This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json) Hash identifier: kpzLMtQ1oqEITs3dBRqargbO8yeU5heRQfIt7iQ4dUE= Subject key identifier: 2F:3E:85:65:61:B6:68:A9:29:0B:AD:43:56:BC:C3:2A:F9:D3:2E:0C Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Certificate serial: 019B34203977AD63F171947D36F78EB151DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft Manifest number: 0E61 Signing time: Fri 19 Dec 2025 01:01:25 +0000 Manifest this update: Fri 19 Dec 2025 01:01:25 +0000 Manifest next update: Sat 20 Dec 2025 01:01:25 +0000 Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: 4GdFj0uzniFyH9WDLfrkxicn48G64fG59JOH3+8y34o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:39:77:ad:63:f1:71:94:7d:36:f7:8e:b1:51:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Validity Not Before: Dec 19 01:01:25 2025 GMT Not After : Dec 20 01:01:25 2025 GMT Subject: CN=2f3e856561b668a9290bad4356bcc32af9d32e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:f4:87:9e:6e:9b:82:de:e3:aa:e3:1e:8f: b7:d6:6c:c2:86:3f:1e:03:f6:0b:df:a7:76:69:16: 7e:70:32:ea:c9:7e:03:7b:14:29:b5:cd:fb:b0:1c: 25:eb:50:05:c4:20:77:80:0d:2d:0b:96:f3:55:05: d5:6c:84:c9:3d:01:2e:9b:c4:5c:f8:4a:d6:89:f3: 33:4e:64:78:f9:1d:5b:96:c5:68:d6:51:bd:e6:ef: a2:d9:09:9d:a5:b2:d9:ab:f9:4f:21:83:5d:12:0f: ee:15:b3:a3:c7:cd:11:04:d7:c3:48:6b:07:55:8a: b1:3e:98:42:d7:2f:1d:c0:5b:a8:0c:84:c1:ab:83: e2:86:98:e0:b5:10:5a:65:5e:d5:fd:e8:7b:9d:fa: 3f:f6:b6:b2:a9:a9:0c:e8:00:7a:50:87:b8:81:bc: 4f:c2:cd:49:e2:de:83:52:b8:5a:1e:3a:1c:88:7f: 6d:18:f0:ba:50:dd:0f:57:da:6e:c2:9f:ee:ff:b1: 94:00:d6:68:ed:ef:c7:9e:62:9f:fb:63:3d:59:d8: d9:e5:72:79:4f:af:53:58:c4:35:c8:bf:3f:e7:54: c4:dd:bb:f2:95:f2:fa:8f:ce:d0:7c:83:22:6f:a4: 67:12:8d:94:9e:6a:c0:62:38:55:de:73:e2:c4:bd: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3E:85:65:61:B6:68:A9:29:0B:AD:43:56:BC:C3:2A:F9:D3:2E:0C X509v3 Authority Key Identifier: keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:84:06:48:97:75:31:c9:50:dc:09:13:f9:54:4d:7f:9d: d8:8a:37:ef:bf:11:c2:9c:cb:54:68:2e:9a:8d:36:33:71:12: d7:b9:2e:0f:04:70:01:25:04:91:80:5b:7f:68:1b:06:66:f2: 29:24:14:59:ad:34:58:81:98:6e:b0:76:ae:5d:ad:d2:2e:90: 6c:a5:42:4b:db:8a:34:db:bf:6f:32:61:e8:6a:59:65:7f:96: f5:77:62:49:51:b1:09:ee:7a:62:d8:02:f8:c7:65:b7:48:a4: 41:27:3d:0e:d8:a9:ed:b9:1c:54:aa:e9:46:8a:66:f7:39:d6: a9:3e:29:de:18:df:cb:7f:1b:fd:9a:c9:2b:98:c2:f0:8d:2b: 87:5b:67:60:df:cf:25:32:df:84:96:a4:14:c8:53:c4:e8:e0: 94:89:e6:14:4d:79:91:de:e1:e7:d0:47:76:f3:d8:8b:9f:25: 00:f2:99:fe:32:9e:48:cb:4e:e8:29:d8:59:30:f8:d2:8c:cd: 8a:dc:3c:a7:58:9f:0c:f7:ff:15:af:f0:46:82:86:8b:4f:98: 18:0d:63:62:bc:5b:b3:4f:2b:01:04:be:52:d1:78:cf:9a:0c: 28:25:1e:5a:43:10:72:e9:3b:e5:52:1d:df:c2:13:c9:77:44: 4e:e3:41:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IDl3rWPxcZR9NveOsVHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2Y3NmQ2MTA4MTQ4NjUzNjZmYWE2N2NmYzY1YWQwNjlj N2NmYzQwHhcNMjUxMjE5MDEwMTI1WhcNMjUxMjIwMDEwMTI1WjAzMTEwLwYDVQQD EygyZjNlODU2NTYxYjY2OGE5MjkwYmFkNDM1NmJjYzMyYWY5ZDMyZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkj0h55um4Le46rjHo+31mzChj8e A/YL36d2aRZ+cDLqyX4DexQptc37sBwl61AFxCB3gA0tC5bzVQXVbITJPQEum8Rc +ErWifMzTmR4+R1blsVo1lG95u+i2QmdpbLZq/lPIYNdEg/uFbOjx80RBNfDSGsH VYqxPphC1y8dwFuoDITBq4PihpjgtRBaZV7V/eh7nfo/9rayqakM6AB6UIe4gbxP ws1J4t6DUrhaHjociH9tGPC6UN0PV9puwp/u/7GUANZo7e/HnmKf+2M9WdjZ5XJ5 T69TWMQ1yL8/51TE3bvylfL6j87QfIMib6RnEo2UnmrAYjhV3nPixL1fJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8+hWVhtmipKQutQ1a8wyr50y4MMB8GA1UdIwQY MBaAFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQt ZjVkMDI4NTRmNTFmLzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQtZjVkMDI4NTRmNTFm LzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+SEBkiX dTHJUNwJE/lUTX+d2Io3778RwpzLVGgumo02M3ES17kuDwRwASUEkYBbf2gbBmby KSQUWa00WIGYbrB2rl2t0i6QbKVCS9uKNNu/bzJh6GpZZX+W9XdiSVGxCe56YtgC +Mdlt0ikQSc9Dtip7bkcVKrpRopm9znWqT4p3hjfy38b/ZrJK5jC8I0rh1tnYN/P JTLfhJakFMhTxOjglInmFE15kd7h59BHdvPYi58lAPKZ/jKeSMtO6CnYWTD40ozN itw8p1ifDPf/Fa/wRoKGi0+YGA1jYrxbs08rAQS+UtF4z5oMKCUeWkMQcuk75VId 38ITyXdETuNB1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:54 2025 by rpki-client