This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json) Hash identifier: QRnFmrcs5R4Gw5gqhgr+Tavvp0Tfk2jzQ9I+Ru/jHbU= Subject key identifier: 6E:DB:14:63:D9:6C:F3:B6:5D:D7:63:25:3C:FC:11:46:A0:22:96:02 Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc Certificate serial: 019B405B75F738D3F15461219A44C5A30E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft Manifest number: 14DB Signing time: Sun 21 Dec 2025 10:01:34 +0000 Manifest this update: Sun 21 Dec 2025 10:01:34 +0000 Manifest next update: Mon 22 Dec 2025 10:01:34 +0000 Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=) 2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: T0Yrw5622E8LQBqMyeyjWcwjmKtL+lS8IeNvRvPItuI=) 3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:75:f7:38:d3:f1:54:61:21:9a:44:c5:a3:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc Validity Not Before: Dec 21 10:01:34 2025 GMT Not After : Dec 22 10:01:34 2025 GMT Subject: CN=6edb1463d96cf3b65dd763253cfc1146a0229602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:04:2c:97:c9:31:39:e7:79:26:3f:38:18: 62:a1:37:2a:df:1a:47:f0:1f:69:97:13:4c:5b:96: bc:17:fc:12:2d:12:7e:fe:98:7f:39:86:47:b9:41: e2:da:20:be:87:05:2b:cd:36:5c:cc:fe:6a:45:b6: eb:7b:cd:e8:25:c9:84:03:2e:96:0c:35:ab:56:97: d2:a5:56:d9:e2:54:60:ff:56:58:f0:33:a0:67:53: 4b:08:9e:57:9b:7b:65:dd:60:0b:20:a9:a9:3f:f6: 64:1a:99:63:20:4c:9b:a1:da:e8:b5:ba:8f:9b:d9: ea:70:4e:6a:e3:d3:3e:a7:92:00:a3:e5:af:49:16: ab:4f:7a:c0:bf:17:89:0d:7b:05:0e:6a:ea:8e:79: 3c:37:21:05:56:0c:6c:b9:7a:6d:de:21:bb:fe:2e: 87:ea:b8:e6:ae:c5:ec:4d:6f:d7:ea:48:4c:29:bd: bf:a9:b2:ae:1b:88:ee:25:de:53:0b:85:c4:9e:0d: 08:22:51:ea:3b:2d:ef:d8:09:1b:88:9e:ef:0c:02: 91:50:18:3c:8e:02:be:5f:35:48:fd:34:a8:30:47: 9b:50:a8:34:99:bf:d3:45:34:f7:11:ed:a8:22:35: c3:a9:d0:72:4e:6a:ca:05:06:81:19:80:d8:38:67: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DB:14:63:D9:6C:F3:B6:5D:D7:63:25:3C:FC:11:46:A0:22:96:02 X509v3 Authority Key Identifier: keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:fb:c1:84:e3:e4:cd:28:d8:72:0d:f4:9f:40:ba:c8:1f:25: 17:b1:ca:dc:2e:56:bb:78:d5:5e:b6:8b:2e:8c:17:55:30:51: b2:53:b3:66:93:79:80:ef:1b:9e:83:b8:84:7e:a1:e2:4a:68: 16:be:88:86:97:94:b8:06:d1:d2:f6:8b:9f:b7:05:0c:2c:b6: d2:c4:f2:54:41:51:86:86:32:15:b3:35:cb:62:4c:96:d6:5f: c1:1b:a1:ce:32:f6:5f:2b:35:61:73:d1:de:66:95:34:97:70: 28:87:88:22:83:53:16:7d:7f:2b:ae:80:01:58:16:7a:38:93: 6f:db:09:4b:ca:19:a1:21:01:d9:a9:ba:cc:ac:3e:4c:8a:d1: 2c:b1:60:ee:17:13:f0:a8:21:5d:61:13:07:a4:f2:78:00:f3: 87:f7:26:bc:ce:f1:ae:c1:b7:79:ba:e8:1e:97:aa:97:4e:10: 4b:26:c1:a4:9c:e1:70:01:f8:df:89:60:dc:7c:f4:14:d6:cb: 00:56:a1:84:5d:8a:2a:88:8b:c5:9a:e8:e0:bf:3d:4b:1c:46: f6:52:59:70:f3:61:13:6c:21:69:df:ed:31:5f:16:2b:e7:41: 3c:72:90:fb:c6:39:6d:ab:f6:69:88:7b:61:84:5a:1b:7b:43: 07:95:99:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW3X3ONPxVGEhmkTFow4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1 OWJmY2MwHhcNMjUxMjIxMTAwMTM0WhcNMjUxMjIyMTAwMTM0WjAzMTEwLwYDVQQD Eyg2ZWRiMTQ2M2Q5NmNmM2I2NWRkNzYzMjUzY2ZjMTE0NmEwMjI5NjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H8ELJfJMTnneSY/OBhioTcq3xpH 8B9plxNMW5a8F/wSLRJ+/ph/OYZHuUHi2iC+hwUrzTZczP5qRbbre83oJcmEAy6W DDWrVpfSpVbZ4lRg/1ZY8DOgZ1NLCJ5Xm3tl3WALIKmpP/ZkGpljIEybodrotbqP m9nqcE5q49M+p5IAo+WvSRarT3rAvxeJDXsFDmrqjnk8NyEFVgxsuXpt3iG7/i6H 6rjmrsXsTW/X6khMKb2/qbKuG4juJd5TC4XEng0IIlHqOy3v2AkbiJ7vDAKRUBg8 jgK+XzVI/TSoMEebUKg0mb/TRTT3Ee2oIjXDqdByTmrKBQaBGYDYOGeLhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7bFGPZbPO2XddjJTz8EUagIpYCMB8GA1UdIwQY MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfvBhOPk zSjYcg30n0C6yB8lF7HK3C5Wu3jVXraLLowXVTBRslOzZpN5gO8bnoO4hH6h4kpo Fr6IhpeUuAbR0vaLn7cFDCy20sTyVEFRhoYyFbM1y2JMltZfwRuhzjL2Xys1YXPR 3maVNJdwKIeIIoNTFn1/K66AAVgWejiTb9sJS8oZoSEB2am6zKw+TIrRLLFg7hcT 8KghXWETB6TyeADzh/cmvM7xrsG3ebroHpeql04QSybBpJzhcAH434lg3Hz0FNbL AFahhF2KKoiLxZro4L89SxxG9lJZcPNhE2whad/tMV8WK+dBPHKQ+8Y5bav2aYh7 YYRaG3tDB5WZcg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:20:21 2025 by rpki-client