This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json) Hash identifier: atjtt46OyC7jW6sy0L5I86ohihLG584H0sEwUr/PbKA= Subject key identifier: B6:3D:85:D2:8D:60:9C:4D:32:81:38:6B:24:53:2F:C7:50:8E:59:80 Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0 Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0 Certificate serial: 019B522A7EDB45E41658C0D7B16D75EE72D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft Manifest number: 14A0 Signing time: Wed 24 Dec 2025 21:01:15 +0000 Manifest this update: Wed 24 Dec 2025 21:01:15 +0000 Manifest next update: Thu 25 Dec 2025 21:01:15 +0000 Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: 0UrtUS4UZGsJfrvFMcwA4kQAfJqBJ574ufJTBasVEDQ=) 2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:7e:db:45:e4:16:58:c0:d7:b1:6d:75:ee:72:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0 Validity Not Before: Dec 24 21:01:15 2025 GMT Not After : Dec 25 21:01:15 2025 GMT Subject: CN=b63d85d28d609c4d3281386b24532fc7508e5980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:dd:5f:1f:ed:38:31:88:62:a9:72:30:7c: 40:7e:41:b1:53:65:3b:76:18:47:49:1d:9f:c2:4d: 77:45:a5:50:49:21:5f:e3:6c:55:f3:3a:55:27:3d: aa:84:11:65:6d:b9:5a:6b:3d:00:c3:2d:f5:74:d8: 5f:92:20:66:7b:ff:c4:ca:ea:ec:e2:f8:a8:51:c3: 7e:66:83:20:0f:b2:12:b0:3f:f9:03:96:28:ef:44: 3d:67:79:a7:a5:58:00:04:f7:49:08:c1:63:d6:fb: fb:2d:15:e4:28:1a:6f:05:3a:1e:60:f5:78:a0:f5: e6:0c:f2:78:48:aa:d8:e2:9a:cc:ae:d8:89:f6:22: c5:c4:38:25:ac:16:70:90:ae:ce:0e:3a:f8:dc:08: 59:d2:86:df:f2:0a:fe:98:06:31:77:28:75:c9:2c: 7d:b9:d0:96:cd:b0:55:fb:56:83:0e:4d:c8:2e:33: 0e:a5:ce:80:1b:1d:af:cb:e1:06:0d:43:56:a6:a2: 90:dd:24:7a:69:ab:ff:c2:2d:f0:e9:20:01:b0:33: 72:90:c0:0d:bd:46:cf:83:66:e5:4b:c6:e2:da:36: b7:f0:e2:5d:34:10:62:1a:5e:16:08:0d:2f:76:b2: ec:b7:c9:70:e0:b6:00:03:f1:be:ca:56:68:80:78: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3D:85:D2:8D:60:9C:4D:32:81:38:6B:24:53:2F:C7:50:8E:59:80 X509v3 Authority Key Identifier: keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5c:1b:1d:85:af:1e:90:51:55:92:2e:a4:e7:54:49:b2:92: a2:75:36:99:4b:88:be:c7:77:f8:d5:fa:85:86:96:5d:62:fe: 84:fc:f1:9c:6b:f3:6e:5e:8b:5c:71:fe:81:0c:ef:c1:ce:64: c9:7b:bc:60:51:eb:5f:1b:fc:27:48:72:b1:95:c8:dd:31:cb: 3d:44:cb:36:e8:f3:77:21:c6:d4:ce:5d:74:2f:ea:f1:c2:ad: d3:9e:eb:76:56:b0:ef:6b:28:e8:f6:c1:bd:46:c5:a6:a5:54: d0:f1:31:98:b7:cb:76:9e:09:97:60:3a:38:09:09:20:15:ad: ed:3e:da:ea:a7:e0:39:e5:7a:c0:97:ce:ee:d8:b5:cd:01:d2: 3d:7b:b3:f7:bb:88:52:d8:d3:91:cc:0e:89:a6:d3:f8:0a:79: 52:fd:40:82:42:3d:38:2c:50:45:af:4c:06:5d:37:4a:fb:9f: c4:e7:70:71:4f:13:6f:2c:3b:ac:95:14:ef:95:e0:fd:bc:b9: dd:30:16:bb:ab:82:d4:64:d4:05:d6:27:c6:f6:33:58:95:df: 63:c1:82:c9:7a:a2:f1:5d:b9:f7:fd:e7:a4:fc:30:64:be:7e: 0d:57:54:d1:f7:6d:70:12:f6:f0:79:da:88:14:6a:0f:15:94: 74:f9:0b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKn7bReQWWMDXsW117nLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjZiMzY4NjcyMzhhYTcxOGJlMTdlNmU3M2NlNDBhOTg5 NTc4YTAwHhcNMjUxMjI0MjEwMTE1WhcNMjUxMjI1MjEwMTE1WjAzMTEwLwYDVQQD EyhiNjNkODVkMjhkNjA5YzRkMzI4MTM4NmIyNDUzMmZjNzUwOGU1OTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA037dXx/tODGIYqlyMHxAfkGxU2U7 dhhHSR2fwk13RaVQSSFf42xV8zpVJz2qhBFlbblaaz0Awy31dNhfkiBme//Eyurs 4vioUcN+ZoMgD7ISsD/5A5Yo70Q9Z3mnpVgABPdJCMFj1vv7LRXkKBpvBToeYPV4 oPXmDPJ4SKrY4prMrtiJ9iLFxDglrBZwkK7ODjr43AhZ0obf8gr+mAYxdyh1ySx9 udCWzbBV+1aDDk3ILjMOpc6AGx2vy+EGDUNWpqKQ3SR6aav/wi3w6SABsDNykMAN vUbPg2blS8bi2ja38OJdNBBiGl4WCA0vdrLst8lw4LYAA/G+ylZogHiGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY9hdKNYJxNMoE4ayRTL8dQjlmAMB8GA1UdIwQY MBaAFFP2s2hnI4qnGL4X5uc85AqYlXigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDct NmRiYWQzMWRiYzQxLzEvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOTFlMTEtZWUwYy00OWVjLTk1ZDctNmRiYWQzMWRiYzQx LzEvVV9hemFHY2ppcWNZdmhmbTV6emtDcGlWZUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVwbHYWv HpBRVZIupOdUSbKSonU2mUuIvsd3+NX6hYaWXWL+hPzxnGvzbl6LXHH+gQzvwc5k yXu8YFHrXxv8J0hysZXI3THLPUTLNujzdyHG1M5ddC/q8cKt057rdlaw72so6PbB vUbFpqVU0PExmLfLdp4Jl2A6OAkJIBWt7T7a6qfgOeV6wJfO7ti1zQHSPXuz97uI UtjTkcwOiabT+Ap5Uv1AgkI9OCxQRa9MBl03SvufxOdwcU8Tbyw7rJUU75Xg/by5 3TAWu6uC1GTUBdYnxvYzWJXfY8GCyXqi8V259/3npPwwZL5+DVdU0fdtcBL28Hna iBRqDxWUdPkLdQ== -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:38 2025 by rpki-client