This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json) Hash identifier: Rm22A67aoUHUSkLeZT8rAtMcE5e1OXfbJSd44qy2g4w= Subject key identifier: D5:6D:F7:15:0F:C6:3D:12:10:D6:69:A9:8B:1D:AB:D1:6B:85:A4:2B Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f Certificate serial: 019B68E8F18FA462BEAEB278A0DC5814B8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft Manifest number: 14AB Signing time: Mon 29 Dec 2025 07:00:55 +0000 Manifest this update: Mon 29 Dec 2025 07:00:55 +0000 Manifest next update: Tue 30 Dec 2025 07:00:55 +0000 Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: IN+i0/F3mPBtQsu2+5CIX94sZhr4Wjgd7RXaE8AJiMw=) 2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e8:f1:8f:a4:62:be:ae:b2:78:a0:dc:58:14:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f Validity Not Before: Dec 29 07:00:55 2025 GMT Not After : Dec 30 07:00:55 2025 GMT Subject: CN=d56df7150fc63d1210d669a98b1dabd16b85a42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:19:a8:f3:52:a5:8b:4c:1d:f0:4c:f8:df: d8:2d:ab:86:d1:1c:b7:b1:00:3c:2d:0f:02:b4:a9: 6c:6e:c6:8a:fa:4b:39:54:36:9b:61:60:81:b3:c4: 4f:0f:fe:4b:0e:5a:10:cd:e3:0d:bf:1b:14:ca:19: 1c:ef:e4:b6:d4:26:03:14:8d:cc:af:83:d4:b7:32: 5a:8e:f7:ea:38:72:d2:6b:28:1e:ef:42:5d:5d:68: 5d:68:5a:39:55:34:22:e8:df:f6:4e:aa:b4:47:b8: 43:79:30:67:8e:8c:6e:83:bb:40:bc:79:8e:b3:c5: 9b:be:c4:3b:a5:80:51:13:a4:03:17:25:08:4e:c6: 67:26:3b:57:eb:3f:fc:86:9f:cc:e2:50:83:99:76: 6d:15:7e:a3:dc:ca:80:09:0c:3e:6a:f2:1d:4b:d7: 23:32:28:4d:b4:45:30:53:cd:03:e8:97:f5:e8:71: 5a:72:45:4c:9d:99:c6:70:cc:30:3e:d1:d9:71:1e: 2d:99:1f:3a:e6:fa:48:81:db:f5:68:ad:97:5f:20: 75:bb:a1:e7:ca:20:53:12:67:1f:3c:ad:fe:d3:b6: 5c:f0:c8:61:4f:d1:a1:8d:9d:1b:cf:65:8a:4d:44: 84:c4:48:b2:33:a8:5f:d9:fc:a7:94:66:7b:d0:64: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6D:F7:15:0F:C6:3D:12:10:D6:69:A9:8B:1D:AB:D1:6B:85:A4:2B X509v3 Authority Key Identifier: keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f2:38:5c:17:63:59:e3:fc:48:91:f9:4c:7e:90:6e:76:01: 5b:11:2f:1f:7c:2d:98:ae:95:30:90:4a:fe:ed:99:84:28:1a: b2:0f:2a:4b:fc:a1:33:d9:1e:95:23:b9:98:93:da:c9:86:87: 45:fc:ec:4a:35:12:83:dd:eb:5c:f1:d0:37:2c:91:44:68:b7: 94:c1:9e:05:20:b7:5c:13:3c:4c:47:71:55:cf:2a:67:e4:44: f6:f7:e2:8e:1b:25:9e:37:97:a5:c2:90:c0:0f:b3:31:16:b4: 96:87:8c:ea:79:6f:bc:86:33:1c:89:94:61:e9:c9:64:0a:9d: 0c:5a:e2:27:62:15:85:d6:62:4e:0f:ef:1a:8d:e8:8f:89:a6: c0:bd:29:d3:9d:dd:0e:4c:0b:6c:a1:75:38:66:22:9c:66:65: 35:f0:9b:44:fb:4c:38:c0:e0:66:c7:c4:fd:4f:da:88:20:22: ae:0f:b5:c1:c3:5f:ec:e0:02:8a:8a:d3:d3:d4:55:62:93:be: 8b:14:de:82:7f:3f:cf:d3:7e:6e:2f:ac:1f:50:8b:ed:09:e1: 90:4c:39:3f:f0:90:49:73:c9:0a:b4:c3:2d:4b:21:34:8a:5c: 5b:e1:c0:a9:39:12:71:34:9f:f1:f2:a4:6a:a0:2b:91:22:20: 53:b8:8b:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6PGPpGK+rrJ4oNxYFLisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzBkNzcyYmE4MzIyNWJlZDU4OGNjZDFjNWM5NmFmMDNi Mzc3MGYwHhcNMjUxMjI5MDcwMDU1WhcNMjUxMjMwMDcwMDU1WjAzMTEwLwYDVQQD EyhkNTZkZjcxNTBmYzYzZDEyMTBkNjY5YTk4YjFkYWJkMTZiODVhNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJMZqPNSpYtMHfBM+N/YLauG0Ry3 sQA8LQ8CtKlsbsaK+ks5VDabYWCBs8RPD/5LDloQzeMNvxsUyhkc7+S21CYDFI3M r4PUtzJajvfqOHLSayge70JdXWhdaFo5VTQi6N/2Tqq0R7hDeTBnjoxug7tAvHmO s8WbvsQ7pYBRE6QDFyUITsZnJjtX6z/8hp/M4lCDmXZtFX6j3MqACQw+avIdS9cj MihNtEUwU80D6Jf16HFackVMnZnGcMwwPtHZcR4tmR865vpIgdv1aK2XXyB1u6Hn yiBTEmcfPK3+07Zc8MhhT9GhjZ0bz2WKTUSExEiyM6hf2fynlGZ70GTL6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVt9xUPxj0SENZpqYsdq9FrhaQrMB8GA1UdIwQY MBaAFAMw13K6gyJb7ViMzRxclq8Ds3cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODct N2U0NTFjODBkNTZmLzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODctN2U0NTFjODBkNTZm LzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/I4XBdj WeP8SJH5TH6QbnYBWxEvH3wtmK6VMJBK/u2ZhCgasg8qS/yhM9kelSO5mJPayYaH RfzsSjUSg93rXPHQNyyRRGi3lMGeBSC3XBM8TEdxVc8qZ+RE9vfijhslnjeXpcKQ wA+zMRa0loeM6nlvvIYzHImUYenJZAqdDFriJ2IVhdZiTg/vGo3oj4mmwL0p053d DkwLbKF1OGYinGZlNfCbRPtMOMDgZsfE/U/aiCAirg+1wcNf7OACiorT09RVYpO+ ixTegn8/z9N+bi+sH1CL7QnhkEw5P/CQSXPJCrTDLUshNIpcW+HAqTkScTSf8fKk aqArkSIgU7iLTg== -----END CERTIFICATE-----Generated at Mon Dec 29 08:25:38 2025 by rpki-client