This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft File: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json) Hash identifier: Az01BK93tK2XilWGmiNsFf6uDttrF0OpKqJ+J9hrXRU= Subject key identifier: FA:CC:3E:20:EE:FE:F4:CB:2F:E0:9C:59:89:8D:9B:8F:32:4B:25:87 Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5 Certificate serial: 019B3BA25D4B566555DB7417417381D0935A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft Manifest number: 0440 Signing time: Sat 20 Dec 2025 12:00:55 +0000 Manifest this update: Sat 20 Dec 2025 12:00:55 +0000 Manifest next update: Sun 21 Dec 2025 12:00:55 +0000 Files and hashes: 1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=) 2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: +k5CAFix5L6WvXzhA7OWnOQhkDwoDo7co/c3Y8zw4XI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:5d:4b:56:65:55:db:74:17:41:73:81:d0:93:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5 Validity Not Before: Dec 20 12:00:55 2025 GMT Not After : Dec 21 12:00:55 2025 GMT Subject: CN=facc3e20eefef4cb2fe09c59898d9b8f324b2587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:89:ca:5d:4c:1d:15:52:f5:84:53:a0:36: 83:c6:61:cc:2f:0c:d9:eb:0d:42:1f:28:d5:82:cb: 2d:f6:a4:73:dd:32:bc:32:56:2c:d3:1b:3c:79:b9: a5:b7:f0:57:d0:ed:a5:91:e0:af:06:7b:7c:bb:f7: bb:74:17:2d:21:59:24:e1:16:40:49:30:9d:b0:aa: 2e:70:13:21:46:e6:1a:7a:c2:fa:0c:cf:f6:ac:93: 98:3c:7d:de:23:36:4b:61:04:0d:db:bf:12:84:bd: e8:ca:31:6b:be:4d:56:8c:d2:bc:00:5b:a2:5b:2f: b2:2c:5c:50:31:aa:5e:61:aa:d7:be:7b:59:12:17: 47:be:ed:7b:eb:f3:31:3f:4d:b9:7c:df:08:26:ae: 5f:20:eb:5d:59:25:1e:8d:c7:44:0d:46:98:35:c8: d5:c2:45:7f:53:a6:b6:a4:6e:e2:0e:85:14:bc:0c: df:21:0e:c1:73:77:44:5e:56:17:4b:d7:d9:62:cf: 97:a6:97:fb:bf:9d:85:41:56:bd:c7:ef:70:15:b5: 72:96:02:47:b0:24:2c:60:83:16:ff:b8:3a:eb:20: ac:17:1a:3e:58:39:81:f3:d0:ef:9e:b5:0d:16:f9: 16:c0:28:48:d1:9a:fe:c2:69:5b:6f:ec:31:5a:bf: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CC:3E:20:EE:FE:F4:CB:2F:E0:9C:59:89:8D:9B:8F:32:4B:25:87 X509v3 Authority Key Identifier: keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f4:09:e5:f3:e7:44:29:f2:0f:21:fb:db:7f:11:38:f8:4e: 1e:fd:dd:fd:35:3c:ea:57:47:6b:de:44:96:b2:b1:12:26:84: bc:de:4e:fe:d0:14:b7:56:4c:e0:2b:be:f7:76:ab:f3:b6:35: 08:70:ce:b9:08:3a:92:5e:b8:f2:50:34:73:12:7b:5a:4a:a7: 7a:c8:f4:b9:66:3b:f1:4b:de:5e:ce:02:a6:f4:26:c2:e0:75: 5b:f9:96:37:68:2b:9c:c9:a0:3b:a7:e9:e7:ff:86:7d:d1:41: 55:d6:cc:11:2b:71:e9:f5:6d:46:d3:b9:36:18:be:77:66:d1: db:11:23:64:48:a0:f4:27:7c:e0:11:91:8d:56:e6:8b:c2:9a: 46:29:a2:fd:cd:67:c8:36:28:f9:aa:a0:b3:da:4b:16:2e:12: 71:61:c9:0d:c4:00:4d:0e:d9:c7:23:dc:c5:d3:af:5f:99:ec: 8c:ab:81:0a:61:00:07:34:b2:c4:5f:8a:9a:1e:52:66:a1:c1: a4:2b:78:1a:f9:96:97:d9:2a:d4:c0:e5:2b:cd:ce:6f:0e:9b: ac:0a:ee:74:35:58:c3:70:0e:c7:d5:32:a8:be:e3:98:b8:a6: 3e:58:b3:7c:d4:53:ff:1b:58:c8:2b:fd:88:a8:7b:ce:e1:d8: 24:de:93:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ol1LVmVV23QXQXOB0JNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YmIyMmY4MjJkYjc0NTFmZTFlMjE5NmNhYzYzYzU2NDdm YjFhZDUwHhcNMjUxMjIwMTIwMDU1WhcNMjUxMjIxMTIwMDU1WjAzMTEwLwYDVQQD EyhmYWNjM2UyMGVlZmVmNGNiMmZlMDljNTk4OThkOWI4ZjMyNGIyNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOKJyl1MHRVS9YRToDaDxmHMLwzZ 6w1CHyjVgsst9qRz3TK8MlYs0xs8ebmlt/BX0O2lkeCvBnt8u/e7dBctIVkk4RZA STCdsKoucBMhRuYaesL6DM/2rJOYPH3eIzZLYQQN278ShL3oyjFrvk1WjNK8AFui Wy+yLFxQMapeYarXvntZEhdHvu176/MxP025fN8IJq5fIOtdWSUejcdEDUaYNcjV wkV/U6a2pG7iDoUUvAzfIQ7Bc3dEXlYXS9fZYs+Xppf7v52FQVa9x+9wFbVylgJH sCQsYIMW/7g66yCsFxo+WDmB89DvnrUNFvkWwChI0Zr+wmlbb+wxWr+GHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrMPiDu/vTLL+CcWYmNm48ySyWHMB8GA1UdIwQY MBaAFGS7Ivgi23RR/h4hlsrGPFZH+xrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYt NDVkMDVhNGIxZDk5LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lODEzZDQtNDEyNi00Y2ExLTkwZDYtNDVkMDVhNGIxZDk5 LzEvWkxzaS1DTGJkRkgtSGlHV3lzWThWa2Y3R3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvQJ5fPn RCnyDyH7238ROPhOHv3d/TU86ldHa95ElrKxEiaEvN5O/tAUt1ZM4Cu+93ar87Y1 CHDOuQg6kl648lA0cxJ7Wkqnesj0uWY78UveXs4CpvQmwuB1W/mWN2grnMmgO6fp 5/+GfdFBVdbMEStx6fVtRtO5Nhi+d2bR2xEjZEig9Cd84BGRjVbmi8KaRimi/c1n yDYo+aqgs9pLFi4ScWHJDcQATQ7ZxyPcxdOvX5nsjKuBCmEABzSyxF+Kmh5SZqHB pCt4GvmWl9kq1MDlK83Obw6brArudDVYw3AOx9UyqL7jmLimPlizfNRT/xtYyCv9 iKh7zuHYJN6Tfg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:27:03 2025 by rpki-client