This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json) Hash identifier: W/PrvcAYCp1niDgPxXDkuat9b78zV2NMTXpuiV7hGRo= Subject key identifier: 05:8C:7B:31:4D:27:7F:17:45:C2:D5:A7:4A:6D:B2:FA:0F:55:5A:D2 Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Certificate serial: 019B1D985780194F79B8BC920EC374E76BC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft Manifest number: 08E1 Signing time: Sun 14 Dec 2025 16:01:21 +0000 Manifest this update: Sun 14 Dec 2025 16:01:21 +0000 Manifest next update: Mon 15 Dec 2025 16:01:21 +0000 Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: HYnu1ILQ34aaJQLfcOUcg3+fEpfbwUQS7TMQXEwpZdg=) 2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:57:80:19:4f:79:b8:bc:92:0e:c3:74:e7:6b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Validity Not Before: Dec 14 16:01:21 2025 GMT Not After : Dec 15 16:01:21 2025 GMT Subject: CN=058c7b314d277f1745c2d5a74a6db2fa0f555ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:97:50:c5:57:2f:26:ad:a6:d0:02:df:80: 01:25:a9:7e:9b:00:1a:9c:70:46:ff:29:04:f3:b3: 90:9b:27:57:85:3f:f6:d4:c6:26:7f:10:97:4e:41: c5:c0:25:fc:ca:6b:5e:bb:6d:d9:cd:b7:e4:72:87: 18:d6:ec:e4:0c:3b:db:b0:c5:83:b9:68:5e:af:74: 0f:65:8d:37:34:da:81:76:4b:51:79:f5:69:b4:dc: 98:1e:0c:45:2d:57:a0:e6:a2:06:b6:31:37:b2:e4: 14:db:5a:e4:40:37:a0:44:a4:79:11:93:b2:59:6d: 91:b9:88:84:4a:1e:e8:71:c8:8f:fd:73:b6:e7:8b: ba:b6:b8:83:82:11:01:a5:6b:8c:1e:35:6c:f8:7c: 50:5c:71:74:59:c1:63:6c:69:34:0e:ab:8c:6d:44: 63:ed:9f:b0:b7:cd:4a:5c:41:06:4b:cb:fe:af:f7: b8:35:2d:1a:b7:ca:d1:60:f0:28:f3:35:be:2c:d3: 0b:52:dd:ab:18:bf:ae:42:3c:82:71:29:a9:27:5f: db:39:0d:5f:ab:29:8d:8f:03:88:8c:b0:5c:2e:22: d9:a5:54:71:a1:4d:3c:82:58:17:7b:c3:a2:b2:33: ea:8e:b1:86:2d:47:4b:28:73:5d:93:10:f4:2e:cd: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8C:7B:31:4D:27:7F:17:45:C2:D5:A7:4A:6D:B2:FA:0F:55:5A:D2 X509v3 Authority Key Identifier: keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:80:2b:ec:a7:46:be:9e:f8:5d:25:6e:f1:2c:8e:3b:9c:ca: ed:d2:ba:51:a5:bb:ee:e5:72:3e:f3:be:47:40:bd:c0:da:d2: 25:24:02:df:7d:aa:42:f6:28:cc:73:04:71:ee:e6:4c:db:43: 92:b7:e4:10:8f:f8:ff:8d:5a:0a:ab:90:9f:f4:a6:cc:7b:27: e0:bd:97:d4:e0:c5:8a:dd:8d:59:5e:99:4f:66:b9:6c:7f:69: 31:c2:c2:20:52:0b:ae:0b:33:f1:ca:dc:c4:f7:58:c0:d0:29: 80:76:7d:19:d7:c1:fa:5e:0a:b0:b4:51:16:62:a1:9c:45:68: 82:69:6d:4d:ae:75:cd:c6:eb:2d:f7:e9:06:5b:7b:7d:ee:99: 14:00:5d:da:62:4b:15:45:b4:44:bd:28:ae:1e:d8:16:4e:1b: 9a:d8:53:1a:10:a3:47:8f:4a:b6:b1:2b:7d:31:c5:72:ef:01: dd:17:1e:54:dc:17:cc:ce:c7:b5:6e:3b:97:6e:7b:19:c4:f7: 10:1f:20:6c:3d:f0:10:a5:40:5d:1c:27:b8:12:19:06:02:51: 9e:a0:b4:20:23:19:4e:11:12:aa:21:08:96:c0:1e:75:df:1e: 01:43:65:41:72:5a:b7:88:58:29:34:eb:7a:55:bd:36:fc:1d: 0f:f7:f7:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmFeAGU95uLySDsN052vBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl YjdiMjQwHhcNMjUxMjE0MTYwMTIxWhcNMjUxMjE1MTYwMTIxWjAzMTEwLwYDVQQD EygwNThjN2IzMTRkMjc3ZjE3NDVjMmQ1YTc0YTZkYjJmYTBmNTU1YWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwWXUMVXLyatptAC34ABJal+mwAa nHBG/ykE87OQmydXhT/21MYmfxCXTkHFwCX8ymteu23ZzbfkcocY1uzkDDvbsMWD uWher3QPZY03NNqBdktRefVptNyYHgxFLVeg5qIGtjE3suQU21rkQDegRKR5EZOy WW2RuYiESh7occiP/XO254u6triDghEBpWuMHjVs+HxQXHF0WcFjbGk0DquMbURj 7Z+wt81KXEEGS8v+r/e4NS0at8rRYPAo8zW+LNMLUt2rGL+uQjyCcSmpJ1/bOQ1f qymNjwOIjLBcLiLZpVRxoU08glgXe8OisjPqjrGGLUdLKHNdkxD0Ls3k5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWMezFNJ38XRcLVp0ptsvoPVVrSMB8GA1UdIwQY MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3 LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIAr7KdG vp74XSVu8SyOO5zK7dK6UaW77uVyPvO+R0C9wNrSJSQC332qQvYozHMEce7mTNtD krfkEI/4/41aCquQn/SmzHsn4L2X1ODFit2NWV6ZT2a5bH9pMcLCIFILrgsz8crc xPdYwNApgHZ9GdfB+l4KsLRRFmKhnEVogmltTa51zcbrLffpBlt7fe6ZFABd2mJL FUW0RL0orh7YFk4bmthTGhCjR49KtrErfTHFcu8B3RceVNwXzM7HtW47l257GcT3 EB8gbD3wEKVAXRwnuBIZBgJRnqC0ICMZThESqiEIlsAedd8eAUNlQXJat4hYKTTr elW9NvwdD/f3Ew== -----END CERTIFICATE-----Generated at Sun Dec 14 19:13:40 2025 by rpki-client