This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json) Hash identifier: LR8JgguUfs4gpQwcGrIkZSSXS1EukqPS1IM1g954Gtk= Subject key identifier: 8F:5B:FB:14:2A:59:D7:0D:4C:D6:D1:9D:3D:71:46:B4:12:AB:C5:3B Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc Certificate serial: 019AF163F62327A3C21ED282D9909477E8C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: lUg0cGkvlOABPKnLa4uJ/bEE1hzE7TdQ9Hf3C0q/+q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f6:23:27:a3:c2:1e:d2:82:d9:90:94:77:e8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=8f5bfb142a59d70d4cd6d19d3d7146b412abc53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:3e:3c:f3:37:cc:ad:07:dc:c4:70:ba:42: 50:0b:00:62:a9:40:aa:77:a9:7d:67:21:0b:61:95: 0c:92:3d:b8:b2:c8:d5:d4:2e:c4:c0:82:6b:e8:5b: 7a:4b:f3:fa:af:c2:c6:7a:73:f2:13:80:78:0d:04: f9:38:5f:f1:8d:6e:e6:74:f0:22:4c:be:ab:a6:c9: 92:0b:99:2d:72:77:fb:44:b4:b7:60:23:92:3c:d8: 70:ed:10:18:e5:31:99:38:c6:3e:7e:e1:27:b4:09: a6:e1:c6:f7:f8:57:fe:ab:9b:6f:aa:4d:64:6d:39: 25:b9:7a:e2:7a:3a:af:03:04:2e:8c:07:62:01:10: 47:0d:8b:d2:b7:96:ca:a8:c8:b5:74:da:76:74:55: e6:89:8c:e5:fc:37:24:52:73:72:4a:58:14:d2:53: 3d:a3:aa:ec:a7:59:b6:58:d9:c9:e9:ae:19:e0:91: 33:7e:24:4b:3b:47:9c:18:52:56:23:3b:52:72:e4: b0:81:63:78:31:b8:90:ac:fe:bc:8b:d0:97:59:be: dc:bb:ab:17:3f:fe:8e:9a:70:03:b8:26:b5:1f:b1: 04:80:c7:ba:ff:f3:a9:40:d4:46:44:3f:1e:b2:40: 44:0c:59:2c:14:d6:b9:f9:d8:92:db:a1:a5:98:f0: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5B:FB:14:2A:59:D7:0D:4C:D6:D1:9D:3D:71:46:B4:12:AB:C5:3B X509v3 Authority Key Identifier: keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:be:81:22:7e:33:86:28:ee:2d:1e:db:44:fd:f0:10:52:2a: b8:12:b3:24:2d:f6:7a:10:ef:e1:a0:c3:0b:78:67:cd:38:64: 08:7b:15:63:39:38:9d:78:7e:02:4b:e9:73:e7:1f:c4:13:1d: 7a:b0:e2:19:60:39:74:f7:f4:bf:0a:54:39:f0:97:4f:9b:32: 6a:fd:65:e0:fc:3c:98:df:68:d8:22:64:9c:37:1a:ab:9b:f0: 62:e2:cf:0a:84:76:61:84:48:79:b3:57:52:74:33:78:74:64: 6b:59:1f:ad:57:47:8d:ff:4c:5c:22:14:9a:f2:ea:56:b4:dc: 28:a6:5f:4d:52:86:22:84:7f:18:01:b1:a2:0a:e6:ce:a9:2e: c1:73:1c:8b:bf:02:ff:90:7b:ab:b9:a5:36:7f:86:67:20:fa: 6d:17:b3:91:25:89:d0:70:fd:1e:ba:94:89:dc:50:1d:d0:0a: 06:a5:f9:bf:e2:29:ac:98:4b:94:50:a0:a8:b2:5d:59:57:cd: df:ee:80:eb:54:6b:17:70:89:37:c9:74:cd:73:d8:10:66:12: be:b5:19:a4:94:16:7d:cf:39:5c:b9:62:9e:3f:5a:67:2f:68: c1:65:c2:cd:9b:f6:56:06:89:50:89:e9:9b:8f:bd:a4:9e:fa: 32:32:de:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/YjJ6PCHtKC2ZCUd+jBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk ZWQ3Y2MwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD Eyg4ZjViZmIxNDJhNTlkNzBkNGNkNmQxOWQzZDcxNDZiNDEyYWJjNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPs+PPM3zK0H3MRwukJQCwBiqUCq d6l9ZyELYZUMkj24ssjV1C7EwIJr6Ft6S/P6r8LGenPyE4B4DQT5OF/xjW7mdPAi TL6rpsmSC5ktcnf7RLS3YCOSPNhw7RAY5TGZOMY+fuEntAmm4cb3+Ff+q5tvqk1k bTkluXriejqvAwQujAdiARBHDYvSt5bKqMi1dNp2dFXmiYzl/DckUnNySlgU0lM9 o6rsp1m2WNnJ6a4Z4JEzfiRLO0ecGFJWIztScuSwgWN4MbiQrP68i9CXWb7cu6sX P/6OmnADuCa1H7EEgMe6//OpQNRGRD8eskBEDFksFNa5+diS26GlmPDsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9b+xQqWdcNTNbRnT1xRrQSq8U7MB8GA1UdIwQY MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACb6BIn4z hijuLR7bRP3wEFIquBKzJC32ehDv4aDDC3hnzThkCHsVYzk4nXh+Akvpc+cfxBMd erDiGWA5dPf0vwpUOfCXT5syav1l4Pw8mN9o2CJknDcaq5vwYuLPCoR2YYRIebNX UnQzeHRka1kfrVdHjf9MXCIUmvLqVrTcKKZfTVKGIoR/GAGxogrmzqkuwXMci78C /5B7q7mlNn+GZyD6bRezkSWJ0HD9HrqUidxQHdAKBqX5v+IprJhLlFCgqLJdWVfN 3+6A61RrF3CJN8l0zXPYEGYSvrUZpJQWfc85XLlinj9aZy9owWXCzZv2VgaJUInp m4+9pJ76MjLeGg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:47 2025 by rpki-client