This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json) Hash identifier: CoOHo4k3YJetu/OuZrxIeP1gT/zHavK0vn+5W6ayhSs= Subject key identifier: 9E:73:96:9C:E1:C9:2B:8D:0C:2B:D8:2E:84:AF:D5:38:F6:72:2A:10 Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Certificate serial: 019B35D7A0CCB31C991F98CD6EF2CB7163FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft Manifest number: 141B Signing time: Fri 19 Dec 2025 09:01:22 +0000 Manifest this update: Fri 19 Dec 2025 09:01:22 +0000 Manifest next update: Sat 20 Dec 2025 09:01:22 +0000 Files and hashes: 1: 35i0W-439ceXCAfaqLUm_3h3G24.roa (hash: xuOhVj3IlTLiG4QrKiExJxP+JLiXYysTKsGNlxVTku4=) 2: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=) 3: II0y6i1AUQGSIkq4Z4E4cUPa6aQ.roa (hash: KPwi/+rnF+1q4tJEKpZONi8NkKfNqc/FZkf9A+YZBic=) 4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: EVmaCdcgQ6VESctbFhq4PTjvBRuKfFfYsVFH2Vx5Ijo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:a0:cc:b3:1c:99:1f:98:cd:6e:f2:cb:71:63:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Validity Not Before: Dec 19 09:01:22 2025 GMT Not After : Dec 20 09:01:22 2025 GMT Subject: CN=9e73969ce1c92b8d0c2bd82e84afd538f6722a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:5e:93:4d:28:83:8a:a4:f2:89:d3:8a:a0: c0:81:e3:22:df:f4:6e:8e:19:26:fe:4d:00:78:2c: b1:fb:4d:11:d9:0d:c3:1f:48:3f:32:f6:07:0a:33: 1f:99:95:ee:b0:d8:e3:45:b7:e8:3e:1f:2f:3b:0f: 0c:6b:85:1b:91:06:40:3d:f7:5d:2c:4b:66:5c:00: 6d:2e:6b:63:bb:f1:b9:05:e7:d2:40:6d:c0:4e:2b: aa:57:5c:30:c7:ac:b4:10:2f:56:fa:b0:6d:d3:02: 22:6e:80:8b:46:e1:d2:e1:a8:6b:39:ee:d9:54:0e: 74:7b:76:50:ad:a2:e1:12:a8:ce:5d:d9:a2:aa:98: 12:69:a7:c4:6f:50:ac:8c:48:37:91:16:11:e1:18: 2d:9f:f7:75:3c:bf:f9:78:3e:d8:42:e4:2e:73:3c: b0:1e:8e:a6:c6:ca:41:3a:b4:b7:9f:21:6b:43:74: b9:f6:65:89:90:55:79:00:86:8a:a6:ab:0e:be:ea: 5e:98:1f:95:28:2b:52:82:77:7b:46:87:59:ba:87: 04:8d:7d:94:1e:46:36:38:77:ac:de:5b:66:7f:9d: 49:4d:ea:6a:e4:3d:75:91:05:7e:d7:0b:73:bf:e2: ba:86:ce:21:70:20:41:68:f5:18:70:9e:9c:04:49: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:73:96:9C:E1:C9:2B:8D:0C:2B:D8:2E:84:AF:D5:38:F6:72:2A:10 X509v3 Authority Key Identifier: keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:09:a0:54:1e:95:2a:97:b1:a8:6c:f9:7b:a4:be:6b:61:53: f7:02:59:2b:86:b0:c2:29:47:d4:36:1c:a7:62:2f:27:af:e7: d6:d6:e2:24:9b:95:6e:0a:26:e2:51:76:92:38:92:e6:31:a5: 88:cf:25:21:3b:1b:61:88:e6:32:cb:7d:da:30:52:80:d9:e2: 4b:a4:a2:13:cb:6e:5a:9d:9b:2e:27:bc:fa:b6:d2:3b:08:c1: c4:e4:47:5a:e0:3b:f5:17:62:5e:39:96:28:c4:c2:22:57:bc: 54:06:7f:fb:b6:35:75:1d:49:b8:f3:46:c1:af:c3:f9:d3:14: 43:5c:76:2f:55:2d:38:2a:40:ae:5f:0f:da:c4:6e:61:07:79: f7:84:16:4f:73:a6:a5:cd:47:e0:22:4b:5a:1d:88:c9:7d:11: 92:d9:b2:f4:11:50:41:17:00:1c:e5:cc:fa:f9:a6:88:be:f4: 59:2f:b4:d9:9d:81:a3:3b:ce:4b:3e:dd:de:19:b1:88:28:54: 26:1d:25:74:5f:06:16:c2:96:31:6e:39:bf:93:14:6c:42:bb: 3b:e6:58:c8:0e:df:5d:33:f3:5c:b7:11:a9:bc:fd:8a:8e:0b: 47:07:63:32:c6:a8:b5:6c:22:d4:91:21:c4:df:d4:d0:1e:a0: ac:c9:bd:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs116DMsxyZH5jNbvLLcWP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi M2Y4MjUwHhcNMjUxMjE5MDkwMTIyWhcNMjUxMjIwMDkwMTIyWjAzMTEwLwYDVQQD Eyg5ZTczOTY5Y2UxYzkyYjhkMGMyYmQ4MmU4NGFmZDUzOGY2NzIyYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng1ek00og4qk8onTiqDAgeMi3/Ru jhkm/k0AeCyx+00R2Q3DH0g/MvYHCjMfmZXusNjjRbfoPh8vOw8Ma4UbkQZAPfdd LEtmXABtLmtju/G5BefSQG3ATiuqV1wwx6y0EC9W+rBt0wIiboCLRuHS4ahrOe7Z VA50e3ZQraLhEqjOXdmiqpgSaafEb1CsjEg3kRYR4Rgtn/d1PL/5eD7YQuQuczyw Ho6mxspBOrS3nyFrQ3S59mWJkFV5AIaKpqsOvupemB+VKCtSgnd7RodZuocEjX2U HkY2OHes3ltmf51JTepq5D11kQV+1wtzv+K6hs4hcCBBaPUYcJ6cBElrswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5zlpzhySuNDCvYLoSv1Tj2cioQMB8GA1UdIwQY MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt MDUxMDc2NzQ0YTY1LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1 LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQmgVB6V KpexqGz5e6S+a2FT9wJZK4awwilH1DYcp2IvJ6/n1tbiJJuVbgom4lF2kjiS5jGl iM8lITsbYYjmMst92jBSgNniS6SiE8tuWp2bLie8+rbSOwjBxORHWuA79RdiXjmW KMTCIle8VAZ/+7Y1dR1JuPNGwa/D+dMUQ1x2L1UtOCpArl8P2sRuYQd594QWT3Om pc1H4CJLWh2IyX0Rktmy9BFQQRcAHOXM+vmmiL70WS+02Z2BozvOSz7d3hmxiChU Jh0ldF8GFsKWMW45v5MUbEK7O+ZYyA7fXTPzXLcRqbz9io4LRwdjMsaotWwi1JEh xN/U0B6grMm9rQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:36 2025 by rpki-client