This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json) Hash identifier: 4GVaehGfQc6w7hjpMju6+BqFVNDceg7PCxkJTAANv94= Subject key identifier: D1:8A:4F:1C:EC:79:D7:0E:7E:3C:6E:1C:E4:BB:7E:F2:FE:5B:2A:10 Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b Certificate serial: 019AF12D1433A26313D14CB5F9614ECE3D08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: F8ooyvYGv4WFRZSt5ELqdPwJo/62zS/P71ywfGcihz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:33:a2:63:13:d1:4c:b5:f9:61:4e:ce:3d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=d18a4f1cec79d70e7e3c6e1ce4bb7ef2fe5b2a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:65:89:77:3c:a3:ca:66:8f:37:76:60:24: c3:ca:99:04:0a:a4:25:67:10:02:15:af:96:4f:e8: c6:57:32:11:0c:f9:87:04:ca:f4:bb:b8:d9:d3:56: 81:b3:f1:fa:09:ae:f3:f9:8a:14:d2:59:1b:49:d5: 19:3e:af:1b:bf:c4:27:3e:c8:20:59:e2:2e:6d:b4: f6:e8:fb:b2:85:f2:8f:ba:f6:0b:9d:72:cf:27:fa: fa:b1:87:b3:d9:ef:d6:d4:cb:7c:5a:2f:88:8f:19: b5:77:d4:cd:2a:b5:e7:01:49:16:d3:d6:d9:5e:c3: 77:4b:a7:40:e0:06:79:24:8c:76:1b:5c:e9:5c:1b: 86:76:8a:c1:40:0d:fb:d1:e3:15:d4:29:95:94:51: 80:9a:bf:6e:8c:0c:db:4f:93:4b:e7:bb:4c:c9:ad: 7a:cb:eb:db:3d:1d:a7:d1:64:10:ba:8e:fb:88:8d: aa:99:d0:a0:63:2f:4a:b3:38:f8:b0:87:49:fe:fa: 13:8c:c0:1b:cb:ff:bc:a4:8f:79:91:fc:1e:85:63: fa:8c:48:cd:c7:ce:d0:cc:f9:29:e1:f2:02:9f:33: d6:f8:9a:96:5d:f2:e9:9d:1c:2b:b0:84:b1:25:f1: b4:88:df:42:2f:9c:75:9b:4e:79:d1:4e:a9:9c:3a: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8A:4F:1C:EC:79:D7:0E:7E:3C:6E:1C:E4:BB:7E:F2:FE:5B:2A:10 X509v3 Authority Key Identifier: keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e4:07:7a:ae:1b:68:eb:27:7f:e2:47:20:92:31:d9:6b:db: da:56:d6:1e:df:e6:de:35:11:d8:70:d8:54:d6:e8:2a:ae:da: 14:be:ce:da:81:71:86:fc:e2:89:99:6b:b5:eb:d9:e3:f6:2c: 01:ae:55:26:57:30:ee:46:da:aa:76:02:81:02:49:f9:d3:32: 30:92:f8:fe:e4:7d:48:5c:6b:5e:a7:b5:23:2d:71:b3:03:fb: e9:3f:52:5d:cf:c4:9f:5a:c6:bf:e8:48:38:66:51:99:28:2b: 07:84:14:ee:b4:88:7d:df:29:2e:45:4d:90:61:89:d9:a7:78: 4a:8a:76:b4:7c:58:79:94:ab:74:65:45:d6:1b:2a:51:ec:4e: b4:82:83:75:72:5c:68:b3:bf:1a:8d:49:a7:da:e7:b5:52:e8: f6:7f:04:53:c2:48:13:03:24:ff:97:6b:60:00:f6:ea:2e:e5: 7c:7f:63:23:7c:6a:09:88:57:02:b7:43:02:a2:9c:45:fd:0a: 8d:39:77:be:84:a9:fd:1b:ee:2a:5c:54:b3:01:fa:51:4a:b7: 45:a6:9a:11:79:b6:14:b8:63:e6:f3:bf:4e:9b:b3:1c:65:08: b4:48:42:ac:a2:8c:cf:c7:b7:38:38:d8:55:26:f5:3e:af:6f: 98:40:4e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRQzomMT0Uy1+WFOzj0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTZiYzExMGJhYTJhYzlkMTYyMGMyNTA3MTc1NzdkZTY0 YTkyNGIwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EyhkMThhNGYxY2VjNzlkNzBlN2UzYzZlMWNlNGJiN2VmMmZlNWIyYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PhliXc8o8pmjzd2YCTDypkECqQl ZxACFa+WT+jGVzIRDPmHBMr0u7jZ01aBs/H6Ca7z+YoU0lkbSdUZPq8bv8QnPsgg WeIubbT26PuyhfKPuvYLnXLPJ/r6sYez2e/W1Mt8Wi+Ijxm1d9TNKrXnAUkW09bZ XsN3S6dA4AZ5JIx2G1zpXBuGdorBQA370eMV1CmVlFGAmr9ujAzbT5NL57tMya16 y+vbPR2n0WQQuo77iI2qmdCgYy9Kszj4sIdJ/voTjMAby/+8pI95kfwehWP6jEjN x87QzPkp4fICnzPW+JqWXfLpnRwrsISxJfG0iN9CL5x1m0550U6pnDoSiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGKTxzsedcOfjxuHOS7fvL+WyoQMB8GA1UdIwQY MBaAFGsWvBELqirJ0WIMJQcXV33mSpJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2Yt NTgzYzk4YTA2MzAxLzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2YtNTgzYzk4YTA2MzAx LzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuQHeq4b aOsnf+JHIJIx2Wvb2lbWHt/m3jUR2HDYVNboKq7aFL7O2oFxhvziiZlrtevZ4/Ys Aa5VJlcw7kbaqnYCgQJJ+dMyMJL4/uR9SFxrXqe1Iy1xswP76T9SXc/En1rGv+hI OGZRmSgrB4QU7rSIfd8pLkVNkGGJ2ad4Sop2tHxYeZSrdGVF1hsqUexOtIKDdXJc aLO/Go1Jp9rntVLo9n8EU8JIEwMk/5drYAD26i7lfH9jI3xqCYhXArdDAqKcRf0K jTl3voSp/RvuKlxUswH6UUq3RaaaEXm2FLhj5vO/TpuzHGUItEhCrKKMz8e3ODjY VSb1Pq9vmEBO+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:59 2025 by rpki-client