This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json) Hash identifier: 4KCvqvq//OyKiQcf9Kxj8rdy/lGgQsUkWQ9jpPdIkkc= Subject key identifier: 8A:7A:E4:93:FE:85:2B:7E:DC:8B:79:CE:E0:42:86:B9:6E:33:85:05 Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7 Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7 Certificate serial: 019B5ABFF8ACEAFF298B4A7D3F77F2FC376B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft Manifest number: 046F Signing time: Fri 26 Dec 2025 13:01:28 +0000 Manifest this update: Fri 26 Dec 2025 13:01:28 +0000 Manifest next update: Sat 27 Dec 2025 13:01:28 +0000 Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: /gfmtBZHoIAX6+bglzukErXrpCPLld3piGsOWyImtxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:f8:ac:ea:ff:29:8b:4a:7d:3f:77:f2:fc:37:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7 Validity Not Before: Dec 26 13:01:28 2025 GMT Not After : Dec 27 13:01:28 2025 GMT Subject: CN=8a7ae493fe852b7edc8b79cee04286b96e338505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:84:d1:c2:19:aa:0a:f6:1c:91:32:cb:26: a7:12:17:2a:dd:68:3a:c2:f2:30:85:bb:40:82:0f: 7d:f6:9b:44:d3:24:9b:42:cf:e4:42:b5:17:84:db: b3:cf:5b:8c:9a:70:3e:ca:43:81:4f:f7:95:b4:46: 6a:b7:05:32:1c:5c:34:16:ff:0e:8a:d8:c9:91:71: 1e:d5:22:b3:b0:a5:b7:fa:eb:59:ee:09:14:2c:2f: 6f:95:c8:e3:92:58:ae:49:52:36:f8:af:e0:83:c6: 2e:e9:a3:e1:f3:46:5d:b1:ad:f7:77:fd:1b:73:bd: 8f:dd:25:77:16:60:75:06:20:44:10:b6:e6:93:fa: c8:06:a6:3c:05:f8:ee:fa:13:f8:3d:3b:3e:8a:2d: c7:ce:f4:17:99:80:52:7c:50:b2:dc:fd:f5:3e:3b: 78:e9:9a:f2:05:2f:e3:74:30:52:e1:7f:08:70:a8: 38:c3:a8:22:9e:a8:71:79:4a:70:72:25:71:78:67: 94:a7:ed:1c:db:b9:42:1f:7b:f2:fd:0d:ff:73:a7: ce:d2:7f:ed:ef:c4:00:c5:4d:23:fe:88:bc:56:37: 1b:10:c7:fb:fc:7d:66:25:50:96:a2:de:ce:1e:93: 1e:13:49:19:cd:ef:b7:52:ca:44:f9:fa:c5:1d:fc: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7A:E4:93:FE:85:2B:7E:DC:8B:79:CE:E0:42:86:B9:6E:33:85:05 X509v3 Authority Key Identifier: keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bf:00:17:4f:dc:f5:87:7f:38:76:d8:0a:e5:b1:b9:58:3c: 63:85:f9:5f:e8:cb:03:dd:0c:ef:4e:c0:20:d6:9f:1f:58:20: 02:83:21:6f:28:96:2a:aa:0e:b7:e1:29:10:e8:0a:f8:7a:1a: 9e:8c:f3:c5:7a:4a:4d:25:31:28:62:d6:da:35:7a:8d:8a:93: eb:1f:2f:ca:45:ee:ba:e0:3b:8d:fb:e1:06:6c:d8:50:e0:75: c0:56:4a:3b:d3:51:b9:88:b7:60:c8:8d:6e:75:d0:89:74:2a: ba:da:6a:01:d6:9f:09:37:01:fb:53:d2:cc:df:85:21:29:38: 8b:80:fb:83:8f:fd:a1:c1:99:a9:88:7d:0b:23:62:75:66:50: 77:2e:8a:85:43:b5:72:5b:21:55:b3:af:d4:80:79:82:d7:1c: 15:94:a9:3a:d5:2a:7b:7a:65:4e:7c:be:d4:38:32:27:dd:2b: ad:5a:ec:d4:12:49:1e:6f:bf:9c:f9:46:90:2e:51:c0:da:4a: 2e:e7:e0:b6:8c:81:a8:ad:f6:25:8e:f5:d5:f2:f3:f6:c6:4d: b0:68:df:c9:64:ee:a5:55:82:17:85:f9:7e:cc:f2:29:5f:52: 73:de:59:e0:1a:e3:55:3d:2f:ad:d8:1f:c9:08:e8:8b:ef:3a: c8:37:83:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav/is6v8pi0p9P3fy/DdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDk1NTBjNWFlNjY0MDAyOTE4NmNmYzlkZWE3NGU5MWE3 YjYxZTcwHhcNMjUxMjI2MTMwMTI4WhcNMjUxMjI3MTMwMTI4WjAzMTEwLwYDVQQD Eyg4YTdhZTQ5M2ZlODUyYjdlZGM4Yjc5Y2VlMDQyODZiOTZlMzM4NTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJeE0cIZqgr2HJEyyyanEhcq3Wg6 wvIwhbtAgg999ptE0ySbQs/kQrUXhNuzz1uMmnA+ykOBT/eVtEZqtwUyHFw0Fv8O itjJkXEe1SKzsKW3+utZ7gkULC9vlcjjkliuSVI2+K/gg8Yu6aPh80Zdsa33d/0b c72P3SV3FmB1BiBEELbmk/rIBqY8Bfju+hP4PTs+ii3HzvQXmYBSfFCy3P31Pjt4 6ZryBS/jdDBS4X8IcKg4w6ginqhxeUpwciVxeGeUp+0c27lCH3vy/Q3/c6fO0n/t 78QAxU0j/oi8VjcbEMf7/H1mJVCWot7OHpMeE0kZze+3UspE+frFHfw+BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp65JP+hSt+3It5zuBChrluM4UFMB8GA1UdIwQY MBaAFGVJVQxa5mQAKRhs/J3qdOkae2HnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUt YTYyZTE4MGNmYmIyLzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUtYTYyZTE4MGNmYmIy LzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr8AF0/c 9Yd/OHbYCuWxuVg8Y4X5X+jLA90M707AINafH1ggAoMhbyiWKqoOt+EpEOgK+Hoa nozzxXpKTSUxKGLW2jV6jYqT6x8vykXuuuA7jfvhBmzYUOB1wFZKO9NRuYi3YMiN bnXQiXQqutpqAdafCTcB+1PSzN+FISk4i4D7g4/9ocGZqYh9CyNidWZQdy6KhUO1 clshVbOv1IB5gtccFZSpOtUqe3plTny+1DgyJ90rrVrs1BJJHm+/nPlGkC5RwNpK LufgtoyBqK32JY711fLz9sZNsGjfyWTupVWCF4X5fszyKV9Sc95Z4BrjVT0vrdgf yQjoi+86yDeD+w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:28 2025 by rpki-client