This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json) Hash identifier: lMG9pviTpl8wxgYmTsys8XBmALKdb3Pbfj5gqgN7cxM= Subject key identifier: 15:CF:2A:02:94:5A:85:73:84:74:4A:7A:BC:D6:9B:6B:15:AD:7D:3D Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5 Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5 Certificate serial: 019B4C5FB29076E52C0A50EEFEFFD536DF7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 18:01:38 +0000 Manifest this update: Tue 23 Dec 2025 18:01:38 +0000 Manifest next update: Wed 24 Dec 2025 18:01:38 +0000 Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=) 2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: NA2yV1HSBkwe0ro0HDlF0IiO03O4oARDV5hen/IBQ14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:b2:90:76:e5:2c:0a:50:ee:fe:ff:d5:36:df:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5 Validity Not Before: Dec 23 18:01:38 2025 GMT Not After : Dec 24 18:01:38 2025 GMT Subject: CN=15cf2a02945a857384744a7abcd69b6b15ad7d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:db:c4:37:3b:7d:82:33:fc:70:21:18:a6: ac:a2:c0:c7:7b:7f:07:70:34:8d:8d:e1:70:15:66: 94:06:db:24:da:09:bc:1c:ac:55:7b:60:36:bd:90: 3c:d2:9a:bd:5b:8b:c5:e7:6a:8e:66:63:e4:98:18: d2:2e:ff:9b:7f:12:cf:d9:02:f9:44:92:66:1f:41: b3:fa:f9:ad:20:27:f3:f7:1a:ab:68:6a:47:d0:10: ad:99:26:f1:b5:f6:39:88:ae:b1:6a:6c:61:a2:17: 2b:fc:c9:6d:a4:30:9b:3f:5f:3d:13:57:7a:76:0c: c2:1b:8b:cb:7b:9e:29:f3:63:df:79:1f:8f:40:2c: 1a:67:ac:40:a3:4a:d2:17:b7:e2:b2:67:39:17:e0: 79:1f:42:a7:90:70:eb:40:b9:81:ff:8c:e7:bf:49: 77:74:75:55:a7:b7:7d:da:be:fd:ee:d3:55:c5:51: e4:60:f8:b0:35:66:fe:6b:2d:50:0d:a2:b9:0e:5c: d3:b4:2f:7f:78:6c:f2:0b:fc:e5:9f:ae:55:5e:da: 7f:ed:32:d0:7f:72:22:af:7c:bf:31:fd:ec:66:7c: d5:77:ca:d6:5f:36:19:f1:b3:2a:9f:d1:9f:16:df: 2d:41:d9:e9:14:36:42:68:57:fb:8f:0f:fa:e4:f8: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CF:2A:02:94:5A:85:73:84:74:4A:7A:BC:D6:9B:6B:15:AD:7D:3D X509v3 Authority Key Identifier: keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:34:db:f1:c0:8e:fb:1a:cb:17:4c:b6:c4:f0:c6:cd:1a:82: 11:82:d1:91:32:03:e8:e8:8b:b3:bc:60:a4:f1:c5:32:86:f5: 23:cf:52:ad:1e:d0:24:ce:e7:d1:ea:9d:59:10:a8:4a:0c:16: ac:b9:2b:63:87:4e:9f:bd:a5:71:4b:37:d2:24:73:cb:b1:b7: c5:15:29:92:73:aa:e4:fe:00:2b:8c:bb:ec:42:1a:1e:98:29: 4e:94:6a:cf:b4:26:5d:77:16:eb:12:5d:1d:09:07:bf:4f:10: 40:f2:13:f5:70:10:00:b8:1b:47:3e:5d:9e:b4:91:e7:70:79: d9:8c:aa:cb:a3:fc:d8:b8:ef:d1:bb:39:46:0e:82:34:af:78: 43:46:ef:4c:dc:9a:1f:2e:3a:49:63:5c:ec:ef:81:f3:8e:dd: 92:c4:73:40:85:f8:9d:20:11:fd:e5:5c:d4:56:89:13:28:6c: 3c:2a:26:27:74:43:9d:1f:12:f3:98:9d:17:3d:6e:6f:0f:a0: fe:65:94:ba:f7:a9:92:b6:0c:82:2c:55:ad:a7:98:35:c4:2f: 5c:5b:cc:3b:8a:7a:69:ed:61:0d:5e:33:b8:72:dd:e7:47:67: ed:6a:a8:56:66:47:e2:8f:77:22:00:6e:62:31:04:20:58:76: 1f:d1:82:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX7KQduUsClDu/v/VNt9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTE0OTY0NjkxNjdjNWIxZDg5MjBiOThiZDUxYWYzZmUz NWFkZTUwHhcNMjUxMjIzMTgwMTM4WhcNMjUxMjI0MTgwMTM4WjAzMTEwLwYDVQQD EygxNWNmMmEwMjk0NWE4NTczODQ3NDRhN2FiY2Q2OWI2YjE1YWQ3ZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CjbxDc7fYIz/HAhGKasosDHe38H cDSNjeFwFWaUBtsk2gm8HKxVe2A2vZA80pq9W4vF52qOZmPkmBjSLv+bfxLP2QL5 RJJmH0Gz+vmtICfz9xqraGpH0BCtmSbxtfY5iK6xamxhohcr/MltpDCbP189E1d6 dgzCG4vLe54p82PfeR+PQCwaZ6xAo0rSF7fismc5F+B5H0KnkHDrQLmB/4znv0l3 dHVVp7d92r797tNVxVHkYPiwNWb+ay1QDaK5DlzTtC9/eGzyC/zln65VXtp/7TLQ f3Iir3y/Mf3sZnzVd8rWXzYZ8bMqn9GfFt8tQdnpFDZCaFf7jw/65PhtiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXPKgKUWoVzhHRKerzWm2sVrX09MB8GA1UdIwQY MBaAFAGRSWRpFnxbHYkguYvVGvP+Na3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTkt YmYyZjk3ZjFlMzRmLzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTktYmYyZjk3ZjFlMzRm LzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2jTb8cCO +xrLF0y2xPDGzRqCEYLRkTID6OiLs7xgpPHFMob1I89SrR7QJM7n0eqdWRCoSgwW rLkrY4dOn72lcUs30iRzy7G3xRUpknOq5P4AK4y77EIaHpgpTpRqz7QmXXcW6xJd HQkHv08QQPIT9XAQALgbRz5dnrSR53B52Yyqy6P82Ljv0bs5Rg6CNK94Q0bvTNya Hy46SWNc7O+B847dksRzQIX4nSAR/eVc1FaJEyhsPComJ3RDnR8S85idFz1ubw+g /mWUuvepkrYMgixVraeYNcQvXFvMO4p6ae1hDV4zuHLd50dn7WqoVmZH4o93IgBu YjEEIFh2H9GCFA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:34:08 2025 by rpki-client