This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json) Hash identifier: rDeASZoHWZ24Fj2Q1PqxsEztU6r8/PP1bg8dgGHF8cU= Subject key identifier: 84:6C:FA:2D:B4:2B:58:08:C9:67:89:45:C2:F3:11:DD:73:F2:64:E2 Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6 Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6 Certificate serial: 019AF1D2282371964D76673A7F7448016B93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft Manifest number: 1556 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=) 2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: U8xioOOHKa4EdL4NCwQRE9NAzIE/mwz8EHSuryL1BjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:28:23:71:96:4d:76:67:3a:7f:74:48:01:6b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=846cfa2db42b5808c9678945c2f311dd73f264e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:8c:0d:61:0d:79:6b:56:3f:45:d9:bf:76: 2d:94:66:96:95:2a:7a:bf:6a:10:0a:a7:f8:f4:dd: d5:f4:80:92:86:3e:d8:42:cf:f0:68:5c:ca:fb:d1: 7b:4b:04:16:b4:9e:14:42:94:4f:bf:f2:ca:da:0d: c1:bd:61:f4:d0:b7:fa:40:04:f6:a7:bc:6a:49:d2: 13:2c:d5:dd:61:f9:3b:df:d0:58:e5:f2:74:50:87: 7a:22:49:04:ac:e9:d8:dc:33:42:89:3c:c1:cf:3a: 68:47:bd:ab:56:0a:77:83:8e:ed:22:64:03:c3:03: 71:77:cf:7b:b8:10:8b:44:00:47:36:4b:d1:43:50: 16:ab:26:75:52:8c:79:c9:06:f5:b6:9f:1b:ef:84: 69:dd:a3:86:2d:09:7c:4a:66:a6:c5:e3:2d:1d:f5: 25:93:0a:f0:72:b9:70:4c:48:bd:db:ea:f8:aa:ec: 39:62:68:74:47:fd:ab:2b:45:b8:73:06:c3:e5:ff: 5f:39:95:62:1c:6c:94:c5:a2:ee:c7:9b:db:c3:c5: ea:8e:e3:81:b7:7c:87:ed:42:4d:41:fa:51:69:18: f8:88:36:58:fa:4d:fe:59:5c:76:d6:fe:9b:91:f4: c2:8e:61:53:c1:5c:03:6e:4a:1c:e3:0a:de:52:37: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6C:FA:2D:B4:2B:58:08:C9:67:89:45:C2:F3:11:DD:73:F2:64:E2 X509v3 Authority Key Identifier: keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:44:5a:6c:c2:6f:c1:88:d9:64:da:9b:f1:ac:1a:97:ff:b9: 0d:36:ae:f0:d8:43:4a:c8:52:bc:42:ad:03:85:ab:3c:c0:16: e8:8c:18:a5:90:03:fb:b2:40:f4:d3:e1:e0:7c:fd:31:47:51: a3:bf:92:00:b6:dc:3d:2f:66:be:5c:7b:dd:16:79:53:ba:24: df:6d:5c:eb:35:e1:d4:83:89:88:45:ca:4e:03:43:0a:ab:bb: dc:59:68:c0:17:a8:29:c6:b1:ca:5f:cd:ef:2d:24:0d:fa:5d: ff:96:29:07:02:7f:92:b5:1f:3a:bb:5c:c5:24:6e:1f:0e:68: b5:3d:03:00:44:94:03:31:a7:66:d0:85:86:5c:02:cf:bf:1a: 0a:56:10:52:71:e0:0b:7c:44:2c:d4:7d:e1:bc:13:f2:5a:66: 3c:1c:2d:f2:16:d3:34:2a:de:92:12:06:e9:80:a2:e7:1d:e3: 4c:92:ab:26:db:06:53:1e:74:01:b7:7a:48:a3:aa:aa:80:e6: 77:ce:1d:59:ee:7e:b7:73:ed:6e:cf:43:f0:45:3a:f9:84:a9: 95:9e:ab:5f:ac:7c:4f:87:2a:fa:68:08:3e:48:2e:fa:e5:87: 3e:f7:a0:0c:b9:2a:61:3e:11:e0:e0:7d:68:f1:ea:c3:93:80: 27:54:34:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0igjcZZNdmc6f3RIAWuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh YjZiZDYwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD Eyg4NDZjZmEyZGI0MmI1ODA4Yzk2Nzg5NDVjMmYzMTFkZDczZjI2NGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK6MDWENeWtWP0XZv3YtlGaWlSp6 v2oQCqf49N3V9ICShj7YQs/waFzK+9F7SwQWtJ4UQpRPv/LK2g3BvWH00Lf6QAT2 p7xqSdITLNXdYfk739BY5fJ0UId6IkkErOnY3DNCiTzBzzpoR72rVgp3g47tImQD wwNxd897uBCLRABHNkvRQ1AWqyZ1Uox5yQb1tp8b74Rp3aOGLQl8SmamxeMtHfUl kwrwcrlwTEi92+r4quw5Ymh0R/2rK0W4cwbD5f9fOZViHGyUxaLux5vbw8XqjuOB t3yH7UJNQfpRaRj4iDZY+k3+WVx21v6bkfTCjmFTwVwDbkoc4wreUjf7ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRs+i20K1gIyWeJRcLzEd1z8mTiMB8GA1UdIwQY MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABURabMJv wYjZZNqb8awal/+5DTau8NhDSshSvEKtA4WrPMAW6IwYpZAD+7JA9NPh4Hz9MUdR o7+SALbcPS9mvlx73RZ5U7ok321c6zXh1IOJiEXKTgNDCqu73FlowBeoKcaxyl/N 7y0kDfpd/5YpBwJ/krUfOrtcxSRuHw5otT0DAESUAzGnZtCFhlwCz78aClYQUnHg C3xELNR94bwT8lpmPBwt8hbTNCrekhIG6YCi5x3jTJKrJtsGUx50Abd6SKOqqoDm d84dWe5+t3Ptbs9D8EU6+YSplZ6rX6x8T4cq+mgIPkgu+uWHPvegDLkqYT4R4OB9 aPHqw5OAJ1Q08g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:32 2025 by rpki-client