This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json) Hash identifier: w10+j/o+rf6bcJ3mnmfJhMBsAmMVpMDRVWZXJFAnNlI= Subject key identifier: 83:F7:BB:33:BA:31:E7:B3:C2:00:E1:C8:59:F3:70:3A:84:21:4F:0F Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Certificate serial: 019AF2402B8F5A23A976B599756E9955AA03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft Manifest number: 13F8 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: 35i0W-439ceXCAfaqLUm_3h3G24.roa (hash: xuOhVj3IlTLiG4QrKiExJxP+JLiXYysTKsGNlxVTku4=) 2: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=) 3: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=) 4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: 22grvrQ0na3kv574AbzGVCLouVKG5SNsY2/pYZ7Tg5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2b:8f:5a:23:a9:76:b5:99:75:6e:99:55:aa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=83f7bb33ba31e7b3c200e1c859f3703a84214f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ba:bb:8e:6d:23:7e:dd:29:42:3e:64:ec:a0: b3:44:10:b8:b6:86:48:81:25:9e:1a:e1:da:63:e6: 73:5f:e7:88:62:4b:d6:69:2a:34:56:85:ac:42:9b: 61:f2:21:f9:26:2e:1a:04:91:88:e3:fb:c8:34:69: 44:71:75:3e:1a:1b:2b:8d:8a:1a:33:f2:ed:9d:0c: b0:ee:38:f7:34:fa:32:b3:11:c7:00:b0:66:bd:48: 90:05:11:e6:79:29:42:1b:ee:55:b1:b5:35:76:c5: 5e:8d:56:a7:e5:b6:97:c1:59:47:37:5c:ba:2f:99: 67:93:70:f6:9d:d5:14:cc:13:32:a8:68:7f:44:bc: 40:0f:41:30:c0:4d:41:9e:ac:dd:5d:b9:bc:d3:1a: 59:82:62:1f:29:ed:72:f9:eb:d7:9a:80:40:75:d7: 5e:f0:60:9a:92:02:36:a3:f3:ed:0f:c9:0f:df:00: 47:08:70:dc:f2:fa:5b:20:b0:99:2a:72:34:f8:3b: 38:35:8c:ef:1a:23:11:22:d6:8d:ea:8d:9d:e0:7f: 9d:e5:36:2c:2d:13:24:4b:90:04:0e:62:a9:69:b9: 1f:06:a6:eb:7f:3e:dd:ae:be:09:f1:1a:53:fe:5b: a2:b6:4c:80:20:a0:28:08:e4:72:9b:8b:87:7b:e5: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F7:BB:33:BA:31:E7:B3:C2:00:E1:C8:59:F3:70:3A:84:21:4F:0F X509v3 Authority Key Identifier: keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2f:11:3d:ec:de:a1:ba:5f:62:d0:67:f3:d0:6f:ff:fc:d3: 6b:c7:48:0d:b8:4b:26:a8:7c:ad:f0:4e:33:20:c9:ec:b1:71: 06:55:a2:06:e1:cc:6f:c3:05:01:d5:ed:2d:95:e1:0a:75:e3: 4a:e3:91:8e:9e:55:e1:2d:15:1c:b0:be:1d:85:4b:12:c1:8b: 12:94:1a:7b:65:82:9f:bb:f1:59:80:22:46:2b:55:ec:86:4d: 7e:29:88:93:cb:5d:2f:c6:4e:66:f6:b3:1c:d1:90:0f:a9:38: 67:b8:c1:4b:9b:cd:4e:4f:58:ad:8e:a3:97:01:a8:9f:d8:1a: 98:61:11:85:0a:21:23:e9:b6:03:d5:c3:a3:56:76:83:0a:b3: 3a:11:45:3e:31:f6:52:53:e1:36:18:a0:11:53:ca:b5:5d:8f: 93:52:be:be:10:71:47:4d:0b:8b:a0:73:c9:e3:bf:db:c1:12: 6c:f1:c3:c2:87:6d:40:47:d3:c8:db:cf:82:c4:fc:d3:14:ff: 22:ef:b0:52:11:96:0f:c9:cd:43:af:2f:41:15:49:3b:0b:d9: b0:cb:c8:51:5d:0a:d8:22:58:cf:08:ea:7e:40:f1:f8:ec:ce: c8:a0:7d:f2:9b:e8:31:b9:85:a6:e0:8f:82:53:36:03:3f:22: db:3c:fc:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCuPWiOpdrWZdW6ZVaoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi M2Y4MjUwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD Eyg4M2Y3YmIzM2JhMzFlN2IzYzIwMGUxYzg1OWYzNzAzYTg0MjE0ZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7q7jm0jft0pQj5k7KCzRBC4toZI gSWeGuHaY+ZzX+eIYkvWaSo0VoWsQpth8iH5Ji4aBJGI4/vINGlEcXU+GhsrjYoa M/LtnQyw7jj3NPoysxHHALBmvUiQBRHmeSlCG+5VsbU1dsVejVan5baXwVlHN1y6 L5lnk3D2ndUUzBMyqGh/RLxAD0EwwE1BnqzdXbm80xpZgmIfKe1y+evXmoBAddde 8GCakgI2o/PtD8kP3wBHCHDc8vpbILCZKnI0+Ds4NYzvGiMRItaN6o2d4H+d5TYs LRMkS5AEDmKpabkfBqbrfz7drr4J8RpT/luitkyAIKAoCORym4uHe+VNwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP3uzO6MeezwgDhyFnzcDqEIU8PMB8GA1UdIwQY MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt MDUxMDc2NzQ0YTY1LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1 LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoS8RPeze obpfYtBn89Bv//zTa8dIDbhLJqh8rfBOMyDJ7LFxBlWiBuHMb8MFAdXtLZXhCnXj SuORjp5V4S0VHLC+HYVLEsGLEpQae2WCn7vxWYAiRitV7IZNfimIk8tdL8ZOZvaz HNGQD6k4Z7jBS5vNTk9YrY6jlwGon9gamGERhQohI+m2A9XDo1Z2gwqzOhFFPjH2 UlPhNhigEVPKtV2Pk1K+vhBxR00Li6BzyeO/28ESbPHDwodtQEfTyNvPgsT80xT/ Iu+wUhGWD8nNQ68vQRVJOwvZsMvIUV0K2CJYzwjqfkDx+OzOyKB98pvoMbmFpuCP glM2Az8i2zz85w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:12 2025 by rpki-client