This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json) Hash identifier: 3nscAbTwSyAtCOh9W8oAlfCvjsbkT2/RP7sRWzZ94so= Subject key identifier: 8D:6F:60:82:F4:EE:F4:E4:8E:0B:A0:FD:30:1E:05:53:31:43:BE:C0 Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Certificate serial: 019AF19ACA0FB598A453F7BBE77AA681C949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: tq0oeNyXtkBK7lgEKNcjIKgiQddWTKvnKytSoeM9y5I=) 2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ca:0f:b5:98:a4:53:f7:bb:e7:7a:a6:81:c9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=8d6f6082f4eef4e48e0ba0fd301e05533143bec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:9f:27:ea:14:1a:c7:9e:ea:ac:f0:32:f2: c4:85:e6:70:f9:07:3e:cb:3f:08:58:5f:2e:b2:06: b6:6a:e5:e4:c7:71:95:7a:81:6e:7b:14:7c:f4:c8: 9b:44:68:01:77:b1:df:84:7a:30:9d:fb:01:2d:c2: de:09:f2:ba:4a:82:c8:6e:1f:87:31:bf:e4:f2:9c: b1:da:8b:61:e4:e0:81:70:38:9b:1f:69:98:a9:f6: e8:22:de:c6:f4:fc:f7:42:0f:67:65:c9:25:84:9a: 09:91:42:c2:95:35:ee:03:aa:08:01:dc:20:b3:ee: 90:bf:b0:d9:04:d2:a3:e9:60:d8:a7:99:56:91:5d: f6:af:a6:c9:33:8a:15:e7:1b:c0:33:7a:84:7e:6e: ae:7f:52:62:95:1a:33:c6:23:8b:a4:61:57:7e:76: e8:3b:ce:0d:8f:c2:39:a6:f5:53:2a:84:a5:eb:31: 88:67:a7:e1:7b:b9:33:74:e0:01:7a:cb:3e:71:26: 36:67:10:3e:3f:fd:84:da:62:14:0d:fa:e0:22:78: 51:ff:82:69:66:6c:fe:0a:83:f7:c5:db:be:d8:e6: fa:00:11:57:10:da:3a:ca:87:20:56:16:a6:eb:9b: a5:1f:af:86:19:70:9c:bb:7c:bb:10:43:38:c4:c7: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6F:60:82:F4:EE:F4:E4:8E:0B:A0:FD:30:1E:05:53:31:43:BE:C0 X509v3 Authority Key Identifier: keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e1:df:b3:e4:bc:5e:39:3d:dc:20:af:50:64:85:9f:41:54: 3d:f5:75:98:71:79:e7:95:41:22:83:75:c9:45:f0:08:9c:29: 06:a7:24:24:bd:81:b4:37:ec:93:38:e7:81:54:4a:07:37:27: 72:7e:81:3c:9e:fa:1a:be:f3:47:0a:83:6d:b6:a7:46:6a:52: 67:fa:39:02:be:c9:49:be:43:53:c3:a8:e1:eb:84:85:36:b8: 30:d1:60:8b:a5:de:99:89:79:0f:6a:b0:12:ff:f9:1a:24:24: 6b:2d:a4:f9:89:5a:13:ea:60:97:d4:8a:65:00:b3:00:90:d4: 64:d0:f2:63:44:91:cb:e8:94:52:f3:41:7b:fa:89:ee:6c:32: cd:d5:fd:f0:18:0b:33:d4:e9:a2:69:88:ca:46:a5:71:dd:07: e8:c0:1d:96:86:57:61:04:ac:05:4e:c2:95:5a:2a:9c:2f:5c: b2:9e:fa:de:4b:16:8e:0a:4d:59:39:22:84:65:70:77:c6:1c: fb:19:e8:1e:f1:08:3f:55:e9:54:74:01:9b:e4:70:d4:8f:51: ed:fc:8d:fc:37:61:a3:a7:a9:be:b2:51:18:8e:15:04:c4:95: 25:11:4c:67:a1:f0:26:62:fb:b8:cc:82:40:69:c9:e7:c6:46: c4:d3:dd:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsoPtZikU/e753qmgclJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy ZjE1NzIwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD Eyg4ZDZmNjA4MmY0ZWVmNGU0OGUwYmEwZmQzMDFlMDU1MzMxNDNiZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHWfJ+oUGsee6qzwMvLEheZw+Qc+ yz8IWF8usga2auXkx3GVeoFuexR89MibRGgBd7HfhHownfsBLcLeCfK6SoLIbh+H Mb/k8pyx2oth5OCBcDibH2mYqfboIt7G9Pz3Qg9nZcklhJoJkULClTXuA6oIAdwg s+6Qv7DZBNKj6WDYp5lWkV32r6bJM4oV5xvAM3qEfm6uf1JilRozxiOLpGFXfnbo O84Nj8I5pvVTKoSl6zGIZ6fhe7kzdOABess+cSY2ZxA+P/2E2mIUDfrgInhR/4Jp Zmz+CoP3xdu+2Ob6ABFXENo6yocgVham65ulH6+GGXCcu3y7EEM4xMfMgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1vYIL07vTkjgug/TAeBVMxQ77AMB8GA1UdIwQY MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOHfs+S8 Xjk93CCvUGSFn0FUPfV1mHF555VBIoN1yUXwCJwpBqckJL2BtDfskzjngVRKBzcn cn6BPJ76Gr7zRwqDbbanRmpSZ/o5Ar7JSb5DU8Oo4euEhTa4MNFgi6XemYl5D2qw Ev/5GiQkay2k+YlaE+pgl9SKZQCzAJDUZNDyY0SRy+iUUvNBe/qJ7mwyzdX98BgL M9TpommIykalcd0H6MAdloZXYQSsBU7ClVoqnC9csp763ksWjgpNWTkihGVwd8Yc +xnoHvEIP1XpVHQBm+Rw1I9R7fyN/Ddho6epvrJRGI4VBMSVJRFMZ6HwJmL7uMyC QGnJ58ZGxNPdyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:23 2025 by rpki-client