This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json) Hash identifier: rWJ+b0uka+D89y/PGfp7m7H4OENqohQLlO5CA+XoEVE= Subject key identifier: B2:CE:43:C4:99:0B:86:5E:50:3A:09:C0:B4:E9:38:D5:5F:C2:ED:69 Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Certificate serial: 019B2C66D4B36E045C61C18F0135100F6260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft Manifest number: 031F Signing time: Wed 17 Dec 2025 13:01:35 +0000 Manifest this update: Wed 17 Dec 2025 13:01:35 +0000 Manifest next update: Thu 18 Dec 2025 13:01:35 +0000 Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=) 2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: pXmOA2Cyk2Iy8FcPo2KeEszwfaIYfoKnWYC5Mg/KXlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:d4:b3:6e:04:5c:61:c1:8f:01:35:10:0f:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Validity Not Before: Dec 17 13:01:35 2025 GMT Not After : Dec 18 13:01:35 2025 GMT Subject: CN=b2ce43c4990b865e503a09c0b4e938d55fc2ed69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:56:d6:55:ac:d6:bb:c3:24:1b:a0:fe:fe: 24:a6:52:69:14:47:f2:de:70:be:ce:7f:c2:74:bd: 17:fe:cc:3c:56:a8:a6:f7:a9:18:32:9c:5b:bc:1d: ce:9e:90:c5:b3:ee:1a:fe:6d:8b:4d:4f:e3:dc:8d: ed:ce:cf:a1:27:c5:d2:fc:ec:bd:30:5b:8a:6d:12: 78:d9:2b:c6:0a:c9:b5:67:d5:7e:77:61:b7:83:a4: fc:1c:72:3e:6f:88:c5:f2:d9:88:ce:3b:89:a2:19: 2a:94:db:3b:d0:72:ff:64:bf:26:28:f7:92:80:26: 87:0a:29:65:2b:75:fa:9f:f5:b0:1a:e1:5d:d1:a5: cc:0f:7e:21:cd:f6:d8:8c:df:e1:5d:8a:73:9f:3b: 61:0a:e6:92:ad:d7:1f:57:21:11:ec:9d:13:78:bf: bc:58:84:39:6f:5b:57:cd:29:d6:a4:a4:8f:1f:ab: 5c:1e:7a:a7:1a:64:3d:4c:02:f4:57:cb:f6:d4:1b: 4f:00:65:27:85:1e:04:02:78:bd:c5:8e:12:67:e3: 59:5f:cf:15:eb:d1:c1:c1:49:1f:59:02:e3:10:a3: 1e:e1:df:ee:69:ba:fc:f1:0c:5a:ff:18:34:8c:94: 2c:f8:79:4f:48:16:63:a1:1f:d6:e7:d1:00:a3:5d: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CE:43:C4:99:0B:86:5E:50:3A:09:C0:B4:E9:38:D5:5F:C2:ED:69 X509v3 Authority Key Identifier: keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:86:f6:d3:58:98:d6:f3:65:e7:69:75:94:16:d7:89:e7:aa: fc:a8:42:38:3d:0f:80:ad:23:c6:34:b7:06:d9:4c:a7:3b:16: eb:bf:7f:f2:9a:27:3c:34:82:97:9e:b1:6a:2e:91:00:59:56: b5:3d:66:41:ff:21:ea:3e:94:3b:0d:e0:f8:07:8e:ce:e7:ca: aa:0c:e3:70:ab:8a:97:da:bb:ea:ce:50:df:bf:fb:38:8b:01: 95:95:11:a6:e5:07:aa:be:d0:22:39:0a:5d:b0:0b:af:b0:bf: 8b:67:ff:dc:e2:a2:17:9a:10:9b:f5:56:77:bb:22:ee:8b:be: 72:1c:2d:a3:d0:34:97:13:9a:fc:aa:04:86:ea:6a:84:d2:be: c0:6e:21:7e:da:71:d6:b2:ad:45:95:8c:df:1f:63:4e:07:de: 31:a6:cf:e9:ef:eb:98:fb:a3:79:82:c0:1e:b3:5a:30:ce:77: 13:1a:7b:af:11:fd:50:fc:e1:3e:2a:a2:77:2f:6f:18:8b:27: 56:0d:9e:63:40:22:3f:95:90:32:c8:cd:96:6d:df:fd:ca:c0: 56:09:c4:f0:20:61:77:c9:8e:69:3d:5e:e7:68:c7:56:33:03: 10:e8:c7:90:c2:f7:1c:25:d7:ce:43:ce:ba:cd:ca:54:7c:04: 41:96:c1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZtSzbgRcYcGPATUQD2JgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NTQ5MDNhYjQ4NWIxNmNjYTg2MmQxNWU2ZDkzZmJhMGU0 ZGRlMDEwHhcNMjUxMjE3MTMwMTM1WhcNMjUxMjE4MTMwMTM1WjAzMTEwLwYDVQQD EyhiMmNlNDNjNDk5MGI4NjVlNTAzYTA5YzBiNGU5MzhkNTVmYzJlZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAlW1lWs1rvDJBug/v4kplJpFEfy 3nC+zn/CdL0X/sw8Vqim96kYMpxbvB3OnpDFs+4a/m2LTU/j3I3tzs+hJ8XS/Oy9 MFuKbRJ42SvGCsm1Z9V+d2G3g6T8HHI+b4jF8tmIzjuJohkqlNs70HL/ZL8mKPeS gCaHCillK3X6n/WwGuFd0aXMD34hzfbYjN/hXYpznzthCuaSrdcfVyER7J0TeL+8 WIQ5b1tXzSnWpKSPH6tcHnqnGmQ9TAL0V8v21BtPAGUnhR4EAni9xY4SZ+NZX88V 69HBwUkfWQLjEKMe4d/uabr88Qxa/xg0jJQs+HlPSBZjoR/W59EAo123YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLOQ8SZC4ZeUDoJwLTpONVfwu1pMB8GA1UdIwQY MBaAFGRUkDq0hbFsyoYtFebZP7oOTd4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjIt MDY1NmQwYjM0YjI0LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjItMDY1NmQwYjM0YjI0 LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYb201iY 1vNl52l1lBbXieeq/KhCOD0PgK0jxjS3BtlMpzsW679/8ponPDSCl56xai6RAFlW tT1mQf8h6j6UOw3g+AeOzufKqgzjcKuKl9q76s5Q37/7OIsBlZURpuUHqr7QIjkK XbALr7C/i2f/3OKiF5oQm/VWd7si7ou+chwto9A0lxOa/KoEhupqhNK+wG4hftpx 1rKtRZWM3x9jTgfeMabP6e/rmPujeYLAHrNaMM53Exp7rxH9UPzhPiqidy9vGIsn Vg2eY0AiP5WQMsjNlm3f/crAVgnE8CBhd8mOaT1e52jHVjMDEOjHkML3HCXXzkPO us3KVHwEQZbBFQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:47:17 2025 by rpki-client