This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json) Hash identifier: oWi+IFGDD35er9yAnDbFW/+TLmfIfQKr1WMPm2912pk= Subject key identifier: F0:69:63:AF:35:66:C9:4F:91:A8:FF:BE:DD:34:E5:9C:DE:78:C3:A5 Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7 Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7 Certificate serial: 019B341FA4C2EF6374262F96E077030B51D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft Manifest number: 045B Signing time: Fri 19 Dec 2025 01:00:47 +0000 Manifest this update: Fri 19 Dec 2025 01:00:47 +0000 Manifest next update: Sat 20 Dec 2025 01:00:47 +0000 Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: aC41VmDEBK9YCnroU6IHNG7LD4c34ke1RPvVBnuY8Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:a4:c2:ef:63:74:26:2f:96:e0:77:03:0b:51:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7 Validity Not Before: Dec 19 01:00:47 2025 GMT Not After : Dec 20 01:00:47 2025 GMT Subject: CN=f06963af3566c94f91a8ffbedd34e59cde78c3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:af:6b:60:0e:0b:40:aa:90:25:44:d2:79:c2: e3:e3:a6:88:43:37:3b:64:2b:5c:68:8d:f3:15:66: 53:17:85:dc:9d:84:07:42:67:43:e1:90:90:0d:59: 38:a1:bd:72:b6:83:b6:78:bd:7b:5a:f0:40:7d:15: 27:ca:90:87:78:44:bc:7d:6e:0e:60:11:47:86:0e: a6:13:2c:70:b9:16:f6:4b:7c:6f:af:0a:75:fc:b2: 65:b7:24:84:26:b0:82:9a:30:d5:97:69:dc:3c:e9: c6:44:b2:a5:52:a4:cf:a0:40:41:89:d2:24:c8:29: 4d:6b:23:97:47:84:88:6e:e2:0d:9a:b4:03:b1:8e: 4b:df:0e:c5:35:7b:65:42:db:48:a9:64:ad:7c:4b: fc:87:15:d0:cb:a2:7f:aa:19:0e:e2:20:f4:0a:06: 4b:75:54:f0:b0:7b:d7:df:97:0b:a6:ee:84:a3:5c: f3:0e:22:50:45:26:2c:15:4d:db:22:58:4a:c6:db: a5:49:85:71:d2:8f:e9:6c:3c:6f:cb:17:a6:04:45: 28:aa:22:0f:9b:8d:71:8b:d2:af:01:78:1f:e5:f0: fa:89:7f:e6:ff:e0:63:43:64:25:1a:b8:1f:85:a8: 2b:34:84:af:94:80:20:91:be:e0:e6:4e:f4:29:89: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:69:63:AF:35:66:C9:4F:91:A8:FF:BE:DD:34:E5:9C:DE:78:C3:A5 X509v3 Authority Key Identifier: keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ff:f8:32:63:b9:c1:3d:7e:da:c3:1c:16:04:9e:b1:6e:f7: a6:91:27:af:6b:06:23:dc:d3:e7:d6:79:6b:dd:d7:4b:8a:97: 7a:bc:78:fd:6a:cf:f0:5f:ca:62:dc:4b:da:a7:4e:49:2e:00: d4:65:44:de:48:ad:b9:5a:f6:bf:e7:58:16:81:44:0c:ca:12: a5:3c:0e:37:d1:f5:fc:56:4b:2f:0e:7b:a1:ef:6b:97:a9:d3: de:4a:59:cb:b5:d7:01:03:da:82:3b:6d:0a:03:ef:47:a9:7a: 3d:80:16:06:2f:1d:5a:c0:9c:cf:d2:64:ea:5a:fd:e9:ce:15: 1a:2f:89:73:d2:fb:8c:1f:ec:0c:3e:86:58:6c:3c:68:b4:48: 37:81:dd:3e:0b:df:e5:4c:30:13:87:03:2b:60:b9:fb:e7:c6: 15:42:cf:f4:44:00:46:85:bf:d2:a4:24:bd:b9:94:4c:2b:88: 95:cf:03:46:b6:27:09:0f:dc:bd:9d:22:e9:e7:1d:34:ec:38: 8a:74:b2:00:f1:09:1d:ac:d7:95:a5:4a:55:2e:1e:0b:3a:d3: e5:2b:82:8b:06:5a:8c:aa:83:c5:d9:71:8c:b8:dc:7f:19:84: 99:4e:66:56:da:dc:fd:ca:23:d2:66:c7:91:2f:c3:7a:bf:fa: 8b:cb:96:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H6TC72N0Ji+W4HcDC1HZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDk1NTBjNWFlNjY0MDAyOTE4NmNmYzlkZWE3NGU5MWE3 YjYxZTcwHhcNMjUxMjE5MDEwMDQ3WhcNMjUxMjIwMDEwMDQ3WjAzMTEwLwYDVQQD EyhmMDY5NjNhZjM1NjZjOTRmOTFhOGZmYmVkZDM0ZTU5Y2RlNzhjM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K9rYA4LQKqQJUTSecLj46aIQzc7 ZCtcaI3zFWZTF4XcnYQHQmdD4ZCQDVk4ob1ytoO2eL17WvBAfRUnypCHeES8fW4O YBFHhg6mEyxwuRb2S3xvrwp1/LJltySEJrCCmjDVl2ncPOnGRLKlUqTPoEBBidIk yClNayOXR4SIbuINmrQDsY5L3w7FNXtlQttIqWStfEv8hxXQy6J/qhkO4iD0CgZL dVTwsHvX35cLpu6Eo1zzDiJQRSYsFU3bIlhKxtulSYVx0o/pbDxvyxemBEUoqiIP m41xi9KvAXgf5fD6iX/m/+BjQ2QlGrgfhagrNISvlIAgkb7g5k70KYkl5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBpY681ZslPkaj/vt005ZzeeMOlMB8GA1UdIwQY MBaAFGVJVQxa5mQAKRhs/J3qdOkae2HnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUt YTYyZTE4MGNmYmIyLzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUtYTYyZTE4MGNmYmIy LzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG//4MmO5 wT1+2sMcFgSesW73ppEnr2sGI9zT59Z5a93XS4qXerx4/WrP8F/KYtxL2qdOSS4A 1GVE3kituVr2v+dYFoFEDMoSpTwON9H1/FZLLw57oe9rl6nT3kpZy7XXAQPagjtt CgPvR6l6PYAWBi8dWsCcz9Jk6lr96c4VGi+Jc9L7jB/sDD6GWGw8aLRIN4HdPgvf 5UwwE4cDK2C5++fGFULP9EQARoW/0qQkvbmUTCuIlc8DRrYnCQ/cvZ0i6ecdNOw4 inSyAPEJHazXlaVKVS4eCzrT5SuCiwZajKqDxdlxjLjcfxmEmU5mVtrc/coj0mbH kS/Der/6i8uWzQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:00:33 2025 by rpki-client