This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json) Hash identifier: KatgdMbXQVM1pGniY07tCgu1rHeLtr//1ayDtGIOIRQ= Subject key identifier: 4C:A5:EC:33:2B:F8:BE:4E:44:94:AB:19:59:6C:C0:68:26:D4:C6:A0 Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1 Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1 Certificate serial: 019B42B754076C04740D30F3B351DFFEE290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft Manifest number: 0F6A Signing time: Sun 21 Dec 2025 21:01:09 +0000 Manifest this update: Sun 21 Dec 2025 21:01:09 +0000 Manifest next update: Mon 22 Dec 2025 21:01:09 +0000 Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: eeCI2ObBhwCkWz/sfq6MwWS4WtDUPip+9IORQ9zj7No=) 2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:54:07:6c:04:74:0d:30:f3:b3:51:df:fe:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=017c90654653ac150028562b32431491b52147d1 Validity Not Before: Dec 21 21:01:09 2025 GMT Not After : Dec 22 21:01:09 2025 GMT Subject: CN=4ca5ec332bf8be4e4494ab19596cc06826d4c6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:8a:b2:ac:ed:b5:8b:07:a2:fa:7c:78:03: e7:29:4b:4b:d3:10:53:fd:8a:f7:73:b0:60:60:93: 3c:8d:1b:d6:34:41:ad:13:e2:da:37:41:78:23:ca: 1f:b1:46:91:99:93:13:51:0a:18:90:7d:eb:0e:e6: cd:0b:54:7b:18:f9:52:08:c2:98:b7:0f:9c:64:14: f6:fb:a5:b7:00:f9:c8:e0:f4:34:c9:8b:72:33:2b: 59:eb:c7:6c:86:1f:1c:d0:30:61:d3:82:2d:59:88: 19:66:6c:18:5f:3f:46:95:a1:56:6c:56:3a:7d:34: 4d:af:c3:1d:d1:69:94:4e:c2:a1:95:82:dc:b8:23: 6f:7b:79:6a:c3:7a:58:35:f3:e5:cf:bc:b9:a3:08: 78:7e:4a:40:e2:f7:45:4f:19:43:1b:7e:0a:a6:ad: bb:54:44:68:22:9c:a6:d1:09:da:5d:59:1f:a8:77: e8:ab:d3:3a:87:85:bc:95:cb:00:74:14:c8:0f:3f: a2:03:52:a8:1b:32:ae:e6:7b:5b:70:21:4f:ff:0f: fc:2f:69:d1:80:6b:95:d4:72:3f:05:6f:bf:a4:bd: a6:27:e6:97:2f:f0:f5:ef:b4:e8:16:f6:47:91:29: 7a:71:4e:a1:33:b7:71:94:bb:85:45:a3:f5:f3:51: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A5:EC:33:2B:F8:BE:4E:44:94:AB:19:59:6C:C0:68:26:D4:C6:A0 X509v3 Authority Key Identifier: keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c8:99:9f:3c:7c:14:58:13:f0:6f:c0:eb:1e:31:4d:d6:18: 18:02:4d:96:a3:ed:0d:24:ff:55:7b:66:1b:04:d8:60:a8:8f: 99:d0:c2:32:56:99:a4:6b:39:fe:ca:02:39:95:fc:bc:36:a8: 79:1c:27:23:bb:4a:1a:57:1c:c6:8d:88:82:b2:34:1d:0e:85: 69:d7:97:20:18:7a:21:78:a2:58:24:c9:13:a0:40:3d:00:9f: f1:54:e6:10:83:37:cc:99:40:23:06:79:cc:46:51:45:6b:bd: 38:58:24:17:b9:c0:05:5f:f5:d1:04:80:d3:85:06:2b:e0:70: 67:ed:b3:4b:fa:d0:73:25:e0:33:1d:90:4f:fc:8b:d5:53:57: 24:26:d5:db:2b:e7:8e:45:13:3f:e5:b6:0f:ac:79:2a:ec:62: 53:42:ec:41:90:24:47:53:ec:47:46:c1:ad:50:7b:ea:1e:dc: 2c:79:5d:52:3f:33:5c:61:ca:b5:0b:ca:5d:85:86:a5:3c:a9: 96:d1:e4:e7:cd:7a:39:64:8b:42:32:f5:85:0d:fe:67:6a:17: f2:1f:05:61:8a:ee:e5:49:d5:7d:6a:04:87:2e:a6:8a:27:d6: dd:a8:07:e4:bd:fd:0e:d3:78:f6:53:da:b8:44:e9:cd:4f:28: 35:eb:e7:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1QHbAR0DTDzs1Hf/uKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxN2M5MDY1NDY1M2FjMTUwMDI4NTYyYjMyNDMxNDkxYjUy MTQ3ZDEwHhcNMjUxMjIxMjEwMTA5WhcNMjUxMjIyMjEwMTA5WjAzMTEwLwYDVQQD Eyg0Y2E1ZWMzMzJiZjhiZTRlNDQ5NGFiMTk1OTZjYzA2ODI2ZDRjNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiKKsqzttYsHovp8eAPnKUtL0xBT /Yr3c7BgYJM8jRvWNEGtE+LaN0F4I8ofsUaRmZMTUQoYkH3rDubNC1R7GPlSCMKY tw+cZBT2+6W3APnI4PQ0yYtyMytZ68dshh8c0DBh04ItWYgZZmwYXz9GlaFWbFY6 fTRNr8Md0WmUTsKhlYLcuCNve3lqw3pYNfPlz7y5owh4fkpA4vdFTxlDG34Kpq27 VERoIpym0QnaXVkfqHfoq9M6h4W8lcsAdBTIDz+iA1KoGzKu5ntbcCFP/w/8L2nR gGuV1HI/BW+/pL2mJ+aXL/D177ToFvZHkSl6cU6hM7dxlLuFRaP181Gb+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyl7DMr+L5ORJSrGVlswGgm1MagMB8GA1UdIwQY MBaAFAF8kGVGU6wVAChWKzJDFJG1IUfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYt NzAxM2E2YzQzOTg1LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYtNzAxM2E2YzQzOTg1 LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8iZnzx8 FFgT8G/A6x4xTdYYGAJNlqPtDST/VXtmGwTYYKiPmdDCMlaZpGs5/soCOZX8vDao eRwnI7tKGlccxo2IgrI0HQ6FadeXIBh6IXiiWCTJE6BAPQCf8VTmEIM3zJlAIwZ5 zEZRRWu9OFgkF7nABV/10QSA04UGK+BwZ+2zS/rQcyXgMx2QT/yL1VNXJCbV2yvn jkUTP+W2D6x5KuxiU0LsQZAkR1PsR0bBrVB76h7cLHldUj8zXGHKtQvKXYWGpTyp ltHk5816OWSLQjL1hQ3+Z2oX8h8FYYru5UnVfWoEhy6miifW3agH5L39DtN49lPa uETpzU8oNevnWw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:51:20 2025 by rpki-client