This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json) Hash identifier: zSuO/XbyJRH0pCRYcV3VlsiPy+EGHKTYRovdqWwixM0= Subject key identifier: 7B:74:97:56:4D:BA:D5:A9:5D:93:87:E3:62:EA:E4:BE:41:C3:C4:C0 Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67 Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467 Certificate serial: 019AF31D2113FB5D28B112AFB970B2AEF0DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft Manifest number: 1037 Signing time: Sat 06 Dec 2025 10:02:43 +0000 Manifest this update: Sat 06 Dec 2025 10:02:43 +0000 Manifest next update: Sun 07 Dec 2025 10:02:43 +0000 Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: LAq09QKP7NzL5KJAptazF728KmK1Be5JfctVik42RUM=) 2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:21:13:fb:5d:28:b1:12:af:b9:70:b2:ae:f0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467 Validity Not Before: Dec 6 10:02:43 2025 GMT Not After : Dec 7 10:02:43 2025 GMT Subject: CN=7b7497564dbad5a95d9387e362eae4be41c3c4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:cb:5c:37:75:e6:c0:b4:ea:db:3d:21:62: af:81:3c:7d:b9:a8:1e:bc:ee:21:70:96:6b:c5:3c: 9c:74:d1:3c:d0:97:ad:86:00:0f:12:95:eb:fa:99: d6:b3:87:1b:2b:5e:da:ac:c3:8f:73:44:fc:be:e5: cb:fb:10:ed:34:e2:86:60:76:e9:91:54:40:c3:71: 4b:93:09:af:f7:b7:fb:7c:d5:cf:57:4e:80:84:56: f3:45:f5:cc:5e:f2:77:17:ac:df:0a:10:8f:3d:d0: 59:fd:67:c5:84:60:83:92:bb:ff:81:73:ba:79:6d: 34:5c:c7:a3:74:21:43:5f:ce:47:e5:94:ec:ad:5a: ea:9d:c6:65:16:74:20:72:64:56:dc:69:e1:76:1c: cd:ab:ac:d4:6d:7d:b2:bd:7e:25:a4:ae:ad:3a:4d: fd:52:1c:a4:40:3a:55:36:a6:85:b3:b7:97:07:05: 3e:bf:65:c1:80:be:a8:e0:8d:80:8c:ed:b1:0c:dc: 3a:c7:7d:bd:c8:70:5d:d5:8f:84:b6:8e:36:77:1a: d4:3e:ce:9b:6d:fc:5f:a2:bc:57:f2:ac:fb:fe:eb: 7e:f2:37:f1:6a:84:01:bd:99:f0:1c:5b:c6:97:8a: 31:36:70:b0:49:fa:fd:6e:a1:cc:27:81:3e:6d:0a: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:74:97:56:4D:BA:D5:A9:5D:93:87:E3:62:EA:E4:BE:41:C3:C4:C0 X509v3 Authority Key Identifier: keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7d:46:3d:ee:ef:c8:93:27:4d:9e:a8:bd:14:37:c2:99:1d: 34:ee:6e:5c:88:b9:f5:fa:c5:8b:0a:74:23:d9:25:88:00:fb: d0:78:f2:69:6b:56:1e:60:08:5a:a7:0e:ac:96:b8:93:fe:0a: ac:4c:1d:05:cf:4d:21:ca:f7:90:49:65:3f:1b:b7:22:ba:84: 90:8a:19:ff:c0:e5:13:82:57:d7:b7:20:84:07:32:db:e5:0d: a8:e4:1e:61:a2:95:98:9d:05:4f:a5:7b:fb:12:92:95:b4:9a: 23:96:54:f2:f8:c1:b1:37:9e:fd:e0:38:f0:59:85:84:ac:45: 86:30:e3:fb:47:91:91:31:4e:3f:22:40:4f:38:01:1b:25:d7: 7a:24:d2:00:82:7b:b8:33:0a:a0:aa:b9:f1:14:f9:c0:47:cf: 24:42:38:a3:bd:2f:10:1c:94:78:b5:13:a3:f5:2e:9b:5e:90: a5:62:df:7b:e5:ab:d6:3b:25:5e:ba:46:07:59:11:02:c2:36: 93:39:b2:d0:59:ad:04:fc:c9:08:77:c3:e5:21:38:fd:ff:06: 94:a4:e9:f3:46:75:2e:91:bc:ee:0a:41:e7:fe:97:18:b7:ac: 1b:ca:b9:eb:bc:74:61:e3:fd:f6:f5:1b:98:98:77:43:e2:00: 5d:67:41:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSET+10osRKvuXCyrvDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZmFmM2EzZjIxNDBjYjdjNmZmMGNkNmE3ZjU2MTRhMDVl NGU0NjcwHhcNMjUxMjA2MTAwMjQzWhcNMjUxMjA3MTAwMjQzWjAzMTEwLwYDVQQD Eyg3Yjc0OTc1NjRkYmFkNWE5NWQ5Mzg3ZTM2MmVhZTRiZTQxYzNjNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlvLXDd15sC06ts9IWKvgTx9uage vO4hcJZrxTycdNE80JethgAPEpXr+pnWs4cbK17arMOPc0T8vuXL+xDtNOKGYHbp kVRAw3FLkwmv97f7fNXPV06AhFbzRfXMXvJ3F6zfChCPPdBZ/WfFhGCDkrv/gXO6 eW00XMejdCFDX85H5ZTsrVrqncZlFnQgcmRW3GnhdhzNq6zUbX2yvX4lpK6tOk39 UhykQDpVNqaFs7eXBwU+v2XBgL6o4I2AjO2xDNw6x329yHBd1Y+Eto42dxrUPs6b bfxforxX8qz7/ut+8jfxaoQBvZnwHFvGl4oxNnCwSfr9bqHMJ4E+bQq8nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt0l1ZNutWpXZOH42Lq5L5Bw8TAMB8GA1UdIwQY MBaAFNf686PyFAy3xv8M1qf1YUoF5ORnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYt ZjM3OTdjZmQ2NWFlLzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYtZjM3OTdjZmQ2NWFl LzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhH1GPe7v yJMnTZ6ovRQ3wpkdNO5uXIi59frFiwp0I9kliAD70HjyaWtWHmAIWqcOrJa4k/4K rEwdBc9NIcr3kEllPxu3IrqEkIoZ/8DlE4JX17cghAcy2+UNqOQeYaKVmJ0FT6V7 +xKSlbSaI5ZU8vjBsTee/eA48FmFhKxFhjDj+0eRkTFOPyJATzgBGyXXeiTSAIJ7 uDMKoKq58RT5wEfPJEI4o70vEByUeLUTo/Uum16QpWLfe+Wr1jslXrpGB1kRAsI2 kzmy0FmtBPzJCHfD5SE4/f8GlKTp80Z1LpG87gpB5/6XGLesG8q567x0YeP99vUb mJh3Q+IAXWdBbw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:06 2025 by rpki-client