This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft File: aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json) Hash identifier: zzOfIv5lFROxedXKBh4ON8F9WY5xjuGCpyk9Lqr+hYE= Subject key identifier: F7:20:03:63:FC:6D:6B:A5:45:A8:4C:5E:5A:9B:FC:62:81:BA:E7:75 Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E Certificate issuer: /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e Certificate serial: 019AF12CE9A39D2F528BAA334705D1995040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft Manifest number: 021A Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: EzKVgACq8+6gmJKrxGAYntLO3/Lw8wZhq9EXynKWTTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e9:a3:9d:2f:52:8b:aa:33:47:05:d1:99:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=f7200363fc6d6ba545a84c5e5a9bfc6281bae775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:48:b3:53:66:4c:03:5a:8e:29:27:46:54: 52:6e:99:02:9d:b0:f4:f2:44:00:57:91:f8:5f:d2: 2f:27:e0:ec:7c:00:81:91:32:a2:95:d2:4d:02:78: d1:39:c2:1e:19:0e:2b:1b:b0:5f:20:23:17:a6:6b: 93:5d:66:9c:f7:9e:02:8b:bf:2b:e8:a0:ad:6d:53: 3b:98:8e:c6:86:71:af:0b:1b:22:67:34:5e:db:ba: db:7a:00:af:2a:c8:20:38:85:7d:3c:7a:d8:a6:59: 7a:e9:f4:6c:c7:9e:c5:19:38:25:6e:fa:52:22:43: b0:79:b6:91:00:2c:c1:22:c8:3e:31:5c:62:ac:f9: 6d:63:13:a2:7a:35:0b:3e:b5:f7:02:5d:58:e2:cf: 9c:b7:bc:12:75:9e:0d:04:4c:49:2a:75:5c:dd:0b: e9:df:df:45:32:3d:47:28:15:1a:f6:ad:90:11:9b: 80:64:9d:e4:97:69:65:79:a9:f4:57:f6:63:6f:24: 93:90:55:3c:ba:ad:10:8f:a9:3f:47:09:6a:0c:e0: 49:ab:ac:48:d6:56:ef:44:57:46:22:6f:d5:28:a8: 3d:63:13:14:15:9f:d1:63:46:d7:26:2f:06:12:46: e0:b0:0b:ef:90:6f:1f:c4:36:0d:57:af:d2:1b:65: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:20:03:63:FC:6D:6B:A5:45:A8:4C:5E:5A:9B:FC:62:81:BA:E7:75 X509v3 Authority Key Identifier: keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a0:db:1b:8f:02:e3:71:ab:ec:80:7e:94:a4:f7:c2:f8:49: e7:64:bc:4d:9c:5e:1b:0f:4a:63:57:6b:60:a7:eb:d0:00:4f: 67:e3:f8:34:0e:af:27:cf:e5:da:ee:50:31:88:eb:52:eb:8c: a9:ee:63:25:1b:6c:c0:ff:08:e5:af:ab:6e:7f:89:de:9c:2c: 76:5a:55:5f:62:0c:5e:3d:7e:91:f0:5c:56:1a:54:2b:8e:ae: 99:5b:3a:89:3a:4d:79:a2:2a:56:c6:98:eb:0e:c8:73:63:b2: bb:17:49:d1:14:d3:f7:b0:25:3a:df:dc:5e:79:ed:9e:c6:49: bf:1c:7a:31:9f:7f:6e:c7:b6:3a:aa:61:ea:45:a8:a8:67:45: 73:d0:c8:ae:1d:c6:23:3c:de:43:12:95:cb:44:1f:be:1e:73: fa:dd:77:56:af:6e:5d:ac:4b:a0:d3:71:85:47:32:a1:ef:a9: 85:0b:f4:60:3f:e5:08:10:f2:28:1a:7b:f1:aa:2f:a1:dc:d2: d9:4e:48:3e:90:7b:a4:0c:be:8a:6e:94:c0:73:94:e9:bc:f3: ed:a9:a2:ae:8e:f1:86:41:a1:d1:23:29:c3:0c:91:44:de:01: 6b:19:36:3a:b7:b7:31:09:89:57:dd:5f:51:75:d0:18:1e:a6: ad:b5:69:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOmjnS9Si6ozRwXRmVBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzEzYjFjYTgwZDg1YmYxNjE4MjE3ZmE5MmRiZDQ3YTM1 YzViOGUwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD EyhmNzIwMDM2M2ZjNmQ2YmE1NDVhODRjNWU1YTliZmM2MjgxYmFlNzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzRIs1NmTANajiknRlRSbpkCnbD0 8kQAV5H4X9IvJ+DsfACBkTKildJNAnjROcIeGQ4rG7BfICMXpmuTXWac954Ci78r 6KCtbVM7mI7GhnGvCxsiZzRe27rbegCvKsggOIV9PHrYpll66fRsx57FGTglbvpS IkOwebaRACzBIsg+MVxirPltYxOiejULPrX3Al1Y4s+ct7wSdZ4NBExJKnVc3Qvp 399FMj1HKBUa9q2QEZuAZJ3kl2llean0V/ZjbySTkFU8uq0Qj6k/RwlqDOBJq6xI 1lbvRFdGIm/VKKg9YxMUFZ/RY0bXJi8GEkbgsAvvkG8fxDYNV6/SG2XM6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcgA2P8bWulRahMXlqb/GKBuud1MB8GA1UdIwQY MBaAFGlxOxyoDYW/Fhghf6ktvUejXFuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMt NDkzNmYwMmZjNzYwLzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMtNDkzNmYwMmZjNzYw LzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6DbG48C 43Gr7IB+lKT3wvhJ52S8TZxeGw9KY1drYKfr0ABPZ+P4NA6vJ8/l2u5QMYjrUuuM qe5jJRtswP8I5a+rbn+J3pwsdlpVX2IMXj1+kfBcVhpUK46umVs6iTpNeaIqVsaY 6w7Ic2OyuxdJ0RTT97AlOt/cXnntnsZJvxx6MZ9/bse2Oqph6kWoqGdFc9DIrh3G IzzeQxKVy0Qfvh5z+t13Vq9uXaxLoNNxhUcyoe+phQv0YD/lCBDyKBp78aovodzS 2U5IPpB7pAy+im6UwHOU6bzz7amiro7xhkGh0SMpwwyRRN4Baxk2Ore3MQmJV91f UXXQGB6mrbVpNA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:41 2025 by rpki-client