This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft File: AZm_uzMfJwky7z-C8DrdDAsvFXI.mft (raw, json) Hash identifier: 7x3lkD722272hd7dPbtIO7Z3BX+RKAN4zyzyxwZoNVY= Subject key identifier: 18:66:BD:E8:DA:EB:3D:52:E5:CE:05:FD:C3:B9:E9:52:AE:4C:04:5C Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Certificate serial: 019B1C17200601D0A0B6BDB6367FC831622E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 09:00:36 +0000 Manifest this update: Sun 14 Dec 2025 09:00:36 +0000 Manifest next update: Mon 15 Dec 2025 09:00:36 +0000 Files and hashes: 1: AZm_uzMfJwky7z-C8DrdDAsvFXI.crl (hash: Xq6ha3cLSURPHq92iUVhpcosxSR5+9xANwwcKUARJlI=) 2: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (hash: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:20:06:01:d0:a0:b6:bd:b6:36:7f:c8:31:62:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572 Validity Not Before: Dec 14 09:00:36 2025 GMT Not After : Dec 15 09:00:36 2025 GMT Subject: CN=1866bde8daeb3d52e5ce05fdc3b9e952ae4c045c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:ca:79:84:5c:f2:34:ba:b9:60:7c:71:38: 3d:93:a9:d2:94:46:b0:3c:d3:6b:5b:0c:c4:36:6e: eb:21:99:3c:43:c0:bd:84:ee:e2:5d:e9:9b:34:81: b3:aa:c6:89:6f:1d:69:7c:1e:8d:23:b5:36:b3:c2: 29:1a:2a:aa:84:25:bb:b2:ee:bc:c3:8e:15:74:53: 61:9e:75:b4:99:e8:56:72:74:4c:2f:ce:e5:87:33: d0:9a:ab:32:ba:60:d0:64:66:b0:e1:23:3a:ba:89: 14:ae:f7:d9:a3:49:16:68:79:4d:51:a3:e9:ec:94: fb:5f:48:f8:d1:7b:ad:48:c3:6f:75:08:02:65:bc: b2:82:e5:54:60:6c:ab:56:17:2e:3a:4c:1e:c4:8a: 83:1a:02:a1:48:b9:7c:7c:84:25:ec:6c:00:46:9c: b4:9e:5a:71:6d:35:bb:ed:2a:c3:24:cc:30:d1:33: 72:41:a7:69:62:5a:db:d9:0f:0c:3e:9b:1f:e3:5f: 9e:ec:1f:a1:16:49:34:47:06:16:28:48:82:08:32: 60:a5:53:fd:df:a5:04:df:d7:ea:8b:64:20:9d:de: ac:d7:f3:e4:ef:3d:7e:99:ea:95:c8:a3:8e:3f:36: 5e:9d:3d:81:95:af:4a:4c:7b:d0:22:94:d0:6d:de: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:BD:E8:DA:EB:3D:52:E5:CE:05:FD:C3:B9:E9:52:AE:4C:04:5C X509v3 Authority Key Identifier: keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:22:0f:6c:89:a6:70:0d:ac:c8:fd:d0:cd:8b:8d:fb:66:02: 34:45:71:2e:58:2d:8c:20:d1:6e:09:6f:e7:e9:cf:40:ef:50: 92:99:04:22:65:6b:9f:4f:4f:9f:3f:8a:fe:20:29:18:cf:6c: 8c:30:ce:c7:dc:08:45:16:01:4b:52:c0:a8:df:05:3b:d2:7a: f4:aa:0c:df:31:93:c3:f3:a2:ba:41:22:0b:23:f9:c7:a6:36: 88:1d:67:3f:bf:36:9a:46:ee:c7:d3:b0:f6:f8:7a:e3:b1:37: bc:21:cf:73:fc:fc:28:6d:34:3e:e2:2a:c6:68:dc:8f:4a:d2: e9:51:8a:0a:f4:d9:26:55:50:98:d2:d6:73:a2:8d:f6:d2:2f: b5:7f:15:4f:cb:c1:60:62:9f:15:c8:c6:25:00:3e:f5:61:df: b2:26:ce:67:f6:df:b5:1a:51:8d:39:df:f6:f7:72:92:80:b6: 2e:90:23:ed:30:69:44:16:34:d6:c8:e6:9b:a6:79:c2:40:4f: a7:da:54:9a:3a:12:dc:52:26:35:d9:f2:62:52:42:d5:30:6d: e7:d7:d6:cd:1c:32:9e:22:bc:aa:cd:7b:16:ab:42:00:f1:b1: d3:04:0f:5d:c1:60:b1:ff:e6:4f:a3:93:26:bf:02:bb:a6:03: 01:85:0b:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscFyAGAdCgtr22Nn/IMWIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTliZmJiMzMxZjI3MDkzMmVmM2Y4MmYwM2FkZDBjMGIy ZjE1NzIwHhcNMjUxMjE0MDkwMDM2WhcNMjUxMjE1MDkwMDM2WjAzMTEwLwYDVQQD EygxODY2YmRlOGRhZWIzZDUyZTVjZTA1ZmRjM2I5ZTk1MmFlNGMwNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQfKeYRc8jS6uWB8cTg9k6nSlEaw PNNrWwzENm7rIZk8Q8C9hO7iXembNIGzqsaJbx1pfB6NI7U2s8IpGiqqhCW7su68 w44VdFNhnnW0mehWcnRML87lhzPQmqsyumDQZGaw4SM6uokUrvfZo0kWaHlNUaPp 7JT7X0j40XutSMNvdQgCZbyyguVUYGyrVhcuOkwexIqDGgKhSLl8fIQl7GwARpy0 nlpxbTW77SrDJMww0TNyQadpYlrb2Q8MPpsf41+e7B+hFkk0RwYWKEiCCDJgpVP9 36UE39fqi2Qgnd6s1/Pk7z1+meqVyKOOPzZenT2Bla9KTHvQIpTQbd5mmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhmveja6z1S5c4F/cO56VKuTARcMB8GA1UdIwQY MBaAFAGZv7szHycJMu8/gvA63QwLLxVyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYt Yzc1NzFlZTFkOTliLzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iNzVkZTItYjk5Ny00YmQzLWIxZWYtYzc1NzFlZTFkOTli LzEvQVptX3V6TWZKd2t5N3otQzhEcmREQXN2RlhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyIPbImm cA2syP3QzYuN+2YCNEVxLlgtjCDRbglv5+nPQO9QkpkEImVrn09Pnz+K/iApGM9s jDDOx9wIRRYBS1LAqN8FO9J69KoM3zGTw/OiukEiCyP5x6Y2iB1nP782mkbux9Ow 9vh647E3vCHPc/z8KG00PuIqxmjcj0rS6VGKCvTZJlVQmNLWc6KN9tIvtX8VT8vB YGKfFcjGJQA+9WHfsibOZ/bftRpRjTnf9vdykoC2LpAj7TBpRBY01sjmm6Z5wkBP p9pUmjoS3FImNdnyYlJC1TBt59fWzRwyniK8qs17FqtCAPGx0wQPXcFgsf/mT6OT Jr8Cu6YDAYULYg== -----END CERTIFICATE-----Generated at Sun Dec 14 16:18:42 2025 by rpki-client