This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json) Hash identifier: xl3di6fLVQlz29IJdYQaUcgDUYOAtZ1AdLZA+eo09sM= Subject key identifier: 1E:59:10:09:74:A3:85:12:0B:3C:5C:CE:4D:F4:4A:88:30:C0:64:E4 Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1 Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1 Certificate serial: 019B3EDAE55C1FFC8352419AFCA5A5DF9964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft Manifest number: 0F68 Signing time: Sun 21 Dec 2025 03:01:31 +0000 Manifest this update: Sun 21 Dec 2025 03:01:31 +0000 Manifest next update: Mon 22 Dec 2025 03:01:31 +0000 Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: WwJZHcHbSwNV88gkp9OPwxg2fkJKvwxAtB9DgnMdPck=) 2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:e5:5c:1f:fc:83:52:41:9a:fc:a5:a5:df:99:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=017c90654653ac150028562b32431491b52147d1 Validity Not Before: Dec 21 03:01:31 2025 GMT Not After : Dec 22 03:01:31 2025 GMT Subject: CN=1e59100974a385120b3c5cce4df44a8830c064e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ee:57:d1:07:0e:13:69:78:0e:03:bd:c3:ab: 54:75:70:34:51:44:1b:ea:79:61:e9:b0:53:09:ac: e9:8f:5e:70:b8:6a:b4:f4:fd:d7:51:71:26:1f:c9: 43:86:a8:31:d8:ce:17:ed:60:68:43:70:f4:2a:7e: a9:53:39:9f:f9:6e:61:5f:25:bb:d1:91:a3:34:dd: f4:42:82:94:58:e2:e9:54:6f:75:ce:ae:3f:5a:1e: b0:90:f0:fb:15:4a:f7:42:8e:98:e2:c4:02:85:ac: 11:88:38:55:48:43:ac:0c:d2:55:19:14:de:91:36: c5:69:6b:36:1c:89:58:e4:6f:bc:d7:44:d7:9f:83: fb:cb:8e:ad:3f:b6:ea:f1:45:1b:a9:72:83:16:da: 46:42:e1:a9:2c:de:ff:58:83:b6:60:3e:86:49:2c: 24:80:60:5e:63:49:5b:71:99:73:42:1d:ac:aa:d4: 92:2e:46:22:26:54:8b:a0:af:e2:4f:cd:13:8b:ed: d1:a1:85:61:57:a3:65:af:89:ae:a6:92:ab:20:ed: 61:12:38:61:6a:fe:16:86:c4:ff:ae:c3:08:55:ac: 3f:1a:a2:c5:6a:12:35:92:77:1e:04:95:da:43:cd: db:4a:9c:57:70:5a:a7:c5:3f:39:a1:a3:0e:21:1a: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:59:10:09:74:A3:85:12:0B:3C:5C:CE:4D:F4:4A:88:30:C0:64:E4 X509v3 Authority Key Identifier: keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:42:4e:41:96:3f:63:7c:e9:6c:c6:14:be:19:0e:ca:de:25: 42:e8:7a:c9:55:85:dd:d4:81:96:ee:02:54:81:dc:e4:26:24: 93:42:d5:63:5c:3c:a2:c6:13:62:c4:bd:dc:df:23:da:f1:b7: d7:f4:d6:ba:b5:80:c7:e5:f8:2f:67:cb:31:77:f3:15:da:bb: 64:f5:43:72:f8:e2:d7:40:3c:0a:6e:a1:51:e8:e2:6a:13:4b: f6:cb:22:07:b1:4d:a1:55:7a:24:4b:75:86:55:1f:62:16:a5: c2:3c:78:f3:5b:dd:c0:b9:cd:03:89:5e:fa:2c:e7:bd:80:75: 96:0b:53:41:97:58:21:fe:6f:aa:fa:97:9a:e5:7b:ae:19:aa: e4:22:5c:35:e2:8f:bd:fa:ce:11:92:de:92:74:47:27:13:e2: 99:93:db:c2:c3:d8:0f:46:fd:c1:2d:8e:2c:e9:ad:e6:2b:f0: 1c:8e:bd:cc:7c:f1:fd:a1:fa:ea:5b:f7:1b:fe:9b:d5:5e:09: e2:e1:17:eb:5d:c1:83:25:85:7c:94:45:eb:f2:10:8b:12:8a: f1:b9:45:01:04:db:67:e2:ac:3c:24:77:02:1d:e4:30:e8:c0: ab:e6:80:5a:91:0c:b7:50:07:8d:51:47:35:c7:c1:7f:3b:a5: 63:e0:42:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2uVcH/yDUkGa/KWl35lkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxN2M5MDY1NDY1M2FjMTUwMDI4NTYyYjMyNDMxNDkxYjUy MTQ3ZDEwHhcNMjUxMjIxMDMwMTMxWhcNMjUxMjIyMDMwMTMxWjAzMTEwLwYDVQQD EygxZTU5MTAwOTc0YTM4NTEyMGIzYzVjY2U0ZGY0NGE4ODMwYzA2NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8e5X0QcOE2l4DgO9w6tUdXA0UUQb 6nlh6bBTCazpj15wuGq09P3XUXEmH8lDhqgx2M4X7WBoQ3D0Kn6pUzmf+W5hXyW7 0ZGjNN30QoKUWOLpVG91zq4/Wh6wkPD7FUr3Qo6Y4sQChawRiDhVSEOsDNJVGRTe kTbFaWs2HIlY5G+810TXn4P7y46tP7bq8UUbqXKDFtpGQuGpLN7/WIO2YD6GSSwk gGBeY0lbcZlzQh2sqtSSLkYiJlSLoK/iT80Ti+3RoYVhV6Nlr4muppKrIO1hEjhh av4WhsT/rsMIVaw/GqLFahI1knceBJXaQ83bSpxXcFqnxT85oaMOIRpgkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5ZEAl0o4USCzxczk30SogwwGTkMB8GA1UdIwQY MBaAFAF8kGVGU6wVAChWKzJDFJG1IUfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYt NzAxM2E2YzQzOTg1LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYtNzAxM2E2YzQzOTg1 LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREJOQZY/ Y3zpbMYUvhkOyt4lQuh6yVWF3dSBlu4CVIHc5CYkk0LVY1w8osYTYsS93N8j2vG3 1/TWurWAx+X4L2fLMXfzFdq7ZPVDcvji10A8Cm6hUejiahNL9ssiB7FNoVV6JEt1 hlUfYhalwjx481vdwLnNA4le+iznvYB1lgtTQZdYIf5vqvqXmuV7rhmq5CJcNeKP vfrOEZLeknRHJxPimZPbwsPYD0b9wS2OLOmt5ivwHI69zHzx/aH66lv3G/6b1V4J 4uEX613BgyWFfJRF6/IQixKK8blFAQTbZ+KsPCR3Ah3kMOjAq+aAWpEMt1AHjVFH NcfBfzulY+BCiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:55 2025 by rpki-client