This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json) Hash identifier: uYl9q9k/rjFZPH4V8E/vbzZKAmBnRALVb188Lp0FIs4= Subject key identifier: EA:21:0D:E6:B1:75:A7:0F:D4:B7:8B:6E:33:8C:38:43:63:88:99:A9 Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67 Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467 Certificate serial: 019B19BBA7A4EBDFC08D393753DF8B989EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft Manifest number: 104B Signing time: Sat 13 Dec 2025 22:01:26 +0000 Manifest this update: Sat 13 Dec 2025 22:01:26 +0000 Manifest next update: Sun 14 Dec 2025 22:01:26 +0000 Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: ey2IbfChAa8gY2WFc086D32PUVLqyr/hwC61iX7Vq88=) 2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:a7:a4:eb:df:c0:8d:39:37:53:df:8b:98:9e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467 Validity Not Before: Dec 13 22:01:26 2025 GMT Not After : Dec 14 22:01:26 2025 GMT Subject: CN=ea210de6b175a70fd4b78b6e338c3843638899a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:a9:d3:56:72:67:19:9d:28:e4:8a:0a:5d: f4:a4:65:57:b3:06:c7:27:53:0a:6a:71:9c:88:71: 44:9e:f7:e5:00:20:f7:89:a0:c4:45:25:c2:96:13: b2:a5:d5:65:70:6e:e9:75:b5:7d:70:8e:57:85:3c: 89:34:8a:6d:1e:e3:7b:e5:fb:f9:17:4c:3e:5a:d7: 06:69:02:dc:99:8f:6c:ed:a9:44:f5:de:48:1d:64: 85:97:11:69:b8:f0:88:c7:16:04:4b:6e:14:89:d9: 9b:41:bb:34:c6:1b:dc:06:9e:cd:1b:de:8d:f5:1f: e5:be:06:46:0c:76:9f:5c:88:c8:d5:48:be:40:97: 2a:10:27:7a:ff:73:65:23:c3:5a:60:12:7b:2b:fa: 6e:80:3f:6f:12:8e:02:dc:1c:03:73:dc:c9:f8:af: d3:d9:a3:83:01:7f:ed:93:94:44:f7:6d:86:31:e5: b7:a9:a9:1e:18:64:47:7c:25:a9:ee:e0:7b:09:c5: ce:91:b3:65:86:06:86:6d:b3:d5:66:43:60:f1:91: 8c:25:2b:a1:0c:e1:ae:9b:c5:90:c3:2f:5e:84:ab: a1:d6:26:82:b7:8c:2f:8c:31:00:80:f5:a8:67:25: 7d:ab:fa:83:15:2b:3f:16:14:6f:b2:ac:fd:d9:55: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:0D:E6:B1:75:A7:0F:D4:B7:8B:6E:33:8C:38:43:63:88:99:A9 X509v3 Authority Key Identifier: keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:bd:be:3d:a8:be:ae:77:fc:34:68:8a:23:51:48:42:69:04: 03:a2:15:2b:be:dc:c1:ed:2f:44:b6:ed:e0:01:2f:f1:08:84: e8:58:db:22:e8:84:c2:6e:d0:e5:3e:9a:cd:4d:04:93:59:48: 75:b6:99:ba:76:61:5b:9f:f0:11:b6:ca:bc:c2:58:c0:d3:23: 83:04:3f:03:ad:f9:67:cf:8f:5e:98:c0:33:de:d9:dd:07:89: be:fb:53:c8:fc:47:22:a5:b5:f8:ad:70:ed:85:fa:a2:99:a1: 44:16:0f:59:2d:a2:c2:c0:6b:01:fb:a3:7e:4a:90:5e:c6:4c: 39:ad:1e:47:db:f9:3a:cd:de:b8:f2:f0:cf:a3:00:a5:ad:73: fb:86:1b:9f:8b:fe:4b:7f:c8:51:98:30:85:7b:e1:8a:e9:75: 3e:b9:51:7a:3a:19:cd:b2:2c:31:f6:1e:54:e4:5c:d4:8c:2d: 23:b0:6d:8e:4a:a9:7b:d3:d1:fa:08:30:3b:3f:43:7b:b3:75: 85:fa:7e:1f:e3:dc:36:76:a1:21:18:f9:a7:77:61:bf:63:af: e9:56:aa:8d:bd:62:5c:86:ae:74:9c:71:f3:ed:2c:1f:71:b6: 64:a9:51:d8:de:73:72:11:fc:6d:72:f1:35:6c:2a:93:30:b4: 9a:6d:83:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu6ek69/AjTk3U9+LmJ6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZmFmM2EzZjIxNDBjYjdjNmZmMGNkNmE3ZjU2MTRhMDVl NGU0NjcwHhcNMjUxMjEzMjIwMTI2WhcNMjUxMjE0MjIwMTI2WjAzMTEwLwYDVQQD EyhlYTIxMGRlNmIxNzVhNzBmZDRiNzhiNmUzMzhjMzg0MzYzODg5OWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MOp01ZyZxmdKOSKCl30pGVXswbH J1MKanGciHFEnvflACD3iaDERSXClhOypdVlcG7pdbV9cI5XhTyJNIptHuN75fv5 F0w+WtcGaQLcmY9s7alE9d5IHWSFlxFpuPCIxxYES24UidmbQbs0xhvcBp7NG96N 9R/lvgZGDHafXIjI1Ui+QJcqECd6/3NlI8NaYBJ7K/pugD9vEo4C3BwDc9zJ+K/T 2aODAX/tk5RE922GMeW3qakeGGRHfCWp7uB7CcXOkbNlhgaGbbPVZkNg8ZGMJSuh DOGum8WQwy9ehKuh1iaCt4wvjDEAgPWoZyV9q/qDFSs/FhRvsqz92VWFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOohDeaxdacP1LeLbjOMOENjiJmpMB8GA1UdIwQY MBaAFNf686PyFAy3xv8M1qf1YUoF5ORnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYt ZjM3OTdjZmQ2NWFlLzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kZjk0ZTItN2NjOS00MWExLTk1MmYtZjM3OTdjZmQ2NWFl LzEvMV9yem9fSVVETGZHX3d6V3BfVmhTZ1hrNUdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsr2+Pai+ rnf8NGiKI1FIQmkEA6IVK77cwe0vRLbt4AEv8QiE6FjbIuiEwm7Q5T6azU0Ek1lI dbaZunZhW5/wEbbKvMJYwNMjgwQ/A635Z8+PXpjAM97Z3QeJvvtTyPxHIqW1+K1w 7YX6opmhRBYPWS2iwsBrAfujfkqQXsZMOa0eR9v5Os3euPLwz6MApa1z+4Ybn4v+ S3/IUZgwhXvhiul1PrlRejoZzbIsMfYeVORc1IwtI7Btjkqpe9PR+ggwOz9De7N1 hfp+H+PcNnahIRj5p3dhv2Ov6Vaqjb1iXIaudJxx8+0sH3G2ZKlR2N5zchH8bXLx NWwqkzC0mm2DpQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:32 2025 by rpki-client