This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json) Hash identifier: qu8n6L+y6K7hjZsBSKUrgx9eWfU9wzedqxqnfgX2Nns= Subject key identifier: D0:4E:B9:47:84:7E:70:33:2B:D8:07:9D:F7:FE:FA:87:A9:1C:2A:F1 Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b Certificate serial: 019B274042E3E0C87F8EA877693842A461B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft Manifest number: 0DD2 Signing time: Tue 16 Dec 2025 13:01:21 +0000 Manifest this update: Tue 16 Dec 2025 13:01:21 +0000 Manifest next update: Wed 17 Dec 2025 13:01:21 +0000 Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: WpmexcqhHHrySXzCYuPOY87ZL7DVZr+pPENaWJjwL5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:42:e3:e0:c8:7f:8e:a8:77:69:38:42:a4:61:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b Validity Not Before: Dec 16 13:01:21 2025 GMT Not After : Dec 17 13:01:21 2025 GMT Subject: CN=d04eb947847e70332bd8079df7fefa87a91c2af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6d:ae:d4:ef:d8:ed:2c:c0:52:7c:47:8b:dc: 77:a6:09:75:2a:6d:6d:a6:2e:51:b1:c9:95:5f:6e: ed:ae:5a:53:9e:2a:41:34:00:dc:e6:a3:cd:29:36: 4f:91:71:07:94:1b:41:7e:3d:39:df:76:7c:c1:58: 9b:b1:ce:19:85:78:64:55:00:05:9a:45:b6:b6:f6: 73:ac:02:8c:c0:ea:76:cc:8b:d6:7b:6d:98:8b:e9: b8:60:a0:6f:7b:8c:25:4c:00:a1:be:f7:68:c6:f3: 54:ea:df:26:4c:12:9b:93:aa:1f:de:9d:9f:73:c6: 92:42:20:fc:13:51:a7:24:77:c3:b9:f0:00:00:84: 75:83:8b:1b:4c:f0:f5:e7:9a:1c:45:cd:e2:51:9f: 43:97:b7:49:24:40:9e:a3:82:3f:7d:e4:bb:04:b0: f6:54:5d:e9:90:7a:bd:d8:43:af:db:53:e1:89:61: 1c:e1:07:65:27:84:e0:76:13:f9:e3:6c:5b:5a:e0: 78:6c:bb:a2:ea:ed:94:a0:c1:4b:2b:9b:44:8e:d2: 54:38:dd:d6:d8:36:2a:91:19:19:5d:6a:17:8b:15: 3f:9f:1c:f3:1f:ce:29:25:0d:04:ca:f0:dc:95:fa: 60:36:0a:b6:5f:ba:15:85:97:08:7d:93:bd:2c:be: c7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4E:B9:47:84:7E:70:33:2B:D8:07:9D:F7:FE:FA:87:A9:1C:2A:F1 X509v3 Authority Key Identifier: keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5d:d1:07:6c:38:cf:82:42:52:b5:d2:8f:1e:8c:9d:af:ce: 2f:37:03:8c:58:94:c3:b2:21:d1:2d:ef:cc:21:c4:bc:83:7f: e1:06:b5:75:c4:5f:40:69:00:6d:2f:ad:a3:16:6b:9b:ee:6e: eb:d9:d7:96:33:b3:f6:9f:76:55:af:bb:1b:13:8a:ff:94:6c: 3c:2c:0d:25:a9:5d:bd:20:73:97:7e:88:0a:4f:5e:ee:c2:2e: ff:94:3c:0a:17:1a:5f:c1:84:ea:be:c6:4d:15:7a:c1:e4:9c: b5:4a:a8:30:1a:01:4f:dd:f9:0c:ae:91:b1:00:59:36:31:b2: 5e:e2:28:3d:93:94:22:65:bd:89:43:67:fb:b7:ab:3f:5d:66: 5f:04:67:e0:ab:ba:bc:22:85:6a:9b:3a:e4:ea:de:8d:5e:d8: b1:ca:53:84:cf:10:11:bd:47:8e:00:52:2d:06:01:f6:e6:09: a4:73:48:6a:9d:72:47:66:a8:c9:ad:d3:88:d0:d7:6a:a9:21: 2a:58:b8:20:c4:2a:27:59:43:2c:97:8c:52:20:a2:fe:32:38: c5:c8:78:9d:7d:7e:c9:2f:2d:8a:d7:aa:c5:a0:2d:51:e2:e5: 9d:5b:3b:16:4d:27:9f:2c:c7:1c:d3:8e:48:0e:e3:20:5d:c0: cf:f6:3c:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQELj4Mh/jqh3aThCpGG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj MTc2M2IwHhcNMjUxMjE2MTMwMTIxWhcNMjUxMjE3MTMwMTIxWjAzMTEwLwYDVQQD EyhkMDRlYjk0Nzg0N2U3MDMzMmJkODA3OWRmN2ZlZmE4N2E5MWMyYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G2u1O/Y7SzAUnxHi9x3pgl1Km1t pi5RscmVX27trlpTnipBNADc5qPNKTZPkXEHlBtBfj0533Z8wVibsc4ZhXhkVQAF mkW2tvZzrAKMwOp2zIvWe22Yi+m4YKBve4wlTAChvvdoxvNU6t8mTBKbk6of3p2f c8aSQiD8E1GnJHfDufAAAIR1g4sbTPD155ocRc3iUZ9Dl7dJJECeo4I/feS7BLD2 VF3pkHq92EOv21PhiWEc4QdlJ4TgdhP542xbWuB4bLui6u2UoMFLK5tEjtJUON3W 2DYqkRkZXWoXixU/nxzzH84pJQ0EyvDclfpgNgq2X7oVhZcIfZO9LL7HQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBOuUeEfnAzK9gHnff++oepHCrxMB8GA1UdIwQY MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0 LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo13RB2w4 z4JCUrXSjx6Mna/OLzcDjFiUw7Ih0S3vzCHEvIN/4Qa1dcRfQGkAbS+toxZrm+5u 69nXljOz9p92Va+7GxOK/5RsPCwNJaldvSBzl36ICk9e7sIu/5Q8ChcaX8GE6r7G TRV6weSctUqoMBoBT935DK6RsQBZNjGyXuIoPZOUImW9iUNn+7erP11mXwRn4Ku6 vCKFaps65OrejV7YscpThM8QEb1HjgBSLQYB9uYJpHNIap1yR2aoya3TiNDXaqkh Kli4IMQqJ1lDLJeMUiCi/jI4xch4nX1+yS8titeqxaAtUeLlnVs7Fk0nnyzHHNOO SA7jIF3Az/Y84Q== -----END CERTIFICATE-----Generated at Tue Dec 16 23:19:50 2025 by rpki-client