This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json) Hash identifier: vAdqocdHbtkafYWoLnl5M4Xs2tWEkpC/o7t6vU8dmso= Subject key identifier: 41:E2:B6:B0:2A:99:29:50:86:12:8D:CB:3A:88:72:8A:21:92:27:C7 Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c Certificate serial: 019AF0BF1804DE1D66620194FC4B865FA1A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft Manifest number: 177C Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=) 2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: PGb9id7aSyJud9e0iyI8TR4CVjUWvSRXuvii+GAWlK0=) 3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=) 4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=) 5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=) 6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=) 7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=) 8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:18:04:de:1d:66:62:01:94:fc:4b:86:5f:a1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=41e2b6b02a99295086128dcb3a88728a219227c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4d:76:f6:a4:9c:bc:9a:8b:28:dc:33:f0:fc: cf:c9:84:ac:34:42:55:c0:be:29:3e:96:f4:78:91: 11:57:d9:36:47:0b:80:e6:58:3d:58:45:d1:70:29: d9:77:a0:10:28:22:71:0b:8e:24:32:aa:ec:87:86: 98:46:f8:c0:f4:05:72:0d:1c:2e:c7:98:be:88:63: 62:4a:85:65:66:fd:4c:26:28:89:16:37:f3:37:a2: 9c:3b:94:6b:9f:89:8b:7e:42:f9:3c:7b:68:14:e8: 1c:ba:90:f7:e0:1a:5b:9f:2e:bf:f3:6d:b0:18:62: d4:8f:60:7b:8b:a1:d8:0b:3c:cc:13:8a:5a:7e:59: bb:26:5a:c4:cb:b6:06:b1:88:0c:d2:db:f8:a8:e6: 03:79:9d:9e:55:26:d3:74:b9:9e:fe:06:84:c7:fb: 79:f6:ff:ba:2a:f9:36:77:59:05:c3:72:21:5d:d9: ad:95:2f:a7:ad:c0:5b:f7:3f:b9:8d:e9:e7:06:7b: 08:0c:56:00:d2:54:60:b3:06:8c:ef:aa:74:f2:79: 37:c7:29:5d:2a:a9:d9:3d:df:e0:26:65:21:fc:62: f5:16:85:75:ec:13:27:e9:33:8c:8c:56:87:24:93: 75:a4:b6:84:9e:71:ee:44:ba:36:a0:09:4b:92:a5: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E2:B6:B0:2A:99:29:50:86:12:8D:CB:3A:88:72:8A:21:92:27:C7 X509v3 Authority Key Identifier: keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:d6:0b:b2:c4:ac:67:2f:da:bd:3e:c4:6d:1c:9a:a6:d7: 97:b2:fa:ed:09:f8:c3:f6:27:77:63:91:96:61:8e:f6:ef:de: 71:65:4c:18:b7:ff:7b:b0:c2:7e:62:54:fc:ae:7b:d9:e4:56: 03:82:e3:5b:cf:39:54:43:0b:c5:c6:76:21:1d:16:c8:77:d3: 55:87:b5:cf:44:90:99:8a:39:b7:c7:ce:5a:ca:b4:fc:05:34: 2a:17:f1:c9:5e:9b:40:d7:bd:69:27:79:fc:6a:c1:f1:94:e1: 20:a8:2f:82:bb:7e:53:f3:93:9e:2e:43:05:7f:c5:ef:0b:e5: 0a:0d:11:4f:ea:22:e4:c5:37:73:68:37:3b:9b:b7:62:7f:5b: 7c:f0:30:8a:83:34:2e:e6:3b:0f:4a:c1:81:9c:8b:00:f5:1f: 34:67:20:4a:2d:c4:27:62:4a:20:e2:2a:c8:12:b1:b1:23:8a: 64:5b:0d:6f:64:e3:18:38:67:13:24:b1:45:b4:6b:69:77:2e: 11:83:2f:95:54:e1:b5:6a:ca:f7:c8:1c:41:9f:1a:59:4b:25: 83:43:c5:e2:ee:a6:76:cf:71:e6:df:18:46:77:bd:07:1c:32: 00:36:eb:fa:3e:71:65:da:3c:57:cc:79:3a:db:23:a8:9d:f5: de:a7:c8:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxgE3h1mYgGU/EuGX6GkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1 NGFiMWMwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD Eyg0MWUyYjZiMDJhOTkyOTUwODYxMjhkY2IzYTg4NzI4YTIxOTIyN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E129qScvJqLKNwz8PzPyYSsNEJV wL4pPpb0eJERV9k2RwuA5lg9WEXRcCnZd6AQKCJxC44kMqrsh4aYRvjA9AVyDRwu x5i+iGNiSoVlZv1MJiiJFjfzN6KcO5Rrn4mLfkL5PHtoFOgcupD34Bpbny6/822w GGLUj2B7i6HYCzzME4paflm7JlrEy7YGsYgM0tv4qOYDeZ2eVSbTdLme/gaEx/t5 9v+6Kvk2d1kFw3IhXdmtlS+nrcBb9z+5jennBnsIDFYA0lRgswaM76p08nk3xyld KqnZPd/gJmUh/GL1FoV17BMn6TOMjFaHJJN1pLaEnnHuRLo2oAlLkqV2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHitrAqmSlQhhKNyzqIcoohkifHMB8GA1UdIwQY MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt N2Q0YmIyMzgwNDg3LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3 LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDvWC7LE rGcv2r0+xG0cmqbXl7L67Qn4w/Ynd2ORlmGO9u/ecWVMGLf/e7DCfmJU/K572eRW A4LjW885VEMLxcZ2IR0WyHfTVYe1z0SQmYo5t8fOWsq0/AU0KhfxyV6bQNe9aSd5 /GrB8ZThIKgvgrt+U/OTni5DBX/F7wvlCg0RT+oi5MU3c2g3O5u3Yn9bfPAwioM0 LuY7D0rBgZyLAPUfNGcgSi3EJ2JKIOIqyBKxsSOKZFsNb2TjGDhnEySxRbRraXcu EYMvlVThtWrK98gcQZ8aWUslg0PF4u6mds9x5t8YRne9BxwyADbr+j5xZdo8V8x5 OtsjqJ313qfI1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:21 2025 by rpki-client