This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft File: az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json) Hash identifier: ATN21fu+QL/hGMzpv9NDXORCdjmUdQz927I7Q1/wt14= Subject key identifier: 5A:26:35:A9:F7:D1:8C:36:79:2F:B4:2F:F8:74:53:11:9F:2F:1D:C9 Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC Certificate issuer: /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc Certificate serial: 019B3EDA9AA41E0EA66EDA3894719696A8F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft Manifest number: 16D9 Signing time: Sun 21 Dec 2025 03:01:12 +0000 Manifest this update: Sun 21 Dec 2025 03:01:12 +0000 Manifest next update: Mon 22 Dec 2025 03:01:12 +0000 Files and hashes: 1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: qP3Lj/gVn0VGYb7U1iCV6ZaDTnAlG9F++DfpCD0XOCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:9a:a4:1e:0e:a6:6e:da:38:94:71:96:96:a8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc Validity Not Before: Dec 21 03:01:12 2025 GMT Not After : Dec 22 03:01:12 2025 GMT Subject: CN=5a2635a9f7d18c36792fb42ff87453119f2f1dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:26:fe:e7:c5:9e:3c:c5:30:b5:c5:0a:a4: f9:8b:15:55:26:dd:c8:d3:f1:6b:64:ad:3d:5f:62: 52:83:6c:ac:fe:ec:26:9e:19:7f:cd:12:89:c1:f7: ca:cc:c2:79:ec:fc:1b:2a:ba:e0:e1:a4:1b:89:31: 76:7a:63:e7:f3:8a:e4:79:23:dc:bc:98:7f:ac:61: b9:38:d5:08:71:b4:e1:b7:cd:72:ee:f6:51:b6:8b: 02:0b:dc:38:38:80:6b:3b:a8:0b:0c:d6:a0:e8:d8: 95:76:d9:8a:b0:17:9a:2a:1e:23:63:51:4c:0c:2c: 2b:b3:b8:f7:63:e6:07:9f:25:db:24:d4:bb:18:d0: fc:2a:68:26:ce:fb:c8:91:21:70:ff:56:4e:22:6f: 97:19:73:9d:b0:c0:90:21:ab:38:56:53:f3:79:67: 0c:34:27:63:81:59:56:08:64:f6:9d:d9:f1:ea:5a: d3:5b:9c:62:c4:28:a7:60:b3:84:94:ef:8b:fe:c1: 10:e6:0b:9c:5e:79:af:9b:8d:da:16:a7:95:ce:11: 31:89:73:c8:89:bf:32:84:97:dc:36:3a:eb:96:48: f6:93:5b:cd:b0:c0:3e:a1:33:a4:c4:53:25:05:28: 6d:01:5f:1b:bf:ea:a6:53:4a:ec:93:86:62:35:57: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:26:35:A9:F7:D1:8C:36:79:2F:B4:2F:F8:74:53:11:9F:2F:1D:C9 X509v3 Authority Key Identifier: keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:dc:28:e5:03:3b:34:eb:98:1e:19:9c:bf:77:82:3a:34:4f: a2:e1:49:5e:25:ec:df:a8:4d:ec:99:e7:12:f2:7d:4e:09:3f: 18:12:33:ee:ff:ac:23:33:58:ce:8a:06:26:14:9d:e0:4d:6e: d7:b3:19:9c:3c:16:2c:5d:a6:ab:44:5a:80:3c:f3:ce:b7:3c: 05:7f:52:8d:27:fa:e9:cc:38:b6:b0:d8:13:d4:f1:0f:55:a8: b3:34:cf:d8:62:19:7a:79:58:11:11:6c:b1:fd:b5:b1:a5:9e: c6:02:78:8a:d9:09:89:11:56:f9:91:f4:d4:55:70:4d:c4:99: c1:3f:9e:d7:fc:2b:7a:16:f5:ac:08:58:bf:dc:ec:9c:89:bd: 13:68:db:fd:54:74:20:9f:d2:ca:4e:33:18:07:41:8e:5e:e4: 04:13:e4:80:42:83:57:f2:4a:ec:64:f4:59:49:3a:75:db:58: ed:6a:8c:e3:aa:bb:66:f6:0b:24:5c:f1:d7:95:34:a4:17:72: f1:1d:1b:50:12:61:cb:a3:08:3d:15:fe:bb:ac:fa:72:6b:87: db:87:0a:05:bb:be:bb:c9:4d:95:50:09:77:3f:d1:67:44:9c: 8c:10:86:71:05:ce:00:10:8a:b8:48:44:7c:ad:26:d2:07:2e: 69:14:1c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pqkHg6mbto4lHGWlqjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0 ZjNkZGMwHhcNMjUxMjIxMDMwMTEyWhcNMjUxMjIyMDMwMTEyWjAzMTEwLwYDVQQD Eyg1YTI2MzVhOWY3ZDE4YzM2NzkyZmI0MmZmODc0NTMxMTlmMmYxZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz4m/ufFnjzFMLXFCqT5ixVVJt3I 0/FrZK09X2JSg2ys/uwmnhl/zRKJwffKzMJ57PwbKrrg4aQbiTF2emPn84rkeSPc vJh/rGG5ONUIcbTht81y7vZRtosCC9w4OIBrO6gLDNag6NiVdtmKsBeaKh4jY1FM DCwrs7j3Y+YHnyXbJNS7GND8KmgmzvvIkSFw/1ZOIm+XGXOdsMCQIas4VlPzeWcM NCdjgVlWCGT2ndnx6lrTW5xixCinYLOElO+L/sEQ5gucXnmvm43aFqeVzhExiXPI ib8yhJfcNjrrlkj2k1vNsMA+oTOkxFMlBShtAV8bv+qmU0rsk4ZiNVfKzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFomNan30Yw2eS+0L/h0UxGfLx3JMB8GA1UdIwQY MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdwo5QM7 NOuYHhmcv3eCOjRPouFJXiXs36hN7JnnEvJ9Tgk/GBIz7v+sIzNYzooGJhSd4E1u 17MZnDwWLF2mq0RagDzzzrc8BX9SjSf66cw4trDYE9TxD1WoszTP2GIZenlYERFs sf21saWexgJ4itkJiRFW+ZH01FVwTcSZwT+e1/wrehb1rAhYv9zsnIm9E2jb/VR0 IJ/Syk4zGAdBjl7kBBPkgEKDV/JK7GT0WUk6ddtY7WqM46q7ZvYLJFzx15U0pBdy 8R0bUBJhy6MIPRX+u6z6cmuH24cKBbu+u8lNlVAJdz/RZ0ScjBCGcQXOABCKuEhE fK0m0gcuaRQc+A== -----END CERTIFICATE-----Generated at Sun Dec 21 04:25:06 2025 by rpki-client