This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json) Hash identifier: +Gp8f5ybyy+3KA8wdYfKr3NX9oD4AeoZhWub9m7fucc= Subject key identifier: 26:84:D0:8E:D8:BE:EC:82:36:08:76:09:DD:CC:1C:DD:5C:53:64:32 Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc Certificate serial: 019B330CB85BB1E43CC5B557FA99533B0C64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 20:00:30 +0000 Manifest this update: Thu 18 Dec 2025 20:00:30 +0000 Manifest next update: Fri 19 Dec 2025 20:00:30 +0000 Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: Vl6Dl8qFHbmvd4cHwlYf+Hcmz1gr585l5dd+5hzuILo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:b8:5b:b1:e4:3c:c5:b5:57:fa:99:53:3b:0c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc Validity Not Before: Dec 18 20:00:30 2025 GMT Not After : Dec 19 20:00:30 2025 GMT Subject: CN=2684d08ed8beec8236087609ddcc1cdd5c536432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:4f:9d:60:79:ed:e8:c4:82:ea:ef:dc:26: e6:92:29:be:35:9d:d8:f4:38:3c:d5:cf:8e:b6:8e: 28:e6:0d:91:13:8e:d8:67:fa:95:24:66:b8:27:10: 5e:95:5f:1e:fe:4e:23:be:75:cb:05:3d:3c:f6:bd: 02:7d:2f:18:0d:0d:18:cb:1f:e0:9a:ce:95:f3:4f: ab:98:62:1e:27:62:76:1e:81:fd:61:56:f9:cc:9e: fd:34:84:0f:bf:9e:f8:0e:6d:d2:4c:79:12:d2:39: d2:4e:ee:90:88:87:25:ec:4e:c9:c8:7b:d9:c3:71: 67:4e:cd:d2:d2:43:c1:89:8d:e5:8b:a1:47:db:90: 42:56:14:db:82:a2:cd:93:cd:cd:f5:00:92:44:fb: 31:39:c4:23:00:56:04:ba:ed:a3:e3:22:d9:f0:37: 8e:6c:4a:41:bb:9b:2a:be:70:06:0d:f8:cf:ff:25: d3:1d:76:74:d3:ce:5a:d8:44:3e:a6:ed:29:4c:22: 8a:b1:8f:30:95:b8:2a:55:e4:2f:aa:17:7a:78:25: ce:04:70:99:87:78:a5:83:fb:cc:a8:52:58:77:df: 0f:6b:81:bc:54:bc:d9:1d:6c:98:9d:88:a4:b1:49: cc:13:84:79:ba:7f:39:a8:d6:46:53:36:a9:38:2c: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:84:D0:8E:D8:BE:EC:82:36:08:76:09:DD:CC:1C:DD:5C:53:64:32 X509v3 Authority Key Identifier: keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4e:50:85:1b:7f:12:7e:ef:e7:60:5c:17:6a:95:79:ae:c3: 5d:97:fd:44:74:b9:5f:fe:4b:63:61:43:5b:b0:13:56:ab:a0: a7:cf:bc:d9:e3:34:8e:c2:7d:8f:51:4d:e0:5b:1e:91:49:ac: 34:5f:66:0c:d2:04:d6:e9:e3:4e:ac:ac:dc:d2:2c:51:c1:47: 70:43:45:76:c2:ae:c5:08:65:62:cf:89:fd:25:85:a9:7c:91: 01:4c:29:2f:c7:62:15:7a:9a:7f:36:58:65:47:7f:1c:e4:9d: 20:ee:89:99:16:8d:da:6b:ef:85:d1:10:9a:88:b0:67:14:a1: 5f:3f:78:57:7c:32:61:e0:7c:62:6e:23:25:fc:ae:92:7e:e9: 2e:2a:97:03:17:3f:a6:eb:3a:a3:f9:71:f9:b7:93:35:ce:9e: 1d:5d:fd:0a:f1:af:51:dc:ea:6d:64:73:12:ea:6e:f2:94:d8: f0:e0:88:7a:64:76:87:09:15:92:2b:1e:fa:a2:ab:b9:c0:23: 6f:b4:ba:40:ea:8f:78:73:3c:fa:37:0f:e3:9d:4c:f2:cb:78: bf:e1:5f:b3:a4:62:92:88:33:99:45:cb:99:2e:9a:ab:73:0a: 84:d2:a8:6a:d2:13:4f:a8:4b:b1:ef:4c:b8:e8:47:d5:3e:f3: 61:1c:d5:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDLhbseQ8xbVX+plTOwxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk ZWQ3Y2MwHhcNMjUxMjE4MjAwMDMwWhcNMjUxMjE5MjAwMDMwWjAzMTEwLwYDVQQD EygyNjg0ZDA4ZWQ4YmVlYzgyMzYwODc2MDlkZGNjMWNkZDVjNTM2NDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZBPnWB57ejEgurv3Cbmkim+NZ3Y 9Dg81c+Oto4o5g2RE47YZ/qVJGa4JxBelV8e/k4jvnXLBT089r0CfS8YDQ0Yyx/g ms6V80+rmGIeJ2J2HoH9YVb5zJ79NIQPv574Dm3STHkS0jnSTu6QiIcl7E7JyHvZ w3FnTs3S0kPBiY3li6FH25BCVhTbgqLNk83N9QCSRPsxOcQjAFYEuu2j4yLZ8DeO bEpBu5sqvnAGDfjP/yXTHXZ0085a2EQ+pu0pTCKKsY8wlbgqVeQvqhd6eCXOBHCZ h3ilg/vMqFJYd98Pa4G8VLzZHWyYnYiksUnME4R5un85qNZGUzapOCyL9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaE0I7YvuyCNgh2Cd3MHN1cU2QyMB8GA1UdIwQY MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk5QhRt/ En7v52BcF2qVea7DXZf9RHS5X/5LY2FDW7ATVqugp8+82eM0jsJ9j1FN4FsekUms NF9mDNIE1unjTqys3NIsUcFHcENFdsKuxQhlYs+J/SWFqXyRAUwpL8diFXqafzZY ZUd/HOSdIO6JmRaN2mvvhdEQmoiwZxShXz94V3wyYeB8Ym4jJfyukn7pLiqXAxc/ pus6o/lx+beTNc6eHV39CvGvUdzqbWRzEupu8pTY8OCIemR2hwkVkise+qKrucAj b7S6QOqPeHM8+jcP451M8st4v+Ffs6RikogzmUXLmS6aq3MKhNKoatITT6hLse9M uOhH1T7zYRzVIQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:55 2025 by rpki-client