This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft File: AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json) Hash identifier: ro2efwlzJEkKnkSxN81wNn0HgXszE7+us5z+V1IHNJc= Subject key identifier: EA:75:7F:87:70:59:FE:B7:CB:EA:92:B1:DF:55:16:64:99:7E:A2:4F Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c Certificate serial: 019B819583220512FA19368BC9FBA06BBEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft Manifest number: 115F Signing time: Sat 03 Jan 2026 02:00:17 +0000 Manifest this update: Sat 03 Jan 2026 02:00:17 +0000 Manifest next update: Sun 04 Jan 2026 02:00:17 +0000 Files and hashes: 1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: tNc343h30f4Y8LjqBYCpYC20GmeSEBCX25tDUKJEWtc=) 2: wsRYfWg6DsSzH9Q3tVso7U8el9Q.roa (hash: Xq2nLBLB6mAPwQgJf30OZP4onb0gGELFmiDalFNQA4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:95:83:22:05:12:fa:19:36:8b:c9:fb:a0:6b:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c Validity Not Before: Jan 3 02:00:17 2026 GMT Not After : Jan 4 02:00:17 2026 GMT Subject: CN=ea757f877059feb7cbea92b1df551664997ea24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:f5:d4:d8:8c:e5:8b:f5:db:fb:ff:2f:66: 43:37:e2:b9:4c:2c:9b:a8:24:24:0e:be:af:a7:8f: fc:57:b5:60:51:45:2d:ed:8a:fb:3f:56:2f:59:4a: 4d:77:3f:8f:69:de:61:fd:4b:66:25:e3:fa:f7:6c: 69:50:9a:68:c0:18:c6:fc:71:cb:45:8e:bf:ff:2e: 90:81:2d:90:1e:c2:65:b6:28:71:35:ce:74:79:89: e3:fd:77:5c:39:c1:9a:8c:ea:a6:fd:27:f8:ea:fb: 25:29:d0:31:f7:f7:0f:43:ef:e5:1e:0f:8c:0f:fc: 02:17:f4:d6:4d:56:c0:d2:16:3b:d4:25:53:3a:ef: 72:92:69:43:34:81:db:18:9f:eb:9a:d0:84:b2:36: cc:66:20:93:1e:ea:e4:cf:af:00:de:7c:a4:3f:b1: e5:6c:f5:a7:f8:ec:41:26:a6:ef:bd:90:fa:10:b7: 3f:9e:c1:74:a8:f6:36:93:32:e5:97:c6:69:8b:89: 29:0c:26:82:4f:03:36:27:ca:79:16:94:49:2a:30: 02:49:e4:97:4c:6a:f2:2b:3e:91:7f:31:cd:a1:19: 45:f5:30:3f:56:ec:4c:12:78:35:2a:fb:07:4b:47: 96:98:f5:0b:95:fd:dd:f7:16:34:b6:ed:52:ba:c8: 70:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:7F:87:70:59:FE:B7:CB:EA:92:B1:DF:55:16:64:99:7E:A2:4F X509v3 Authority Key Identifier: keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:23:69:9c:12:00:55:f8:87:ac:fc:61:18:d0:e3:d7:26:a0: d5:1d:09:59:5a:c7:4d:78:ed:bf:44:ab:51:0e:30:1b:6d:46: d9:09:af:dc:b6:af:8d:a8:1a:5c:ff:7b:59:37:52:6e:cb:f0: 30:89:81:b2:4f:c7:8f:1c:f9:a9:9e:7c:51:20:8b:c6:48:ee: 85:ac:ce:ff:71:6e:14:15:8a:d6:9d:a8:c6:48:2c:e1:f8:8f: 8f:d9:5e:15:e5:f6:48:b3:fe:25:62:8c:81:a4:fb:29:be:43: 9e:b0:ef:ff:bd:5d:93:1f:e3:26:c3:cc:44:9f:a2:04:d1:be: e3:5f:0f:b0:fa:1d:bd:a7:47:33:fe:e7:37:03:52:2a:d5:36: 7c:d3:4e:ed:6d:53:9d:5a:91:e7:fb:81:67:85:e1:d9:ce:28: d2:be:fe:bc:c6:3f:7b:40:2b:ee:d2:85:38:c4:6b:f1:39:c2: e1:eb:7d:fd:e1:5c:13:49:60:2a:0b:29:12:c1:e5:87:c4:c2: 55:ec:81:db:74:32:79:0e:95:d1:c8:d3:97:c4:06:4d:54:96: 2b:55:de:70:7c:07:7c:be:62:db:ec:ab:c4:50:f2:70:9e:ea: dc:ad:47:80:b9:61:ee:26:f6:c6:32:49:69:75:28:19:cc:c0: 49:e2:88:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBlYMiBRL6GTaLyfuga77gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzFiODdlOTFlYTI3MTA0NmQzMTk5NWU3YTZjMDM4YmYx YjE0N2MwHhcNMjYwMTAzMDIwMDE3WhcNMjYwMTA0MDIwMDE3WjAzMTEwLwYDVQQD EyhlYTc1N2Y4NzcwNTlmZWI3Y2JlYTkyYjFkZjU1MTY2NDk5N2VhMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ/11NiM5Yv12/v/L2ZDN+K5TCyb qCQkDr6vp4/8V7VgUUUt7Yr7P1YvWUpNdz+Pad5h/UtmJeP692xpUJpowBjG/HHL RY6//y6QgS2QHsJltihxNc50eYnj/XdcOcGajOqm/Sf46vslKdAx9/cPQ+/lHg+M D/wCF/TWTVbA0hY71CVTOu9ykmlDNIHbGJ/rmtCEsjbMZiCTHurkz68A3nykP7Hl bPWn+OxBJqbvvZD6ELc/nsF0qPY2kzLll8Zpi4kpDCaCTwM2J8p5FpRJKjACSeSX TGryKz6RfzHNoRlF9TA/VuxMEng1KvsHS0eWmPULlf3d9xY0tu1Sushw8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp1f4dwWf63y+qSsd9VFmSZfqJPMB8GA1UdIwQY MBaAFAMxuH6R6icQRtMZleemwDi/GxR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYt OGRhNTM3M2E2YTZkLzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xYTI0ZjYtYzVhMC00MGJmLWFiYjYtOGRhNTM3M2E2YTZk LzEvQXpHNGZwSHFKeEJHMHhtVjU2YkFPTDhiRkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiNpnBIA VfiHrPxhGNDj1yag1R0JWVrHTXjtv0SrUQ4wG21G2Qmv3LavjagaXP97WTdSbsvw MImBsk/Hjxz5qZ58USCLxkjuhazO/3FuFBWK1p2oxkgs4fiPj9leFeX2SLP+JWKM gaT7Kb5DnrDv/71dkx/jJsPMRJ+iBNG+418PsPodvadHM/7nNwNSKtU2fNNO7W1T nVqR5/uBZ4Xh2c4o0r7+vMY/e0Ar7tKFOMRr8TnC4et9/eFcE0lgKgspEsHlh8TC VeyB23QyeQ6V0cjTl8QGTVSWK1XecHwHfL5i2+yrxFDycJ7q3K1HgLlh7ib2xjJJ aXUoGczASeKI5w== -----END CERTIFICATE-----Generated at Sat Jan 3 08:21:16 2026 by rpki-client