This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft File: ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json) Hash identifier: 4SkyeAbBC03ZePLKXPQdPrgMQ4Aizf07rcdtQwqh/yM= Subject key identifier: 02:8E:C7:5C:F0:D1:60:09:1C:80:E3:8D:B2:1D:5D:25:88:43:7E:A3 Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Certificate serial: 019AF31C58677ADEACEE9BAF0D782FFFBFA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft Manifest number: 0692 Signing time: Sat 06 Dec 2025 10:01:52 +0000 Manifest this update: Sat 06 Dec 2025 10:01:52 +0000 Manifest next update: Sun 07 Dec 2025 10:01:52 +0000 Files and hashes: 1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: vMX2gRGYrYh8VRKPsrqDkPa94D1SEDJDhCytvL5hejg=) 2: xmAkbH2G5Pgu29-LAr6LSUToIqY.roa (hash: J5hUihuN8ml/+PNDCYud2S/KPKwQRrLYh7Hl2myuEUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:58:67:7a:de:ac:ee:9b:af:0d:78:2f:ff:bf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb Validity Not Before: Dec 6 10:01:52 2025 GMT Not After : Dec 7 10:01:52 2025 GMT Subject: CN=028ec75cf0d160091c80e38db21d5d2588437ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:77:36:cf:5f:c3:d4:c9:16:2c:96:68:03: 00:4c:ca:15:6c:19:de:b7:68:cc:c1:f7:50:91:71: 82:98:63:da:13:50:ac:9c:15:59:c2:ea:3f:3c:e0: 06:bf:7c:60:2f:86:a3:29:41:b5:f2:04:6c:a1:53: 5c:af:52:59:84:bd:e7:8d:08:80:7d:b2:b3:9a:a6: 39:68:39:46:a4:95:32:c3:38:56:77:ca:02:e5:90: c3:5f:23:ec:2b:f6:00:7d:60:22:94:4d:40:c0:48: 3d:56:3c:d6:91:94:71:94:22:3c:32:16:1f:49:7d: e1:9a:d2:07:f3:7c:a1:c4:2d:07:f1:a5:e8:fe:8f: 35:0f:f3:38:d2:b3:e1:f9:84:35:b0:1c:29:5b:92: ad:bc:5f:f5:49:0a:de:43:2c:cb:37:27:4f:05:c5: da:aa:7f:14:fc:3f:fc:45:9f:81:38:1c:b0:9b:4c: a3:fb:81:37:ed:35:d1:03:fa:71:f9:88:94:3e:80: 35:06:35:ea:b6:0b:f0:aa:51:79:27:85:c5:a8:bc: 97:30:2a:0b:be:95:df:af:c4:f0:4a:d7:94:73:05: 13:fe:fc:77:20:10:1e:5a:68:1c:a0:78:e7:0d:9a: f2:a9:69:b4:84:30:d0:26:1e:9a:7e:9e:fb:10:0b: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8E:C7:5C:F0:D1:60:09:1C:80:E3:8D:B2:1D:5D:25:88:43:7E:A3 X509v3 Authority Key Identifier: keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bc:cf:e3:7e:e1:88:cd:0c:6d:7b:5a:18:46:98:04:4c:d3: ff:5e:f8:db:02:55:ac:8d:2a:b3:4e:b0:da:9c:30:3d:b6:bf: f6:13:87:21:27:02:2e:e3:f8:3e:5d:54:dd:fb:8f:df:6b:fe: 18:11:03:25:ff:4c:8c:b4:d5:41:be:fa:8e:b8:00:f2:93:38: 02:2f:15:23:90:3d:88:a8:7b:04:63:54:d1:06:e1:b5:4f:04: 68:e5:9c:0a:4a:39:24:f6:13:f4:51:bc:1f:ed:b2:82:ad:66: 0a:b3:63:f2:05:2b:21:cb:90:0a:73:c1:d7:b2:58:2f:c9:9e: 09:df:95:08:35:01:d2:e2:1b:61:44:de:2d:b2:40:68:58:ac: f4:ec:d4:f8:c5:99:39:d3:74:20:07:6f:ac:00:34:4e:b5:a7: d1:31:d7:2f:52:a7:c0:b6:e4:66:e9:ac:df:fd:65:bb:42:9d: d4:98:e3:40:42:6d:5b:37:1e:16:9e:8c:79:4f:94:fc:f4:fa: df:25:4d:64:a3:89:b9:b0:c1:fe:6a:d6:e0:70:2d:f1:52:1e: 5f:7d:f5:88:e0:7a:27:e3:eb:7f:bd:ce:50:92:e8:ac:48:df: 8f:66:b7:1b:a4:39:f6:07:61:87:69:ef:c5:79:5a:48:65:40: 65:d5:d1:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFhnet6s7puvDXgv/7+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Y2ZiYTE4NGZmOTQ0MmE4ZmU3NTE3YjUwM2E5ZTAxN2Zh OWYyY2IwHhcNMjUxMjA2MTAwMTUyWhcNMjUxMjA3MTAwMTUyWjAzMTEwLwYDVQQD EygwMjhlYzc1Y2YwZDE2MDA5MWM4MGUzOGRiMjFkNWQyNTg4NDM3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP93Ns9fw9TJFiyWaAMATMoVbBne t2jMwfdQkXGCmGPaE1CsnBVZwuo/POAGv3xgL4ajKUG18gRsoVNcr1JZhL3njQiA fbKzmqY5aDlGpJUywzhWd8oC5ZDDXyPsK/YAfWAilE1AwEg9VjzWkZRxlCI8MhYf SX3hmtIH83yhxC0H8aXo/o81D/M40rPh+YQ1sBwpW5KtvF/1SQreQyzLNydPBcXa qn8U/D/8RZ+BOBywm0yj+4E37TXRA/px+YiUPoA1BjXqtgvwqlF5J4XFqLyXMCoL vpXfr8TwSteUcwUT/vx3IBAeWmgcoHjnDZryqWm0hDDQJh6afp77EAsMTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKOx1zw0WAJHIDjjbIdXSWIQ36jMB8GA1UdIwQY MBaAFGTPuhhP+UQqj+dRe1A6ngF/qfLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYt ZGVmZjcxMTI0MjMzLzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yNTNmMmMtNGVkOS00ZjFmLWE5NmYtZGVmZjcxMTI0MjMz LzEvWk0tNkdFXzVSQ3FQNTFGN1VEcWVBWC1wOHNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrzP437h iM0MbXtaGEaYBEzT/1742wJVrI0qs06w2pwwPba/9hOHIScCLuP4Pl1U3fuP32v+ GBEDJf9MjLTVQb76jrgA8pM4Ai8VI5A9iKh7BGNU0QbhtU8EaOWcCko5JPYT9FG8 H+2ygq1mCrNj8gUrIcuQCnPB17JYL8meCd+VCDUB0uIbYUTeLbJAaFis9OzU+MWZ OdN0IAdvrAA0TrWn0THXL1KnwLbkZums3/1lu0Kd1JjjQEJtWzceFp6MeU+U/PT6 3yVNZKOJubDB/mrW4HAt8VIeX331iOB6J+Prf73OUJLorEjfj2a3G6Q59gdhh2nv xXlaSGVAZdXRgg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:43 2025 by rpki-client