This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json) Hash identifier: nX1FUj4nVSSajtXqfvaFs73sjrHX/m6K+aGU/m6ebsY= Subject key identifier: 3D:21:3A:5B:88:00:4B:9A:3A:42:0D:97:76:56:3D:95:17:49:68:B3 Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f Certificate serial: 019B2F6727D1BA173ACF5D9E5F8BD7A5A5B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft Manifest number: 1498 Signing time: Thu 18 Dec 2025 03:00:47 +0000 Manifest this update: Thu 18 Dec 2025 03:00:47 +0000 Manifest next update: Fri 19 Dec 2025 03:00:47 +0000 Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=) 2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: 2Xth2hwsjqI0aLa5a0EGPNB6PPBXD25L+ory1blLHpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:27:d1:ba:17:3a:cf:5d:9e:5f:8b:d7:a5:a5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f Validity Not Before: Dec 18 03:00:47 2025 GMT Not After : Dec 19 03:00:47 2025 GMT Subject: CN=3d213a5b88004b9a3a420d9776563d95174968b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:67:75:c6:e2:df:bd:c2:80:99:dc:01:74: f6:0b:64:f5:67:a5:e1:29:89:b3:94:77:26:16:0a: 56:6f:22:22:8a:19:61:85:92:a9:f3:e7:7d:2c:0a: 69:1a:ad:1e:65:1c:a5:a9:30:ee:aa:99:9e:76:2f: 38:6e:7d:04:fa:37:56:e0:d4:07:64:c7:18:b3:dc: af:f1:f7:83:07:66:b1:0d:70:d7:65:1a:fe:e9:d5: 81:39:c0:89:68:a7:9b:22:be:02:40:9f:a8:05:cf: 72:62:6f:51:aa:a1:a8:21:52:15:b9:4c:aa:dc:6d: 02:76:81:27:9c:42:a4:fd:ce:66:21:b3:3a:55:e7: a9:9b:2f:55:9c:2c:9e:77:f7:95:cb:d8:67:96:73: aa:57:bb:00:3a:00:9a:f9:00:9f:b2:3f:df:3c:d6: 82:3f:16:27:10:ee:b0:76:07:1b:15:94:2f:17:53: ea:34:f4:d3:04:d6:9b:6d:f4:53:c7:f9:f9:b0:2e: e1:64:e1:5a:39:04:4a:77:76:d6:ac:01:26:0e:bf: c4:d8:b5:ad:bc:a5:4d:23:fd:4c:8a:6c:89:52:b0: 88:51:34:54:e9:7c:c9:d8:6b:45:af:d0:4a:e8:12: 2d:86:3f:6a:ac:f9:0f:a8:90:4b:de:a6:ff:2c:ce: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:3A:5B:88:00:4B:9A:3A:42:0D:97:76:56:3D:95:17:49:68:B3 X509v3 Authority Key Identifier: keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e5:5b:7c:4b:da:cc:d7:0f:67:47:b8:eb:f3:91:36:60:ad: 21:6d:70:a1:cf:ab:a5:ad:28:9a:ef:b0:7b:88:83:0f:e8:e9: 01:23:d2:e5:47:96:cd:24:30:6d:be:e9:f8:83:56:37:15:f9: 3e:79:80:9b:54:8e:bf:27:98:45:85:30:48:f4:fe:94:d5:10: cb:0b:70:37:d7:d0:67:c0:16:f0:05:ba:97:97:8b:15:9d:83: 03:b7:e6:5e:b5:c3:3c:43:70:0c:e1:99:1d:30:68:d2:20:68: 8c:9b:61:a0:9a:e0:97:eb:d0:96:0f:02:b7:f8:64:21:c3:43: c8:99:f9:0d:37:04:1a:0d:45:df:1e:77:a7:09:e5:98:57:43: da:a0:a5:cb:08:f6:34:57:2d:7b:8a:99:cd:52:5d:8d:5a:67: 0c:78:e4:c7:ca:ad:22:64:d6:c1:a0:a0:7d:ba:7a:80:78:fc: ee:d6:8a:3a:d0:91:c0:67:07:64:81:09:0d:40:23:56:a8:11: 2b:a9:dd:bd:6b:4f:5c:9a:2c:7c:fc:be:d8:17:ed:e5:d6:51: 23:25:be:c7:41:77:18:00:45:48:de:7d:4f:64:e2:01:57:2a: 49:81:af:a5:f8:ac:11:43:02:5f:89:ab:b9:46:c2:00:a6:f8: c9:08:ac:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyfRuhc6z12eX4vXpaW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3 MzMwMWYwHhcNMjUxMjE4MDMwMDQ3WhcNMjUxMjE5MDMwMDQ3WjAzMTEwLwYDVQQD EygzZDIxM2E1Yjg4MDA0YjlhM2E0MjBkOTc3NjU2M2Q5NTE3NDk2OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Stndcbi373CgJncAXT2C2T1Z6Xh KYmzlHcmFgpWbyIiihlhhZKp8+d9LAppGq0eZRylqTDuqpmedi84bn0E+jdW4NQH ZMcYs9yv8feDB2axDXDXZRr+6dWBOcCJaKebIr4CQJ+oBc9yYm9RqqGoIVIVuUyq 3G0CdoEnnEKk/c5mIbM6Veepmy9VnCyed/eVy9hnlnOqV7sAOgCa+QCfsj/fPNaC PxYnEO6wdgcbFZQvF1PqNPTTBNabbfRTx/n5sC7hZOFaOQRKd3bWrAEmDr/E2LWt vKVNI/1MimyJUrCIUTRU6XzJ2GtFr9BK6BIthj9qrPkPqJBL3qb/LM46PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0hOluIAEuaOkINl3ZWPZUXSWizMB8GA1UdIwQY MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt ZWViZGNiZDNhZWU4LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4 LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeVbfEva zNcPZ0e46/ORNmCtIW1woc+rpa0omu+we4iDD+jpASPS5UeWzSQwbb7p+INWNxX5 PnmAm1SOvyeYRYUwSPT+lNUQywtwN9fQZ8AW8AW6l5eLFZ2DA7fmXrXDPENwDOGZ HTBo0iBojJthoJrgl+vQlg8Ct/hkIcNDyJn5DTcEGg1F3x53pwnlmFdD2qClywj2 NFcte4qZzVJdjVpnDHjkx8qtImTWwaCgfbp6gHj87taKOtCRwGcHZIEJDUAjVqgR K6ndvWtPXJosfPy+2Bft5dZRIyW+x0F3GABFSN59T2TiAVcqSYGvpfisEUMCX4mr uUbCAKb4yQisGw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:25:14 2025 by rpki-client