This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json) Hash identifier: S50sgppj628EFxI+/BUIILu4jPkxYTWvL7KI/bkVDwA= Subject key identifier: 7B:61:C0:6B:C8:82:E5:A2:4D:1F:80:96:7A:12:C5:DF:73:28:22:70 Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f Certificate serial: 019B4324C3731D11C1B2A9AFCB08DEE8DD82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft Manifest number: 0884 Signing time: Sun 21 Dec 2025 23:00:41 +0000 Manifest this update: Sun 21 Dec 2025 23:00:41 +0000 Manifest next update: Mon 22 Dec 2025 23:00:41 +0000 Files and hashes: 1: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: i/po38sPlduD9HSFfzmRGKB6tDVJYr1w8OOQ5fssYmY=) 2: XbRIFdQP_RXO6IV-cEyYaj6kxNs.roa (hash: 3o+QHeiT4KUONTiQxPqZMl4amlORzK8bXLG3POsUfAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:c3:73:1d:11:c1:b2:a9:af:cb:08:de:e8:dd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f Validity Not Before: Dec 21 23:00:41 2025 GMT Not After : Dec 22 23:00:41 2025 GMT Subject: CN=7b61c06bc882e5a24d1f80967a12c5df73282270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cc:b4:55:24:73:7d:31:25:f2:7d:ae:69:b3: 1a:7d:5d:1b:3c:2a:de:f9:e4:83:c7:81:90:38:dd: a4:c4:a2:ec:85:24:4d:45:0d:ab:d3:84:21:a1:ec: 24:e2:f0:40:0d:5e:66:70:f5:a6:18:bb:ab:84:d0: 90:02:5e:fa:8a:3f:3a:b1:a5:9f:08:68:b3:18:25: 1d:13:59:bb:43:36:23:c8:f6:0d:b1:02:11:37:ac: 54:ae:af:31:83:e7:ca:ec:d3:0d:c7:85:5e:d9:f6: 98:aa:90:8e:04:64:f4:d1:94:75:33:8f:20:38:79: 21:e5:f8:3c:b0:f0:9c:f1:19:b9:fa:5c:2a:bd:25: 92:86:6e:cf:3a:b3:66:52:25:b2:98:10:bc:6f:5f: 23:df:62:2b:75:5c:7d:ed:73:53:66:5d:69:98:50: b6:60:54:70:3b:03:25:4b:92:e7:8b:76:c8:a3:6e: 55:a4:31:88:f6:26:93:92:8f:2a:63:97:c3:51:ea: d2:9a:02:4f:75:f1:c7:67:77:2f:c0:23:f8:3d:93: c7:8b:a0:65:94:44:4e:7a:91:1c:ce:5b:65:55:b3: 23:4c:b5:b3:3c:f2:85:46:3c:5b:b4:ba:b9:7f:c4: 88:cb:72:b8:ea:35:63:be:93:9f:a7:4a:66:78:76: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:61:C0:6B:C8:82:E5:A2:4D:1F:80:96:7A:12:C5:DF:73:28:22:70 X509v3 Authority Key Identifier: keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a4:eb:94:26:f3:02:ca:f7:1d:88:28:bd:d0:09:34:4f:a1: 0f:e4:54:9d:f0:bc:4d:2e:5c:e2:75:77:b2:a4:88:82:62:f7: f2:a4:d3:8a:d1:8c:8b:36:ac:c7:ed:91:d0:ea:5d:2e:30:dc: a4:c9:bf:53:7f:82:dc:7f:5f:7a:1f:cf:7d:03:18:55:cf:49: a2:a7:9a:44:67:15:e0:e8:8a:f3:34:fe:a2:e3:b3:24:74:42: 21:e6:b5:1d:a5:37:33:30:eb:1c:0f:cd:9e:2c:1b:36:2e:14: d4:3b:ce:eb:37:a8:6b:dd:c7:48:d0:b3:a0:38:c2:33:04:6d: 6c:01:c5:27:ce:66:a3:97:cd:67:17:9a:31:b4:4b:97:ab:bf: 00:78:00:4e:52:a6:88:c3:e8:e0:ae:fd:44:49:4b:6d:94:a0: 40:b3:72:ea:f0:5a:69:1c:a1:93:ad:5c:1f:7f:7f:4b:a7:ec: 72:18:e6:31:60:32:b4:f0:83:ba:3e:36:4d:cb:bf:c4:a9:08: 50:e3:dd:fa:de:90:0b:84:20:55:c2:f8:c9:b1:e9:a6:5d:a1: 00:1a:98:bc:6f:46:7e:f9:34:f8:97:02:b6:0c:0c:d3:41:5f: 09:0e:c5:37:92:39:7c:51:16:38:7e:f3:75:d4:11:0b:e8:7b: 89:67:5d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJMNzHRHBsqmvywje6N2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTRhYjlhOGY0YTIwZTgyOWRkNDU3NWE4OGM4MTI1YzFj OGE2N2YwHhcNMjUxMjIxMjMwMDQxWhcNMjUxMjIyMjMwMDQxWjAzMTEwLwYDVQQD Eyg3YjYxYzA2YmM4ODJlNWEyNGQxZjgwOTY3YTEyYzVkZjczMjgyMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksy0VSRzfTEl8n2uabMafV0bPCre +eSDx4GQON2kxKLshSRNRQ2r04Qhoewk4vBADV5mcPWmGLurhNCQAl76ij86saWf CGizGCUdE1m7QzYjyPYNsQIRN6xUrq8xg+fK7NMNx4Ve2faYqpCOBGT00ZR1M48g OHkh5fg8sPCc8Rm5+lwqvSWShm7POrNmUiWymBC8b18j32IrdVx97XNTZl1pmFC2 YFRwOwMlS5Lni3bIo25VpDGI9iaTko8qY5fDUerSmgJPdfHHZ3cvwCP4PZPHi6Bl lEROepEczltlVbMjTLWzPPKFRjxbtLq5f8SIy3K46jVjvpOfp0pmeHZWawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHthwGvIguWiTR+AlnoSxd9zKCJwMB8GA1UdIwQY MBaAFAGUq5qPSiDoKd1FdaiMgSXByKZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEt Y2IzODYzNThkMTUxLzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEtY2IzODYzNThkMTUx LzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6TrlCbz Asr3HYgovdAJNE+hD+RUnfC8TS5c4nV3sqSIgmL38qTTitGMizasx+2R0OpdLjDc pMm/U3+C3H9feh/PfQMYVc9JoqeaRGcV4OiK8zT+ouOzJHRCIea1HaU3MzDrHA/N niwbNi4U1DvO6zeoa93HSNCzoDjCMwRtbAHFJ85mo5fNZxeaMbRLl6u/AHgATlKm iMPo4K79RElLbZSgQLNy6vBaaRyhk61cH39/S6fschjmMWAytPCDuj42Tcu/xKkI UOPd+t6QC4QgVcL4ybHppl2hABqYvG9Gfvk0+JcCtgwM00FfCQ7FN5I5fFEWOH7z ddQRC+h7iWddVQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:34:08 2025 by rpki-client