This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json) Hash identifier: LWyOLJx8CiRt7pXVU4mxqDrjOgkEmMmNY15Tdkwl5As= Subject key identifier: 13:1A:30:6A:44:0C:59:66:11:EA:0F:D3:FF:16:92:4F:28:77:DC:F0 Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a Certificate serial: 019B53ABA4544534EF7E628B92C556311293 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft Manifest number: 089D Signing time: Thu 25 Dec 2025 04:01:56 +0000 Manifest this update: Thu 25 Dec 2025 04:01:56 +0000 Manifest next update: Fri 26 Dec 2025 04:01:56 +0000 Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: vRytQShhPuMgJMXv+rIUq4ZFPtOexqx2OYXbvLP/JEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:a4:54:45:34:ef:7e:62:8b:92:c5:56:31:12:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a Validity Not Before: Dec 25 04:01:56 2025 GMT Not After : Dec 26 04:01:56 2025 GMT Subject: CN=131a306a440c596611ea0fd3ff16924f2877dcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:e1:aa:f7:a0:a3:c7:54:f7:ee:f2:80:97: 50:62:8f:44:d3:5d:6e:02:b3:b0:c4:49:e7:bd:d1: 5c:2f:2f:04:75:c3:68:4b:15:09:ed:bd:59:66:76: 4e:98:7d:09:e1:87:f6:ca:9c:2b:7d:09:7e:43:9f: 99:5b:d5:70:7b:fd:8e:79:40:e9:2b:1c:a7:67:54: 06:e8:e0:62:6a:a6:04:df:f8:45:a3:25:61:4f:22: c8:b0:37:01:88:a1:1b:9e:63:e7:c7:4f:ee:85:4e: 63:62:d3:2f:8d:ce:ed:80:b1:45:09:b0:96:21:b5: ca:2e:c2:eb:2c:8e:56:34:44:9b:9e:a9:65:79:99: 1c:f0:ee:bd:d4:0b:16:3a:83:99:79:e2:4c:aa:cf: 5a:66:4e:c6:d2:15:13:7d:37:d7:cb:b8:e0:eb:6a: 5e:95:ca:dd:f3:d9:55:3f:8e:bb:f4:b0:bb:c1:10: b2:d7:19:a7:ec:5a:2f:0d:82:cd:32:d1:40:d1:c5: 5d:d3:2b:66:73:fb:12:d9:fb:9c:2d:14:54:86:33: 5d:fd:23:d5:ba:cd:5e:30:19:e9:09:2a:dc:09:33: 1e:16:78:ef:19:1b:14:f6:82:2c:8a:82:c0:37:27: 9c:d8:d1:85:39:e4:6a:67:01:63:28:af:cc:f5:20: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1A:30:6A:44:0C:59:66:11:EA:0F:D3:FF:16:92:4F:28:77:DC:F0 X509v3 Authority Key Identifier: keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:6c:aa:d2:36:86:e4:a2:5e:ab:28:91:cf:f9:a3:2f:6a:8b: d7:f7:97:ab:29:91:a7:a2:2e:84:5b:aa:b9:5a:7f:d0:a3:fe: a5:d1:44:d1:d8:8e:05:e8:44:f0:af:f0:09:d9:f8:63:5e:37: 1f:03:7b:1e:d9:0d:2e:b1:61:8d:01:90:7b:62:60:ae:17:bc: b1:60:17:93:b7:bc:f3:7c:fa:1f:ea:fd:91:68:19:0d:32:89: d6:be:cd:33:0e:12:19:03:d9:0e:6e:3c:ba:72:1b:e1:27:13: 5d:1b:a7:03:ea:e9:ba:41:c8:cf:3b:e1:23:fa:82:55:3d:a3: e7:bc:54:7e:c8:f1:30:ff:a3:f4:f0:98:79:80:fe:b3:e8:f5: b0:f2:f0:5d:4d:44:4c:e1:42:0b:a3:59:d3:9b:3e:76:eb:71: 84:5c:9a:8b:a1:0a:90:f4:f3:71:b9:dc:88:a9:45:1c:2a:cd: 92:39:61:59:c0:4e:42:f5:db:56:23:ae:f4:74:9c:71:94:34: 31:7b:92:40:87:07:4c:49:1e:d0:a2:5a:18:7a:6e:d9:89:54: 23:87:d8:12:9a:ef:80:cc:28:03:dd:16:cc:85:4b:1c:49:a7: 4a:f3:46:23:b5:f9:14:67:fe:56:2f:b9:5e:8c:9c:4d:bd:93: 1b:f1:3c:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq6RURTTvfmKLksVWMRKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTYyYjljZDJlNTU2YjU5NmZjNzI0MzU2NTgwN2I5ZTJk Yzg2OGEwHhcNMjUxMjI1MDQwMTU2WhcNMjUxMjI2MDQwMTU2WjAzMTEwLwYDVQQD EygxMzFhMzA2YTQ0MGM1OTY2MTFlYTBmZDNmZjE2OTI0ZjI4NzdkY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmvhqvego8dU9+7ygJdQYo9E011u ArOwxEnnvdFcLy8EdcNoSxUJ7b1ZZnZOmH0J4Yf2ypwrfQl+Q5+ZW9Vwe/2OeUDp KxynZ1QG6OBiaqYE3/hFoyVhTyLIsDcBiKEbnmPnx0/uhU5jYtMvjc7tgLFFCbCW IbXKLsLrLI5WNESbnqlleZkc8O691AsWOoOZeeJMqs9aZk7G0hUTfTfXy7jg62pe lcrd89lVP4679LC7wRCy1xmn7FovDYLNMtFA0cVd0ytmc/sS2fucLRRUhjNd/SPV us1eMBnpCSrcCTMeFnjvGRsU9oIsioLANyec2NGFOeRqZwFjKK/M9SBfxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMaMGpEDFlmEeoP0/8Wkk8od9zwMB8GA1UdIwQY MBaAFAGWK5zS5Va1lvxyQ1ZYB7ni3IaKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEt NzAzNDJhMmU3NTMzLzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9lMjFiNjktOWRmOS00OGEzLWExZTEtNzAzNDJhMmU3NTMz LzEvQVpZcm5OTGxWcldXX0hKRFZsZ0h1ZUxjaG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWyq0jaG 5KJeqyiRz/mjL2qL1/eXqymRp6IuhFuquVp/0KP+pdFE0diOBehE8K/wCdn4Y143 HwN7HtkNLrFhjQGQe2Jgrhe8sWAXk7e883z6H+r9kWgZDTKJ1r7NMw4SGQPZDm48 unIb4ScTXRunA+rpukHIzzvhI/qCVT2j57xUfsjxMP+j9PCYeYD+s+j1sPLwXU1E TOFCC6NZ05s+dutxhFyai6EKkPTzcbnciKlFHCrNkjlhWcBOQvXbViOu9HSccZQ0 MXuSQIcHTEke0KJaGHpu2YlUI4fYEprvgMwoA90WzIVLHEmnSvNGI7X5FGf+Vi+5 XoycTb2TG/E8aw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:21 2025 by rpki-client