This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json) Hash identifier: /M3q1hacjTgfQhryZYgXscvRPxTO5B4mhc8L+rWDF1Q= Subject key identifier: 12:6C:7A:D3:87:50:3B:22:EB:2F:44:81:DA:3E:7F:62:A8:D1:3D:36 Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0 Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0 Certificate serial: 019AF3895E48251DAB42B19381BA508D4CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft Manifest number: 146F Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: t0AzWPR4J6x94FWDT2C72ZysKrjyuSQWjUQz8yv/cS0=) 2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5e:48:25:1d:ab:42:b1:93:81:ba:50:8d:4c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0 Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=126c7ad387503b22eb2f4481da3e7f62a8d13d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:fb:27:dd:1a:03:cd:a7:e0:96:83:f7:75: ec:53:3b:4a:4d:9f:e5:75:1a:3b:ab:83:3b:ea:e6: c6:e6:01:10:99:5b:e5:85:06:63:22:5f:af:f9:b7: 54:3f:c2:fa:d2:4f:01:66:81:49:fe:3b:a7:63:da: b2:ec:76:46:d5:5c:c5:2e:2a:ed:86:57:5e:ff:d1: 41:9b:e6:15:66:97:69:26:63:52:27:9e:09:8b:6b: 71:02:81:cf:1f:f7:cb:09:13:2c:92:19:c8:4e:88: e2:29:44:6d:48:1b:39:dc:3e:08:93:f6:17:cf:28: 14:5b:77:5f:a9:cd:c3:22:8c:80:e9:6f:e9:1e:49: 1b:6b:97:4b:61:4a:1e:ee:23:7f:9d:08:2d:ec:da: ef:2f:c5:2f:cd:ff:6b:f9:f4:08:fa:44:5e:f6:e9: b1:8a:66:ae:77:95:7c:53:71:e2:f2:ec:89:4c:10: 90:a2:4c:30:5c:59:25:c9:04:6d:2b:a2:d1:7b:98: 2b:b2:39:62:ad:a5:bd:fe:64:70:42:7d:c3:a4:9b: e5:f0:64:09:8e:67:7e:9a:27:3e:31:58:7c:f4:f5: 71:8e:da:44:40:28:ee:f2:9e:85:4c:b5:af:29:55: 62:ca:a1:33:05:52:31:3b:07:9d:8c:02:b0:a4:cc: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6C:7A:D3:87:50:3B:22:EB:2F:44:81:DA:3E:7F:62:A8:D1:3D:36 X509v3 Authority Key Identifier: keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5c:28:88:0d:6b:a0:e2:70:94:08:3d:7f:0f:a7:0b:59:7a: 89:7d:cd:fc:bf:0b:36:48:03:eb:b0:f1:41:75:53:5f:01:23: 75:b8:9a:74:79:03:e5:42:79:d2:3e:39:64:f6:cc:cb:d4:fc: 8d:f5:cb:00:01:0b:b5:56:8f:7b:c2:0b:9b:38:a6:ea:76:23: 2e:20:cc:8d:d2:b2:52:b3:6c:03:4d:77:17:51:2f:a6:33:a7: 14:eb:1a:74:15:87:f7:d7:87:72:71:ef:1f:48:c6:bb:ee:ca: 42:70:4f:d1:66:a5:f5:5e:c3:70:ff:2b:f3:6e:dc:6b:36:c5: 49:99:f3:2b:aa:e1:5f:59:66:c5:bf:76:e4:69:38:87:08:80: e1:3a:78:72:7f:5c:8a:e0:64:c3:16:89:62:f8:3f:c2:43:17: 9e:a1:2c:86:7a:c2:84:c6:bb:8f:a3:42:15:1d:9f:da:4e:6f: ef:f3:47:48:a5:62:db:44:3a:e3:f6:f5:55:d2:7b:01:e7:d8: ba:17:33:1d:35:2a:ca:bf:89:0e:02:a1:f0:25:a2:b5:9c:dc: 60:10:ba:e5:82:e0:a7:86:93:68:41:06:56:78:c4:c6:0f:fd: 3e:ec:42:40:8e:37:1a:57:58:b9:ed:69:2e:8b:5c:99:24:bf: 03:fb:78:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV5IJR2rQrGTgbpQjUy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjZiMzY4NjcyMzhhYTcxOGJlMTdlNmU3M2NlNDBhOTg5 NTc4YTAwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EygxMjZjN2FkMzg3NTAzYjIyZWIyZjQ0ODFkYTNlN2Y2MmE4ZDEzZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcL7J90aA82n4JaD93XsUztKTZ/l dRo7q4M76ubG5gEQmVvlhQZjIl+v+bdUP8L60k8BZoFJ/junY9qy7HZG1VzFLirt hlde/9FBm+YVZpdpJmNSJ54Ji2txAoHPH/fLCRMskhnITojiKURtSBs53D4Ik/YX zygUW3dfqc3DIoyA6W/pHkkba5dLYUoe7iN/nQgt7NrvL8Uvzf9r+fQI+kRe9umx imaud5V8U3Hi8uyJTBCQokwwXFklyQRtK6LRe5grsjliraW9/mRwQn3DpJvl8GQJ jmd+mic+MVh89PVxjtpEQCju8p6FTLWvKVViyqEzBVIxOwedjAKwpMyY7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJsetOHUDsi6y9Egdo+f2Ko0T02MB8GA1UdIwQY MBaAFFP2s2hnI4qnGL4X5uc85AqYlXigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDct NmRiYWQzMWRiYzQxLzEvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDctNmRiYWQzMWRiYzQx LzEvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFwoiA1r oOJwlAg9fw+nC1l6iX3N/L8LNkgD67DxQXVTXwEjdbiadHkD5UJ50j45ZPbMy9T8 jfXLAAELtVaPe8ILmzim6nYjLiDMjdKyUrNsA013F1EvpjOnFOsadBWH99eHcnHv H0jGu+7KQnBP0Wal9V7DcP8r827cazbFSZnzK6rhX1lmxb925Gk4hwiA4Tp4cn9c iuBkwxaJYvg/wkMXnqEshnrChMa7j6NCFR2f2k5v7/NHSKVi20Q64/b1VdJ7AefY uhczHTUqyr+JDgKh8CWitZzcYBC65YLgp4aTaEEGVnjExg/9PuxCQI43GldYue1p LotcmSS/A/t4dA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:47:06 2025 by rpki-client