This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: YBG7GcFFsf+3J7b3EUpG0F/29YqgCMD67bA+CRuAhVI= Subject key identifier: 41:7B:A5:0E:04:F1:E1:13:A7:A6:32:84:38:FD:94:A0:3B:87:4B:9D Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 019B3042AAB8C9487226046027DF9957FF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 0F7D Signing time: Thu 18 Dec 2025 07:00:34 +0000 Manifest this update: Thu 18 Dec 2025 07:00:34 +0000 Manifest next update: Fri 19 Dec 2025 07:00:34 +0000 Files and hashes: 1: FA8yybCBJF7CB4PUftWmNuHfMJo.roa (hash: GILRgQVDCBqUApp5T5UYfmSqm55HPKkfjTyN4DKVizE=) 2: FqQkTFQWdBdjU6UXWoqexyJXArk.roa (hash: dqroengNWVJpTvi6imMlKuB2r0Lvi7vllPawj21jEC4=) 3: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=) 4: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: 9dLCxRpvPaBj+5WhydKzyjBNHeKo9aLaYxbUIqujcOc=) 5: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:aa:b8:c9:48:72:26:04:60:27:df:99:57:ff:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Dec 18 07:00:34 2025 GMT Not After : Dec 19 07:00:34 2025 GMT Subject: CN=417ba50e04f1e113a7a6328438fd94a03b874b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:5f:5d:fd:a8:fb:72:88:8d:aa:00:a5:08: 19:2b:6a:49:b3:c2:00:66:eb:4e:87:3d:cd:88:ed: 84:1a:a7:75:d8:40:f8:7d:9b:4d:a6:e0:cb:b2:7e: ad:4a:a6:85:e6:9f:50:13:f5:80:9a:25:16:2b:de: e9:50:f7:7c:9e:0d:9b:30:57:a6:33:e2:f3:d1:f2: 86:69:23:d9:df:ea:ab:41:6e:8d:37:9e:35:15:c5: 3f:8f:75:37:d8:d1:20:9b:71:38:62:de:d5:69:b2: d5:24:05:60:cf:6e:42:46:b3:c9:e1:0d:f6:ae:70: f9:33:d5:0d:cc:0f:3e:9e:08:c2:fa:50:9a:6f:8e: e0:05:e4:b0:12:df:e5:86:46:7b:d8:f3:c6:1d:d1: a0:b2:09:ec:f9:5a:e3:a3:d3:b8:cc:21:73:e3:55: 8b:28:a5:2c:a7:a4:f4:96:70:96:cc:89:fe:68:2d: fb:ac:01:89:3f:b7:ab:23:6c:25:8e:24:b7:b0:ff: 22:e7:cf:73:8c:85:f1:04:d0:95:90:0f:31:15:88: 9a:36:3c:1f:06:43:16:7a:66:6c:f4:5d:c8:42:ec: 73:58:4f:f9:07:59:75:62:0f:d1:44:81:4f:c0:e1: 0a:d0:90:a8:29:5e:b2:3b:be:77:aa:0e:c6:ca:5f: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:A5:0E:04:F1:E1:13:A7:A6:32:84:38:FD:94:A0:3B:87:4B:9D X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:26:66:09:fa:27:0c:2e:6a:09:9f:38:1b:2b:ad:09:a3:ae: da:e0:9e:f1:c9:a3:77:94:0e:79:a7:ab:81:9f:5d:ba:0c:ae: 72:a8:04:c1:7f:d3:3b:d6:52:ed:61:63:16:f3:df:66:0a:da: 06:9f:34:44:b4:37:f9:e0:c4:8c:6e:29:1c:f1:a6:16:d7:82: 6f:d8:b6:c2:9a:57:68:48:a3:b5:91:58:d7:47:2c:c5:7a:9d: 5b:6a:dc:19:64:fe:b6:a5:96:86:b1:df:91:c3:03:f1:9b:2b: 1c:ed:c8:c0:bc:21:a0:ae:cb:5d:28:1b:b9:e9:38:59:4a:26: 5b:6a:0a:2a:b9:36:de:6d:ba:d1:94:2c:1d:05:7a:4d:41:9e: c3:55:0f:7a:29:a0:14:c5:1e:2c:a1:51:e7:a0:f8:a1:cc:e9: b8:37:cb:28:dc:3d:15:ec:fe:df:ea:29:c1:84:95:2e:36:ad: b2:09:39:9a:6b:74:4a:24:55:10:f6:1d:b3:23:02:43:c1:f6: cf:7a:3f:bc:5a:5a:07:51:41:b0:4a:c3:75:0f:e4:d7:42:77: 58:3e:0f:f4:8f:ac:29:50:47:2a:37:e8:3f:8d:8d:72:3a:3e: f5:ad:1f:90:ce:f2:69:f1:a7:9f:85:4f:93:67:37:dc:cb:8b: 97:75:a0:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQqq4yUhyJgRgJ9+ZV/8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjUxMjE4MDcwMDM0WhcNMjUxMjE5MDcwMDM0WjAzMTEwLwYDVQQD Eyg0MTdiYTUwZTA0ZjFlMTEzYTdhNjMyODQzOGZkOTRhMDNiODc0YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJpfXf2o+3KIjaoApQgZK2pJs8IA ZutOhz3NiO2EGqd12ED4fZtNpuDLsn6tSqaF5p9QE/WAmiUWK97pUPd8ng2bMFem M+Lz0fKGaSPZ3+qrQW6NN541FcU/j3U32NEgm3E4Yt7VabLVJAVgz25CRrPJ4Q32 rnD5M9UNzA8+ngjC+lCab47gBeSwEt/lhkZ72PPGHdGgsgns+Vrjo9O4zCFz41WL KKUsp6T0lnCWzIn+aC37rAGJP7erI2wljiS3sP8i589zjIXxBNCVkA8xFYiaNjwf BkMWemZs9F3IQuxzWE/5B1l1Yg/RRIFPwOEK0JCoKV6yO753qg7Gyl+GPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF7pQ4E8eETp6YyhDj9lKA7h0udMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSZmCfon DC5qCZ84GyutCaOu2uCe8cmjd5QOeaergZ9dugyucqgEwX/TO9ZS7WFjFvPfZgra Bp80RLQ3+eDEjG4pHPGmFteCb9i2wppXaEijtZFY10csxXqdW2rcGWT+tqWWhrHf kcMD8ZsrHO3IwLwhoK7LXSgbuek4WUomW2oKKrk23m260ZQsHQV6TUGew1UPeimg FMUeLKFR56D4oczpuDfLKNw9Fez+3+opwYSVLjatsgk5mmt0SiRVEPYdsyMCQ8H2 z3o/vFpaB1FBsErDdQ/k10J3WD4P9I+sKVBHKjfoP42Ncjo+9a0fkM7yafGnn4VP k2c33MuLl3WgJg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:53:18 2025 by rpki-client