This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json) Hash identifier: KSWDz6WTGpcMZkh2WXhfPYoH2r8Rn22DXVELLYRS318= Subject key identifier: 71:86:72:F0:A8:74:0C:FC:23:00:B5:01:C8:46:1D:0C:CD:E7:2C:11 Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5 Certificate serial: 019AF23F5E6DAFE211FBDA145316AE3835EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft Manifest number: 041A Signing time: Sat 06 Dec 2025 06:00:30 +0000 Manifest this update: Sat 06 Dec 2025 06:00:30 +0000 Manifest next update: Sun 07 Dec 2025 06:00:30 +0000 Files and hashes: 1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=) 2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: lVaPq3N8modjX9E9J133NSj64To3hRgGumVlD2qmEr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5e:6d:af:e2:11:fb:da:14:53:16:ae:38:35:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5 Validity Not Before: Dec 6 06:00:30 2025 GMT Not After : Dec 7 06:00:30 2025 GMT Subject: CN=718672f0a8740cfc2300b501c8461d0ccde72c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:3a:93:7b:1c:33:1d:2e:db:66:04:0e:f2: fc:c6:a2:2e:62:0d:41:6e:2c:51:3e:05:8a:19:6b: b4:92:99:25:0b:79:9b:d6:41:7b:b3:87:f5:06:55: a4:e0:63:5a:0d:d2:d3:08:50:84:f2:19:a9:31:46: 48:97:21:b5:31:4a:2c:05:49:33:11:55:e5:35:ae: a6:75:58:50:b1:ee:02:46:2d:3a:67:0c:94:2b:27: 9d:be:d0:a2:eb:47:cf:1d:85:fd:9f:8f:06:05:b6: 84:b9:01:30:91:08:99:30:6d:db:47:3d:6c:a7:43: a4:6a:8d:18:4e:6c:9f:e3:79:26:18:30:92:e7:5e: 7c:71:26:61:2f:cb:75:0f:f1:96:d2:c5:ea:b0:3b: 16:66:0e:07:3a:11:c9:d7:41:bd:ed:c2:72:0b:60: f5:6b:65:c6:8b:b6:88:b4:82:36:8d:1d:bf:4d:1f: 1e:bf:f6:75:d3:2b:d1:b6:ab:6c:18:e4:05:49:ae: 66:fd:04:8b:43:b5:52:2a:cc:3c:c5:8e:3e:56:bd: b6:c5:b6:b2:cf:41:af:73:f3:ee:17:32:c7:07:4d: 25:7b:2d:e3:fb:e7:b9:27:33:46:c4:bd:e0:68:7f: 04:68:cd:ce:53:53:97:52:c6:2d:ff:77:c8:0b:04: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:72:F0:A8:74:0C:FC:23:00:B5:01:C8:46:1D:0C:CD:E7:2C:11 X509v3 Authority Key Identifier: keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:65:f7:d5:c6:80:da:40:8b:3f:fe:8a:40:0d:f8:b6:ad:a9: 4d:c9:15:98:f9:93:99:8d:8f:fc:ba:1e:22:7e:e8:b4:79:01: 54:97:ad:20:26:2e:4d:49:86:c1:f5:3a:23:9a:e9:9f:db:1d: 8e:fe:e1:08:fc:f2:c4:de:7f:f2:54:4f:bb:0e:96:56:b4:54: 7f:53:8a:0b:58:56:fe:68:40:82:60:04:45:73:1e:70:83:88: 1a:35:19:d5:b1:c9:79:31:0f:64:49:f4:2b:95:35:9c:59:94: d2:1f:ab:44:ed:59:a9:9f:01:13:c5:83:2c:57:1d:d5:80:6c: f9:8d:0b:b5:e3:28:c0:53:e2:96:33:54:c6:68:10:3c:af:ec: b5:64:b0:2d:5a:c1:ae:b3:33:ac:ca:44:43:6a:79:10:04:03: 3d:15:83:66:82:a2:06:98:0c:59:0c:57:23:50:b0:46:d0:1a: 9b:90:56:f9:96:4c:25:54:48:bf:55:60:1c:c3:da:4f:f9:06: 3b:46:1d:75:41:21:84:c3:da:55:be:22:d0:27:f8:f0:f5:70: 9b:7f:ff:f6:e5:4f:65:a0:ba:4c:31:49:56:a4:53:d8:9f:dd: 9d:ef:6e:62:23:ad:1e:96:82:46:0d:a3:03:08:50:d2:e3:81: 07:67:ca:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP15tr+IR+9oUUxauODXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YmIyMmY4MjJkYjc0NTFmZTFlMjE5NmNhYzYzYzU2NDdm YjFhZDUwHhcNMjUxMjA2MDYwMDMwWhcNMjUxMjA3MDYwMDMwWjAzMTEwLwYDVQQD Eyg3MTg2NzJmMGE4NzQwY2ZjMjMwMGI1MDFjODQ2MWQwY2NkZTcyYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2o6k3scMx0u22YEDvL8xqIuYg1B bixRPgWKGWu0kpklC3mb1kF7s4f1BlWk4GNaDdLTCFCE8hmpMUZIlyG1MUosBUkz EVXlNa6mdVhQse4CRi06ZwyUKyedvtCi60fPHYX9n48GBbaEuQEwkQiZMG3bRz1s p0Okao0YTmyf43kmGDCS5158cSZhL8t1D/GW0sXqsDsWZg4HOhHJ10G97cJyC2D1 a2XGi7aItII2jR2/TR8ev/Z10yvRtqtsGOQFSa5m/QSLQ7VSKsw8xY4+Vr22xbay z0Gvc/PuFzLHB00ley3j++e5JzNGxL3gaH8EaM3OU1OXUsYt/3fICwQdoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGGcvCodAz8IwC1AchGHQzN5ywRMB8GA1UdIwQY MBaAFGS7Ivgi23RR/h4hlsrGPFZH+xrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYt NDVkMDVhNGIxZDk5LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYtNDVkMDVhNGIxZDk5 LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmX31caA 2kCLP/6KQA34tq2pTckVmPmTmY2P/LoeIn7otHkBVJetICYuTUmGwfU6I5rpn9sd jv7hCPzyxN5/8lRPuw6WVrRUf1OKC1hW/mhAgmAERXMecIOIGjUZ1bHJeTEPZEn0 K5U1nFmU0h+rRO1ZqZ8BE8WDLFcd1YBs+Y0LteMowFPiljNUxmgQPK/stWSwLVrB rrMzrMpEQ2p5EAQDPRWDZoKiBpgMWQxXI1CwRtAam5BW+ZZMJVRIv1VgHMPaT/kG O0YddUEhhMPaVb4i0Cf48PVwm3//9uVPZaC6TDFJVqRT2J/dne9uYiOtHpaCRg2j AwhQ0uOBB2fKuA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:55 2025 by rpki-client