This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json) Hash identifier: ruFqEhatsqizZZDPXsmV7Qer5hBgJ66yxYjw0b6rOJA= Subject key identifier: 7B:D3:85:6F:E4:CD:AF:40:BE:6F:3E:BA:9C:F5:A1:BA:57:2F:F5:83 Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Certificate serial: 019AF209450D3FAA203174B789F53A69FA9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft Manifest number: 1062 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=) 2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: gmN+SDpeAUPbEzFW+4D62+LMzbNaeHSGJgRn0p+4CXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:45:0d:3f:aa:20:31:74:b7:89:f5:3a:69:fa:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=7bd3856fe4cdaf40be6f3eba9cf5a1ba572ff583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:ec:19:f0:0d:93:bb:3f:f6:17:7d:43:97: da:4e:05:52:0a:fc:d5:98:3b:31:9b:35:e6:db:ad: a0:30:fa:26:c1:fa:12:cc:f8:10:ca:25:d8:c2:f7: ba:33:2b:30:2d:98:99:48:b2:e3:95:cf:1a:c2:a4: 1c:eb:1e:fe:f9:68:f4:79:a4:d3:d9:ca:82:3f:0a: 51:eb:a4:31:40:3f:4a:fc:28:0a:8c:15:f8:cd:0b: 36:36:53:27:25:d9:04:86:f4:ee:85:e9:7f:46:36: 05:a0:d7:78:08:bc:10:01:ba:bf:9a:2b:66:f5:3c: 2e:78:c3:c3:37:26:6c:c6:94:60:00:36:cd:04:31: f2:01:d3:64:c7:d4:20:96:e5:f2:e1:4a:6b:02:c3: 0e:04:81:9f:96:19:4b:be:4a:1b:14:47:63:ac:91: d2:df:7f:48:f0:1f:12:79:56:fb:29:7f:57:19:59: f8:1a:a8:9d:97:82:59:0c:e2:75:0e:69:42:74:d5: ad:fa:66:d4:21:8d:b6:fc:f9:5a:03:78:d3:71:3c: 87:02:d8:72:59:73:c8:76:62:c3:0b:38:6d:f7:28: ec:46:d4:80:1d:29:e9:f3:ce:e0:9e:c8:6c:42:1e: aa:4c:3e:e9:66:72:18:60:fe:c7:ca:4c:c5:a8:ea: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D3:85:6F:E4:CD:AF:40:BE:6F:3E:BA:9C:F5:A1:BA:57:2F:F5:83 X509v3 Authority Key Identifier: keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c4:ad:4b:58:fc:c1:47:b9:73:ae:33:32:2a:53:41:c0:8f: 6e:11:04:95:9f:6f:25:d6:ae:fb:39:44:8c:fe:dc:87:68:24: e3:e7:4c:cc:b2:15:d6:20:37:77:6e:93:95:25:ec:f9:b2:3a: a4:76:cd:2b:32:40:0c:0b:ca:40:52:e9:46:ee:1f:ac:b8:6a: 32:ab:d4:b0:c8:66:a4:2a:27:4f:cd:1f:e0:60:a8:47:2b:3f: a8:ce:47:08:a9:82:2e:b9:3f:e7:4a:20:21:59:67:0a:d6:ae: a2:f0:53:de:52:b4:65:3d:8f:ae:fa:97:22:25:01:43:a5:8b: 16:87:77:40:c3:05:45:e9:ee:26:aa:7c:43:5d:3f:4a:9d:63: 15:b6:35:f1:cb:8b:2b:6e:4a:15:a8:9e:5f:59:e7:0c:69:17: a3:46:e1:2f:e0:8f:af:a0:fd:25:af:3c:4e:11:1f:29:cc:51: 39:07:98:5a:62:ab:7b:a3:59:94:4b:64:05:8f:a5:3c:c6:15: 65:19:e1:58:da:79:02:24:cc:84:fd:b9:71:64:3f:95:66:a6: 3f:fa:f1:e4:f1:46:a4:fd:27:5c:e9:82:b3:cc:d0:10:22:a0: 12:90:93:0e:07:b6:58:14:68:02:ac:17:54:f5:e8:12:a9:87: f1:40:d8:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUUNP6ogMXS3ifU6afqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWExNTdlMjBhZGNhM2I0NDA2N2JhOGQ4ZGNhYmFlNjk4 YThiZWMwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD Eyg3YmQzODU2ZmU0Y2RhZjQwYmU2ZjNlYmE5Y2Y1YTFiYTU3MmZmNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsijsGfANk7s/9hd9Q5faTgVSCvzV mDsxmzXm262gMPomwfoSzPgQyiXYwve6MyswLZiZSLLjlc8awqQc6x7++Wj0eaTT 2cqCPwpR66QxQD9K/CgKjBX4zQs2NlMnJdkEhvTuhel/RjYFoNd4CLwQAbq/mitm 9TwueMPDNyZsxpRgADbNBDHyAdNkx9QgluXy4UprAsMOBIGflhlLvkobFEdjrJHS 339I8B8SeVb7KX9XGVn4Gqidl4JZDOJ1DmlCdNWt+mbUIY22/PlaA3jTcTyHAthy WXPIdmLDCzht9yjsRtSAHSnp887gnshsQh6qTD7pZnIYYP7HykzFqOrcAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvThW/kza9Avm8+upz1obpXL/WDMB8GA1UdIwQY MBaAFGsaFX4grco7RAZ7qNjcq65piovsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEt MzZkYzI4MDBmZGVkLzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEtMzZkYzI4MDBmZGVk LzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncStS1j8 wUe5c64zMipTQcCPbhEElZ9vJdau+zlEjP7ch2gk4+dMzLIV1iA3d26TlSXs+bI6 pHbNKzJADAvKQFLpRu4frLhqMqvUsMhmpConT80f4GCoRys/qM5HCKmCLrk/50og IVlnCtauovBT3lK0ZT2PrvqXIiUBQ6WLFod3QMMFRenuJqp8Q10/Sp1jFbY18cuL K25KFaieX1nnDGkXo0bhL+CPr6D9Ja88ThEfKcxROQeYWmKre6NZlEtkBY+lPMYV ZRnhWNp5AiTMhP25cWQ/lWamP/rx5PFGpP0nXOmCs8zQECKgEpCTDge2WBRoAqwX VPXoEqmH8UDYVA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:54 2025 by rpki-client