This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json) Hash identifier: 9TiazOVeOvQgeg0ju9tPq5FP9B6dVXJbkOLxzBfzJMs= Subject key identifier: 21:DC:3B:53:C2:FC:EB:D9:82:B5:8C:95:5F:3F:27:0D:34:C6:87:F1 Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f Certificate serial: 019B390F65758691CC0A6433622780E5DD86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft Manifest number: 149D Signing time: Sat 20 Dec 2025 00:01:08 +0000 Manifest this update: Sat 20 Dec 2025 00:01:08 +0000 Manifest next update: Sun 21 Dec 2025 00:01:08 +0000 Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=) 2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: 32NHzLGAhF4RND0wMmvDl1PV13YX4W72OusPFSdAELY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:65:75:86:91:cc:0a:64:33:62:27:80:e5:dd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f Validity Not Before: Dec 20 00:01:08 2025 GMT Not After : Dec 21 00:01:08 2025 GMT Subject: CN=21dc3b53c2fcebd982b58c955f3f270d34c687f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:d5:ce:75:ed:d9:5d:8a:93:22:c2:74:41: ff:19:30:7e:85:52:86:44:99:26:45:0d:31:e0:0a: ec:09:b7:e9:88:72:01:c4:74:1d:56:f7:6d:a2:e3: 54:bf:d4:7d:f3:b3:6b:34:2e:4f:bc:27:10:42:08: 2a:66:ab:38:a4:67:4e:0c:bd:b5:de:e2:0c:34:48: 77:4b:15:75:a4:15:18:2a:6e:26:16:f3:30:c6:f5: 0c:66:52:46:ab:b0:b6:de:6f:18:9f:30:1b:84:1e: 7c:0f:c7:48:19:31:b1:ba:55:5d:a6:b8:46:47:dc: 2e:eb:f0:8a:48:4f:b6:fc:af:59:07:df:8d:60:9a: 90:c4:68:e4:73:28:0b:fc:8d:60:d7:b6:cd:58:b9: 3e:4f:f5:aa:d3:6c:74:3d:d9:8a:4a:8c:cb:10:7a: 77:9a:1f:67:e6:b1:fa:81:7e:f8:01:ef:ae:b6:e5: 83:8c:80:b7:ac:d5:16:47:a9:08:8e:3d:ea:c6:47: fc:03:e6:cb:a2:97:62:51:19:bd:67:b6:54:a3:3b: c6:ff:c5:ce:9b:f5:21:86:d8:59:01:08:37:30:3c: 54:1f:62:af:56:81:0b:5e:3a:c9:06:7e:ee:00:ae: 64:7a:62:73:d8:42:0a:66:76:74:11:fa:48:fc:2b: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DC:3B:53:C2:FC:EB:D9:82:B5:8C:95:5F:3F:27:0D:34:C6:87:F1 X509v3 Authority Key Identifier: keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:66:fb:80:c7:2a:8b:41:30:b0:68:cc:05:dc:84:a9:4f:ce: 82:b5:f8:63:51:11:d3:0d:d0:52:bb:86:65:2e:f2:d7:b6:93: 8d:a9:dd:20:7e:24:67:d8:3f:23:a8:03:5f:39:34:87:fd:5f: 7a:43:12:da:c3:f5:da:21:dd:1b:9d:3a:04:67:73:4f:f6:44: 01:7c:31:5a:ad:e3:1f:f9:ab:f1:54:b7:ba:d8:31:a1:51:4c: 0a:1a:9e:4e:52:22:0b:1b:6d:06:2d:89:7c:b1:5f:69:5e:fd: e6:c0:c5:d4:76:29:11:b1:32:50:b7:63:e8:34:61:78:49:b8: 11:a3:f7:1f:32:fb:1e:a3:79:7f:24:2d:18:6f:b8:ce:2e:9f: 01:bc:03:c3:3f:ee:f2:8e:52:76:8f:cd:71:11:72:ea:d0:0c: c1:8a:98:22:f8:9f:87:99:1a:a2:e0:cf:ad:da:51:05:7d:65: 13:26:cf:fe:13:d1:a6:db:ba:96:4c:93:26:2f:9b:61:cb:25: d0:e0:f2:03:fb:ad:01:74:4e:65:c6:bd:2b:e6:22:40:32:93: 66:a8:f0:74:ce:23:f9:62:bd:5e:27:c6:b3:76:ac:97:e7:4b: 18:8f:e8:79:73:15:6b:d5:3d:62:49:ba:6e:62:59:56:01:bf: 8b:84:6a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D2V1hpHMCmQzYieA5d2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3 MzMwMWYwHhcNMjUxMjIwMDAwMTA4WhcNMjUxMjIxMDAwMTA4WjAzMTEwLwYDVQQD EygyMWRjM2I1M2MyZmNlYmQ5ODJiNThjOTU1ZjNmMjcwZDM0YzY4N2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6fVznXt2V2KkyLCdEH/GTB+hVKG RJkmRQ0x4ArsCbfpiHIBxHQdVvdtouNUv9R987NrNC5PvCcQQggqZqs4pGdODL21 3uIMNEh3SxV1pBUYKm4mFvMwxvUMZlJGq7C23m8YnzAbhB58D8dIGTGxulVdprhG R9wu6/CKSE+2/K9ZB9+NYJqQxGjkcygL/I1g17bNWLk+T/Wq02x0PdmKSozLEHp3 mh9n5rH6gX74Ae+utuWDjIC3rNUWR6kIjj3qxkf8A+bLopdiURm9Z7ZUozvG/8XO m/UhhthZAQg3MDxUH2KvVoELXjrJBn7uAK5kemJz2EIKZnZ0EfpI/Ct8cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHcO1PC/OvZgrWMlV8/Jw00xofxMB8GA1UdIwQY MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt ZWViZGNiZDNhZWU4LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4 LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxmb7gMcq i0EwsGjMBdyEqU/OgrX4Y1ER0w3QUruGZS7y17aTjandIH4kZ9g/I6gDXzk0h/1f ekMS2sP12iHdG506BGdzT/ZEAXwxWq3jH/mr8VS3utgxoVFMChqeTlIiCxttBi2J fLFfaV795sDF1HYpEbEyULdj6DRheEm4EaP3HzL7HqN5fyQtGG+4zi6fAbwDwz/u 8o5Sdo/NcRFy6tAMwYqYIvifh5kaouDPrdpRBX1lEybP/hPRptu6lkyTJi+bYcsl 0ODyA/utAXROZca9K+YiQDKTZqjwdM4j+WK9XifGs3asl+dLGI/oeXMVa9U9Ykm6 bmJZVgG/i4RqMw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:54 2025 by rpki-client