This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json) Hash identifier: Do7O+RYKIo+6EyUU6U9+2pANxSBXdKllaVmhZgbgacM= Subject key identifier: 12:BD:66:A1:38:D7:10:DA:52:DC:38:21:20:35:8E:7C:12:05:78:0F Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Certificate serial: 019AF2769A12083007EB8CB84E09C7E90DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft Manifest number: 0301 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=) 2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: 5i4/jbuZYFp8UHz4Kg1hi8W6o/A5ejRjO9FOVyW0ncg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9a:12:08:30:07:eb:8c:b8:4e:09:c7:e9:0d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=12bd66a138d710da52dc382120358e7c1205780f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:33:fd:f9:e3:9e:fc:51:87:23:4c:fb:d3: f6:35:d0:33:de:36:a8:d5:a0:18:21:fd:e5:10:74: 1f:1e:b4:95:5c:3c:63:29:29:93:3d:b0:fe:7d:eb: 09:87:15:8f:e1:13:97:25:bd:fb:9f:ae:cb:49:33: 06:07:cd:42:11:42:fd:c4:4b:3f:6e:a7:ce:cd:db: 8c:ef:2b:9b:49:31:9b:f8:2d:e6:14:88:38:14:b1: 89:f0:79:6e:cd:61:c7:88:11:23:f4:f1:5a:d8:ae: 4b:25:55:f8:a1:99:98:18:1a:16:07:dd:67:f8:11: 86:80:f6:0f:d4:81:4a:69:e4:d3:46:e8:8d:bd:10: b9:c9:a3:f4:7e:ba:99:c2:e6:fd:2a:b1:73:16:bb: b4:8e:97:9b:3f:cd:85:f9:5a:6c:be:80:21:66:43: c9:0f:11:b9:14:d8:e5:e8:38:2f:98:e6:07:98:0f: de:1c:86:f3:db:69:a1:12:6f:a6:6a:9b:b9:19:38: ce:65:19:9c:98:74:0d:74:22:12:13:88:44:0a:fc: 71:12:6e:fe:d5:77:c0:4a:08:4d:9e:43:7a:50:75: aa:ef:1c:c9:01:4e:c5:2d:0b:1a:fb:5f:61:42:73: 07:50:c3:06:f7:32:d8:dd:cc:26:ed:f3:d3:ce:30: f8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BD:66:A1:38:D7:10:DA:52:DC:38:21:20:35:8E:7C:12:05:78:0F X509v3 Authority Key Identifier: keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:66:ae:ab:dd:89:b9:0d:f9:1d:71:0d:13:f1:f3:b7:6d:2e: 51:06:6d:64:8b:72:06:6b:bc:b3:09:ed:71:f1:84:ed:fa:10: 67:8d:8d:a5:8f:1d:b3:93:77:80:65:df:c8:b5:2b:bf:71:28: 45:f5:76:9d:db:7b:92:73:ea:b3:ef:7f:16:b5:3a:2b:ba:8e: 4b:fe:5e:9f:84:7f:1a:27:42:dd:42:8b:1d:e5:f5:30:ce:06: 53:20:0f:65:d0:b9:76:0b:10:fe:3e:7a:b2:3d:80:04:c2:b0: 3e:38:50:a1:46:60:b7:b2:5a:1a:b6:fa:d8:0b:31:52:fa:cb: 10:9b:1e:c2:e6:6c:81:d9:7c:aa:34:01:3d:97:de:a6:2e:c3: 2f:c1:a5:5e:c8:77:01:37:35:bb:07:dd:85:43:a9:18:1e:65: 5a:aa:4d:2d:f3:da:c1:3c:f5:51:b4:2b:b7:ea:bc:de:98:b2: c9:7f:b4:1a:26:06:d4:24:58:13:ac:20:89:59:1d:b7:bf:90: 37:c6:1e:48:e0:23:bb:b1:86:56:b7:b1:b4:02:ca:e7:d3:76: c2:25:ed:7c:d7:26:6a:7a:ad:ce:91:93:fe:cb:48:07:9d:28: 88:49:4c:21:92:11:f9:9b:26:43:a3:fd:74:74:4a:fe:f3:5f: 0b:35:6c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpoSCDAH64y4TgnH6Q3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NTQ5MDNhYjQ4NWIxNmNjYTg2MmQxNWU2ZDkzZmJhMGU0 ZGRlMDEwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygxMmJkNjZhMTM4ZDcxMGRhNTJkYzM4MjEyMDM1OGU3YzEyMDU3ODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVgz/fnjnvxRhyNM+9P2NdAz3jao 1aAYIf3lEHQfHrSVXDxjKSmTPbD+fesJhxWP4ROXJb37n67LSTMGB81CEUL9xEs/ bqfOzduM7yubSTGb+C3mFIg4FLGJ8HluzWHHiBEj9PFa2K5LJVX4oZmYGBoWB91n +BGGgPYP1IFKaeTTRuiNvRC5yaP0frqZwub9KrFzFru0jpebP82F+VpsvoAhZkPJ DxG5FNjl6DgvmOYHmA/eHIbz22mhEm+mapu5GTjOZRmcmHQNdCISE4hECvxxEm7+ 1XfASghNnkN6UHWq7xzJAU7FLQsa+19hQnMHUMMG9zLY3cwm7fPTzjD4BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK9ZqE41xDaUtw4ISA1jnwSBXgPMB8GA1UdIwQY MBaAFGRUkDq0hbFsyoYtFebZP7oOTd4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjIt MDY1NmQwYjM0YjI0LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjItMDY1NmQwYjM0YjI0 LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGauq92J uQ35HXENE/Hzt20uUQZtZItyBmu8swntcfGE7foQZ42NpY8ds5N3gGXfyLUrv3Eo RfV2ndt7knPqs+9/FrU6K7qOS/5en4R/GidC3UKLHeX1MM4GUyAPZdC5dgsQ/j56 sj2ABMKwPjhQoUZgt7JaGrb62AsxUvrLEJsewuZsgdl8qjQBPZfepi7DL8GlXsh3 ATc1uwfdhUOpGB5lWqpNLfPawTz1UbQrt+q83piyyX+0GiYG1CRYE6wgiVkdt7+Q N8YeSOAju7GGVrextALK59N2wiXtfNcmanqtzpGT/stIB50oiElMIZIR+ZsmQ6P9 dHRK/vNfCzVs6g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:19 2025 by rpki-client