This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json) Hash identifier: mKFUGBzEJodbOB9izTp/yJiq52ufHqScFbsMx7Www0E= Subject key identifier: 73:D8:7F:5C:C8:FC:EB:6F:99:99:83:29:99:34:DB:69:71:30:48:02 Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c Certificate serial: 019B38A1D921CAF66FE61F60B5D6C5EC38B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft Manifest number: 1139 Signing time: Fri 19 Dec 2025 22:01:29 +0000 Manifest this update: Fri 19 Dec 2025 22:01:29 +0000 Manifest next update: Sat 20 Dec 2025 22:01:29 +0000 Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: iC+65kfdLo8rWHWe80j4mWLDfnzPFMgNtoGRiC0KAw8=) 2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:d9:21:ca:f6:6f:e6:1f:60:b5:d6:c5:ec:38:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c Validity Not Before: Dec 19 22:01:29 2025 GMT Not After : Dec 20 22:01:29 2025 GMT Subject: CN=73d87f5cc8fceb6f999983299934db6971304802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:5a:88:0e:c4:6a:bf:06:64:c2:cf:9c:c2: 84:9f:e2:9c:98:e1:7f:37:89:d8:42:1a:19:11:85: a6:2c:d5:95:9e:68:da:4a:c1:73:87:e9:72:a8:06: ee:88:3c:14:7d:be:93:a3:a6:92:ad:a1:4d:5c:b8: e8:3c:fe:a2:01:bf:26:f9:08:9b:64:89:a2:10:81: ce:67:8d:e7:6b:09:e4:c2:c3:e1:2a:d5:57:66:fc: 4b:f7:8b:0f:5a:00:8d:92:0c:d1:82:dc:21:fa:ec: 9b:41:d7:14:e5:4e:ec:22:af:c0:ff:42:20:37:7e: e9:d5:b2:50:b2:91:b3:6d:2e:4c:69:2f:1c:d4:c3: 61:20:b1:36:73:be:66:b1:52:50:e7:52:93:d4:35: 03:8b:6c:73:ed:63:cc:c1:09:66:dd:f5:8a:ba:af: ab:e9:46:bf:13:73:49:08:28:b8:b1:70:be:16:44: 1f:fe:79:d0:b7:04:6d:2c:2d:48:c9:3a:20:0c:e5: cf:7d:c3:f9:9a:7f:14:9d:12:db:f7:e5:d1:db:25: 56:d8:96:00:01:05:b6:d7:2d:b1:04:a2:8c:4f:e2: 6d:cd:7a:6c:26:c2:1e:39:a1:d2:2e:c6:c4:70:5a: 14:5a:f9:8a:24:98:ca:34:45:50:00:c9:5d:46:54: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D8:7F:5C:C8:FC:EB:6F:99:99:83:29:99:34:DB:69:71:30:48:02 X509v3 Authority Key Identifier: keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:55:a0:fe:c1:cb:b6:28:49:c0:13:3e:76:9b:26:c3:c1: 1f:48:e5:fd:98:63:8a:95:af:07:49:fd:4b:84:8d:1f:98:c8: 07:10:57:be:fd:21:da:84:48:e4:ff:6f:0b:6d:cf:f1:93:37: 13:29:2d:4c:89:d7:a5:9b:87:bb:38:c0:b5:0a:ca:a8:a9:d2: 8c:04:4f:6d:cd:54:de:c3:3e:6f:7a:81:d4:16:4d:23:bd:50: c5:a8:b1:2b:45:9a:8a:92:de:4f:cb:e6:8f:59:0a:7e:bb:93: fa:ad:74:22:7f:a7:1a:8c:af:52:76:e1:68:aa:ab:82:82:28: 3a:68:6b:c4:1e:b2:10:72:2d:bf:b5:6f:a2:99:6d:ef:a8:0c: 52:8e:64:b4:20:53:b1:46:01:f6:b1:2e:10:5f:6b:64:78:a2: 4c:d7:37:bd:ff:6f:72:44:4e:7f:d9:23:82:56:6b:ca:4d:79: 8f:a6:2e:b3:f2:00:24:84:94:87:fe:bd:6e:39:93:d5:fe:5d: 08:60:36:4d:cc:3c:9d:e9:36:99:86:76:94:db:a1:fd:3f:4a: f8:0c:ac:f0:e7:64:e4:ab:9f:ab:e5:95:25:f0:fe:13:52:d8: 4c:8a:67:16:66:77:a4:c0:90:db:ff:77:7a:11:cc:5d:80:02: 99:e7:b1:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4odkhyvZv5h9gtdbF7DizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx YjE0N2MwHhcNMjUxMjE5MjIwMTI5WhcNMjUxMjIwMjIwMTI5WjAzMTEwLwYDVQQD Eyg3M2Q4N2Y1Y2M4ZmNlYjZmOTk5OTgzMjk5OTM0ZGI2OTcxMzA0ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+1aiA7Ear8GZMLPnMKEn+KcmOF/ N4nYQhoZEYWmLNWVnmjaSsFzh+lyqAbuiDwUfb6To6aSraFNXLjoPP6iAb8m+Qib ZImiEIHOZ43nawnkwsPhKtVXZvxL94sPWgCNkgzRgtwh+uybQdcU5U7sIq/A/0Ig N37p1bJQspGzbS5MaS8c1MNhILE2c75msVJQ51KT1DUDi2xz7WPMwQlm3fWKuq+r 6Ua/E3NJCCi4sXC+FkQf/nnQtwRtLC1IyTogDOXPfcP5mn8UnRLb9+XR2yVW2JYA AQW21y2xBKKMT+JtzXpsJsIeOaHSLsbEcFoUWvmKJJjKNEVQAMldRlRMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPYf1zI/OtvmZmDKZk022lxMEgCMB8GA1UdIwQY MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgI5VoP7B y7YoScATPnabJsPBH0jl/ZhjipWvB0n9S4SNH5jIBxBXvv0h2oRI5P9vC23P8ZM3 EyktTInXpZuHuzjAtQrKqKnSjARPbc1U3sM+b3qB1BZNI71QxaixK0WaipLeT8vm j1kKfruT+q10In+nGoyvUnbhaKqrgoIoOmhrxB6yEHItv7Vvoplt76gMUo5ktCBT sUYB9rEuEF9rZHiiTNc3vf9vckROf9kjglZryk15j6Yus/IAJISUh/69bjmT1f5d CGA2Tcw8nek2mYZ2lNuh/T9K+Ays8Odk5Kufq+WVJfD+E1LYTIpnFmZ3pMCQ2/93 ehHMXYACmeexDw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:44 2025 by rpki-client