This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json) Hash identifier: v/GsqO5kK6R3URpI+zsStoSIvKZ7yvJcAp4NEV4En20= Subject key identifier: 57:E4:18:A9:F9:9D:0B:12:32:41:33:33:0B:38:59:9D:FE:E1:59:33 Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba Certificate serial: 019AF19AF5F2BF73557932F9231E1387C927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft Manifest number: 1677 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: hzbEaTvNZvOjnN2mCMCJtGCRQzX7cwzNZakoEa2/Ac0=) 2: hgdnPYifylvEbRhPG5rcZMHgm-E.roa (hash: kVaA/BoHtOWfVS1UNUVlSYGZdZvXh/V05GtETEpyoE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f5:f2:bf:73:55:79:32:f9:23:1e:13:87:c9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=57e418a9f99d0b12324133330b38599dfee15933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:4e:f0:ac:e9:b9:3b:e3:95:58:b0:2f:fa: 9b:28:f9:9c:23:e6:32:0a:dd:63:04:57:38:9f:95: d6:12:cf:09:ed:80:ad:d4:ba:9e:59:03:1e:a1:49: cb:73:99:5a:8f:9d:f1:f9:9a:86:43:17:a2:70:8d: 8f:22:ba:2a:e6:85:ba:ec:35:90:0c:2b:62:a5:59: d2:5e:74:b2:e0:09:82:7a:3d:cd:48:e3:1e:39:5f: ce:03:f0:ac:41:42:3e:1f:4c:c1:e5:c9:8a:53:a2: 7c:60:7c:c5:8f:00:9d:13:a2:ba:7b:7c:7a:66:bd: 32:21:27:f0:b1:90:4d:d9:b4:23:54:df:64:59:2a: fd:f9:47:df:c3:1b:e4:08:8f:a9:a1:ac:9f:48:28: 47:1d:41:c8:ed:0c:92:fb:74:f5:9c:cd:f3:93:80: 12:99:08:e0:04:2f:5a:a6:ee:4d:7e:7f:d1:c1:45: ad:7d:22:0c:19:56:ea:4d:cb:3f:e2:9a:77:4e:e7: c1:c3:b6:dc:0b:05:90:2a:f0:58:35:3f:ce:73:51: 64:49:4e:ef:4b:58:ca:74:a2:43:c2:8f:eb:8b:d2: 06:1c:bd:1a:8d:92:eb:e2:6b:93:64:6d:e4:b8:38: 66:ff:76:97:c6:18:1a:8d:a2:7b:28:9b:0d:6c:48: 37:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E4:18:A9:F9:9D:0B:12:32:41:33:33:0B:38:59:9D:FE:E1:59:33 X509v3 Authority Key Identifier: keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:af:83:9c:d4:04:82:86:46:6c:a0:58:ef:84:c1:66:a5:8f: 94:64:cb:e4:23:81:51:6d:a2:2a:6a:4b:3c:88:72:fc:c8:44: 7f:45:16:11:56:f0:1a:4c:70:c3:bb:3c:8e:d3:c9:12:be:52: 12:de:ce:a8:b6:bf:47:50:4f:c3:6d:15:bf:fd:17:d4:57:b2: 1e:2b:0e:14:1b:1d:08:d8:7e:b3:aa:16:c8:76:a2:d8:4c:21: 7e:11:d5:ae:28:95:f1:6b:59:c8:fc:b5:03:3c:cc:cf:ae:74: 5f:0e:2a:6a:7c:06:26:6b:5e:62:84:c5:81:1c:0e:37:a0:3e: 86:15:8b:12:5b:88:15:f2:f9:5b:01:2f:89:8e:f0:04:79:cb: 9d:5e:31:a0:ca:f2:f3:4a:39:a9:27:20:a2:2a:2e:52:79:7c: 2c:1b:2e:c1:05:e3:13:d5:79:ec:4a:c4:c6:f1:70:27:18:8d: 4a:c4:81:24:98:77:dc:1a:32:06:a4:43:b0:b8:99:6c:95:b0: 5c:6e:a3:78:b1:71:9b:32:8e:11:39:2f:03:7b:06:b5:79:5b: 73:fc:e3:f2:b7:99:0f:7c:4f:1a:95:46:b2:b0:7a:4f:30:80: cb:25:aa:ad:65:cf:d0:c0:4f:07:9c:41:96:29:d8:2b:c1:24: 09:3a:f9:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvXyv3NVeTL5Ix4Th8knMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjMxZGNkNmJiNTMwODAyOWM0MjczMjMwNTE0ZjcyNmIx Yjg2YmEwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD Eyg1N2U0MThhOWY5OWQwYjEyMzI0MTMzMzMwYjM4NTk5ZGZlZTE1OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxblO8KzpuTvjlViwL/qbKPmcI+Yy Ct1jBFc4n5XWEs8J7YCt1LqeWQMeoUnLc5laj53x+ZqGQxeicI2PIroq5oW67DWQ DCtipVnSXnSy4AmCej3NSOMeOV/OA/CsQUI+H0zB5cmKU6J8YHzFjwCdE6K6e3x6 Zr0yISfwsZBN2bQjVN9kWSr9+UffwxvkCI+poayfSChHHUHI7QyS+3T1nM3zk4AS mQjgBC9apu5Nfn/RwUWtfSIMGVbqTcs/4pp3TufBw7bcCwWQKvBYNT/Oc1FkSU7v S1jKdKJDwo/ri9IGHL0ajZLr4muTZG3kuDhm/3aXxhgajaJ7KJsNbEg3VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfkGKn5nQsSMkEzMws4WZ3+4VkzMB8GA1UdIwQY MBaAFGSzHc1rtTCAKcQnMjBRT3JrG4a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQt NDRhYjY4OWUxZDRkLzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQtNDRhYjY4OWUxZDRk LzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAca+DnNQE goZGbKBY74TBZqWPlGTL5COBUW2iKmpLPIhy/MhEf0UWEVbwGkxww7s8jtPJEr5S Et7OqLa/R1BPw20Vv/0X1FeyHisOFBsdCNh+s6oWyHai2EwhfhHVriiV8WtZyPy1 AzzMz650Xw4qanwGJmteYoTFgRwON6A+hhWLEluIFfL5WwEviY7wBHnLnV4xoMry 80o5qScgoiouUnl8LBsuwQXjE9V57ErExvFwJxiNSsSBJJh33BoyBqRDsLiZbJWw XG6jeLFxmzKOETkvA3sGtXlbc/zj8reZD3xPGpVGsrB6TzCAyyWqrWXP0MBPB5xB linYK8EkCTr58w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:34 2025 by rpki-client