This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json) Hash identifier: IzFe0TpEEfp1W8/m+1AorpNqrHQ4DOWKElCg+9VGYE8= Subject key identifier: 37:63:F4:5E:47:D8:62:5A:09:E0:D1:2C:7E:14:AF:52:D4:50:7D:7E Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Certificate serial: 019AF277348238C243313738756BEAEB9873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft Manifest number: 0E3F Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: D0gOOP/9/VZ5YNnwfxvk6ovWlODSXGWnl6QaBmye4vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:34:82:38:c2:43:31:37:38:75:6b:ea:eb:98:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=3763f45e47d8625a09e0d12c7e14af52d4507d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:ba:43:ec:73:e2:03:8f:26:8d:5f:2c:f6: 74:12:f4:ca:0b:54:b6:9c:40:d0:88:b8:93:ae:6b: 53:82:51:43:b9:a8:1c:4b:9c:02:c9:1e:a8:de:ce: 54:74:f3:78:b4:0c:9b:7a:c4:ce:7c:8d:e4:13:5e: 6f:e7:73:cc:f7:6b:4d:5a:0b:1c:c5:37:0d:23:fc: 8f:b3:1a:cc:60:be:f1:5d:26:80:55:c8:16:9f:fa: 58:aa:b7:1b:68:f1:10:f9:df:2b:85:a2:8b:50:45: 18:43:93:77:bf:ac:a4:cc:60:90:06:1e:b4:02:ed: 70:10:f1:dd:14:d8:20:a7:58:f0:96:7e:d6:6a:9a: 7d:4a:03:60:60:56:ea:56:6c:65:ca:69:58:50:6f: 56:4d:59:19:3d:54:bf:e9:7b:16:7d:55:84:3d:05: 9e:c1:66:2d:4d:8b:bf:44:5c:9d:a1:50:bc:01:74: 5e:88:3d:20:c1:09:44:86:07:41:9d:f3:39:4f:5a: 77:97:d4:fb:1e:ce:6b:75:bd:6e:58:39:d9:a9:49: 46:51:b0:e2:a6:44:86:53:31:ce:49:78:70:8b:ca: 35:e3:00:0d:6a:5e:3b:06:e8:b8:30:99:24:71:a5: ee:4a:fb:6f:af:f7:05:73:70:ec:42:40:55:5f:9c: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:63:F4:5E:47:D8:62:5A:09:E0:D1:2C:7E:14:AF:52:D4:50:7D:7E X509v3 Authority Key Identifier: keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:83:87:6d:27:5e:53:0a:6a:13:ad:7c:9c:7d:6b:6b:a6:89: 1e:dc:ba:c4:8d:c3:9d:ac:21:b2:00:0c:cd:eb:50:12:30:c9: 28:09:41:d9:bb:38:ca:d2:1b:d6:01:03:a1:21:8a:6e:95:9a: 0d:44:2b:30:9c:49:b8:00:9b:c9:88:46:57:60:c5:32:9f:b1: de:90:90:1c:65:98:8f:84:de:a0:5f:da:5c:b9:85:1a:0d:7f: 6f:c1:9b:7f:7b:3f:5d:e1:eb:2a:14:e7:59:5b:b8:8e:d4:d8: c7:b7:c4:c6:49:27:7c:94:77:4f:b8:e3:eb:fd:19:ca:f0:db: 99:cc:77:72:e1:61:02:c8:bf:ae:65:53:b0:a7:b4:d2:cd:23: 9c:d5:d5:44:7f:b2:df:30:d2:c3:02:28:75:e6:5b:88:93:d3: 0d:4b:6c:6a:0b:fe:74:3e:c9:80:14:ca:ae:0c:52:08:41:a7: 97:b0:26:b6:19:85:14:27:b0:a9:57:b6:d0:28:24:0b:04:ea: 4e:47:5c:72:ae:a8:37:d8:cd:b7:e2:17:5c:a2:a4:c7:29:bc: 28:82:26:97:f2:cc:32:ce:a1:6e:c4:d3:cf:9f:37:95:75:37: 95:ef:f6:fb:19:16:98:e0:e6:17:9c:de:1b:7d:90:17:3e:95: b3:73:38:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzSCOMJDMTc4dWvq65hzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2Y3NmQ2MTA4MTQ4NjUzNjZmYWE2N2NmYzY1YWQwNjlj N2NmYzQwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EygzNzYzZjQ1ZTQ3ZDg2MjVhMDllMGQxMmM3ZTE0YWY1MmQ0NTA3ZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdm6Q+xz4gOPJo1fLPZ0EvTKC1S2 nEDQiLiTrmtTglFDuagcS5wCyR6o3s5UdPN4tAybesTOfI3kE15v53PM92tNWgsc xTcNI/yPsxrMYL7xXSaAVcgWn/pYqrcbaPEQ+d8rhaKLUEUYQ5N3v6ykzGCQBh60 Au1wEPHdFNggp1jwln7Wapp9SgNgYFbqVmxlymlYUG9WTVkZPVS/6XsWfVWEPQWe wWYtTYu/RFydoVC8AXReiD0gwQlEhgdBnfM5T1p3l9T7Hs5rdb1uWDnZqUlGUbDi pkSGUzHOSXhwi8o14wANal47Bui4MJkkcaXuSvtvr/cFc3DsQkBVX5zgpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdj9F5H2GJaCeDRLH4Ur1LUUH1+MB8GA1UdIwQY MBaAFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQt ZjVkMDI4NTRmNTFmLzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQtZjVkMDI4NTRmNTFm LzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYOHbSde UwpqE618nH1ra6aJHty6xI3DnawhsgAMzetQEjDJKAlB2bs4ytIb1gEDoSGKbpWa DUQrMJxJuACbyYhGV2DFMp+x3pCQHGWYj4TeoF/aXLmFGg1/b8Gbf3s/XeHrKhTn WVu4jtTYx7fExkknfJR3T7jj6/0ZyvDbmcx3cuFhAsi/rmVTsKe00s0jnNXVRH+y 3zDSwwIodeZbiJPTDUtsagv+dD7JgBTKrgxSCEGnl7AmthmFFCewqVe20CgkCwTq Tkdccq6oN9jNt+IXXKKkxym8KIIml/LMMs6hbsTTz583lXU3le/2+xkWmODmF5ze G32QFz6Vs3M4bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:32 2025 by rpki-client