This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft File: AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json) Hash identifier: tFhGhDjOZ/KxY39TKkKnG2ORHDh/YEPmcSuQD8MlHl8= Subject key identifier: B0:E1:8C:40:0F:EE:79:EE:35:55:46:3E:5A:27:A0:49:D2:60:F1:31 Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e Certificate serial: 019B6E4629B2DBFA9EBD184720B921654437 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft Manifest number: 029E Signing time: Tue 30 Dec 2025 08:00:50 +0000 Manifest this update: Tue 30 Dec 2025 08:00:50 +0000 Manifest next update: Wed 31 Dec 2025 08:00:50 +0000 Files and hashes: 1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: 3m9F1RL5c6dcuLHywMaqZfkrOFqMlZDE7NYP0nmgKVY=) 2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:46:29:b2:db:fa:9e:bd:18:47:20:b9:21:65:44:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e Validity Not Before: Dec 30 08:00:50 2025 GMT Not After : Dec 31 08:00:50 2025 GMT Subject: CN=b0e18c400fee79ee3555463e5a27a049d260f131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:da:04:a4:ed:f8:9f:2f:db:d7:1d:25:e0: 29:6c:ba:fe:b0:f7:86:22:5e:3a:8d:78:32:22:41: 16:7a:8b:ac:a0:4a:8d:70:58:5b:77:5f:c4:63:5f: 2a:f6:cd:4f:7c:c9:b0:b7:f2:7c:52:8c:47:11:8a: 95:41:3e:ca:d9:06:84:14:c8:29:da:39:82:63:ff: 35:cb:31:27:76:90:8b:08:a2:8e:41:9b:77:a5:22: 13:32:f0:78:34:4c:36:cf:a4:96:4e:6b:13:31:7e: b7:53:78:18:50:f8:67:1f:19:1c:41:bc:55:6e:a2: 82:c9:4a:ba:62:33:ed:e2:6e:20:29:09:72:95:d3: 24:2f:a5:8b:f6:2c:e1:66:24:50:6a:77:40:39:fa: 27:a2:db:08:58:fb:ac:af:bd:ec:08:f9:60:ec:a3: cd:6f:8b:a2:ef:36:2d:ca:92:64:37:76:16:45:c4: fc:8b:07:bc:a6:bd:98:9a:62:6d:1e:4f:fc:4b:b6: 2f:a3:b5:cd:a0:dd:84:e7:f0:26:9a:23:ad:cf:40: 25:f2:bd:f4:a5:e9:b6:e4:78:e5:0b:49:5d:29:28: b0:26:7a:37:7f:0b:ec:d5:a4:bb:72:1a:ad:18:0c: ac:79:12:f1:66:19:5f:9d:c4:c2:d6:46:6b:63:b3: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E1:8C:40:0F:EE:79:EE:35:55:46:3E:5A:27:A0:49:D2:60:F1:31 X509v3 Authority Key Identifier: keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e2:d5:6d:17:ab:d2:4c:e0:39:9f:74:64:14:be:0b:5c:e5: 15:d0:f9:4a:03:ff:7e:df:54:0e:d4:7c:4d:34:f9:01:4e:ec: 8b:55:73:d0:ac:bb:70:a3:20:b9:55:bc:d7:72:29:85:64:85: 53:55:d4:b7:c0:70:27:3f:4f:3c:0e:06:87:a6:76:fc:bc:0c: ab:98:54:79:e3:ac:04:4c:1a:6e:a3:df:bc:35:43:bc:a9:6b: 0b:49:0e:e4:f0:c3:6f:03:de:d5:03:cb:dd:dd:f4:e3:bf:4e: 5a:79:26:cd:8a:25:8a:c9:23:01:e4:d2:d3:fb:93:3f:3c:99: 82:e4:fe:7c:24:94:ab:36:fa:4b:d7:7e:18:07:55:d2:bd:8e: ec:84:dc:46:22:9e:be:eb:69:74:95:bf:45:57:6b:19:09:2e: d3:bc:1e:37:81:42:13:a4:29:d1:d6:06:18:34:e3:68:f5:d9: f9:93:4b:35:66:f0:e4:d4:19:31:4f:db:6e:cc:72:7f:45:fe: bf:90:e4:dc:c4:ee:0a:a0:45:b1:3b:6f:b1:a6:1e:7a:1b:e6: 88:92:c7:b7:1a:cc:3b:4d:75:8f:19:ee:87:ff:14:5f:8c:e8: a4:ff:cc:f7:dc:c6:9b:7b:f8:d8:01:28:1e:fe:cf:67:8a:00: 4e:75:79:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRimy2/qevRhHILkhZUQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTY5MDg1ZGJmYWVlNWEyYjExZjVjYzg3ZjU5ZDc0MTg3 OGJkMWUwHhcNMjUxMjMwMDgwMDUwWhcNMjUxMjMxMDgwMDUwWjAzMTEwLwYDVQQD EyhiMGUxOGM0MDBmZWU3OWVlMzU1NTQ2M2U1YTI3YTA0OWQyNjBmMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfnaBKTt+J8v29cdJeApbLr+sPeG Il46jXgyIkEWeousoEqNcFhbd1/EY18q9s1PfMmwt/J8UoxHEYqVQT7K2QaEFMgp 2jmCY/81yzEndpCLCKKOQZt3pSITMvB4NEw2z6SWTmsTMX63U3gYUPhnHxkcQbxV bqKCyUq6YjPt4m4gKQlyldMkL6WL9izhZiRQandAOfonotsIWPusr73sCPlg7KPN b4ui7zYtypJkN3YWRcT8iwe8pr2YmmJtHk/8S7Yvo7XNoN2E5/AmmiOtz0Al8r30 pem25HjlC0ldKSiwJno3fwvs1aS7chqtGAyseRLxZhlfncTC1kZrY7MX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDhjEAP7nnuNVVGPlonoEnSYPExMB8GA1UdIwQY MBaAFAGWkIXb+u5aKxH1zIf1nXQYeL0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzIt NjY3ZDk3NGY4YjE0LzEvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jNDA0ZGEtMDRlNS00NWVkLTkwNzItNjY3ZDk3NGY4YjE0 LzEvQVphUWhkdjY3bG9yRWZYTWhfV2RkQmg0dlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuLVbRer 0kzgOZ90ZBS+C1zlFdD5SgP/ft9UDtR8TTT5AU7si1Vz0Ky7cKMguVW813IphWSF U1XUt8BwJz9PPA4Gh6Z2/LwMq5hUeeOsBEwabqPfvDVDvKlrC0kO5PDDbwPe1QPL 3d30479OWnkmzYoliskjAeTS0/uTPzyZguT+fCSUqzb6S9d+GAdV0r2O7ITcRiKe vutpdJW/RVdrGQku07weN4FCE6Qp0dYGGDTjaPXZ+ZNLNWbw5NQZMU/bbsxyf0X+ v5Dk3MTuCqBFsTtvsaYeehvmiJLHtxrMO011jxnuh/8UX4zopP/M99zGm3v42AEo Hv7PZ4oATnV5kA== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:36 2025 by rpki-client