This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json) Hash identifier: daXfk4QhxbKquNtSiEQl18as9EuKRIdJz5Gv7yy9/GQ= Subject key identifier: 8A:48:E3:34:6B:49:98:CB:97:04:D8:27:1F:FE:94:EA:8F:E3:7A:71 Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Certificate serial: 019B424A71528EE55938C058F9C9141F4B5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 19:02:13 +0000 Manifest this update: Sun 21 Dec 2025 19:02:13 +0000 Manifest next update: Mon 22 Dec 2025 19:02:13 +0000 Files and hashes: 1: 4q5yWs-H0Iayb3QOvX6WcRBdwlw.roa (hash: qEBn/vQGgrtsIFTxVIm7czvnIpSpWJ9zYm+dXfDvi4A=) 2: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: nh+xJWXfNwokLJo8dER/wYICveCEUXBRBLVKizkmzY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:71:52:8e:e5:59:38:c0:58:f9:c9:14:1f:4b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae Validity Not Before: Dec 21 19:02:13 2025 GMT Not After : Dec 22 19:02:13 2025 GMT Subject: CN=8a48e3346b4998cb9704d8271ffe94ea8fe37a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:cb:6d:bd:97:ae:c0:83:ae:01:fb:87:4c: b2:27:ef:68:e0:4a:32:40:f0:77:24:71:d5:55:ff: ad:b5:58:f8:67:d0:bd:ac:ed:5f:0d:e8:1d:70:72: 7c:9b:de:ce:9d:1f:ff:72:61:81:71:6d:73:55:78: a8:ef:16:eb:68:af:f9:cd:71:1d:97:a5:d5:aa:d7: 2e:9c:dc:44:4e:fd:22:e5:4b:58:18:fc:7a:94:39: ab:e1:e0:b7:de:e9:1d:54:40:0d:95:c5:76:f3:d4: 65:40:0d:8e:2f:20:a5:5e:9f:1c:25:f8:39:26:39: a0:97:3b:2e:b6:7e:43:9c:82:fd:e5:01:9a:cb:73: f9:89:a6:90:6c:5d:e8:cb:e6:84:95:64:f0:de:2b: cc:c9:42:d5:3f:3e:ac:25:71:11:be:5e:41:61:91: 75:ec:d2:1e:1b:ad:e8:62:7b:1f:bf:e2:bf:78:ea: eb:71:04:97:26:c3:06:93:1c:ca:b1:d7:21:52:b2: 73:e5:f8:81:b0:7d:cd:c1:a7:84:f8:77:ba:5e:40: ff:9d:14:a7:fa:bd:b1:02:f7:02:ab:fc:4b:34:34: 7d:0f:cf:72:49:22:6f:f1:57:cd:b6:bd:51:ce:90: 85:8a:3e:23:dc:d3:20:ef:3e:03:fe:31:fe:27:06: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:48:E3:34:6B:49:98:CB:97:04:D8:27:1F:FE:94:EA:8F:E3:7A:71 X509v3 Authority Key Identifier: keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:39:de:11:0d:4a:e2:b8:ac:6b:bf:03:05:4e:c8:75:04:ee: dc:e8:51:6f:98:c1:78:2b:c1:3b:37:ce:8c:00:20:79:08:d6: 73:ae:37:29:58:7f:43:44:06:63:4a:aa:c6:84:98:89:97:ed: a9:e6:42:09:fe:8f:0e:02:b3:d5:61:6a:83:6b:3a:65:44:b8: 34:5a:90:bf:98:42:8c:21:30:fa:e8:9e:ab:70:4a:16:0e:86: 65:6c:d4:ec:07:b7:7a:35:56:b5:a3:8a:a6:0b:14:4e:8d:20: 53:a8:71:e6:fe:ff:59:dd:2f:74:42:37:a4:d0:1f:e7:ed:09: ae:ab:ca:f2:c0:81:2c:04:c0:03:0e:c9:9c:51:91:dd:5d:b2: 88:4b:18:47:41:5c:8a:8f:14:b0:2d:74:2a:db:2a:67:e8:15: 7b:46:27:13:4e:72:a2:2c:a0:2e:18:d8:6d:6b:53:96:8d:d2: 14:47:d0:64:1e:e3:e3:f3:4d:58:4f:ef:a7:34:cf:2d:9a:32: ee:81:aa:60:66:c0:6a:2f:7c:86:d0:ce:28:86:1e:81:5d:4a: 3d:e3:b6:dd:73:19:cb:bd:ce:81:74:1f:13:c2:79:8a:8e:22: 09:fe:d4:14:72:e0:62:73:17:29:02:8a:2d:35:91:89:4d:6e: d8:f5:c2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSnFSjuVZOMBY+ckUH0tdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMzRmYTUzZDFkODRkYmFiZTY5OGQ1YmJjY2FlZGYxMDlk MTU3YWUwHhcNMjUxMjIxMTkwMjEzWhcNMjUxMjIyMTkwMjEzWjAzMTEwLwYDVQQD Eyg4YTQ4ZTMzNDZiNDk5OGNiOTcwNGQ4MjcxZmZlOTRlYThmZTM3YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0zLbb2XrsCDrgH7h0yyJ+9o4Eoy QPB3JHHVVf+ttVj4Z9C9rO1fDegdcHJ8m97OnR//cmGBcW1zVXio7xbraK/5zXEd l6XVqtcunNxETv0i5UtYGPx6lDmr4eC33ukdVEANlcV289RlQA2OLyClXp8cJfg5 Jjmglzsutn5DnIL95QGay3P5iaaQbF3oy+aElWTw3ivMyULVPz6sJXERvl5BYZF1 7NIeG63oYnsfv+K/eOrrcQSXJsMGkxzKsdchUrJz5fiBsH3NwaeE+He6XkD/nRSn +r2xAvcCq/xLNDR9D89ySSJv8VfNtr1RzpCFij4j3NMg7z4D/jH+JwZk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpI4zRrSZjLlwTYJx/+lOqP43pxMB8GA1UdIwQY MBaAFGs0+lPR2E26vmmNW7zK7fEJ0VeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2Ut ZmZhYWEyOTlhZjYxLzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81MjhkZTEtOGY2OC00Y2I5LWI2Y2UtZmZhYWEyOTlhZjYx LzEvYXpUNlU5SFlUYnEtYVkxYnZNcnQ4UW5SVjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADneEQ1K 4risa78DBU7IdQTu3OhRb5jBeCvBOzfOjAAgeQjWc643KVh/Q0QGY0qqxoSYiZft qeZCCf6PDgKz1WFqg2s6ZUS4NFqQv5hCjCEw+uieq3BKFg6GZWzU7Ae3ejVWtaOK pgsUTo0gU6hx5v7/Wd0vdEI3pNAf5+0JrqvK8sCBLATAAw7JnFGR3V2yiEsYR0Fc io8UsC10KtsqZ+gVe0YnE05yoiygLhjYbWtTlo3SFEfQZB7j4/NNWE/vpzTPLZoy 7oGqYGbAai98htDOKIYegV1KPeO23XMZy73OgXQfE8J5io4iCf7UFHLgYnMXKQKK LTWRiU1u2PXCmg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:50 2025 by rpki-client