This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json) Hash identifier: Wm+YjzkMUbp22jyQJrqUSMe9U/kZWa33dyfmgyWShX8= Subject key identifier: 27:34:7D:BD:24:98:1E:42:9B:BE:AE:88:47:4B:F7:4F:96:63:B4:A3 Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba Certificate serial: 019B3AFDB642D48CF83C516C79A4E0658722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft Manifest number: 169D Signing time: Sat 20 Dec 2025 09:01:04 +0000 Manifest this update: Sat 20 Dec 2025 09:01:04 +0000 Manifest next update: Sun 21 Dec 2025 09:01:04 +0000 Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: uoc0Wj0XXFGkkjf0bLba0OMQaX7i8Jt74b3Vyz5q72U=) 2: hgdnPYifylvEbRhPG5rcZMHgm-E.roa (hash: kVaA/BoHtOWfVS1UNUVlSYGZdZvXh/V05GtETEpyoE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:b6:42:d4:8c:f8:3c:51:6c:79:a4:e0:65:87:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba Validity Not Before: Dec 20 09:01:04 2025 GMT Not After : Dec 21 09:01:04 2025 GMT Subject: CN=27347dbd24981e429bbeae88474bf74f9663b4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:90:f6:6c:38:df:34:dc:0a:99:2b:f5:3f:29: 95:d6:3e:82:3e:5a:0f:50:48:22:a6:3d:ee:d9:05: 66:6f:c3:09:b1:3d:5d:cc:53:5e:11:64:c5:57:64: 76:fe:a1:b3:f3:14:8b:81:ac:e4:8f:23:3c:cf:d6: aa:ff:90:03:17:d6:ca:fc:bb:46:73:21:ee:3a:44: b8:d4:d5:92:00:8a:a2:93:b5:4e:95:c0:01:4d:e7: ef:f0:d9:63:62:45:74:50:47:a0:35:5e:a1:c5:87: 1c:45:20:91:71:4c:48:9e:4d:14:88:3c:37:1e:fd: 1c:e1:87:84:ac:57:94:da:06:d1:99:c1:9e:09:8d: 9d:e6:d1:12:e2:59:c5:c1:aa:97:85:fc:28:d7:5c: d6:6e:1a:bf:69:c5:04:3a:22:41:60:2b:fd:16:e9: 4d:3b:ed:b9:8d:96:da:55:38:48:82:67:62:df:38: bd:a8:d3:e5:38:9d:1d:b7:b2:4b:ce:5a:b1:d2:68: 6e:60:6c:78:ba:3f:d3:fc:5f:37:93:45:f0:d1:a1: a6:55:80:88:8f:f1:21:1c:69:df:92:2f:5d:2f:8c: 0c:1d:7e:2a:99:fc:c6:7c:00:6f:65:62:56:c3:50: 5e:24:05:8f:5c:cd:3d:04:c9:5b:46:f2:4c:72:55: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:34:7D:BD:24:98:1E:42:9B:BE:AE:88:47:4B:F7:4F:96:63:B4:A3 X509v3 Authority Key Identifier: keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:1c:30:1c:b1:41:ee:50:ad:6a:b2:42:9a:57:91:28:11:7a: f0:48:05:b8:70:56:dc:f5:26:4e:9d:07:05:d6:86:b3:bc:18: 51:27:6c:38:15:d8:3f:30:17:87:88:8a:fd:a2:4d:e7:af:84: a3:13:2b:8a:08:cc:84:f0:3f:c0:04:94:23:ab:a7:e6:57:73: 49:bf:74:f6:da:a3:0e:b2:32:dd:7d:2e:1e:6b:06:90:5c:66: 29:38:a0:8f:b2:39:f9:2b:fc:4b:d5:ab:dc:55:c7:c0:33:91: f0:46:4d:77:af:2c:2e:e7:69:84:82:78:ea:2e:0e:07:f9:24: 67:a7:2a:71:09:ba:35:c6:77:ae:22:ce:6b:22:fd:d9:b0:3c: 5e:25:47:79:79:1c:b3:25:9e:cf:dc:f9:d8:4c:36:8b:fb:8b: 62:c2:75:76:7a:c2:ca:fe:b4:68:1b:98:c2:2e:7b:c6:24:59: eb:6f:a3:e9:49:10:14:73:65:6a:1a:c2:6a:10:4e:08:31:6b: d7:0d:db:76:90:8b:d9:fd:35:93:3e:db:6e:f5:ce:87:79:d4: 34:83:4b:d3:2c:18:e9:bd:7f:70:91:96:ef:22:9d:37:ca:48: 23:4f:b7:b1:75:f3:91:b8:3f:b5:85:bd:66:4e:a7:a5:9f:00: 05:1a:63:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/bZC1Iz4PFFseaTgZYciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjMxZGNkNmJiNTMwODAyOWM0MjczMjMwNTE0ZjcyNmIx Yjg2YmEwHhcNMjUxMjIwMDkwMTA0WhcNMjUxMjIxMDkwMTA0WjAzMTEwLwYDVQQD EygyNzM0N2RiZDI0OTgxZTQyOWJiZWFlODg0NzRiZjc0Zjk2NjNiNGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJD2bDjfNNwKmSv1PymV1j6CPloP UEgipj3u2QVmb8MJsT1dzFNeEWTFV2R2/qGz8xSLgazkjyM8z9aq/5ADF9bK/LtG cyHuOkS41NWSAIqik7VOlcABTefv8NljYkV0UEegNV6hxYccRSCRcUxInk0UiDw3 Hv0c4YeErFeU2gbRmcGeCY2d5tES4lnFwaqXhfwo11zWbhq/acUEOiJBYCv9FulN O+25jZbaVThIgmdi3zi9qNPlOJ0dt7JLzlqx0mhuYGx4uj/T/F83k0Xw0aGmVYCI j/EhHGnfki9dL4wMHX4qmfzGfABvZWJWw1BeJAWPXM09BMlbRvJMclUCjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCc0fb0kmB5Cm76uiEdL90+WY7SjMB8GA1UdIwQY MBaAFGSzHc1rtTCAKcQnMjBRT3JrG4a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQt NDRhYjY4OWUxZDRkLzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85ODBkNmUtOGE5OS00MjYwLTgwNjQtNDRhYjY4OWUxZDRk LzEvWkxNZHpXdTFNSUFweENjeU1GRlBjbXNiaHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRwwHLFB 7lCtarJCmleRKBF68EgFuHBW3PUmTp0HBdaGs7wYUSdsOBXYPzAXh4iK/aJN56+E oxMrigjMhPA/wASUI6un5ldzSb909tqjDrIy3X0uHmsGkFxmKTigj7I5+Sv8S9Wr 3FXHwDOR8EZNd68sLudphIJ46i4OB/kkZ6cqcQm6NcZ3riLOayL92bA8XiVHeXkc syWez9z52Ew2i/uLYsJ1dnrCyv60aBuYwi57xiRZ62+j6UkQFHNlahrCahBOCDFr 1w3bdpCL2f01kz7bbvXOh3nUNINL0ywY6b1/cJGW7yKdN8pII0+3sXXzkbg/tYW9 Zk6npZ8ABRpjsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:05:58 2025 by rpki-client