This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json) Hash identifier: 94gjdyNC9Ci4ejIRvo9dDXhvwW8MJYeEmxxpJlAI+q8= Subject key identifier: F7:28:6D:BB:5C:16:37:BE:B1:37:39:4B:39:BA:BA:FC:6E:1F:92:9E Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f Certificate serial: 019AF509B2C6231185F8CE8D113A3177F1CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft Manifest number: 146F Signing time: Sat 06 Dec 2025 19:00:44 +0000 Manifest this update: Sat 06 Dec 2025 19:00:44 +0000 Manifest next update: Sun 07 Dec 2025 19:00:44 +0000 Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: CFJdDnIpQjZodmQGrJOQQcLLeNgVwvVCkvIdkBumhYU=) 2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b2:c6:23:11:85:f8:ce:8d:11:3a:31:77:f1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f Validity Not Before: Dec 6 19:00:44 2025 GMT Not After : Dec 7 19:00:44 2025 GMT Subject: CN=f7286dbb5c1637beb137394b39babafc6e1f929e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:1d:00:6b:42:4e:dc:6b:73:93:71:2d:ae: bd:6f:00:4e:6e:b3:a1:49:dc:69:ba:88:bf:83:a4: 36:da:35:97:28:21:49:3d:62:c7:11:00:3a:ee:d8: 51:16:cf:c8:a8:a7:79:06:b8:33:5c:9e:0d:bd:ce: cf:32:24:5e:1e:97:9a:05:ae:44:f2:92:f1:85:e5: 7c:ea:d3:37:75:4b:88:c8:67:b2:54:a1:92:3c:a1: 34:9b:69:1d:35:78:32:d7:ac:58:ff:e7:a7:ff:11: b3:a8:70:0a:c4:57:d7:f3:95:01:ce:a6:76:ed:12: e0:09:39:e7:6a:48:f4:ce:24:d2:c1:43:fa:8d:3b: 2e:ac:18:e6:85:5d:e9:38:cc:ff:e9:76:1f:de:64: 81:76:81:5a:b3:8f:34:20:7c:42:71:f8:f0:15:6d: 95:63:73:6b:65:a7:8c:3e:87:79:9b:c9:89:b7:35: 31:f5:76:e4:92:46:8a:1e:d5:5a:9d:ad:f5:55:b5: 8e:c5:c0:e9:1e:57:5d:49:c9:3f:9a:62:d3:6f:8c: ab:c3:78:ac:fd:40:da:81:c1:e1:f0:be:ec:8d:ce: 20:00:79:43:f4:ce:62:b5:d0:e8:ad:eb:6e:ea:5c: 41:b4:c3:b7:40:14:74:52:46:5c:64:c7:46:5a:cd: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:28:6D:BB:5C:16:37:BE:B1:37:39:4B:39:BA:BA:FC:6E:1F:92:9E X509v3 Authority Key Identifier: keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ab:45:af:b5:6c:86:a3:c2:ba:95:3d:5c:e6:49:e0:6b:71: be:70:85:03:11:9c:ff:cf:27:47:a7:57:c8:c4:bd:19:6e:ec: 82:2c:12:ed:d0:d6:c7:b2:e1:5e:fe:9b:41:65:7b:c3:c6:a1: 14:6e:9b:e9:87:89:41:2e:42:d3:15:bb:c4:b3:8f:7c:e5:b5: 88:41:8f:86:c2:59:e5:7c:a5:bc:83:f7:41:76:21:0b:32:81: 22:0b:05:e4:4f:db:e5:dd:43:a2:dc:1c:b9:08:c7:a9:82:99: d2:6b:d2:33:69:e8:95:7c:a6:07:26:b4:6c:db:d4:42:b5:13: 8b:46:49:26:8f:c1:17:ed:83:90:5c:1e:95:4f:c2:bf:9e:4a: 0a:fa:fd:1f:f0:5d:33:a4:95:66:c8:aa:f6:37:a7:c3:04:88: 26:47:b1:7e:7b:6c:4f:8c:7d:08:a7:7d:4d:7e:0d:7d:4f:ba: b8:04:c0:52:a2:c6:61:ce:cf:cb:df:39:f8:67:87:cf:f2:7e: 7d:58:75:70:79:c1:4f:7e:e1:b5:5a:07:2d:53:e9:eb:4b:29: 8a:7f:95:49:e3:f2:1f:bd:f5:f4:4b:15:56:84:52:26:68:86: ad:54:17:47:81:19:99:b7:a1:1d:62:bc:be:82:ff:e0:93:2b: 45:32:e2:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbLGIxGF+M6NEToxd/HMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzBkNzcyYmE4MzIyNWJlZDU4OGNjZDFjNWM5NmFmMDNi Mzc3MGYwHhcNMjUxMjA2MTkwMDQ0WhcNMjUxMjA3MTkwMDQ0WjAzMTEwLwYDVQQD EyhmNzI4NmRiYjVjMTYzN2JlYjEzNzM5NGIzOWJhYmFmYzZlMWY5MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpgdAGtCTtxrc5NxLa69bwBObrOh Sdxpuoi/g6Q22jWXKCFJPWLHEQA67thRFs/IqKd5BrgzXJ4Nvc7PMiReHpeaBa5E 8pLxheV86tM3dUuIyGeyVKGSPKE0m2kdNXgy16xY/+en/xGzqHAKxFfX85UBzqZ2 7RLgCTnnakj0ziTSwUP6jTsurBjmhV3pOMz/6XYf3mSBdoFas480IHxCcfjwFW2V Y3NrZaeMPod5m8mJtzUx9XbkkkaKHtVana31VbWOxcDpHlddSck/mmLTb4yrw3is /UDagcHh8L7sjc4gAHlD9M5itdDoretu6lxBtMO3QBR0UkZcZMdGWs3T4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcobbtcFje+sTc5Szm6uvxuH5KeMB8GA1UdIwQY MBaAFAMw13K6gyJb7ViMzRxclq8Ds3cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODct N2U0NTFjODBkNTZmLzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODctN2U0NTFjODBkNTZm LzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoatFr7Vs hqPCupU9XOZJ4GtxvnCFAxGc/88nR6dXyMS9GW7sgiwS7dDWx7LhXv6bQWV7w8ah FG6b6YeJQS5C0xW7xLOPfOW1iEGPhsJZ5XylvIP3QXYhCzKBIgsF5E/b5d1Dotwc uQjHqYKZ0mvSM2nolXymBya0bNvUQrUTi0ZJJo/BF+2DkFwelU/Cv55KCvr9H/Bd M6SVZsiq9jenwwSIJkexfntsT4x9CKd9TX4NfU+6uATAUqLGYc7Py985+GeHz/J+ fVh1cHnBT37htVoHLVPp60spin+VSePyH7319EsVVoRSJmiGrVQXR4EZmbehHWK8 voL/4JMrRTLitg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:25:10 2025 by rpki-client