This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json) Hash identifier: 8CFllgHsHvAARE0YcTRq/pQGvYyGez/0G+2M9JwvOoY= Subject key identifier: 72:80:05:12:8D:AD:B8:99:F3:61:80:04:32:1F:88:F4:CE:15:8A:BE Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc Certificate serial: 019B0E24F5F300639CBF77FFF7A166411F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft Manifest number: 14C1 Signing time: Thu 11 Dec 2025 16:01:01 +0000 Manifest this update: Thu 11 Dec 2025 16:01:01 +0000 Manifest next update: Fri 12 Dec 2025 16:01:01 +0000 Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=) 2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: k780oQ3DlY71cbNc23H72keXNyAOw0CubdBaHMiPhE4=) 3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:f5:f3:00:63:9c:bf:77:ff:f7:a1:66:41:1f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc Validity Not Before: Dec 11 16:01:01 2025 GMT Not After : Dec 12 16:01:01 2025 GMT Subject: CN=728005128dadb899f3618004321f88f4ce158abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:ef:d3:e4:9b:75:4e:87:ab:75:d5:16:5b: af:3c:a4:b0:65:40:8d:e0:ce:6c:52:00:55:06:02: 60:ee:a8:27:3a:99:8d:ee:ec:43:58:1b:cf:61:f2: 0b:63:8e:cb:72:89:34:bf:7c:4b:6f:ca:02:e3:d6: 15:7f:68:40:fb:1d:0b:f0:27:0d:6a:13:7d:be:a8: 71:05:54:c7:53:d7:c6:8f:e4:8b:23:90:d8:02:54: a8:ee:29:5a:cd:59:e0:10:c2:02:71:ff:7f:ee:6a: f2:07:71:ce:b9:e9:cf:cc:b0:12:df:e9:ae:4d:f1: 45:9e:cb:8a:4d:45:fd:9a:f1:db:76:1c:75:a1:a8: 5f:c5:b8:f4:b3:33:82:a9:cf:45:69:5c:6b:59:46: 8a:b5:8c:1f:7b:45:5c:99:97:e9:a5:68:25:fd:cb: 03:23:02:5c:87:92:78:17:a5:ac:21:20:d1:71:d2: a4:e1:ee:23:cc:2b:b0:84:ca:d4:74:d3:1a:c1:bd: 2b:fd:56:51:1f:e0:da:87:5b:ba:9f:b1:d2:83:ef: 51:00:ee:40:a6:fc:63:07:4f:09:b1:64:cc:10:f2: 15:37:17:f3:31:64:f8:e2:9a:22:c6:7c:1c:17:5f: d8:dd:58:a9:c7:a6:98:41:50:9b:3b:b1:2f:d1:af: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:80:05:12:8D:AD:B8:99:F3:61:80:04:32:1F:88:F4:CE:15:8A:BE X509v3 Authority Key Identifier: keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:97:b8:cd:46:2d:f7:4f:0c:53:ac:a7:73:2e:a4:5b:4f:cd: e7:6d:f8:fa:f7:60:3a:9e:b2:ce:8c:22:8b:ee:e3:79:44:c2: a0:d0:7d:c0:5c:97:b2:8f:8a:8e:21:0f:2a:4c:7d:31:d7:54: 51:55:f3:9c:37:96:64:75:3f:a2:22:b1:ad:c2:fa:61:0c:29: aa:34:dc:b7:1f:bd:19:eb:54:26:9d:1d:ee:a5:c9:75:14:0c: 36:ce:d8:4f:3f:6a:e2:51:49:67:c0:34:19:45:34:4a:1d:04: 13:94:00:34:3f:6e:e6:e9:a3:71:52:5e:f1:1b:86:12:07:da: 32:a3:0f:d7:c4:36:c6:d4:7a:61:cc:3c:4a:e9:3e:ca:5e:4f: 5b:ab:bc:23:e0:97:fd:d2:fa:81:48:64:e9:e1:d1:9a:f7:12: bf:5d:32:e3:95:70:ab:62:90:2b:fb:53:e1:1b:ad:b2:cd:c9: d4:3b:a8:db:61:b7:d8:4d:21:d5:cd:48:e4:d3:fb:71:14:d6: 7e:a7:d6:bd:76:47:b4:48:1f:f9:f0:2e:35:cd:d0:db:0e:cd: 8c:ed:72:9f:a5:43:a2:86:bd:ec:86:ac:0b:8f:ca:46:bb:79: 69:19:81:89:4e:2e:18:f7:32:6b:1e:99:70:b1:5d:7a:fe:b5: a9:e3:8a:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJPXzAGOcv3f/96FmQR9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1 OWJmY2MwHhcNMjUxMjExMTYwMTAxWhcNMjUxMjEyMTYwMTAxWjAzMTEwLwYDVQQD Eyg3MjgwMDUxMjhkYWRiODk5ZjM2MTgwMDQzMjFmODhmNGNlMTU4YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtLv0+SbdU6Hq3XVFluvPKSwZUCN 4M5sUgBVBgJg7qgnOpmN7uxDWBvPYfILY47Lcok0v3xLb8oC49YVf2hA+x0L8CcN ahN9vqhxBVTHU9fGj+SLI5DYAlSo7ilazVngEMICcf9/7mryB3HOuenPzLAS3+mu TfFFnsuKTUX9mvHbdhx1oahfxbj0szOCqc9FaVxrWUaKtYwfe0VcmZfppWgl/csD IwJch5J4F6WsISDRcdKk4e4jzCuwhMrUdNMawb0r/VZRH+Dah1u6n7HSg+9RAO5A pvxjB08JsWTMEPIVNxfzMWT44poixnwcF1/Y3Vipx6aYQVCbO7Ev0a98twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKABRKNrbiZ82GABDIfiPTOFYq+MB8GA1UdIwQY MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZe4zUYt 908MU6yncy6kW0/N5234+vdgOp6yzowii+7jeUTCoNB9wFyXso+KjiEPKkx9MddU UVXznDeWZHU/oiKxrcL6YQwpqjTctx+9GetUJp0d7qXJdRQMNs7YTz9q4lFJZ8A0 GUU0Sh0EE5QAND9u5umjcVJe8RuGEgfaMqMP18Q2xtR6Ycw8Suk+yl5PW6u8I+CX /dL6gUhk6eHRmvcSv10y45Vwq2KQK/tT4Rutss3J1Duo22G32E0h1c1I5NP7cRTW fqfWvXZHtEgf+fAuNc3Q2w7NjO1yn6VDooa97IasC4/KRrt5aRmBiU4uGPcyax6Z cLFdev61qeOKnw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:25:03 2025 by rpki-client