This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft File: AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json) Hash identifier: 8EbS+LPGdtEmJeCd2nO73AHLtNsSkgbEc9Mxi3KbZyQ= Subject key identifier: 96:43:13:D1:60:52:73:68:A5:DA:6B:44:C4:55:44:8C:CD:8F:D2:06 Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F Certificate issuer: /CN=0330d772ba83225bed588ccd1c5c96af03b3770f Certificate serial: 019B3C7E05377BAC1B135B11AE982AE2043B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft Manifest number: 1494 Signing time: Sat 20 Dec 2025 16:00:50 +0000 Manifest this update: Sat 20 Dec 2025 16:00:50 +0000 Manifest next update: Sun 21 Dec 2025 16:00:50 +0000 Files and hashes: 1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: iNoxsU3Buy6i3qVZmBMt/nO16toccoUbjrq7LHxs/24=) 2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:05:37:7b:ac:1b:13:5b:11:ae:98:2a:e2:04:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f Validity Not Before: Dec 20 16:00:50 2025 GMT Not After : Dec 21 16:00:50 2025 GMT Subject: CN=964313d160527368a5da6b44c455448ccd8fd206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:eb:6d:4a:f4:34:42:81:86:58:a4:df:c8: 54:74:dc:ef:55:4a:a9:49:2c:07:7e:16:d6:62:5c: ee:91:66:a5:f8:45:4a:a9:66:89:f0:16:e8:82:26: 3e:4c:ea:7b:c4:f8:c3:81:a2:f4:1c:8c:a0:be:d3: 0d:73:3b:93:c0:d2:07:96:86:90:b0:d6:d2:cf:c5: 53:bf:98:58:87:6e:9d:39:a4:d0:f0:96:91:4c:5b: 4b:b2:42:0c:6a:ae:c9:5c:e3:c8:72:28:5c:e4:8c: e6:d5:8a:b6:9d:64:d3:23:23:24:5e:5f:a0:58:50: dd:ad:64:83:68:4d:f8:fc:23:5f:2a:22:d3:60:f7: f6:5e:51:4d:3e:9b:92:82:28:b0:5d:33:2c:c9:2c: df:dd:d5:3b:f8:bd:8e:1c:05:0a:0c:07:18:e9:1e: c7:7b:f8:af:01:47:b4:54:ac:a7:64:5c:82:fe:43: bf:7d:7f:ea:9d:a3:e5:c1:66:6e:86:2a:bb:90:e2: e4:c6:a8:35:58:4c:73:d2:74:24:c5:1e:7d:b8:d6: 75:da:f2:75:42:13:58:d1:2d:c1:ae:c9:c4:f5:9f: ec:0a:2d:4f:34:54:7c:db:7b:9f:54:42:47:cc:b3: 63:30:65:82:3e:98:3b:27:99:89:40:d5:77:e7:5c: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:43:13:D1:60:52:73:68:A5:DA:6B:44:C4:55:44:8C:CD:8F:D2:06 X509v3 Authority Key Identifier: keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b5:f0:01:13:ff:78:86:9a:8e:15:62:53:46:d9:de:80:71: 5d:3c:16:f2:a2:85:c7:fb:eb:a0:6b:8d:a8:37:e3:cb:d0:7f: e5:78:4a:b5:26:db:9e:10:49:fd:f8:7b:9e:5c:7b:8e:9a:31: 95:ba:87:24:98:37:e5:22:e9:ae:49:ef:d9:f7:dc:25:2a:24: b7:a3:b9:d3:00:8a:a9:85:34:74:05:dd:c6:fe:74:a1:f3:36: a8:11:39:59:51:0c:32:57:4a:89:fb:62:c5:46:c6:1a:fd:55: 2c:0e:4b:80:45:a2:d1:97:04:44:1f:ea:be:3f:cd:5a:55:73: 21:bd:ac:c4:30:38:98:09:25:19:32:83:a2:b1:f7:e6:ea:89: d7:07:bc:11:b9:a9:3f:34:ca:48:d5:c5:38:99:e5:74:fb:cf: fe:27:95:54:f0:8b:8f:93:cf:62:d3:60:94:63:fb:00:9a:77: cc:7b:f5:6f:3c:ab:d4:57:df:05:9c:40:2b:fb:b8:02:ec:f9: 6a:c9:53:e4:5c:b1:6b:c2:ed:d3:32:03:fc:16:db:bc:81:07: 64:f8:4c:87:ee:13:2e:96:80:49:f2:30:e9:62:ac:33:43:ab: 1b:4c:9a:ba:db:83:a6:a9:88:91:7b:ab:4c:dd:d6:df:c2:b6: 9b:10:f7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgU3e6wbE1sRrpgq4gQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzBkNzcyYmE4MzIyNWJlZDU4OGNjZDFjNWM5NmFmMDNi Mzc3MGYwHhcNMjUxMjIwMTYwMDUwWhcNMjUxMjIxMTYwMDUwWjAzMTEwLwYDVQQD Eyg5NjQzMTNkMTYwNTI3MzY4YTVkYTZiNDRjNDU1NDQ4Y2NkOGZkMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OPrbUr0NEKBhlik38hUdNzvVUqp SSwHfhbWYlzukWal+EVKqWaJ8BbogiY+TOp7xPjDgaL0HIygvtMNczuTwNIHloaQ sNbSz8VTv5hYh26dOaTQ8JaRTFtLskIMaq7JXOPIcihc5Izm1Yq2nWTTIyMkXl+g WFDdrWSDaE34/CNfKiLTYPf2XlFNPpuSgiiwXTMsySzf3dU7+L2OHAUKDAcY6R7H e/ivAUe0VKynZFyC/kO/fX/qnaPlwWZuhiq7kOLkxqg1WExz0nQkxR59uNZ12vJ1 QhNY0S3BrsnE9Z/sCi1PNFR823ufVEJHzLNjMGWCPpg7J5mJQNV351wjAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZDE9FgUnNopdprRMRVRIzNj9IGMB8GA1UdIwQY MBaAFAMw13K6gyJb7ViMzRxclq8Ds3cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODct N2U0NTFjODBkNTZmLzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80OGNiY2ItNTBkZS00ODM4LWE4ODctN2U0NTFjODBkNTZm LzEvQXpEWGNycURJbHZ0V0l6TkhGeVdyd096ZHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrXwARP/ eIaajhViU0bZ3oBxXTwW8qKFx/vroGuNqDfjy9B/5XhKtSbbnhBJ/fh7nlx7jpox lbqHJJg35SLprknv2ffcJSokt6O50wCKqYU0dAXdxv50ofM2qBE5WVEMMldKifti xUbGGv1VLA5LgEWi0ZcERB/qvj/NWlVzIb2sxDA4mAklGTKDorH35uqJ1we8Ebmp PzTKSNXFOJnldPvP/ieVVPCLj5PPYtNglGP7AJp3zHv1bzyr1FffBZxAK/u4Auz5 aslT5Fyxa8Lt0zID/BbbvIEHZPhMh+4TLpaASfIw6WKsM0OrG0yautuDpqmIkXur TN3W38K2mxD3rA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:57:29 2025 by rpki-client