This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json) Hash identifier: G3i7fvppm8zqlYkY3piemyQcokOKOIdjZzrQR+lh9Rs= Subject key identifier: A2:E8:28:56:E9:CB:E7:E7:BC:AC:BD:6C:31:4D:CC:85:6E:D8:2A:D4 Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b Certificate serial: 019B19BB724D94ECB50425F8C5278EC51643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft Manifest number: 0DCB Signing time: Sat 13 Dec 2025 22:01:13 +0000 Manifest this update: Sat 13 Dec 2025 22:01:13 +0000 Manifest next update: Sun 14 Dec 2025 22:01:13 +0000 Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: Zw/TlESXWzsfmxXgBfEPozlnouFt7tlW8QqKkcvL4UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:72:4d:94:ec:b5:04:25:f8:c5:27:8e:c5:16:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b Validity Not Before: Dec 13 22:01:13 2025 GMT Not After : Dec 14 22:01:13 2025 GMT Subject: CN=a2e82856e9cbe7e7bcacbd6c314dcc856ed82ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:8c:c8:f9:2d:45:53:27:35:0d:58:fe:01: a3:01:bf:63:16:1e:b3:7c:50:e5:73:10:29:02:e0: 42:43:3a:27:3c:de:d1:0c:bf:3d:0f:b3:a6:62:90: 37:3f:c0:ea:a4:4a:13:73:fa:a2:4f:3e:08:be:66: 1d:fe:02:88:5b:8e:71:7c:73:e9:40:ff:f4:fe:53: 26:b3:6c:56:77:c0:0a:32:42:78:d2:bb:b4:d3:4b: 6b:8e:87:40:7e:a2:06:d9:56:46:63:b3:34:af:c6: 4d:ae:e3:3b:92:44:dd:7a:4c:ad:54:c8:e5:9b:f5: e5:49:f6:59:76:5f:c2:26:fa:d4:95:1f:ef:ce:b9: 60:48:60:6b:3a:17:c2:77:6b:61:cf:02:37:f8:ea: ee:e5:92:06:81:76:62:ee:0c:26:81:80:d6:70:7d: 16:12:4b:e0:9f:b8:be:00:08:0f:6f:19:c3:94:55: 86:00:39:af:9f:24:78:7b:24:ef:18:dc:91:49:bb: 15:c3:a7:77:1b:c8:25:16:79:d6:aa:78:b8:ff:09: f0:c0:87:86:66:0c:fb:8e:cc:12:ee:68:36:d5:fa: f5:72:b1:98:c8:20:d9:a7:38:77:cd:a7:ad:94:f5: 85:1d:d2:65:a2:e2:35:a1:15:c3:8b:b4:c6:7f:a0: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E8:28:56:E9:CB:E7:E7:BC:AC:BD:6C:31:4D:CC:85:6E:D8:2A:D4 X509v3 Authority Key Identifier: keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2f:ad:26:42:74:d5:bc:fb:aa:bf:24:e6:9b:b1:11:6c:97: c3:df:17:5d:eb:cc:3a:4b:91:68:d9:f6:f8:c3:d8:35:99:1d: cb:2b:db:f3:5d:5c:1f:a4:36:90:f7:22:5f:78:ae:52:63:67: 07:fa:f5:62:b2:21:d6:17:98:c6:41:35:98:ae:c0:0d:0a:e8: da:96:00:40:3f:1f:eb:e7:4d:e1:51:92:0e:f5:d2:4f:4e:79: cb:20:4e:70:43:02:6a:0c:98:cd:4e:1c:11:77:b8:68:45:19: 2d:11:e5:20:67:a6:a0:c8:af:f8:f3:92:80:6a:38:e8:62:42: e8:91:4c:6e:69:a2:9e:93:ce:61:74:24:b0:71:23:a0:01:6a: 5d:ae:f8:81:76:77:05:6d:5a:cb:4b:af:f4:49:f6:60:43:19: 2b:eb:06:1d:cc:08:b8:ae:52:00:c9:26:97:86:65:03:5e:9f: d7:d1:ce:d3:b7:ea:ce:df:a5:cc:7b:67:fe:5a:08:18:8c:7e: 2e:ea:bc:47:fd:d2:c4:ae:6d:4c:80:48:f4:b0:8e:87:69:bc: 09:03:8d:86:7d:87:c8:ca:68:c6:0e:61:87:f8:39:a2:49:a5: 3b:e7:e1:84:de:95:19:d5:f3:57:94:d1:8e:0a:e2:51:35:a0: 6b:48:88:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu3JNlOy1BCX4xSeOxRZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj MTc2M2IwHhcNMjUxMjEzMjIwMTEzWhcNMjUxMjE0MjIwMTEzWjAzMTEwLwYDVQQD EyhhMmU4Mjg1NmU5Y2JlN2U3YmNhY2JkNmMzMTRkY2M4NTZlZDgyYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvCMyPktRVMnNQ1Y/gGjAb9jFh6z fFDlcxApAuBCQzonPN7RDL89D7OmYpA3P8DqpEoTc/qiTz4IvmYd/gKIW45xfHPp QP/0/lMms2xWd8AKMkJ40ru000trjodAfqIG2VZGY7M0r8ZNruM7kkTdekytVMjl m/XlSfZZdl/CJvrUlR/vzrlgSGBrOhfCd2thzwI3+Oru5ZIGgXZi7gwmgYDWcH0W Ekvgn7i+AAgPbxnDlFWGADmvnyR4eyTvGNyRSbsVw6d3G8glFnnWqni4/wnwwIeG Zgz7jswS7mg21fr1crGYyCDZpzh3zaetlPWFHdJlouI1oRXDi7TGf6AVawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLoKFbpy+fnvKy9bDFNzIVu2CrUMB8GA1UdIwQY MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0 LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS+tJkJ0 1bz7qr8k5puxEWyXw98XXevMOkuRaNn2+MPYNZkdyyvb811cH6Q2kPciX3iuUmNn B/r1YrIh1heYxkE1mK7ADQro2pYAQD8f6+dN4VGSDvXST055yyBOcEMCagyYzU4c EXe4aEUZLRHlIGemoMiv+POSgGo46GJC6JFMbmminpPOYXQksHEjoAFqXa74gXZ3 BW1ay0uv9En2YEMZK+sGHcwIuK5SAMkml4ZlA16f19HO07fqzt+lzHtn/loIGIx+ Luq8R/3SxK5tTIBI9LCOh2m8CQONhn2HyMpoxg5hh/g5okmlO+fhhN6VGdXzV5TR jgriUTWga0iInw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:18 2025 by rpki-client