This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft File: _AzBczfYTpuF2W_dk-N7bx25080.mft (raw, json) Hash identifier: KscyLs+7ViTYjPWtidmGYVralySGk9T+VsdwAmp53Vs= Subject key identifier: 73:6E:9B:1A:23:98:21:3E:11:89:63:7B:29:44:57:02:2C:E0:F6:46 Authority key identifier: FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD Certificate issuer: /CN=fc0cc17337d84e9b85d96fdd93e37b6f1db9d3cd Certificate serial: 019AF4652457ABB46CB10FABC9E3C214EB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft Manifest number: 41 Signing time: Sat 06 Dec 2025 16:01:00 +0000 Manifest this update: Sat 06 Dec 2025 16:01:00 +0000 Manifest next update: Sun 07 Dec 2025 16:01:00 +0000 Files and hashes: 1: _AzBczfYTpuF2W_dk-N7bx25080.crl (hash: W+MFWZvzruK+XRVtPQN0dg/L++x1UaVwR6cEP5mnsoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft rsync://rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:24:57:ab:b4:6c:b1:0f:ab:c9:e3:c2:14:eb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc0cc17337d84e9b85d96fdd93e37b6f1db9d3cd Validity Not Before: Dec 6 16:01:00 2025 GMT Not After : Dec 7 16:01:00 2025 GMT Subject: CN=736e9b1a2398213e1189637b294457022ce0f646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:87:5a:3a:46:0a:a9:d0:29:e5:58:79:81: 80:8d:6f:c4:ec:4b:de:3d:9f:b5:ef:5e:95:10:5d: 2a:3b:d2:2b:59:42:1f:60:f4:af:27:66:4a:5a:82: da:8b:57:d2:9b:4f:15:92:8e:49:0e:d1:5e:5e:59: b1:c9:5c:ee:6a:bd:76:5b:55:35:23:e2:2c:d5:cd: b0:4c:9c:6f:35:a1:55:99:b0:ca:33:e4:a3:45:ed: 01:ca:e1:6d:ac:d5:fa:ec:2f:c8:50:79:4a:cb:00: ed:2c:0c:e2:cc:ca:56:c6:4d:eb:33:fb:6e:8a:99: 9d:c6:3f:58:7e:fd:81:d7:75:f0:7b:27:78:fe:fa: bc:f1:0c:98:0e:22:a3:8a:cb:99:74:a9:22:69:04: 3e:d8:db:59:c0:37:e3:26:e4:41:04:86:3b:ce:5f: b0:31:48:fa:43:a0:a8:38:c3:07:e6:d8:e9:f9:21: 31:e4:65:b6:e5:e5:3d:da:86:a6:1f:66:7d:9c:a7: 7f:fe:a9:80:48:09:6d:b7:53:1f:28:27:1a:3f:97: 9d:60:1f:f6:6b:42:f9:37:a9:0e:a2:9c:fa:10:2f: 53:2b:43:49:b1:6f:f7:47:14:16:ad:3b:22:fd:b3: 13:fc:75:1a:28:f0:07:ac:7c:c0:fa:b0:d1:f4:9c: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6E:9B:1A:23:98:21:3E:11:89:63:7B:29:44:57:02:2C:E0:F6:46 X509v3 Authority Key Identifier: keyid:FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6d:d6:32:ac:b0:d1:d2:ed:77:13:01:7d:5d:37:10:4e:d0: 87:36:92:bb:86:b6:e6:b5:f2:48:f0:b4:0e:86:15:b8:03:ea: 