This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json) Hash identifier: 71ik90/UcRAXgkfNWe8g8teuYxHtqfoTbkU4A6qAf54= Subject key identifier: 5D:8E:6C:DF:A7:B9:79:98:3D:8A:CC:72:FD:33:3E:9F:9D:FB:80:4D Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f Certificate serial: 019AF19B535918F0EDAA6342DBC795276853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft Manifest number: 1478 Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=) 2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: cT9y/6yNq6ei50IDxxmlWKWZR48InFQtOcH2jOoNScI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:53:59:18:f0:ed:aa:63:42:db:c7:95:27:68:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=5d8e6cdfa7b979983d8acc72fd333e9f9dfb804d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a2:a4:aa:06:47:64:34:6c:2b:d5:9a:18:6c: 9d:b3:0c:3b:45:1d:5a:74:6b:fb:3f:85:1f:8d:5f: 7f:d3:9c:6c:ea:76:61:99:e8:75:e3:52:95:46:e8: 6f:ca:54:b2:bc:01:89:a9:be:8a:d8:59:4c:20:00: e3:71:de:e5:25:82:3d:56:f5:5a:b6:51:20:2e:9a: be:50:42:be:8b:f8:31:26:a4:ae:50:5c:f1:4c:16: 90:be:7e:a3:d3:3a:40:48:d1:7d:93:24:3b:95:2e: 5c:b7:f0:ef:dd:1c:e8:7d:b9:71:6a:31:d0:14:21: d5:ce:f3:db:6f:7c:1f:5b:29:23:e3:b9:5d:2e:64: 3b:17:b7:7a:32:82:8d:02:9f:30:26:96:25:84:fc: 4d:ce:f8:70:1c:41:d3:a2:1b:86:8b:fd:f6:8b:89: 92:65:9b:13:55:e2:68:ed:8e:bd:ac:07:bf:8d:36: b0:4b:72:1d:7c:5b:1e:11:6a:21:a8:24:c5:d4:a7: 60:fe:ea:11:ff:35:51:e9:d2:09:dd:04:0c:8e:e4: 34:6d:fb:e0:56:3a:c1:b3:ed:6f:20:ae:f7:f7:d7: 2e:c5:15:03:de:55:45:48:94:b9:56:8e:04:e3:3a: b8:31:5f:0c:00:8b:45:ee:14:25:4c:26:4f:0b:3c: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8E:6C:DF:A7:B9:79:98:3D:8A:CC:72:FD:33:3E:9F:9D:FB:80:4D X509v3 Authority Key Identifier: keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d7:90:60:85:a6:ce:7a:67:13:a0:c8:d9:d0:2d:ed:24:73: 2a:99:53:8b:1a:f1:ad:80:86:ae:fc:92:31:69:2d:69:f6:c9: 36:15:19:8e:b3:32:c2:93:cc:e3:78:f4:d9:90:d8:61:1e:e3: 05:d6:50:d9:a8:0f:55:27:1c:35:a1:ce:e7:86:7e:ec:54:63: 41:ae:c3:c8:b5:ca:84:03:d9:cc:cc:06:ae:e4:25:10:14:e6: 94:3d:46:a2:50:8f:38:0a:cb:5d:88:da:42:3f:e9:35:b0:8c: 6f:48:00:74:e8:02:ba:63:dd:ff:a6:a0:9f:1b:7d:be:27:64: 83:bf:03:00:09:8c:5b:ad:4f:e6:53:bc:1e:cd:d3:82:0a:00: 92:a7:1d:bf:c2:55:a7:15:7a:94:28:49:49:8b:c9:b7:4f:79: c5:3a:bc:da:bc:ab:b3:d3:7d:58:7f:1b:d2:fc:83:f5:62:f6: 8b:a3:66:44:79:b8:92:45:42:9c:4f:75:4d:de:e7:7e:10:4e: a0:1b:f0:7e:89:a2:28:95:ee:cb:53:c1:86:7e:e0:b9:69:5e: bf:a5:1e:f3:71:72:32:32:e3:12:2a:6e:80:f5:cc:16:ed:50: 55:ce:90:cd:74:9a:27:88:4b:76:28:b9:0e:7b:cd:a9:36:24: be:a6:e4:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1NZGPDtqmNC28eVJ2hTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3 MzMwMWYwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD Eyg1ZDhlNmNkZmE3Yjk3OTk4M2Q4YWNjNzJmZDMzM2U5ZjlkZmI4MDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKKkqgZHZDRsK9WaGGydsww7RR1a dGv7P4UfjV9/05xs6nZhmeh141KVRuhvylSyvAGJqb6K2FlMIADjcd7lJYI9VvVa tlEgLpq+UEK+i/gxJqSuUFzxTBaQvn6j0zpASNF9kyQ7lS5ct/Dv3RzofblxajHQ FCHVzvPbb3wfWykj47ldLmQ7F7d6MoKNAp8wJpYlhPxNzvhwHEHTohuGi/32i4mS ZZsTVeJo7Y69rAe/jTawS3IdfFseEWohqCTF1Kdg/uoR/zVR6dIJ3QQMjuQ0bfvg VjrBs+1vIK7399cuxRUD3lVFSJS5Vo4E4zq4MV8MAItF7hQlTCZPCzzOHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2ObN+nuXmYPYrMcv0zPp+d+4BNMB8GA1UdIwQY MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt ZWViZGNiZDNhZWU4LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4 LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNeQYIWm znpnE6DI2dAt7SRzKplTixrxrYCGrvySMWktafbJNhUZjrMywpPM43j02ZDYYR7j BdZQ2agPVSccNaHO54Z+7FRjQa7DyLXKhAPZzMwGruQlEBTmlD1GolCPOArLXYja Qj/pNbCMb0gAdOgCumPd/6agnxt9vidkg78DAAmMW61P5lO8Hs3TggoAkqcdv8JV pxV6lChJSYvJt095xTq82ryrs9N9WH8b0vyD9WL2i6NmRHm4kkVCnE91Td7nfhBO oBvwfomiKJXuy1PBhn7guWlev6Ue83FyMjLjEipugPXMFu1QVc6QzXSaJ4hLdii5 DnvNqTYkvqbkLg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:12 2025 by rpki-client