This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft File: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft (raw, json) Hash identifier: ZX85T/qCqkxrqZs+CSUtLXeMC5cLT6f5aFxKEdPuIeo= Subject key identifier: A0:6A:04:80:FC:0E:69:F5:25:77:80:D8:DA:EB:C0:74:C8:FA:09:4A Authority key identifier: 03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62 Certificate issuer: /CN=031ec4ae1d04dae14015c627fa396b3efce56062 Certificate serial: 019AF2ADCB2BC61B53B9801236487577EA4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft Manifest number: 015C Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: 70r8S8c1wwixC_sIEZkSOztxf88.roa (hash: eJiBHCKsSAZefBJB8YdkbTzjCLj4a33JNeZglPrz6E4=) 2: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl (hash: ziSmaogpB8/9zUuo11CNFiY0onqqv6WDDE1bzMJqNRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cb:2b:c6:1b:53:b9:80:12:36:48:75:77:ea:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=031ec4ae1d04dae14015c627fa396b3efce56062 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=a06a0480fc0e69f5257780d8daebc074c8fa094a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:77:ab:26:fd:d0:1d:e6:b0:f2:a4:47:d6: 22:06:6e:60:74:61:ac:a1:12:8d:95:7c:af:00:ac: 80:5d:9d:9c:c4:a8:bf:ea:9c:67:f1:8d:e1:94:a9: 18:3d:9a:cf:d2:0e:2f:91:d6:9a:dc:3f:b2:42:ce: 0a:41:b2:52:74:b6:8d:04:e3:6e:8c:c3:6f:3a:e3: 07:74:5d:f5:52:87:22:bf:1c:53:f7:eb:00:d4:bd: cd:d8:29:b3:94:2c:3f:b1:21:d3:f8:a8:d6:e3:5e: d0:d9:e3:05:cf:f4:12:8c:2a:23:2f:ed:5e:30:a3: 93:b9:fb:cd:e3:09:64:10:24:a1:d9:84:ad:db:e3: 70:8e:85:51:94:42:c8:9e:df:26:34:1f:ce:16:20: 15:4e:ab:54:c7:7f:07:23:61:9f:a5:d6:03:d0:96: be:a7:02:7b:0c:29:aa:13:87:d1:d6:ae:56:df:08: ad:70:d3:c0:14:01:b2:e6:2b:b9:9d:c9:66:2a:a6: 3b:98:70:3e:37:5e:60:87:52:b6:76:c0:a4:88:ef: fb:d9:f1:10:b2:69:2c:c5:6e:11:00:dd:4f:0e:48: ee:a7:0c:38:38:30:44:8a:ab:42:58:5e:95:4f:86: ce:04:e6:57:62:33:73:e6:be:d3:84:94:ee:f3:c1: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6A:04:80:FC:0E:69:F5:25:77:80:D8:DA:EB:C0:74:C8:FA:09:4A X509v3 Authority Key Identifier: keyid:03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6d:74:4e:5d:34:ce:50:5d:ac:b5:76:25:68:27:9c:46:41: eb:8d:22:14:4b:33:a5:1a:87:f6:27:87:54:a8:09:ab:2f:74: 31:2f:bc:1f:f5:05:89:3e:57:0f:86:90:ef:1d:94:f1:eb:d7: 78:32:00:89:82:06:18:f8:8a:e9:78:68:b1:0e:ef:07:ba:36: 88:ec:88:c5:a0:55:56:75:3a:c5:ee:f3:5c:97:e2:96:a3:b8: 16:b8:80:44:59:6f:b5:a1:80:80:43:9e:6b:b2:b7:10:2f:63: 0f:38:22:b3:ae:87:8e:e6:79:a3:7a:37:01:fb:84:ca:be:19: fb:a2:22:4f:f1:3b:4e:71:57:69:63:8f:e8:78:59:c0:39:0b: a0:37:49:b8:77:1b:ef:3b:47:be:94:9c:f3:0f:29:ea:36:70: ca:ec:8f:50:ee:fd:de:de:8a:76:cc:88:b1:b6:c8:ab:d9:cd: 65:09:38:c2:9d:82:b7:72:ad:4c:c6:db:63:6e:fb:10:0a:23: 43:e1:4d:e4:5d:28:bc:b3:fa:93:40:63:eb:c7:df:98:ad:3b: 25:f4:e5:0b:02:86:aa:ae:e6:ed:58:99:5f:98:42:3d:2a:9d: 8a:e0:49:ed:17:b4:0a:61:25:8f:00:1e:d0:2a:6e:b0:c0:3a: 54:e9:52:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcsrxhtTuYASNkh1d+pPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMWVjNGFlMWQwNGRhZTE0MDE1YzYyN2ZhMzk2YjNlZmNl NTYwNjIwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EyhhMDZhMDQ4MGZjMGU2OWY1MjU3NzgwZDhkYWViYzA3NGM4ZmEwOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd53qyb90B3msPKkR9YiBm5gdGGs oRKNlXyvAKyAXZ2cxKi/6pxn8Y3hlKkYPZrP0g4vkdaa3D+yQs4KQbJSdLaNBONu jMNvOuMHdF31UocivxxT9+sA1L3N2CmzlCw/sSHT+KjW417Q2eMFz/QSjCojL+1e MKOTufvN4wlkECSh2YSt2+NwjoVRlELInt8mNB/OFiAVTqtUx38HI2GfpdYD0Ja+ pwJ7DCmqE4fR1q5W3witcNPAFAGy5iu5nclmKqY7mHA+N15gh1K2dsCkiO/72fEQ smksxW4RAN1PDkjupww4ODBEiqtCWF6VT4bOBOZXYjNz5r7ThJTu88HzqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBqBID8Dmn1JXeA2NrrwHTI+glKMB8GA1UdIwQY MBaAFAMexK4dBNrhQBXGJ/o5az785WBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYt ZjE5YTJmZGUxZTZhLzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYtZjE5YTJmZGUxZTZh LzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA210Tl00 zlBdrLV2JWgnnEZB640iFEszpRqH9ieHVKgJqy90MS+8H/UFiT5XD4aQ7x2U8evX eDIAiYIGGPiK6XhosQ7vB7o2iOyIxaBVVnU6xe7zXJfilqO4FriARFlvtaGAgEOe a7K3EC9jDzgis66HjuZ5o3o3AfuEyr4Z+6IiT/E7TnFXaWOP6HhZwDkLoDdJuHcb 7ztHvpSc8w8p6jZwyuyPUO793t6KdsyIsbbIq9nNZQk4wp2Ct3KtTMbbY277EAoj Q+FN5F0ovLP6k0Bj68ffmK07JfTlCwKGqq7m7ViZX5hCPSqdiuBJ7Re0CmEljwAe 0CpusMA6VOlSng== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:18 2025 by rpki-client