This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json) Hash identifier: qhlLLPZfr6GxQ+Q1jIpPeqsDOnVxp+Rxd/4M5d/blq4= Subject key identifier: 7C:86:DB:AD:4A:08:20:A0:40:A6:AF:EB:16:83:54:6C:40:2F:0F:D4 Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc Certificate serial: 019AF12CF12C75C74B00FEE119C0344DA8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft Manifest number: 14B2 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=) 2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: YIQZuVh5Rqh665mcclwHQQEofMKqOelfwwZyAej+jJQ=) 3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f1:2c:75:c7:4b:00:fe:e1:19:c0:34:4d:a8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=7c86dbad4a0820a040a6afeb1683546c402f0fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:f9:f4:d9:b3:38:ca:08:fb:3b:4a:10:ad: 51:78:99:99:5e:6c:ea:8b:59:42:58:a6:22:75:18: e7:13:b5:f5:8f:57:d4:56:b4:1b:f8:87:c5:e8:3b: 28:53:12:9a:09:24:0a:b8:1d:ad:06:cc:cf:5b:1e: 49:1c:67:05:41:1c:57:a7:be:1c:f1:aa:71:26:c1: 56:55:1f:9f:6e:e6:66:a5:89:67:08:54:7f:ab:c0: c1:14:d4:0c:8f:50:1e:56:1a:0a:80:d9:26:5c:57: 37:78:29:db:b4:0a:9f:b3:dc:f0:9d:6d:50:7f:3d: 9b:73:d0:5e:d8:a9:bc:73:ab:54:90:0b:21:30:8a: 47:5f:67:05:50:17:44:01:ab:81:fd:fe:bb:98:7f: 3e:61:86:bc:42:50:76:ef:25:9b:4e:4e:ae:c7:9f: c4:6e:e3:19:e2:cb:2e:a4:ea:ac:1d:ba:2c:1c:be: 28:f0:1f:bf:0d:5e:49:b8:e8:2c:69:c5:ed:ee:43: 41:c4:4b:28:7a:16:0d:82:50:c1:66:e7:dc:2d:11: 9b:3a:b7:03:de:91:25:b5:39:4e:3d:35:5e:17:54: a3:59:57:63:29:9f:98:1a:98:22:2d:08:d9:f9:9a: d5:4e:53:2d:c0:01:6b:11:a8:b6:35:82:8a:e3:a1: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:86:DB:AD:4A:08:20:A0:40:A6:AF:EB:16:83:54:6C:40:2F:0F:D4 X509v3 Authority Key Identifier: keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:39:4f:0c:32:6f:a0:eb:b0:04:24:07:7e:92:42:ab:f7:d0: 97:9d:89:a2:5b:58:65:82:13:c7:aa:d1:54:4b:70:0d:58:58: 01:66:ce:ac:34:2d:8b:7a:aa:a8:09:5f:f0:b4:e0:0f:55:9a: ed:76:5b:9e:c4:f8:6b:da:79:cd:ac:be:a5:fb:16:15:9c:b5: 92:ae:df:88:e3:35:04:f0:9b:ea:a3:aa:7c:ab:61:55:52:00: 34:9f:59:34:88:cf:2f:d4:0f:6b:05:79:d7:02:e5:6f:0f:c7: f3:c4:aa:bb:05:e4:c0:89:f4:8f:b6:36:04:3a:04:81:1c:64: 1b:59:bd:1e:db:e9:ed:20:b6:c8:06:88:ab:cc:38:6c:0d:8f: ed:33:c7:1f:95:8f:b0:3e:e8:31:b5:09:f0:9a:4c:ca:3d:c1: bf:72:07:00:f4:c6:f9:e6:85:1f:aa:88:94:91:8c:72:e7:a0: 6f:3f:20:58:50:a8:f2:66:c3:d8:f3:0c:1c:55:19:96:ea:86: 9c:87:9c:89:9c:86:87:f1:a7:52:35:04:7a:ff:64:e3:7e:61: e6:65:68:0d:93:a3:bb:aa:aa:43:d2:22:52:e0:cb:83:48:35: dd:44:46:1c:47:89:42:6e:f4:3c:10:73:e7:74:38:a3:72:ea: 9a:fe:b5:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPEsdcdLAP7hGcA0TajPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1 OWJmY2MwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD Eyg3Yzg2ZGJhZDRhMDgyMGEwNDBhNmFmZWIxNjgzNTQ2YzQwMmYwZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPP59NmzOMoI+ztKEK1ReJmZXmzq i1lCWKYidRjnE7X1j1fUVrQb+IfF6DsoUxKaCSQKuB2tBszPWx5JHGcFQRxXp74c 8apxJsFWVR+fbuZmpYlnCFR/q8DBFNQMj1AeVhoKgNkmXFc3eCnbtAqfs9zwnW1Q fz2bc9Be2Km8c6tUkAshMIpHX2cFUBdEAauB/f67mH8+YYa8QlB27yWbTk6ux5/E buMZ4ssupOqsHbosHL4o8B+/DV5JuOgsacXt7kNBxEsoehYNglDBZufcLRGbOrcD 3pEltTlOPTVeF1SjWVdjKZ+YGpgiLQjZ+ZrVTlMtwAFrEai2NYKK46F/7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyG261KCCCgQKav6xaDVGxALw/UMB8GA1UdIwQY MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTlPDDJv oOuwBCQHfpJCq/fQl52JoltYZYITx6rRVEtwDVhYAWbOrDQti3qqqAlf8LTgD1Wa 7XZbnsT4a9p5zay+pfsWFZy1kq7fiOM1BPCb6qOqfKthVVIANJ9ZNIjPL9QPawV5 1wLlbw/H88SquwXkwIn0j7Y2BDoEgRxkG1m9Htvp7SC2yAaIq8w4bA2P7TPHH5WP sD7oMbUJ8JpMyj3Bv3IHAPTG+eaFH6qIlJGMcuegbz8gWFCo8mbD2PMMHFUZluqG nIeciZyGh/GnUjUEev9k435h5mVoDZOju6qqQ9IiUuDLg0g13URGHEeJQm70PBBz 53Q4o3Lqmv61LQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:09 2025 by rpki-client