This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft File: ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json) Hash identifier: ApRmH7lPSXTM76DZ6VjPyN9+HCPc6+aInYk/q4gX8Qc= Subject key identifier: 7D:D0:8F:75:22:27:04:E8:70:01:A6:4B:5A:1A:D1:C6:F1:10:BC:AC Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Certificate serial: 019BF3BD8D3069038A558CEAAF1DFAAB5969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft Manifest number: 0717 Signing time: Sun 25 Jan 2026 06:00:44 +0000 Manifest this update: Sun 25 Jan 2026 06:00:44 +0000 Manifest next update: Mon 26 Jan 2026 06:00:44 +0000 Files and hashes: 1: UB5EhbqxifQJIwDLc-DmZe6sLrs.roa (hash: ngMT3EPkLXr3+fwKyb1JknqgGSR68x36nL0A0WS9bUY=) 2: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: ArDb0MjG8DsRsrJVKPqh5Dh3mfzqjL79+LRzYu0N7Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:8d:30:69:03:8a:55:8c:ea:af:1d:fa:ab:59:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Validity Not Before: Jan 25 06:00:44 2026 GMT Not After : Jan 26 06:00:44 2026 GMT Subject: CN=7dd08f75222704e87001a64b5a1ad1c6f110bcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:f1:2a:30:2b:44:8b:31:67:ea:2a:2d:f0: 0e:a2:36:f9:23:ed:3a:ed:03:41:f6:1d:b5:77:9c: aa:33:db:70:33:c6:ef:e8:3f:71:6a:31:4c:ad:d7: 26:18:50:f2:d8:52:b1:92:17:5c:9c:06:7f:4d:50: 96:a6:c2:a3:52:e0:ed:3b:61:e9:0b:d0:a8:3d:77: 56:cc:22:ab:2d:3e:28:f4:d7:20:84:95:32:bf:47: 5a:5e:52:ae:f3:98:83:c1:1c:e3:5f:c9:08:b1:3c: 2c:68:c1:d5:19:e6:9b:9f:45:90:0c:5a:74:4c:ef: 26:33:d3:1b:0d:2b:b9:28:b0:c8:ba:5f:38:33:e5: b1:a6:27:f7:02:b2:50:65:57:fe:9a:6a:68:34:90: 06:9c:d9:27:e6:4d:52:85:c6:b2:62:e6:1c:11:78: 1f:ff:81:c1:87:98:d0:cf:95:03:4c:6c:db:25:8e: ab:e3:81:bb:71:d0:b3:b3:c4:2c:d4:db:aa:43:d9: 0d:44:e5:20:76:fc:72:89:15:78:b5:34:53:5c:3f: 1c:0b:d1:7d:e4:e7:44:e9:30:58:49:96:c0:38:49: 25:e5:54:59:b8:cd:92:14:72:b9:20:5b:3f:27:e1: a9:85:9b:0c:e4:b6:32:04:08:91:42:a2:a2:7a:6e: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:8F:75:22:27:04:E8:70:01:A6:4B:5A:1A:D1:C6:F1:10:BC:AC X509v3 Authority Key Identifier: keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0d:dd:2f:cc:1f:3b:0e:6a:f2:40:0b:6e:e8:e3:59:9c:89: 8c:68:d8:33:88:aa:e5:f9:6b:ee:bd:a9:bc:c7:de:e4:58:b6: 28:c5:a7:da:63:23:ba:70:db:69:98:64:eb:95:30:ba:bf:c9: 2d:0e:07:5c:70:0f:f8:9b:d3:73:be:89:78:69:1d:76:aa:82: 26:1b:1a:93:e5:6e:6b:d1:e5:26:f4:2a:aa:49:cf:8e:bb:0c: 7d:4a:53:17:84:d3:97:c2:8a:b8:3a:1a:e6:07:68:69:ca:1f: 93:5b:df:04:b1:a9:9a:2d:44:a3:72:84:62:75:38:7b:29:a3: 67:d4:d4:56:12:1e:5a:cc:b8:0a:cf:2e:40:a3:08:1d:8f:05: ce:ad:58:fb:3d:2a:b3:ff:ca:49:90:f2:5d:5c:d1:71:cf:b0: d9:50:bc:84:ad:5b:7f:4b:26:00:9e:e3:7a:37:5e:da:fb:e2: bf:5e:36:ba:36:8b:f1:08:4a:57:d6:e8:e0:30:da:08:24:b3: 7d:b1:7e:17:58:8a:8a:e1:a5:7c:13:57:32:26:16:16:48:4f: 38:f1:50:f3:19:13:c8:53:bb:50:fe:14:60:e4:59:f0:03:d5: b9:13:bd:68:2b:91:46:83:0a:23:9b:37:e2:c8:b0:61:99:4d: fc:d6:70:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvY0waQOKVYzqrx36q1lpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Y2ZiYTE4NGZmOTQ0MmE4ZmU3NTE3YjUwM2E5ZTAxN2Zh OWYyY2IwHhcNMjYwMTI1MDYwMDQ0WhcNMjYwMTI2MDYwMDQ0WjAzMTEwLwYDVQQD Eyg3ZGQwOGY3NTIyMjcwNGU4NzAwMWE2NGI1YTFhZDFjNmYxMTBiY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YzxKjArRIsxZ+oqLfAOojb5I+06 7QNB9h21d5yqM9twM8bv6D9xajFMrdcmGFDy2FKxkhdcnAZ/TVCWpsKjUuDtO2Hp C9CoPXdWzCKrLT4o9NcghJUyv0daXlKu85iDwRzjX8kIsTwsaMHVGeabn0WQDFp0 TO8mM9MbDSu5KLDIul84M+Wxpif3ArJQZVf+mmpoNJAGnNkn5k1ShcayYuYcEXgf /4HBh5jQz5UDTGzbJY6r44G7cdCzs8Qs1NuqQ9kNROUgdvxyiRV4tTRTXD8cC9F9 5OdE6TBYSZbAOEkl5VRZuM2SFHK5IFs/J+GphZsM5LYyBAiRQqKiem4CAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3Qj3UiJwTocAGmS1oa0cbxELysMB8GA1UdIwQY MBaAFGTPuhhP+UQqj+dRe1A6ngF/qfLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYt ZGVmZjcxMTI0MjMzLzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYtZGVmZjcxMTI0MjMz LzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA3dL8wf Ow5q8kALbujjWZyJjGjYM4iq5flr7r2pvMfe5Fi2KMWn2mMjunDbaZhk65Uwur/J LQ4HXHAP+JvTc76JeGkddqqCJhsak+Vua9HlJvQqqknPjrsMfUpTF4TTl8KKuDoa 5gdoacofk1vfBLGpmi1Eo3KEYnU4eymjZ9TUVhIeWsy4Cs8uQKMIHY8Fzq1Y+z0q s//KSZDyXVzRcc+w2VC8hK1bf0smAJ7jejde2vviv142ujaL8QhKV9bo4DDaCCSz fbF+F1iKiuGlfBNXMiYWFkhPOPFQ8xkTyFO7UP4UYORZ8APVuRO9aCuRRoMKI5s3 4siwYZlN/NZwFQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:15 2026 by rpki-client