This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json) Hash identifier: bI5Bfl4K5CP7j7pPHBFhKumI9hKEvmlW9lmSjQKNTIk= Subject key identifier: 9B:6F:59:55:2B:35:97:FE:35:31:0C:0F:F4:22:72:43:10:6F:65:32 Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b Certificate serial: 019AF12D4E1D04EB46E41E6C2E524F5CDE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft Manifest number: 0DB6 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: jhzr/t2/ZQYThZsSCJIrBBSkFIyDPK3R6QqIlPjGjmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4e:1d:04:eb:46:e4:1e:6c:2e:52:4f:5c:de:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=9b6f59552b3597fe35310c0ff4227243106f6532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:7a:c7:20:2f:70:da:c9:27:cf:ee:3c:45: ff:04:91:43:7a:cd:9a:e6:7d:b9:95:c9:ce:92:ab: 84:8a:25:2f:d9:77:4e:05:0c:86:18:d9:73:14:39: cf:65:ae:44:bb:3d:2e:2d:0e:72:85:18:2c:ed:c6: ec:90:8b:cc:9f:51:09:b0:a6:c5:37:9f:8a:a8:d5: 11:2d:3b:fa:df:c2:2e:96:03:b8:5b:74:4e:2a:bc: 4a:76:83:b7:1d:57:31:0a:75:10:6b:6e:37:f7:3e: 28:b7:44:1c:d2:00:fa:ce:5d:f8:42:b8:98:e2:f1: b2:4f:08:7e:a5:9b:e3:bf:cd:e3:7e:d2:b2:cb:20: 8e:ac:07:b1:5a:08:60:ca:39:5a:fa:4e:df:7e:67: 89:e8:58:76:67:80:fc:37:fa:aa:0d:93:d5:fe:ae: a5:e3:ad:fa:af:f8:5e:33:2e:d2:53:14:2f:24:68: 31:ab:f0:aa:7c:85:24:88:15:c7:32:ed:ad:7c:ff: cc:83:d5:7f:d7:9a:24:d9:cf:d9:b6:6b:04:be:98: 85:c5:5f:f9:ce:d0:8f:78:49:7c:35:a3:22:9a:2e: 20:e1:28:9d:49:32:e5:29:74:be:61:dc:5a:d1:26: 53:88:6b:f2:e1:a1:cc:61:bb:50:42:52:44:66:51: 0a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6F:59:55:2B:35:97:FE:35:31:0C:0F:F4:22:72:43:10:6F:65:32 X509v3 Authority Key Identifier: keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ca:8e:6c:e0:ab:db:4a:22:dc:36:40:f8:1e:4b:40:c5:6c: 73:16:72:0c:ac:f7:0c:ad:a4:8d:07:cd:cb:6e:2e:f9:8b:c3: b7:56:e2:e5:b7:92:01:b7:06:00:12:00:6a:3b:eb:28:ac:9d: d5:6b:12:5d:02:58:74:2e:ea:cb:e0:85:17:03:6b:22:02:87: 8e:a1:5f:29:7a:10:88:a6:75:46:44:f6:4d:98:74:02:40:61: 38:d3:4a:b5:0c:8d:fe:b8:c7:20:d1:dc:ef:ae:26:8f:1e:f6: 5f:5b:4e:45:5a:9f:15:ff:a7:ae:bd:50:8a:18:b2:fc:4c:ad: ea:94:2b:3c:58:7c:ae:de:e4:4e:ab:86:a8:4e:98:78:b6:6b: 25:6e:5c:77:ea:65:2c:8b:f5:e8:b5:06:14:7d:9e:ee:bf:c8: fd:5c:55:c3:58:f3:7e:8e:5a:dc:24:bc:5f:a7:1a:6b:ee:f2: e1:b9:7c:a3:8c:00:7f:79:42:10:fa:2d:fe:7e:a7:84:0e:25: d8:03:27:ea:4f:95:61:63:0b:f7:ab:6f:a2:d3:47:ca:0c:5c: 1c:49:a3:53:e0:c4:bf:52:be:05:4b:4b:f9:1d:70:71:db:42: 83:86:12:b2:cf:fb:07:d4:a5:92:1c:24:3d:d0:28:3d:e6:71: 56:14:5c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU4dBOtG5B5sLlJPXN5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj MTc2M2IwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD Eyg5YjZmNTk1NTJiMzU5N2ZlMzUzMTBjMGZmNDIyNzI0MzEwNmY2NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTR6xyAvcNrJJ8/uPEX/BJFDes2a 5n25lcnOkquEiiUv2XdOBQyGGNlzFDnPZa5Euz0uLQ5yhRgs7cbskIvMn1EJsKbF N5+KqNURLTv638IulgO4W3ROKrxKdoO3HVcxCnUQa2439z4ot0Qc0gD6zl34QriY 4vGyTwh+pZvjv83jftKyyyCOrAexWghgyjla+k7ffmeJ6Fh2Z4D8N/qqDZPV/q6l 4636r/heMy7SUxQvJGgxq/CqfIUkiBXHMu2tfP/Mg9V/15ok2c/ZtmsEvpiFxV/5 ztCPeEl8NaMimi4g4SidSTLlKXS+Ydxa0SZTiGvy4aHMYbtQQlJEZlEKoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtvWVUrNZf+NTEMD/QickMQb2UyMB8GA1UdIwQY MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0 LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsqObOCr 20oi3DZA+B5LQMVscxZyDKz3DK2kjQfNy24u+YvDt1bi5beSAbcGABIAajvrKKyd 1WsSXQJYdC7qy+CFFwNrIgKHjqFfKXoQiKZ1RkT2TZh0AkBhONNKtQyN/rjHINHc 764mjx72X1tORVqfFf+nrr1Qihiy/Eyt6pQrPFh8rt7kTquGqE6YeLZrJW5cd+pl LIv16LUGFH2e7r/I/VxVw1jzfo5a3CS8X6caa+7y4bl8o4wAf3lCEPot/n6nhA4l 2AMn6k+VYWML96tvotNHygxcHEmjU+DEv1K+BUtL+R1wcdtCg4YSss/7B9Slkhwk PdAoPeZxVhRcwg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:14 2025 by rpki-client