76:44:a9:ba:d0:a8:b0:91:4b:5f:7a:5f:dd:3e:47:e1:73:aa: 84:1a:e8:85:1b:9d:7d:fb:3f:f8:b1:91:0e:84:8a:28:12:e1: 4b:49:a1:94:42:0d:e1:2a:07:69:22:df:55:4f:2c:13:80:67: 71:bf:6b:63:b5:7e:05:04:c5:c0:19:1d:09:84:4e:e2:7e:0f: 45:71:ae:94:35:63:74:92:c6:02:6e:12:f3:bb:24:79:ff:2b: 9c:18:9b:29:d3:df:40:06:2a:ae:67:89:c8:3e:de:d3:8a:8c: f2:84:20:e1:2b:54:0d:9d:87:0d:99:17:bc:a8:2a:d0:db:a3: b3:98:ea:e5:71:a2:d2:a3:cf:6b:3a:49:6c:c5:20:15:07:0b: 0e:a1:28:f0:33:e5:68:23:c4:5d:1c:07:a2:ae:f4:9b:c2:3e: c7:26:b0:c1:18:55:77:75:68:b7:28:97:fa:b1:f2:1e:46:70: 16:fb:19:66:fe:72:3e:68:c5:90:7a:36:6e:bb:49:60:96:7a: be:f0:8e:9f:4c:6e:a1:f9:b0:00:9d:96:15:9e:ff:0f:1e:e2: ae:92:75:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZSRXq7RssQ+ryePCFOuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMGNjMTczMzdkODRlOWI4NWQ5NmZkZDkzZTM3YjZmMWRi OWQzY2QwHhcNMjUxMjA2MTYwMTAwWhcNMjUxMjA3MTYwMTAwWjAzMTEwLwYDVQQD Eyg3MzZlOWIxYTIzOTgyMTNlMTE4OTYzN2IyOTQ0NTcwMjJjZTBmNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2umHWjpGCqnQKeVYeYGAjW/E7Eve PZ+1716VEF0qO9IrWUIfYPSvJ2ZKWoLai1fSm08Vko5JDtFeXlmxyVzuar12W1U1 I+Is1c2wTJxvNaFVmbDKM+SjRe0ByuFtrNX67C/IUHlKywDtLAzizMpWxk3rM/tu ipmdxj9Yfv2B13Xweyd4/vq88QyYDiKjisuZdKkiaQQ+2NtZwDfjJuRBBIY7zl+w MUj6Q6CoOMMH5tjp+SEx5GW25eU92oamH2Z9nKd//qmASAltt1MfKCcaP5edYB/2 a0L5N6kOopz6EC9TK0NJsW/3RxQWrTsi/bMT/HUaKPAHrHzA+rDR9JwdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNumxojmCE+EYljeylEVwIs4PZGMB8GA1UdIwQY MBaAFPwMwXM32E6bhdlv3ZPje28dudPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0F6QmN6ZllUcHVGMldfZGstTjdieDI1MDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xZWVlODItOWYwYy00ZjlhLTlkNzUt ZDllYmI3ZjE4ZGQxLzEvX0F6QmN6ZllUcHVGMldfZGstTjdieDI1MDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xZWVlODItOWYwYy00ZjlhLTlkNzUtZDllYmI3ZjE4ZGQx LzEvX0F6QmN6ZllUcHVGMldfZGstTjdieDI1MDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATG3WMqyw 0dLtdxMBfV03EE7QhzaSu4a25rXySPC0DoYVuAPqdkSputCosJFLX3pf3T5H4XOq hBrohRudffs/+LGRDoSKKBLhS0mhlEIN4SoHaSLfVU8sE4Bncb9rY7V+BQTFwBkd CYRO4n4PRXGulDVjdJLGAm4S87skef8rnBibKdPfQAYqrmeJyD7e04qM8oQg4StU DZ2HDZkXvKgq0Nujs5jq5XGi0qPPazpJbMUgFQcLDqEo8DPlaCPEXRwHoq70m8I+ xyawwRhVd3VotyiX+rHyHkZwFvsZZv5yPmjFkHo2brtJYJZ6vvCOn0xuofmwAJ2W FZ7/Dx7irpJ1Sg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:16:02 2025 by rpki-client