This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json) Hash identifier: EXqntslwm3XCeSJpIUlVwXJwKilDUMmnDIK/Qs0Vw8I= Subject key identifier: 54:C6:46:EB:89:FC:9C:16:C8:4F:90:05:26:49:14:1C:98:C6:C0:7F Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Certificate serial: 019B3231C943AC22B10A0A101FE5B5AB8850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft Manifest number: 0E60 Signing time: Thu 18 Dec 2025 16:01:22 +0000 Manifest this update: Thu 18 Dec 2025 16:01:22 +0000 Manifest next update: Fri 19 Dec 2025 16:01:22 +0000 Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: EGLfMM6kjaEMwHfSSy3Q92U9bfepJ6vfTMY4r3ZW4aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:c9:43:ac:22:b1:0a:0a:10:1f:e5:b5:ab:88:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Validity Not Before: Dec 18 16:01:22 2025 GMT Not After : Dec 19 16:01:22 2025 GMT Subject: CN=54c646eb89fc9c16c84f90052649141c98c6c07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:d1:77:3a:98:98:a5:58:00:24:20:f3:5e: a6:8a:67:d7:64:9b:68:15:50:cf:3b:45:30:e3:ae: b1:58:b7:b2:83:fa:16:a7:e2:96:0b:20:da:b9:bc: c7:30:5d:7c:93:4e:3d:13:bf:71:b7:5f:88:d1:e0: b5:08:26:94:56:c7:52:75:d5:0a:8c:ea:12:d5:b5: 49:d4:55:38:af:26:02:d0:f2:5a:43:80:c4:d8:86: 92:21:39:30:a6:de:e2:5a:ce:4f:58:42:5b:4f:18: 47:58:a1:f7:c4:af:e2:55:b1:2d:32:db:cd:b6:75: af:c2:91:9f:45:b4:99:b0:10:19:94:d7:c7:b1:22: 65:6d:d9:b6:90:7b:7e:4a:b3:a3:77:72:20:ec:f6: 09:b9:fc:d8:a5:d7:7e:a0:18:31:e3:29:37:4a:80: 88:43:99:1c:fa:cf:0a:2c:bc:c4:5a:a0:42:62:1f: 85:77:1d:7f:e9:5b:7e:cb:6b:f8:94:76:6d:bf:40: a5:fe:73:32:b1:c3:39:58:73:e1:74:5f:8c:35:c0: f1:cb:37:7d:40:a3:b3:65:f9:28:49:b1:80:34:9f: c3:ba:f7:8a:bf:9b:5c:bf:fd:c6:cf:c5:cf:f0:53: 24:cc:5d:24:20:b9:bb:59:fa:f2:ab:ff:61:6d:ed: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C6:46:EB:89:FC:9C:16:C8:4F:90:05:26:49:14:1C:98:C6:C0:7F X509v3 Authority Key Identifier: keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:29:a5:80:93:ac:02:26:21:92:3c:da:a4:fb:da:bf:48:53: 6b:3c:f9:23:43:de:13:a8:46:eb:1e:7b:b1:b4:64:ab:a0:55: 81:1b:a5:16:61:98:8f:fc:47:a1:0f:d2:12:1d:7f:bb:16:d8: 9d:f8:26:e9:b2:4f:b6:36:09:3d:c0:7e:ec:d4:ab:d6:6b:d8: 70:e2:19:37:33:f0:4a:fb:8a:ab:2d:fe:ec:d4:58:79:9b:6a: c5:a0:7e:f4:ec:87:f9:39:4e:3f:ea:74:bc:db:ad:f2:76:fc: b8:78:a9:ad:30:b0:b4:17:3b:7f:51:fb:09:3a:b1:bd:4d:aa: fc:36:73:03:39:bc:b9:1f:f0:f9:cc:a6:dc:b6:09:da:f0:1a: 70:55:ad:f5:69:a6:58:ec:9c:2f:4f:12:b5:b7:b4:f5:9e:17: d8:09:09:5d:5f:e1:56:f0:d0:f6:f4:7e:e8:9a:25:b3:d0:4c: 96:4d:47:71:56:62:86:f7:c4:bc:ca:d9:64:13:9f:a7:04:7d: 1b:68:0c:6e:d6:0a:71:03:cb:ae:fe:e0:ae:39:83:3f:10:46: a8:71:28:8e:85:92:ea:bc:29:7f:51:92:aa:6e:a3:6b:6c:c9: cd:af:aa:74:7e:1e:f6:cb:1c:e1:d4:8e:26:0d:77:47:63:84: 9b:04:cc:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMclDrCKxCgoQH+W1q4hQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2Y3NmQ2MTA4MTQ4NjUzNjZmYWE2N2NmYzY1YWQwNjlj N2NmYzQwHhcNMjUxMjE4MTYwMTIyWhcNMjUxMjE5MTYwMTIyWjAzMTEwLwYDVQQD Eyg1NGM2NDZlYjg5ZmM5YzE2Yzg0ZjkwMDUyNjQ5MTQxYzk4YzZjMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCTRdzqYmKVYACQg816mimfXZJto FVDPO0Uw466xWLeyg/oWp+KWCyDaubzHMF18k049E79xt1+I0eC1CCaUVsdSddUK jOoS1bVJ1FU4ryYC0PJaQ4DE2IaSITkwpt7iWs5PWEJbTxhHWKH3xK/iVbEtMtvN tnWvwpGfRbSZsBAZlNfHsSJlbdm2kHt+SrOjd3Ig7PYJufzYpdd+oBgx4yk3SoCI Q5kc+s8KLLzEWqBCYh+Fdx1/6Vt+y2v4lHZtv0Cl/nMyscM5WHPhdF+MNcDxyzd9 QKOzZfkoSbGANJ/DuveKv5tcv/3Gz8XP8FMkzF0kILm7Wfryq/9hbe1ltwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTGRuuJ/JwWyE+QBSZJFByYxsB/MB8GA1UdIwQY MBaAFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQt ZjVkMDI4NTRmNTFmLzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQtZjVkMDI4NTRmNTFm LzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSmlgJOs AiYhkjzapPvav0hTazz5I0PeE6hG6x57sbRkq6BVgRulFmGYj/xHoQ/SEh1/uxbY nfgm6bJPtjYJPcB+7NSr1mvYcOIZNzPwSvuKqy3+7NRYeZtqxaB+9OyH+TlOP+p0 vNut8nb8uHiprTCwtBc7f1H7CTqxvU2q/DZzAzm8uR/w+cym3LYJ2vAacFWt9Wmm WOycL08Stbe09Z4X2AkJXV/hVvDQ9vR+6Jols9BMlk1HcVZihvfEvMrZZBOfpwR9 G2gMbtYKcQPLrv7grjmDPxBGqHEojoWS6rwpf1GSqm6ja2zJza+qdH4e9ssc4dSO Jg13R2OEmwTMzw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:44:33 2025 by rpki-client