This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json) Hash identifier: wyn7klYE0H9xGHYvUyCAw0nBJaYJ+KXf2D8sSFUJqoQ= Subject key identifier: B1:62:C1:B7:5D:10:96:F7:D9:41:67:2C:A6:B5:FC:78:17:E1:B3:0C Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Certificate serial: 019B3CEBD0E3A8241B634DE72A92DC211D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 18:00:45 +0000 Manifest this update: Sat 20 Dec 2025 18:00:45 +0000 Manifest next update: Sun 21 Dec 2025 18:00:45 +0000 Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: t/LC7LfCdcCEpZOKvJV68aNo3ieOBrm8XmDUSkd/G7o=) 2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:d0:e3:a8:24:1b:63:4d:e7:2a:92:dc:21:1d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Validity Not Before: Dec 20 18:00:45 2025 GMT Not After : Dec 21 18:00:45 2025 GMT Subject: CN=b162c1b75d1096f7d941672ca6b5fc7817e1b30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:c4:33:d9:32:37:45:0e:6d:04:df:55:54: 9a:89:85:e6:c7:57:88:fc:77:46:c2:ff:a0:63:b9: 44:52:12:88:ef:e2:6f:40:ed:e0:da:97:0c:a6:de: 5e:39:d0:2f:ea:66:00:cd:88:da:ce:80:d7:dc:17: 6b:fe:07:16:76:02:14:91:70:96:cb:c0:4b:45:fd: 76:73:14:d1:43:a0:7f:62:0d:85:29:d9:86:e4:19: b1:5f:57:41:3d:d5:0c:b3:45:94:4f:0e:ce:29:eb: a1:5a:dc:0d:8d:40:54:4f:84:7d:8b:89:d3:a9:8d: d6:27:cb:af:43:8d:50:73:bf:bc:92:9f:23:fb:35: f0:d2:77:83:be:df:36:21:22:e9:d4:4b:5f:b3:de: 8f:ea:f9:c6:3d:25:0f:8b:b9:21:c2:32:93:06:90: f9:c7:80:e0:2d:3e:4a:20:ff:6a:b3:83:b5:cd:08: 07:79:89:a5:4e:1a:69:73:d0:b8:bb:7d:ad:5e:cd: 00:9a:be:9c:12:2c:67:18:82:50:83:89:c4:b4:41: fc:85:fd:ae:0e:b5:ca:9d:d5:f4:d9:27:8f:77:66: 1a:28:ff:a5:4e:99:5f:8d:cf:a8:c0:0a:e1:ac:eb: 7e:79:c8:d7:db:f4:25:25:1b:b4:1d:93:ec:e0:63: 0d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:62:C1:B7:5D:10:96:F7:D9:41:67:2C:A6:B5:FC:78:17:E1:B3:0C X509v3 Authority Key Identifier: keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:01:d4:75:c5:fc:24:11:cd:15:be:71:08:32:03:d1:db:ae: b8:f7:c0:72:2d:5b:0d:2b:62:a8:19:f2:2f:3b:09:b9:36:22: 11:ad:be:c8:da:1b:16:d1:cf:6c:78:0b:a4:a6:08:90:43:5f: 5a:a0:3a:44:54:2f:d1:dc:c9:b6:ea:75:70:4f:bd:7d:24:56: 6f:9b:40:c1:fd:82:36:a2:6c:38:1e:88:a6:01:60:31:c3:64: a9:2a:fa:23:45:b0:e8:23:07:4f:0f:a0:1b:bc:62:61:e8:7e: 7a:ff:81:74:60:d0:47:3f:3a:a5:29:1d:04:9a:8b:a6:fa:b9: 1a:a7:a2:ba:14:c4:a4:1b:ca:3b:4f:97:1a:d6:13:bf:1d:c0: 86:ca:ce:98:59:46:04:4e:ab:c0:d2:e8:da:3c:c6:dd:e3:57: 68:fc:6e:37:a5:13:2f:72:60:60:be:72:6c:5f:67:fa:42:d1: ff:bd:ff:15:ca:b3:62:c6:70:f5:f2:a6:39:22:6f:ad:ef:56: 59:23:10:f1:3b:08:15:e4:d8:a9:82:da:f7:70:13:8e:c0:93: 46:9a:43:e7:eb:16:02:a9:6b:09:ce:d1:fc:f1:41:19:4b:c5: aa:85:6d:6d:a1:56:a2:71:cf:62:3a:1b:3b:a0:5e:44:54:43: 2f:da:08:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869DjqCQbY03nKpLcIR1jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy ZjE1NzIwHhcNMjUxMjIwMTgwMDQ1WhcNMjUxMjIxMTgwMDQ1WjAzMTEwLwYDVQQD EyhiMTYyYzFiNzVkMTA5NmY3ZDk0MTY3MmNhNmI1ZmM3ODE3ZTFiMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt//EM9kyN0UObQTfVVSaiYXmx1eI /HdGwv+gY7lEUhKI7+JvQO3g2pcMpt5eOdAv6mYAzYjazoDX3Bdr/gcWdgIUkXCW y8BLRf12cxTRQ6B/Yg2FKdmG5BmxX1dBPdUMs0WUTw7OKeuhWtwNjUBUT4R9i4nT qY3WJ8uvQ41Qc7+8kp8j+zXw0neDvt82ISLp1Etfs96P6vnGPSUPi7khwjKTBpD5 x4DgLT5KIP9qs4O1zQgHeYmlThppc9C4u32tXs0Amr6cEixnGIJQg4nEtEH8hf2u DrXKndX02SePd2YaKP+lTplfjc+owArhrOt+ecjX2/QlJRu0HZPs4GMNiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFiwbddEJb32UFnLKa1/HgX4bMMMB8GA1UdIwQY MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAHUdcX8 JBHNFb5xCDID0duuuPfAci1bDStiqBnyLzsJuTYiEa2+yNobFtHPbHgLpKYIkENf WqA6RFQv0dzJtup1cE+9fSRWb5tAwf2CNqJsOB6IpgFgMcNkqSr6I0Ww6CMHTw+g G7xiYeh+ev+BdGDQRz86pSkdBJqLpvq5GqeiuhTEpBvKO0+XGtYTvx3AhsrOmFlG BE6rwNLo2jzG3eNXaPxuN6UTL3JgYL5ybF9n+kLR/73/FcqzYsZw9fKmOSJvre9W WSMQ8TsIFeTYqYLa93ATjsCTRppD5+sWAqlrCc7R/PFBGUvFqoVtbaFWonHPYjob O6BeRFRDL9oI1w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:19:36 2025 by rpki-client