This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json) Hash identifier: ds01Bd2cMwDKsosBs3MvWrNH+vKseAHJLQzQpMNr2VE= Subject key identifier: 0D:DB:A6:5C:A6:CC:B2:B8:7D:BC:68:8B:CB:4E:B6:16:E5:D1:BD:FE Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f Certificate serial: 019B6AD7257C8020DC22C2D6B872784635F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft Manifest number: 14AC Signing time: Mon 29 Dec 2025 16:00:43 +0000 Manifest this update: Mon 29 Dec 2025 16:00:43 +0000 Manifest next update: Tue 30 Dec 2025 16:00:43 +0000 Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: xAt9R3uTPlU6xyk0mK7iZXBzJ2U1mY9OKKwXfSlwlLw=) 2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:25:7c:80:20:dc:22:c2:d6:b8:72:78:46:35:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f Validity Not Before: Dec 29 16:00:43 2025 GMT Not After : Dec 30 16:00:43 2025 GMT Subject: CN=0ddba65ca6ccb2b87dbc688bcb4eb616e5d1bdfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:e6:84:27:4b:94:07:ce:e6:3a:78:b3:b0: fc:17:38:48:98:0f:1b:02:9f:53:96:c0:8b:cb:65: 7e:74:6b:8f:7a:44:97:b4:1a:c2:e3:f6:21:36:40: 55:13:0f:6c:8d:e5:d3:a2:60:c0:64:87:8d:0a:45: 10:75:5b:5a:d2:0c:54:ef:10:8d:6b:36:9c:09:a9: 02:31:9d:34:87:05:37:bd:3b:a9:b3:96:82:16:14: 89:b6:f0:38:b1:d5:e4:92:d3:3a:1a:c5:23:7d:75: 8f:0f:68:5d:5b:17:80:c9:2d:f4:58:71:d3:59:2f: ca:3b:49:2b:a6:ee:9c:c5:4a:b9:4e:66:b7:4f:6a: 9a:75:dc:16:64:d4:7f:3b:37:d4:46:1c:8f:85:ee: 49:b6:fd:58:1d:a1:90:2c:6a:6f:04:e6:4b:3f:4f: f5:3a:35:f6:43:96:c6:57:76:8e:d1:f0:a1:81:b7: 51:26:bf:02:d9:55:36:63:a1:20:3b:1e:b5:4f:7f: 6d:e4:1e:37:c8:77:ed:44:c3:6c:a3:aa:74:51:02: 82:2f:59:b6:b6:54:15:8b:d7:1b:77:7e:ba:77:96: fb:dc:e4:b8:f8:76:22:aa:99:e7:65:dc:a4:13:72: 8b:85:ad:94:2a:f5:cb:87:23:02:52:ff:1d:5b:94: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:A6:5C:A6:CC:B2:B8:7D:BC:68:8B:CB:4E:B6:16:E5:D1:BD:FE X509v3 Authority Key Identifier: keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:36:56:ca:3c:d8:32:b7:72:0c:bb:fb:6e:05:41:b7:09:bd: 2f:b1:67:fa:d1:f1:18:66:13:35:a2:04:e5:79:66:cf:15:d0: 41:22:0c:44:0c:29:52:0b:b2:60:06:ef:0c:31:2b:ff:bf:6d: 5d:a6:f1:af:3e:63:1b:d3:92:81:8e:87:92:29:50:fc:e4:28: d6:93:61:68:b4:cc:8f:47:23:2f:84:14:bd:40:0a:84:09:99: 32:f1:1d:50:df:aa:5f:27:58:81:cf:fa:32:c1:35:5a:09:99: 47:40:1d:ab:6a:88:ef:f0:ab:f3:2e:36:1f:91:50:23:ba:4e: c5:18:1b:dd:7c:05:88:3a:5c:be:99:1b:d0:8e:c9:35:84:3e: 92:b2:ef:97:f6:c4:7e:3b:bb:29:58:a7:1b:15:06:1c:32:c1: 0a:e6:ef:60:d2:42:9f:22:df:ab:bf:ad:73:fe:20:61:02:ee: 4e:f2:72:60:91:93:e1:dc:cb:99:f0:d0:7e:06:47:35:ee:cd: 86:11:32:ff:d5:a5:67:6c:eb:9c:85:db:2d:26:11:43:10:26: 80:81:89:b1:72:f1:53:db:ad:ff:df:7a:ca:44:2c:ea:df:8c: a9:f7:aa:e3:26:09:0d:a6:ba:9d:4f:c8:a6:46:f8:97:7e:0f: 29:0d:93:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1yV8gCDcIsLWuHJ4RjX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzBkNzcyYmE4MzIyNWJlZDU4OGNjZDFjNWM5NmFmMDNi Mzc3MGYwHhcNMjUxMjI5MTYwMDQzWhcNMjUxMjMwMTYwMDQzWjAzMTEwLwYDVQQD EygwZGRiYTY1Y2E2Y2NiMmI4N2RiYzY4OGJjYjRlYjYxNmU1ZDFiZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41jmhCdLlAfO5jp4s7D8FzhImA8b Ap9TlsCLy2V+dGuPekSXtBrC4/YhNkBVEw9sjeXTomDAZIeNCkUQdVta0gxU7xCN azacCakCMZ00hwU3vTups5aCFhSJtvA4sdXkktM6GsUjfXWPD2hdWxeAyS30WHHT WS/KO0krpu6cxUq5Tma3T2qaddwWZNR/OzfURhyPhe5Jtv1YHaGQLGpvBOZLP0/1 OjX2Q5bGV3aO0fChgbdRJr8C2VU2Y6EgOx61T39t5B43yHftRMNso6p0UQKCL1m2 tlQVi9cbd366d5b73OS4+HYiqpnnZdykE3KLha2UKvXLhyMCUv8dW5ShDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3bplymzLK4fbxoi8tOthbl0b3+MB8GA1UdIwQY MBaAFAMw13K6gyJb7ViMzRxclq8Ds3cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODct N2U0NTFjODBkNTZmLzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODctN2U0NTFjODBkNTZm LzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazZWyjzY MrdyDLv7bgVBtwm9L7Fn+tHxGGYTNaIE5XlmzxXQQSIMRAwpUguyYAbvDDEr/79t Xabxrz5jG9OSgY6HkilQ/OQo1pNhaLTMj0cjL4QUvUAKhAmZMvEdUN+qXydYgc/6 MsE1WgmZR0Adq2qI7/Cr8y42H5FQI7pOxRgb3XwFiDpcvpkb0I7JNYQ+krLvl/bE fju7KVinGxUGHDLBCubvYNJCnyLfq7+tc/4gYQLuTvJyYJGT4dzLmfDQfgZHNe7N hhEy/9WlZ2zrnIXbLSYRQxAmgIGJsXLxU9ut/996ykQs6t+Mqfeq4yYJDaa6nU/I pkb4l34PKQ2Tvg== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:16 2025 by rpki-client