f5:f2:ae:36:1f:41:46:07:40:10:a2:88: 95:58:95:1d:b0:5a:9e:49:20:4f:72:46:cb:0c:13:3e:83:e0: 69:f4:c2:31:90:14:0d:17:ca:f7:13:a9:eb:8f:91:1f:6f:b0: 4b:cd:67:8e:8b:74:be:6d:d1:76:e6:3c:83:6a:03:cb:4d:8d: 7b:80:ad:61:05:ad:d2:2c:d3:a9:e5:cb:a4:85:1e:82:17:be: 05:e4:97:c0:77:09:4a:0e:8b:7c:44:cc:a2:ea:ed:31:cd:02: 9d:b8:5f:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwPbNCBdwJuKZyv7sL60CcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl YjdiMjQwHhcNMjYwMTMwMTUwMTU1WhcNMjYwMTMxMTUwMTU1WjAzMTEwLwYDVQQD EyhmOTMxYzVjZjY0Y2ViNDAwMTgxNzEwM2U1OTFlOWQ1ZDU4Njk1YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H47AdDJDHtC62XFNUop7QHpqvJh vESu0bXzQ1h31jmGsd9B4T74nKKOTjCRWmpBKthm18IshrvSOoqYBfRoKFFiFWPp +jh6qMwc2F7+j9Fr/l+CmXGZoOLGze/UTVOlzs3n8K26H4LGPn5UQ0S4VX3o02KI GfXv0i5Kuplgv3H9ezI0ODoPUDX9iTJpruSka7OzUhZ6pwSTBGv0Nmly4lsNdVFT h+hhIcFaBcj9yO7jHK60TnLWC/ng387IkLLmHqBTTKfOlwFNzpaJrHULhZU0URVr WVhJBI/hNnytQ1gBFmmeonFoqGkPG3lCQ6KT8dE82noW7g0xeAWfoW3TAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkxxc9kzrQAGBcQPlkenV1YaVrxMB8GA1UdIwQY MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3 LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz/BIP6M nVI80V6PgUFPqOyfOZI9dZhuvyw1BiIkdniFJw7oyo2r0MpNPt5OOaasrVovpMMe 3n2J8XNjo+fW6dmwPnG7plQRQFr5/pJHMYw8oJzmoxrBmOtPe3kzeni1S0229Jco gQePPAxtsSjJw9oTi/m2RLCmW0+1lwqeLFJH9eHzgK/T2K1XIUpbab9OiOByx+se 9fKuNh9BRgdAEKKIlViVHbBankkgT3JGywwTPoPgafTCMZAUDRfK9xOp64+RH2+w S81njot0vm3RduY8g2oDy02Ne4CtYQWt0izTqeXLpIUeghe+BeSXwHcJSg6LfETM ourtMc0CnbhftA== -----END CERTIFICATE-----Generated at Fri Jan 30 20:13:06 2026 by rpki-client