This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json) Hash identifier: B32fv4eDpfotTd+mMqlQjD4ExV4RDb0J+rh18aAg6RQ= Subject key identifier: B6:15:05:9E:21:46:28:5A:E8:79:E5:A1:9C:08:14:DF:6B:33:3B:61 Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5 Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5 Certificate serial: 019B42B7B2DC0ABE7FBD6438569AFB4F5586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 21:01:33 +0000 Manifest this update: Sun 21 Dec 2025 21:01:33 +0000 Manifest next update: Mon 22 Dec 2025 21:01:33 +0000 Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=) 2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: iB6ubWlSKPlb3G5m5Ib71c16/iuDXFuKR2EC9Khdp9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:b2:dc:0a:be:7f:bd:64:38:56:9a:fb:4f:55:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5 Validity Not Before: Dec 21 21:01:33 2025 GMT Not After : Dec 22 21:01:33 2025 GMT Subject: CN=b615059e2146285ae879e5a19c0814df6b333b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:f2:ee:43:a2:4b:1b:e0:e3:00:89:00:a4: 84:1b:69:3e:85:2e:1c:1d:d3:38:b4:16:7d:d2:f0: 6d:b6:cc:7c:b1:41:3a:36:d4:c6:c3:c3:7c:da:d2: 8b:a9:79:de:1c:72:9e:a4:37:97:e0:51:15:0a:d9: 18:c9:84:24:ab:d1:d6:17:2c:54:ba:44:70:da:64: fb:a4:2d:aa:2c:ec:ae:24:b7:f2:a6:33:88:a7:5e: 06:a2:c8:b4:64:74:9d:ea:14:23:cd:8f:ef:f3:67: 89:d9:96:71:34:f7:76:37:78:15:a8:ad:04:16:02: 10:49:ed:5c:1b:11:60:bc:9a:20:2f:a8:69:9b:44: a1:42:13:f4:2a:94:1b:65:93:36:d2:02:1d:40:7c: da:37:b6:12:13:19:90:9c:0f:a3:0c:86:88:65:3d: f8:67:dd:a4:80:7b:49:2d:2e:ce:a2:10:8c:da:b9: e7:36:39:ce:fa:48:2f:70:06:8f:98:62:a0:b1:98: 2f:05:9a:fb:6c:f6:13:6f:0c:16:98:3f:9e:d6:4f: 24:b3:4a:53:ed:d2:01:5f:4a:1e:62:97:a0:c8:7a: d3:51:5a:15:3d:fc:33:b4:d3:2b:62:67:34:86:8c: ab:9c:8a:cd:ea:14:60:d4:8d:ec:4a:77:e7:33:b5: 10:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:15:05:9E:21:46:28:5A:E8:79:E5:A1:9C:08:14:DF:6B:33:3B:61 X509v3 Authority Key Identifier: keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:98:64:ec:05:b7:48:71:ae:ff:0d:43:20:a9:af:64:09:ce: fa:5d:52:d1:76:c7:09:0e:50:4f:a2:35:71:ad:4e:49:b6:e3: 06:8c:96:f9:87:c0:9b:8e:b4:a4:ff:39:2a:85:8e:6e:9d:f8: 8c:95:a1:53:94:d9:7a:36:25:b4:96:38:b6:61:ce:50:0d:fb: a8:5d:47:1e:5f:c2:a7:48:b3:f2:dd:3d:ef:64:ef:10:cd:e6: ef:c5:3e:e0:5b:2b:3a:26:ab:ca:6e:cd:66:7b:5a:61:f9:be: a8:2e:4e:9d:9a:b8:10:56:ba:3e:02:08:80:3f:95:30:a5:74: 37:f1:73:4e:2e:61:ea:a3:98:b5:47:de:14:22:85:55:c1:f3: 9e:e7:d9:37:0b:e6:25:5c:76:b9:6c:4b:7f:c0:da:f2:d9:61: c4:91:41:96:4b:59:7d:0c:d7:b0:f4:41:8c:57:f2:8e:64:0c: 87:f7:0a:4a:76:b2:ca:b5:d8:8d:45:55:2a:9c:9e:70:1f:2c: e9:d8:70:df:d5:97:48:b1:fa:82:92:03:b6:26:92:b8:7c:98: b1:63:74:88:ed:ac:ad:f2:09:40:b3:51:db:1e:b6:b4:2a:d6: c2:75:25:90:46:a7:d7:50:b4:70:e8:0d:90:74:8a:36:38:91: f1:29:e7:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt7LcCr5/vWQ4Vpr7T1WGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTE0OTY0NjkxNjdjNWIxZDg5MjBiOThiZDUxYWYzZmUz NWFkZTUwHhcNMjUxMjIxMjEwMTMzWhcNMjUxMjIyMjEwMTMzWjAzMTEwLwYDVQQD EyhiNjE1MDU5ZTIxNDYyODVhZTg3OWU1YTE5YzA4MTRkZjZiMzMzYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA347y7kOiSxvg4wCJAKSEG2k+hS4c HdM4tBZ90vBttsx8sUE6NtTGw8N82tKLqXneHHKepDeX4FEVCtkYyYQkq9HWFyxU ukRw2mT7pC2qLOyuJLfypjOIp14Gosi0ZHSd6hQjzY/v82eJ2ZZxNPd2N3gVqK0E FgIQSe1cGxFgvJogL6hpm0ShQhP0KpQbZZM20gIdQHzaN7YSExmQnA+jDIaIZT34 Z92kgHtJLS7OohCM2rnnNjnO+kgvcAaPmGKgsZgvBZr7bPYTbwwWmD+e1k8ks0pT 7dIBX0oeYpegyHrTUVoVPfwztNMrYmc0hoyrnIrN6hRg1I3sSnfnM7UQOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYVBZ4hRiha6HnloZwIFN9rMzthMB8GA1UdIwQY MBaAFAGRSWRpFnxbHYkguYvVGvP+Na3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTkt YmYyZjk3ZjFlMzRmLzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xZDAxNTItODU2ZC00NzE3LTgyMTktYmYyZjk3ZjFlMzRm LzEvQVpGSlpHa1dmRnNkaVNDNWk5VWE4XzQxcmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Jhk7AW3 SHGu/w1DIKmvZAnO+l1S0XbHCQ5QT6I1ca1OSbbjBoyW+YfAm460pP85KoWObp34 jJWhU5TZejYltJY4tmHOUA37qF1HHl/Cp0iz8t0972TvEM3m78U+4FsrOiarym7N ZntaYfm+qC5OnZq4EFa6PgIIgD+VMKV0N/FzTi5h6qOYtUfeFCKFVcHznufZNwvm JVx2uWxLf8Da8tlhxJFBlktZfQzXsPRBjFfyjmQMh/cKSnayyrXYjUVVKpyecB8s 6dhw39WXSLH6gpIDtiaSuHyYsWN0iO2srfIJQLNR2x62tCrWwnUlkEan11C0cOgN kHSKNjiR8SnnNQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:14 2025 by rpki-client