This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json) Hash identifier: MUAZblF5N/LsSWGshpZFx9BhepO2+/lYmM+2iQZi0T8= Subject key identifier: C5:2A:19:D1:73:00:44:63:2B:A0:F3:62:B4:93:52:96:DD:00:EC:6E Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10 Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10 Certificate serial: 019AF31B796469CCA2DDE3B31452D86C20D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 10:00:55 +0000 Manifest this update: Sat 06 Dec 2025 10:00:55 +0000 Manifest next update: Sun 07 Dec 2025 10:00:55 +0000 Files and hashes: 1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=) 2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: 8OZVxLMr4ZsJfGoPtSQlwYnBba78BWf3U7+wiNT+bzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:79:64:69:cc:a2:dd:e3:b3:14:52:d8:6c:20:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10 Validity Not Before: Dec 6 10:00:55 2025 GMT Not After : Dec 7 10:00:55 2025 GMT Subject: CN=c52a19d1730044632ba0f362b4935296dd00ec6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:9c:ea:2a:8c:86:4b:b4:74:06:ae:f8:c3: 42:d4:92:da:dc:6d:e5:08:bf:8d:6b:b5:d8:ce:d0: e3:43:4c:06:aa:02:81:df:19:28:ae:b1:79:a6:8a: f8:27:19:47:71:15:74:61:2e:ed:db:8c:95:b4:2d: 18:f1:08:6a:07:83:0e:1e:f6:1e:42:18:90:7d:51: aa:ca:f5:7d:c5:eb:9a:c2:53:0b:b4:53:b9:f4:89: 0a:64:45:0e:7f:f1:1d:64:c6:70:7d:ef:71:2e:81: 6e:6e:31:8b:5b:23:67:5d:c1:35:89:c2:cf:e5:5b: 0e:77:e9:22:c2:67:2f:18:69:1b:ee:13:7f:ec:48: 3d:26:fd:5b:0b:32:85:7b:ec:95:7e:df:f1:0e:0c: 6d:37:bc:bf:ac:4c:e6:4f:36:4a:4f:27:72:47:9e: 02:9f:7d:31:17:9b:06:80:5d:5f:9a:04:c4:a7:fb: 39:24:64:9a:90:04:90:7d:24:27:4c:cb:77:37:35: d9:c8:14:32:11:63:51:10:88:81:5d:02:48:7b:26: 95:56:ec:41:86:32:da:70:da:2f:48:b9:c7:ed:7d: 7e:86:79:60:77:5b:7c:f3:43:4f:ba:9d:72:2e:a9: 1c:8d:b2:62:ee:53:4f:4a:a6:9a:16:16:95:f9:12: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2A:19:D1:73:00:44:63:2B:A0:F3:62:B4:93:52:96:DD:00:EC:6E X509v3 Authority Key Identifier: keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9b:5b:07:8b:94:2c:1a:11:35:b1:fc:56:dd:8b:52:ec:82: 86:94:a3:16:88:97:3c:2c:33:7d:01:00:b2:f0:b4:8f:30:4c: d1:ad:50:87:42:36:97:e0:4f:42:e1:93:13:76:8f:0e:eb:83: 43:0d:71:c1:04:3d:59:c2:57:9d:e7:f4:7d:55:fd:86:aa:89: 9f:09:bc:35:f7:35:6d:27:01:ff:be:b4:9e:8e:58:8a:33:2f: 7a:0f:69:c8:09:b2:7d:b1:97:b2:78:b6:65:d5:22:17:ec:ac: a2:7d:5b:a4:2d:81:7e:a6:03:d0:c2:9e:14:95:73:1c:a1:2d: ce:0c:9d:cc:d5:51:63:f5:4e:2c:bd:c3:36:21:3d:90:44:40: 46:e2:57:34:b6:4b:73:08:85:27:3d:c0:ad:c0:2b:c9:1d:9f: d1:7b:c3:bc:79:eb:c7:ce:b4:18:b6:6c:a2:7f:8f:ae:af:a3: f2:90:7b:d8:d7:c4:fd:82:ca:42:2e:ea:58:5e:51:8d:e4:b9: 52:77:cf:5c:15:7d:d9:c3:4b:cb:91:a4:27:58:a5:b7:84:08: 2d:12:0a:de:93:b1:9d:cf:4b:ea:d8:99:a9:ca:1d:d0:d2:4c: fa:21:6b:c2:73:04:46:3f:4e:c2:cc:bc:2e:9c:25:1e:1e:a2: 46:c5:e5:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3lkacyi3eOzFFLYbCDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMzc4ZGYyN2JkOTI2MGM3ZWIxNTI3M2U5OTNlMzZiMDk4 NWRhMTAwHhcNMjUxMjA2MTAwMDU1WhcNMjUxMjA3MTAwMDU1WjAzMTEwLwYDVQQD EyhjNTJhMTlkMTczMDA0NDYzMmJhMGYzNjJiNDkzNTI5NmRkMDBlYzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tuc6iqMhku0dAau+MNC1JLa3G3l CL+Na7XYztDjQ0wGqgKB3xkorrF5por4JxlHcRV0YS7t24yVtC0Y8QhqB4MOHvYe QhiQfVGqyvV9xeuawlMLtFO59IkKZEUOf/EdZMZwfe9xLoFubjGLWyNnXcE1icLP 5VsOd+kiwmcvGGkb7hN/7Eg9Jv1bCzKFe+yVft/xDgxtN7y/rEzmTzZKTydyR54C n30xF5sGgF1fmgTEp/s5JGSakASQfSQnTMt3NzXZyBQyEWNREIiBXQJIeyaVVuxB hjLacNovSLnH7X1+hnlgd1t880NPup1yLqkcjbJi7lNPSqaaFhaV+RJRZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUqGdFzAERjK6DzYrSTUpbdAOxuMB8GA1UdIwQY MBaAFGs3jfJ72SYMfrFSc+mT42sJhdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgt OTdmYTgwYzBkZjQxLzEvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgtOTdmYTgwYzBkZjQx LzEvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5tbB4uU LBoRNbH8Vt2LUuyChpSjFoiXPCwzfQEAsvC0jzBM0a1Qh0I2l+BPQuGTE3aPDuuD Qw1xwQQ9WcJXnef0fVX9hqqJnwm8Nfc1bScB/760no5YijMveg9pyAmyfbGXsni2 ZdUiF+yson1bpC2BfqYD0MKeFJVzHKEtzgydzNVRY/VOLL3DNiE9kERARuJXNLZL cwiFJz3ArcAryR2f0XvDvHnrx860GLZson+Prq+j8pB72NfE/YLKQi7qWF5RjeS5 UnfPXBV92cNLy5GkJ1ilt4QILRIK3pOxnc9L6tiZqcod0NJM+iFrwnMERj9Owsy8 LpwlHh6iRsXl5g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:16 2025 by rpki-client