This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json) Hash identifier: 8iHGY7Mst7JOJt77SwsssrUxAAw5S5DuNrwLPBEZJGE= Subject key identifier: 33:EA:88:5F:D7:C0:1C:A6:7E:CA:B1:9C:C7:49:21:70:F0:BE:0C:35 Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Certificate serial: 019B24AD28718A5FBE3688C55A6DCB6F8628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft Manifest number: 031B Signing time: Tue 16 Dec 2025 01:01:26 +0000 Manifest this update: Tue 16 Dec 2025 01:01:26 +0000 Manifest next update: Wed 17 Dec 2025 01:01:26 +0000 Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=) 2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: Ek9nx1RaT6DiNXHC8CGdRpUNBKpQQmI7mXWNZl62w10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ad:28:71:8a:5f:be:36:88:c5:5a:6d:cb:6f:86:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Validity Not Before: Dec 16 01:01:26 2025 GMT Not After : Dec 17 01:01:26 2025 GMT Subject: CN=33ea885fd7c01ca67ecab19cc7492170f0be0c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:02:9f:b2:65:f5:b2:23:3f:5f:43:da:2a: 42:39:6c:a1:29:49:9e:7b:b5:b0:71:ca:43:37:93: 9e:df:2c:ea:ab:e3:55:09:bb:db:e1:4f:33:15:0d: db:df:06:40:0a:bc:0b:99:44:b9:a0:3d:b4:44:a6: 8e:94:1d:af:ab:3b:cf:ec:78:47:a5:22:ff:b8:e8: ed:17:d6:16:a4:f2:f0:81:ca:e5:26:0c:dc:99:f2: fa:9f:9e:df:5d:f6:b0:ca:c8:28:d5:15:6f:c1:0c: c6:ef:fd:2d:7b:c6:d7:66:a0:e2:95:03:0e:3c:d0: e0:3b:f6:43:1a:2f:af:3e:20:42:63:8a:5a:64:0b: 01:60:a5:af:fa:69:05:f2:e7:36:c6:dc:32:dd:99: fb:17:d2:3a:44:06:2b:10:a1:b3:c3:59:44:e8:3d: 1f:1d:e1:23:fd:10:06:2a:75:b9:3a:26:19:a5:96: 51:47:a9:1d:d1:bb:0c:60:d9:d2:17:47:9e:b5:a8: 6f:89:92:6b:15:ef:e1:bc:dd:68:fb:8d:8c:da:52: 9f:9f:88:b6:36:33:75:43:d5:d1:ed:51:be:86:76: 60:68:1c:0b:39:46:89:cd:b1:cf:e9:ba:a8:fd:1e: be:68:28:09:09:e9:29:4c:5f:be:53:96:9e:f1:8d: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EA:88:5F:D7:C0:1C:A6:7E:CA:B1:9C:C7:49:21:70:F0:BE:0C:35 X509v3 Authority Key Identifier: keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2d:91:a9:7b:90:d1:1b:12:48:5b:64:6f:e8:d9:1c:b1:16: ff:7d:51:db:02:ae:b1:ec:f4:85:f8:7b:9c:5a:fd:6b:4b:1c: b1:51:76:79:ae:d3:08:ae:ac:ea:b1:38:95:31:ed:80:ed:3b: 2d:26:3d:5d:47:db:3c:ed:c4:a2:08:8c:77:b8:ba:b2:b7:8d: 70:41:6d:26:23:e1:4d:72:3c:b2:49:60:9f:24:a3:50:e8:e3: 39:0f:93:1c:85:96:90:7e:d5:e8:d9:36:a7:87:4e:2c:40:f9: 3d:09:c1:02:0e:4b:c0:05:49:13:cc:2e:29:dc:88:19:a4:cd: 86:5e:4f:2e:56:b0:62:06:19:b2:88:2c:12:d6:99:52:12:f7: 68:74:47:eb:cb:b8:24:b9:51:9f:0a:09:1c:8a:38:9d:04:37: 34:b0:ff:60:a2:73:e4:0e:bd:49:a0:27:7d:90:81:f7:cd:90: 08:bb:4b:b9:78:0a:97:f7:40:2a:55:59:72:14:d8:c5:59:c1: d5:2f:c8:89:4d:1a:2e:82:ee:d1:3f:9a:b7:95:3e:1c:20:87: 74:45:04:92:52:96:4b:95:fa:09:ba:8b:85:7d:4b:99:88:2d: 21:90:ad:52:1a:7a:fb:ed:39:1b:37:44:b2:6a:96:57:79:2c: dc:07:ad:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrShxil++NojFWm3Lb4YoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NTQ5MDNhYjQ4NWIxNmNjYTg2MmQxNWU2ZDkzZmJhMGU0 ZGRlMDEwHhcNMjUxMjE2MDEwMTI2WhcNMjUxMjE3MDEwMTI2WjAzMTEwLwYDVQQD EygzM2VhODg1ZmQ3YzAxY2E2N2VjYWIxOWNjNzQ5MjE3MGYwYmUwYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOICn7Jl9bIjP19D2ipCOWyhKUme e7WwccpDN5Oe3yzqq+NVCbvb4U8zFQ3b3wZACrwLmUS5oD20RKaOlB2vqzvP7HhH pSL/uOjtF9YWpPLwgcrlJgzcmfL6n57fXfawysgo1RVvwQzG7/0te8bXZqDilQMO PNDgO/ZDGi+vPiBCY4paZAsBYKWv+mkF8uc2xtwy3Zn7F9I6RAYrEKGzw1lE6D0f HeEj/RAGKnW5OiYZpZZRR6kd0bsMYNnSF0eetahviZJrFe/hvN1o+42M2lKfn4i2 NjN1Q9XR7VG+hnZgaBwLOUaJzbHP6bqo/R6+aCgJCekpTF++U5ae8Y0v2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPqiF/XwBymfsqxnMdJIXDwvgw1MB8GA1UdIwQY MBaAFGRUkDq0hbFsyoYtFebZP7oOTd4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjIt MDY1NmQwYjM0YjI0LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjItMDY1NmQwYjM0YjI0 LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmS2RqXuQ 0RsSSFtkb+jZHLEW/31R2wKusez0hfh7nFr9a0scsVF2ea7TCK6s6rE4lTHtgO07 LSY9XUfbPO3EogiMd7i6sreNcEFtJiPhTXI8sklgnySjUOjjOQ+THIWWkH7V6Nk2 p4dOLED5PQnBAg5LwAVJE8wuKdyIGaTNhl5PLlawYgYZsogsEtaZUhL3aHRH68u4 JLlRnwoJHIo4nQQ3NLD/YKJz5A69SaAnfZCB982QCLtLuXgKl/dAKlVZchTYxVnB 1S/IiU0aLoLu0T+at5U+HCCHdEUEklKWS5X6CbqLhX1LmYgtIZCtUhp6++05GzdE smqWV3ks3AetYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:25 2025 by rpki-client