This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json) Hash identifier: q6ju4om4ueKOwxsLBT27Th1wk8loXGF147j4MB3K3A0= Subject key identifier: D6:D1:2A:23:03:AC:99:78:A2:06:11:B3:75:0F:1E:68:46:39:96:68 Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Certificate serial: 019B3BA21422A33B309849491E1A8DC0DBEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft Manifest number: 141E Signing time: Sat 20 Dec 2025 12:00:36 +0000 Manifest this update: Sat 20 Dec 2025 12:00:36 +0000 Manifest next update: Sun 21 Dec 2025 12:00:36 +0000 Files and hashes: 1: 35i0W-439ceXCAfaqLUm_3h3G24.roa (hash: xuOhVj3IlTLiG4QrKiExJxP+JLiXYysTKsGNlxVTku4=) 2: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=) 3: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=) 4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: CNKCggcI16ulEWU47U3kmXJjlPNmLK2PqHxChhVI/y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:14:22:a3:3b:30:98:49:49:1e:1a:8d:c0:db:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Validity Not Before: Dec 20 12:00:36 2025 GMT Not After : Dec 21 12:00:36 2025 GMT Subject: CN=d6d12a2303ac9978a20611b3750f1e6846399668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:38:56:e2:48:9e:53:71:b9:8a:a7:08:e7: 3e:9d:3e:89:e9:42:5f:62:5d:3c:28:28:b0:fc:53: 6e:1e:d6:1f:47:b3:8a:4f:07:8d:a3:71:47:b7:30: 05:39:35:fa:ff:8f:f5:47:85:f0:38:ec:a9:2d:b6: 26:f3:57:f7:d4:d8:f3:cf:3e:71:3f:69:3f:ff:4a: 91:96:fe:c6:91:9d:0f:5c:9e:5c:b8:ea:59:d5:49: 2a:2e:c0:07:aa:5e:d9:47:f1:71:07:3d:93:65:32: a7:37:dc:b1:4a:42:29:df:7c:a6:fc:56:be:d6:ea: 42:2b:ba:9e:1c:e5:58:7b:25:22:65:07:21:dd:0f: 95:0e:91:2b:3a:8c:e6:a6:08:b1:db:91:67:69:8d: 98:b1:74:2c:5d:42:52:c4:69:43:8b:6c:c6:57:3a: b0:5d:86:7a:ef:7f:f8:e6:97:ae:a5:2f:db:62:08: 93:a9:89:d8:58:cf:92:e4:96:ee:95:98:af:bb:49: 54:99:db:f3:bf:46:a8:e2:55:97:e3:19:8a:1f:1b: 6a:16:e8:6d:3c:66:77:20:73:27:1d:98:0d:87:67: fe:81:9b:ff:91:40:c7:b7:64:2b:e8:fe:de:ee:6c: 41:c1:1d:ca:5a:df:2f:f4:65:1d:19:7a:1e:e8:94: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D1:2A:23:03:AC:99:78:A2:06:11:B3:75:0F:1E:68:46:39:96:68 X509v3 Authority Key Identifier: keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f9:90:10:04:ac:5f:87:c7:f8:cf:46:a7:1d:ab:63:7d:95: 7a:a1:b3:74:53:d1:6e:82:fd:80:00:3f:49:01:65:a4:93:07: 0e:66:a6:f5:63:bc:0a:df:70:89:4a:88:05:7f:eb:1d:75:64: 5f:e4:8a:3c:ea:35:6f:41:d4:82:60:1d:07:6a:31:64:19:dc: 35:90:13:a0:89:6b:51:9e:b6:88:bd:f6:3d:13:05:cf:f1:e8: 6a:63:21:48:73:4e:b0:e6:25:b8:b3:bc:83:d6:09:a4:14:e5: de:60:e5:a9:50:d6:af:e7:2f:50:30:4b:09:0c:b6:a2:8d:9c: 76:70:18:0d:93:44:69:91:73:cd:cd:31:00:83:89:0f:e3:c7: 54:41:bd:8e:67:75:05:07:bc:d8:d0:8f:0c:6c:24:14:49:53: 40:3f:98:bc:d3:5d:78:c3:b4:32:c5:8b:e2:84:63:39:f0:c2: ff:23:dc:0f:12:85:3f:0f:16:3d:b3:40:b9:29:59:58:44:1f: bf:cb:a6:f5:6f:36:90:9b:d9:62:61:ba:35:49:b6:9d:c8:5d: bd:cd:44:89:b7:b5:3f:af:77:c4:a1:04:b8:3e:90:fb:5d:72: 45:d8:75:65:ba:9c:c3:8d:a0:cc:5d:40:bd:be:67:81:6d:e7: da:30:77:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohQiozswmElJHhqNwNvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi M2Y4MjUwHhcNMjUxMjIwMTIwMDM2WhcNMjUxMjIxMTIwMDM2WjAzMTEwLwYDVQQD EyhkNmQxMmEyMzAzYWM5OTc4YTIwNjExYjM3NTBmMWU2ODQ2Mzk5NjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3w4VuJInlNxuYqnCOc+nT6J6UJf Yl08KCiw/FNuHtYfR7OKTweNo3FHtzAFOTX6/4/1R4XwOOypLbYm81f31Njzzz5x P2k//0qRlv7GkZ0PXJ5cuOpZ1UkqLsAHql7ZR/FxBz2TZTKnN9yxSkIp33ym/Fa+ 1upCK7qeHOVYeyUiZQch3Q+VDpErOozmpgix25FnaY2YsXQsXUJSxGlDi2zGVzqw XYZ673/45peupS/bYgiTqYnYWM+S5JbulZivu0lUmdvzv0ao4lWX4xmKHxtqFuht PGZ3IHMnHZgNh2f+gZv/kUDHt2Qr6P7e7mxBwR3KWt8v9GUdGXoe6JSlYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbRKiMDrJl4ogYRs3UPHmhGOZZoMB8GA1UdIwQY MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt MDUxMDc2NzQ0YTY1LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1 LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfmQEASs X4fH+M9Gpx2rY32VeqGzdFPRboL9gAA/SQFlpJMHDmam9WO8Ct9wiUqIBX/rHXVk X+SKPOo1b0HUgmAdB2oxZBncNZAToIlrUZ62iL32PRMFz/HoamMhSHNOsOYluLO8 g9YJpBTl3mDlqVDWr+cvUDBLCQy2oo2cdnAYDZNEaZFzzc0xAIOJD+PHVEG9jmd1 BQe82NCPDGwkFElTQD+YvNNdeMO0MsWL4oRjOfDC/yPcDxKFPw8WPbNAuSlZWEQf v8um9W82kJvZYmG6NUm2nchdvc1Eibe1P693xKEEuD6Q+11yRdh1Zbqcw42gzF1A vb5ngW3n2jB3Dg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:22:53 2025 by rpki-client