This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft File: pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json) Hash identifier: 5Ia1oWwSCnTQW3HWxybo1Tkgie2fixkBTprGomyLa14= Subject key identifier: F4:7E:36:2F:29:4B:3A:F7:3C:6D:93:FF:ED:6B:35:48:9D:5E:46:C6 Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 Certificate issuer: /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Certificate serial: 019AF50B7125E3AEB962E262A2A37E4DB787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft Manifest number: 08CC Signing time: Sat 06 Dec 2025 19:02:38 +0000 Manifest this update: Sat 06 Dec 2025 19:02:38 +0000 Manifest next update: Sun 07 Dec 2025 19:02:38 +0000 Files and hashes: 1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: zXj3/dFj9msiBH4URvxdnzb9NpEIwvtbl80u5+6VLPg=) 2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:71:25:e3:ae:b9:62:e2:62:a2:a3:7e:4d:b7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24 Validity Not Before: Dec 6 19:02:38 2025 GMT Not After : Dec 7 19:02:38 2025 GMT Subject: CN=f47e362f294b3af73c6d93ffed6b35489d5e46c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:7a:d2:c9:d5:7c:25:20:bf:1f:7e:b2:23: 6b:ed:9f:8f:f5:60:12:e2:41:27:23:a6:d1:dc:e6: 66:7c:f0:f6:a8:a5:3c:dc:5b:38:1d:d2:c4:fc:dd: db:70:6b:96:67:fe:9d:ce:83:25:40:a9:15:26:35: 93:51:b7:d8:66:65:c9:21:5a:16:b6:b9:7f:3f:47: a1:d0:97:3e:65:27:7a:bf:d0:68:cc:eb:c5:e5:73: 1d:c3:b7:bc:44:79:df:cd:22:24:71:bd:4d:c8:09: 58:13:84:86:12:30:28:8b:de:6b:1f:99:42:c3:f0: b6:63:d0:4c:89:25:ac:07:c1:0f:28:95:58:64:82: 78:83:c1:3c:b0:a6:91:50:6f:48:ac:f8:6a:33:cf: 28:40:64:90:9c:89:90:43:fa:e0:2d:c4:b9:72:a5: 61:37:47:23:b9:b6:5d:85:9d:b4:fd:04:d7:a2:00: b0:ee:ed:1c:18:66:80:3b:5d:07:46:79:99:cc:64: 16:ed:93:31:9d:e4:fc:9d:30:39:5c:bd:18:69:e0: 34:16:8a:e1:ad:f9:d2:72:5e:64:5d:37:48:19:12: 9d:20:83:78:53:22:a0:aa:74:72:61:36:c3:cc:ae: a9:89:e6:23:00:7c:b8:44:82:79:8d:d0:10:7f:c2: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:36:2F:29:4B:3A:F7:3C:6D:93:FF:ED:6B:35:48:9D:5E:46:C6 X509v3 Authority Key Identifier: keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:93:39:04:12:d4:34:fe:ce:a1:ca:82:75:f2:58:2d:4d:c6: a3:1d:67:e8:ad:6d:97:41:56:a0:17:8a:3c:65:ed:3f:3e:11: 89:4d:35:97:db:93:db:ee:d1:ae:9c:32:92:50:0d:a4:8b:7c: f4:45:12:a1:a2:db:42:cd:4b:92:38:97:81:d2:18:a1:44:b9: e7:29:09:44:ca:de:27:57:90:a7:a9:56:13:62:4a:10:b5:da: a2:3f:69:92:eb:d2:b6:e0:c2:99:6f:96:5a:b0:fe:a3:be:b6: a9:9f:38:b0:da:03:11:4d:6a:be:5e:04:43:b2:01:68:3b:27: 84:53:44:de:0d:e2:60:df:b0:8c:81:3e:02:16:62:01:9a:91: 4c:de:a7:3b:fb:3b:74:58:5b:2b:c2:e6:24:f1:bc:13:d2:c7: 1a:f4:26:8a:6d:94:67:fc:4c:47:3b:59:da:43:c6:bd:87:0b: 1a:eb:0f:58:69:85:0b:ea:6a:86:34:56:94:4d:78:9d:ef:b4: 13:e9:81:9d:ba:3c:4d:31:ee:7b:a4:28:b7:54:a8:56:1b:55: ca:be:ec:0f:c7:05:e3:73:90:4f:7b:ba:64:8c:de:a4:22:75: 7f:3f:35:41:6f:c3:12:e2:aa:c4:d4:a9:35:ba:4f:3d:51:fe: 37:39:2d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3El4665YuJioqN+TbeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjY0NDZiMGM2ZGNkY2RmN2YzYjlhYzQxMTc4N2M2ZjJl YjdiMjQwHhcNMjUxMjA2MTkwMjM4WhcNMjUxMjA3MTkwMjM4WjAzMTEwLwYDVQQD EyhmNDdlMzYyZjI5NGIzYWY3M2M2ZDkzZmZlZDZiMzU0ODlkNWU0NmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cJ60snVfCUgvx9+siNr7Z+P9WAS 4kEnI6bR3OZmfPD2qKU83Fs4HdLE/N3bcGuWZ/6dzoMlQKkVJjWTUbfYZmXJIVoW trl/P0eh0Jc+ZSd6v9BozOvF5XMdw7e8RHnfzSIkcb1NyAlYE4SGEjAoi95rH5lC w/C2Y9BMiSWsB8EPKJVYZIJ4g8E8sKaRUG9IrPhqM88oQGSQnImQQ/rgLcS5cqVh N0cjubZdhZ20/QTXogCw7u0cGGaAO10HRnmZzGQW7ZMxneT8nTA5XL0YaeA0Forh rfnScl5kXTdIGRKdIIN4UyKgqnRyYTbDzK6pieYjAHy4RIJ5jdAQf8KvpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR+Ni8pSzr3PG2T/+1rNUidXkbGMB8GA1UdIwQY MBaAFKS2RGsMbc3N9/O5rEEXh8by63skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMt Yzk0ZDM5M2I4YTk3LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS85MGY5YTgtN2E5YS00N2Q3LTg0OTMtYzk0ZDM5M2I4YTk3 LzEvcExaRWF3eHR6YzMzODdtc1FSZUh4dkxyZXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZM5BBLU NP7OocqCdfJYLU3Gox1n6K1tl0FWoBeKPGXtPz4RiU01l9uT2+7RrpwyklANpIt8 9EUSoaLbQs1LkjiXgdIYoUS55ykJRMreJ1eQp6lWE2JKELXaoj9pkuvStuDCmW+W WrD+o762qZ84sNoDEU1qvl4EQ7IBaDsnhFNE3g3iYN+wjIE+AhZiAZqRTN6nO/s7 dFhbK8LmJPG8E9LHGvQmim2UZ/xMRztZ2kPGvYcLGusPWGmFC+pqhjRWlE14ne+0 E+mBnbo8TTHue6Qot1SoVhtVyr7sD8cF43OQT3u6ZIzepCJ1fz81QW/DEuKqxNSp NbpPPVH+Nzkt2w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:18 2025 by rpki-client