This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft File: AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json) Hash identifier: 0i+jFLUWpJCnnSBNnxMrsRhNCojIjRq7+RIOD1qlnx8= Subject key identifier: F9:0D:9B:2B:8C:91:32:BB:20:FD:05:CE:C8:6F:29:C6:93:7C:52:2D Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4 Certificate issuer: /CN=019ad1824be546163b481fc49647a0508b226bf4 Certificate serial: 019B4814C23BF7166447493A7B397A6EC16F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 22:01:18 +0000 Manifest this update: Mon 22 Dec 2025 22:01:18 +0000 Manifest next update: Tue 23 Dec 2025 22:01:18 +0000 Files and hashes: 1: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (hash: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=) 2: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: 0OQMfSWRs2+0EYkkkqqSpzSSnZhM1LKe/NMRXIa2wU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:c2:3b:f7:16:64:47:49:3a:7b:39:7a:6e:c1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4 Validity Not Before: Dec 22 22:01:18 2025 GMT Not After : Dec 23 22:01:18 2025 GMT Subject: CN=f90d9b2b8c9132bb20fd05cec86f29c6937c522d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:ef:0c:a3:1a:17:68:b2:81:b6:fc:b2:f1: 34:18:d6:1e:00:32:ec:a6:98:f7:cd:6d:66:8e:d8: ed:58:75:f8:0b:fb:ba:9d:35:80:b2:83:e5:1a:9e: b7:2c:d0:bc:3b:f5:7f:f1:6c:e7:4e:63:c6:25:00: ac:fd:84:70:88:7a:07:11:ef:2e:8a:81:9f:c4:be: 93:11:74:f9:a0:11:fe:c3:7a:7e:29:83:c1:d5:10: 98:06:6c:0a:87:30:1f:0f:9a:e3:a2:62:ad:8e:30: f7:bc:c6:54:19:bd:87:b2:ec:57:2a:db:86:06:fb: 22:15:c2:c0:ac:02:ac:22:71:2f:d5:2c:dc:11:a2: 16:ee:bb:48:6f:0e:71:9c:d1:9b:8b:a8:7a:41:91: eb:f6:98:9b:24:56:82:cc:20:30:00:0c:d8:fa:2b: 3e:43:98:c9:7b:8c:ae:77:ef:f3:df:4a:ad:6a:98: 90:26:5e:d4:9a:36:34:b3:e3:53:ef:2c:f6:b7:22: a0:3e:d9:7d:32:b8:7b:da:19:28:3b:ee:d7:62:20: c0:80:29:30:09:00:5b:5d:8c:6a:de:4a:e6:01:0a: 32:31:f3:a6:58:d9:84:38:ae:65:4e:5b:b6:94:b8: 82:14:19:34:46:17:f8:5a:f5:c9:36:40:5d:72:fb: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0D:9B:2B:8C:91:32:BB:20:FD:05:CE:C8:6F:29:C6:93:7C:52:2D X509v3 Authority Key Identifier: keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b3:56:e4:c1:c2:4f:1c:1e:f8:6e:31:39:5c:4e:ab:53:9a: 39:90:cd:40:fa:db:62:6d:f0:d8:2e:23:c5:83:35:a2:3d:03: 25:2a:cd:df:45:87:c2:53:66:eb:e0:ee:dd:f8:b7:d0:00:fd: eb:3a:c3:30:5c:5f:ef:4e:fc:0d:87:21:f1:75:99:d8:6b:09: df:70:fb:70:1c:c9:50:5f:3f:9d:6d:6e:26:64:cf:50:29:7a: eb:53:7c:22:04:f3:63:1e:d4:db:cb:6e:7b:dc:ee:20:16:b8: 2e:20:cf:73:00:ef:8a:60:ab:9c:30:3f:a4:a9:03:c6:cb:44: b6:58:bf:1d:2f:45:32:6c:71:94:d4:7b:41:d7:e2:5e:8c:c8: 27:33:a9:a6:db:69:51:8f:bc:38:d3:cf:bf:44:2e:df:70:f4: 74:c2:f3:e5:4d:0b:68:2d:08:e0:eb:7e:29:db:d4:38:cc:0d: 57:93:5a:85:1d:74:33:1b:12:37:99:0d:f1:f7:e8:15:8d:79: 9a:6d:aa:59:fb:87:d4:97:b9:4a:a3:3b:9d:11:4b:cc:3d:c0: 30:2e:27:e7:2a:7d:19:65:9d:16:db:5b:11:01:a3:29:c1:81: 2a:51:2e:16:83:87:2d:bf:2a:d3:dd:0a:f4:03:f7:88:50:2c: 94:c7:49:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFMI79xZkR0k6ezl6bsFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOWFkMTgyNGJlNTQ2MTYzYjQ4MWZjNDk2NDdhMDUwOGIy MjZiZjQwHhcNMjUxMjIyMjIwMTE4WhcNMjUxMjIzMjIwMTE4WjAzMTEwLwYDVQQD EyhmOTBkOWIyYjhjOTEzMmJiMjBmZDA1Y2VjODZmMjljNjkzN2M1MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2zvDKMaF2iygbb8svE0GNYeADLs ppj3zW1mjtjtWHX4C/u6nTWAsoPlGp63LNC8O/V/8WznTmPGJQCs/YRwiHoHEe8u ioGfxL6TEXT5oBH+w3p+KYPB1RCYBmwKhzAfD5rjomKtjjD3vMZUGb2HsuxXKtuG BvsiFcLArAKsInEv1SzcEaIW7rtIbw5xnNGbi6h6QZHr9pibJFaCzCAwAAzY+is+ Q5jJe4yud+/z30qtapiQJl7UmjY0s+NT7yz2tyKgPtl9Mrh72hkoO+7XYiDAgCkw CQBbXYxq3krmAQoyMfOmWNmEOK5lTlu2lLiCFBk0Rhf4WvXJNkBdcvsxvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkNmyuMkTK7IP0FzshvKcaTfFItMB8GA1UdIwQY MBaAFAGa0YJL5UYWO0gfxJZHoFCLImv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMt ZThlMTNiYjBlMDg0LzEvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82MjQ4ZWMtMjA0Zi00NTliLTkwNGMtZThlMTNiYjBlMDg0 LzEvQVpyUmdrdmxSaFk3U0JfRWxrZWdVSXNpYV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLNW5MHC Txwe+G4xOVxOq1OaOZDNQPrbYm3w2C4jxYM1oj0DJSrN30WHwlNm6+Du3fi30AD9 6zrDMFxf7078DYch8XWZ2GsJ33D7cBzJUF8/nW1uJmTPUCl661N8IgTzYx7U28tu e9zuIBa4LiDPcwDvimCrnDA/pKkDxstEtli/HS9FMmxxlNR7QdfiXozIJzOppttp UY+8ONPPv0Qu33D0dMLz5U0LaC0I4Ot+KdvUOMwNV5NahR10MxsSN5kN8ffoFY15 mm2qWfuH1Je5SqM7nRFLzD3AMC4n5yp9GWWdFttbEQGjKcGBKlEuFoOHLb8q090K 9AP3iFAslMdJ5w== -----END CERTIFICATE-----Generated at Tue Dec 23 02:23:34 2025 by rpki-client