This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json) Hash identifier: NMlW5IvVrNuD9XwetuUnPuZoBT383Ab+oRvnOFwepXI= Subject key identifier: 05:FC:5D:94:C6:24:F8:D9:4C:64:19:BD:28:FE:36:AC:68:AC:B6:56 Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7 Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7 Certificate serial: 019B6278EF035E2CD485A3375CD43D897066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft Manifest number: 0473 Signing time: Sun 28 Dec 2025 01:00:51 +0000 Manifest this update: Sun 28 Dec 2025 01:00:51 +0000 Manifest next update: Mon 29 Dec 2025 01:00:51 +0000 Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: md7IDNBTx0jxgbGOiK9rOY9HEtkUdeooilsK++NTm/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:78:ef:03:5e:2c:d4:85:a3:37:5c:d4:3d:89:70:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7 Validity Not Before: Dec 28 01:00:51 2025 GMT Not After : Dec 29 01:00:51 2025 GMT Subject: CN=05fc5d94c624f8d94c6419bd28fe36ac68acb656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:b8:02:51:d4:00:70:d4:63:a3:f8:c2:ad: 29:e2:3a:06:73:93:1a:b7:39:ac:15:60:f9:8f:bf: 88:7d:1a:a5:36:77:f2:7a:2c:69:aa:7c:a3:21:7a: d0:da:92:b3:7d:fb:00:10:46:f3:83:fb:1f:a3:32: 10:03:04:cd:06:7d:3b:d2:91:90:5e:4c:52:7a:df: 20:a6:0c:f7:6c:ac:0f:5b:03:28:00:13:0c:83:a2: 99:23:8b:b8:56:f9:de:cc:de:2c:8b:01:d1:96:cd: d5:70:99:a4:21:4b:85:d6:fb:8f:33:30:1d:ab:3e: 68:98:bd:52:62:b0:ec:5a:5a:f2:9a:2b:33:fc:d1: 5a:7c:4f:a4:c2:86:b7:18:6f:fa:5c:20:58:4a:34: ec:52:6c:86:e2:7e:28:27:3c:87:0a:41:43:b3:27: 8c:fb:82:dc:df:19:80:81:bc:0a:17:8d:4e:75:c6: b1:fe:ad:8c:ab:97:f7:b3:82:dd:37:d6:ae:e0:f4: 38:c7:6b:7b:d7:1a:26:7e:0a:1e:ce:7e:f2:95:09: 02:cc:e2:1d:de:98:36:44:14:e6:94:d8:e7:c8:fc: 68:28:ca:45:32:26:3f:3a:d9:83:76:6e:a9:98:8e: d4:b8:d3:a7:3c:cb:d9:2a:e7:fb:ba:05:a6:ca:84: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FC:5D:94:C6:24:F8:D9:4C:64:19:BD:28:FE:36:AC:68:AC:B6:56 X509v3 Authority Key Identifier: keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f5:14:35:6f:9d:18:4f:25:9c:2f:95:c5:04:27:9c:7d:74: 3f:cb:26:6f:e2:fa:26:53:7f:2d:25:d2:b0:81:df:a2:7f:d0: c3:ae:b6:b5:ba:62:98:c5:2b:de:cd:5a:01:1b:57:4b:9b:bb: e9:5b:3f:94:9a:73:dc:34:78:e1:f7:ca:a8:c2:c6:64:0b:9f: ed:18:f3:f6:a9:72:72:86:06:58:be:7b:2e:bf:05:d5:69:cf: 53:35:ef:b3:e7:95:89:e8:8f:6b:56:b1:18:94:61:45:c3:ee: 85:d9:7b:73:97:b9:b7:16:c1:47:05:e5:c8:8e:42:ad:f0:2c: 41:ac:14:97:30:13:1c:74:cd:ba:46:ab:e2:dc:26:db:68:bf: e2:09:c2:4c:77:4b:a6:81:f4:0d:f0:17:50:2b:c1:59:43:3f: b2:8e:d4:ed:72:73:35:75:d7:2c:59:50:5e:37:39:9d:25:00: 6a:7c:4f:85:4e:da:56:18:eb:75:53:5f:3e:35:18:8f:c5:97: 4c:ea:c6:c0:10:ce:a4:51:f0:d9:69:9d:0a:68:2c:75:02:ca: a7:34:6e:96:d7:82:8e:85:96:04:34:84:30:70:68:f8:02:59: 16:8a:c0:0f:03:07:62:e2:4f:6b:7e:f4:83:40:0d:68:c0:fd: 20:19:a0:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieO8DXizUhaM3XNQ9iXBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDk1NTBjNWFlNjY0MDAyOTE4NmNmYzlkZWE3NGU5MWE3 YjYxZTcwHhcNMjUxMjI4MDEwMDUxWhcNMjUxMjI5MDEwMDUxWjAzMTEwLwYDVQQD EygwNWZjNWQ5NGM2MjRmOGQ5NGM2NDE5YmQyOGZlMzZhYzY4YWNiNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfS4AlHUAHDUY6P4wq0p4joGc5Ma tzmsFWD5j7+IfRqlNnfyeixpqnyjIXrQ2pKzffsAEEbzg/sfozIQAwTNBn070pGQ XkxSet8gpgz3bKwPWwMoABMMg6KZI4u4VvnezN4siwHRls3VcJmkIUuF1vuPMzAd qz5omL1SYrDsWlrymisz/NFafE+kwoa3GG/6XCBYSjTsUmyG4n4oJzyHCkFDsyeM +4Lc3xmAgbwKF41Odcax/q2Mq5f3s4LdN9au4PQ4x2t71xomfgoezn7ylQkCzOId 3pg2RBTmlNjnyPxoKMpFMiY/OtmDdm6pmI7UuNOnPMvZKuf7ugWmyoRXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX8XZTGJPjZTGQZvSj+NqxorLZWMB8GA1UdIwQY MBaAFGVJVQxa5mQAKRhs/J3qdOkae2HnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUt YTYyZTE4MGNmYmIyLzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUtYTYyZTE4MGNmYmIy LzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPUUNW+d GE8lnC+VxQQnnH10P8smb+L6JlN/LSXSsIHfon/Qw662tbpimMUr3s1aARtXS5u7 6Vs/lJpz3DR44ffKqMLGZAuf7Rjz9qlycoYGWL57Lr8F1WnPUzXvs+eVieiPa1ax GJRhRcPuhdl7c5e5txbBRwXlyI5CrfAsQawUlzATHHTNukar4twm22i/4gnCTHdL poH0DfAXUCvBWUM/so7U7XJzNXXXLFlQXjc5nSUAanxPhU7aVhjrdVNfPjUYj8WX TOrGwBDOpFHw2WmdCmgsdQLKpzRulteCjoWWBDSEMHBo+AJZForADwMHYuJPa370 g0ANaMD9IBmg2Q== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:43 2025 by rpki-client