This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json) Hash identifier: TqGkW3g269gtFCBNMl0Aj+MunPDvVoAMXJgFf3mCIdY= Subject key identifier: DA:0D:10:27:C6:01:D7:C9:C9:0A:8F:F3:85:0F:86:4E:16:86:8F:D1 Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Certificate serial: 019BF462D6211F902EC1182F53152455F2AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft Manifest number: 10E8 Signing time: Sun 25 Jan 2026 09:01:16 +0000 Manifest this update: Sun 25 Jan 2026 09:01:16 +0000 Manifest next update: Mon 26 Jan 2026 09:01:16 +0000 Files and hashes: 1: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: RWJDgIGTWshhJ4NpX24Ba5wIsFGIlGWJlRL+OOBSakw=) 2: tp2VAgTi6H7UsWr3WWiFgob6-Yg.roa (hash: CPo8RNxtFyI7EIPAUaIjkVpI3fVg5oAaTxsNnGEN0eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:d6:21:1f:90:2e:c1:18:2f:53:15:24:55:f2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Validity Not Before: Jan 25 09:01:16 2026 GMT Not After : Jan 26 09:01:16 2026 GMT Subject: CN=da0d1027c601d7c9c90a8ff3850f864e16868fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:6b:a6:68:d8:43:c5:d6:00:d6:7b:80:60: 8a:5c:1a:15:ce:6c:3e:71:68:79:24:51:36:b6:13: 9d:8e:07:c4:0d:00:37:2b:41:90:35:0b:3c:00:1d: 6d:1d:df:94:95:4b:fc:5c:d0:37:08:35:14:69:d0: 4b:7c:c0:f4:5f:12:97:e9:47:a9:bf:17:b1:fa:60: 42:c2:3c:e5:de:18:26:b2:41:93:b5:4e:12:07:5f: 22:a9:ea:06:e9:a9:af:ad:dd:92:77:4c:66:83:49: c2:c2:ca:fb:d0:af:14:97:d5:f3:3d:4d:90:b1:42: ca:9d:d1:80:15:b4:c5:00:3d:d3:a9:ab:42:e5:9b: 26:c3:b3:6c:e9:d7:b1:70:3b:5c:c1:82:d1:62:91: 82:fe:49:26:74:fe:f7:28:b6:15:d1:67:fb:5d:5d: 6a:63:de:ff:fb:ef:d3:f8:c7:0e:b1:14:87:48:70: 29:15:06:a5:c8:d2:09:01:13:96:af:40:84:0a:6c: bf:dd:3c:68:fd:de:be:e0:11:cb:5b:cd:20:e7:4e: 7f:0d:42:16:98:5e:dc:cc:47:15:47:10:25:29:12: 11:7f:66:62:81:30:d0:8a:c7:f5:8e:6b:e8:e8:76: 5c:ea:ce:73:90:d0:9c:ff:06:bc:67:99:a8:42:07: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0D:10:27:C6:01:D7:C9:C9:0A:8F:F3:85:0F:86:4E:16:86:8F:D1 X509v3 Authority Key Identifier: keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9d:cb:5e:08:83:73:9d:5b:96:2d:9b:ef:5f:f9:02:36:84: 4f:b4:30:32:2e:c3:6e:ac:97:83:03:77:30:9c:f5:21:8a:ed: c9:53:5f:08:67:03:4a:63:04:28:be:99:79:bf:d3:ea:ab:be: c4:48:5e:86:2b:22:51:b9:f6:ce:a4:92:83:6d:ef:49:24:d0: 78:1d:db:a3:ae:af:ca:7d:f5:78:87:3d:1c:9a:eb:2b:f1:33: 82:3e:96:7e:2b:37:93:ac:67:b3:7c:f3:1a:35:b1:24:ea:3f: 91:d7:29:8f:f9:fa:ec:ee:2f:67:2b:73:89:f6:25:cb:4c:f6: 13:f8:6c:b3:07:55:3c:bc:54:3f:42:5d:b2:ab:7c:7f:05:a3: 10:46:4a:cf:d8:46:51:2c:03:85:1d:51:53:2a:4d:ed:7b:d8: f0:61:bc:ff:2e:7d:be:a4:c8:32:ce:62:8e:f6:d4:f2:f4:cd: 78:bf:f3:11:27:7c:72:5c:fe:b4:35:4e:87:ec:eb:4b:2c:d8: dc:08:32:70:9c:8d:53:65:9a:c1:0e:c9:fc:fc:eb:71:89:32: d5:ff:47:74:59:ff:db:82:43:6a:c5:7a:74:d5:09:f9:4f:cc: 22:15:6c:11:ba:5a:1b:89:b1:1e:89:72:ea:cb:87:3f:a6:fe: 8f:bc:61:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YtYhH5AuwRgvUxUkVfKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWExNTdlMjBhZGNhM2I0NDA2N2JhOGQ4ZGNhYmFlNjk4 YThiZWMwHhcNMjYwMTI1MDkwMTE2WhcNMjYwMTI2MDkwMTE2WjAzMTEwLwYDVQQD EyhkYTBkMTAyN2M2MDFkN2M5YzkwYThmZjM4NTBmODY0ZTE2ODY4ZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cJrpmjYQ8XWANZ7gGCKXBoVzmw+ cWh5JFE2thOdjgfEDQA3K0GQNQs8AB1tHd+UlUv8XNA3CDUUadBLfMD0XxKX6Uep vxex+mBCwjzl3hgmskGTtU4SB18iqeoG6amvrd2Sd0xmg0nCwsr70K8Ul9XzPU2Q sULKndGAFbTFAD3TqatC5Zsmw7Ns6dexcDtcwYLRYpGC/kkmdP73KLYV0Wf7XV1q Y97/++/T+McOsRSHSHApFQalyNIJAROWr0CECmy/3Txo/d6+4BHLW80g505/DUIW mF7czEcVRxAlKRIRf2ZigTDQisf1jmvo6HZc6s5zkNCc/wa8Z5moQgfZjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoNECfGAdfJyQqP84UPhk4Who/RMB8GA1UdIwQY MBaAFGsaFX4grco7RAZ7qNjcq65piovsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEt MzZkYzI4MDBmZGVkLzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEtMzZkYzI4MDBmZGVk LzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJ3LXgiD c51bli2b71/5AjaET7QwMi7DbqyXgwN3MJz1IYrtyVNfCGcDSmMEKL6Zeb/T6qu+ xEhehisiUbn2zqSSg23vSSTQeB3bo66vyn31eIc9HJrrK/Ezgj6Wfis3k6xns3zz GjWxJOo/kdcpj/n67O4vZytzifYly0z2E/hsswdVPLxUP0Jdsqt8fwWjEEZKz9hG USwDhR1RUypN7XvY8GG8/y59vqTIMs5ijvbU8vTNeL/zESd8clz+tDVOh+zrSyzY 3AgycJyNU2WawQ7J/PzrcYky1f9HdFn/24JDasV6dNUJ+U/MIhVsEbpaG4mxHoly 6suHP6b+j7xhZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:26 2026 by rpki-client