This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json) Hash identifier: 8kooeWv4c55ReNjRyrYHeh2BpGGoJYYJNU7SlPc8aYI= Subject key identifier: 29:72:21:01:F4:2A:BC:62:70:DD:60:39:DD:1F:D3:27:44:8E:36:A0 Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a Certificate serial: 019AF12D05E03AC38E8BCFA6D0C5424AD3C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft Manifest number: 086A Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: /bPN1gxdNxTizsivisrFD6Kph7IRKPoS+gUTeYGGa8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:05:e0:3a:c3:8e:8b:cf:a6:d0:c5:42:4a:d3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=29722101f42abc6270dd6039dd1fd327448e36a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:62:37:b5:63:83:12:b0:81:57:32:5f:be: 49:2a:5b:55:d8:8e:c9:36:67:bc:99:bd:45:a4:8d: e4:6a:3f:9b:58:32:95:91:f8:e8:0e:48:fc:f6:b6: 13:02:ea:f7:e1:31:47:87:d2:0d:ae:bc:9c:9e:fa: c5:5e:c5:2b:da:fd:a9:29:09:9d:65:90:e7:a3:47: 28:84:bf:41:b3:8b:b4:81:91:17:84:46:e4:d3:9f: 4f:0f:e4:78:42:0d:21:4f:27:c8:95:c2:bc:18:f3: 2b:1a:69:7d:f7:d5:c0:b4:c2:c7:40:7a:c7:22:ee: 38:3a:3e:e3:a4:58:a4:92:72:9d:0b:0e:1f:df:d4: 32:15:9b:cf:3c:a0:53:97:3d:e0:66:9b:f0:66:36: c8:1a:4e:98:b4:7e:74:36:d0:3e:2d:7f:9a:43:98: 2b:7e:e7:9d:59:e5:d7:45:ee:a6:42:7b:37:39:42: 06:80:c0:07:41:f5:d0:ba:d4:a8:de:b6:d6:93:05: ea:75:54:ec:a3:94:7b:13:26:76:85:aa:02:20:d4: e2:7f:e0:ee:b2:a4:84:ef:f2:90:82:34:83:21:6a: 05:17:42:c0:77:aa:ba:e8:07:a6:81:6f:cf:ea:de: 24:8e:b2:21:fc:0a:db:57:2c:f4:19:bf:1b:08:45: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:72:21:01:F4:2A:BC:62:70:DD:60:39:DD:1F:D3:27:44:8E:36:A0 X509v3 Authority Key Identifier: keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2d:14:60:1e:16:eb:6e:34:54:8a:1a:d7:3d:11:09:bd:eb: d4:f9:28:e8:1f:ab:a2:b1:7c:50:62:68:38:f9:33:e6:be:de: a2:61:32:52:7c:88:f8:8e:3b:3d:e2:a5:11:5e:01:a1:ef:87: ea:7f:6e:76:ce:86:9e:59:99:d1:43:8e:f5:8f:c9:e3:88:d8: 28:5f:fd:c2:b0:cf:e1:b1:40:ba:e3:d4:b2:71:cc:e4:c8:0c: 53:7a:3b:0f:a9:0a:8a:43:02:13:a0:19:d4:84:80:ae:11:ae: 79:af:c2:92:4b:58:4d:f6:ce:b9:f1:80:2f:b0:49:9f:08:8b: b3:f6:b3:5a:72:79:8e:f7:b5:92:c2:86:09:fe:e3:54:e7:75: d8:d1:92:e5:73:df:1e:d5:a3:32:cf:68:2c:c7:16:43:41:00: ec:61:03:4c:31:62:2f:6e:67:5b:58:41:75:79:5c:9f:a0:cb: b2:0d:86:70:a2:fc:9c:95:10:7f:c9:7a:9b:ec:68:1f:82:3e: a8:09:5b:46:58:df:72:8c:10:f1:12:38:3f:05:3d:9e:1b:c6: 59:ef:34:3b:63:f0:f2:09:62:97:67:06:89:e8:1b:a9:52:e2: 69:3d:b3:6b:bc:88:d0:55:a4:bc:3f:4c:b5:83:1f:b2:37:e2: 38:7d:ad:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQXgOsOOi8+m0MVCStPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTYyYjljZDJlNTU2YjU5NmZjNzI0MzU2NTgwN2I5ZTJk Yzg2OGEwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EygyOTcyMjEwMWY0MmFiYzYyNzBkZDYwMzlkZDFmZDMyNzQ0OGUzNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqABiN7VjgxKwgVcyX75JKltV2I7J Nme8mb1FpI3kaj+bWDKVkfjoDkj89rYTAur34TFHh9INrrycnvrFXsUr2v2pKQmd ZZDno0cohL9Bs4u0gZEXhEbk059PD+R4Qg0hTyfIlcK8GPMrGml999XAtMLHQHrH Iu44Oj7jpFikknKdCw4f39QyFZvPPKBTlz3gZpvwZjbIGk6YtH50NtA+LX+aQ5gr fuedWeXXRe6mQns3OUIGgMAHQfXQutSo3rbWkwXqdVTso5R7EyZ2haoCINTif+Du sqSE7/KQgjSDIWoFF0LAd6q66AemgW/P6t4kjrIh/ArbVyz0Gb8bCEUPtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClyIQH0KrxicN1gOd0f0ydEjjagMB8GA1UdIwQY MBaAFAGWK5zS5Va1lvxyQ1ZYB7ni3IaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEt NzAzNDJhMmU3NTMzLzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEtNzAzNDJhMmU3NTMz LzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC0UYB4W 6240VIoa1z0RCb3r1Pko6B+rorF8UGJoOPkz5r7eomEyUnyI+I47PeKlEV4Boe+H 6n9uds6GnlmZ0UOO9Y/J44jYKF/9wrDP4bFAuuPUsnHM5MgMU3o7D6kKikMCE6AZ 1ISArhGuea/CkktYTfbOufGAL7BJnwiLs/azWnJ5jve1ksKGCf7jVOd12NGS5XPf HtWjMs9oLMcWQ0EA7GEDTDFiL25nW1hBdXlcn6DLsg2GcKL8nJUQf8l6m+xoH4I+ qAlbRljfcowQ8RI4PwU9nhvGWe80O2Pw8glil2cGiegbqVLiaT2za7yI0FWkvD9M tYMfsjfiOH2tIg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:24 2025 by rpki-client