This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json) Hash identifier: 5GGmgRgHpT92GQukmjU2iTJI/y7t747xDVYibC1sxJc= Subject key identifier: 5B:AB:F1:88:84:0D:EF:6E:38:EF:F9:85:62:42:CD:40:4F:7E:50:CC Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb Certificate serial: 019B3C7E5B7877B7858B9A6A381870AF383B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:01:12 +0000 Manifest this update: Sat 20 Dec 2025 16:01:12 +0000 Manifest next update: Sun 21 Dec 2025 16:01:12 +0000 Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: ux/uH4313VGx75z71MKbtKF0B7HiSzVmE7bCo1HKJbY=) 2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=) 3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:5b:78:77:b7:85:8b:9a:6a:38:18:70:af:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb Validity Not Before: Dec 20 16:01:12 2025 GMT Not After : Dec 21 16:01:12 2025 GMT Subject: CN=5babf188840def6e38eff9856242cd404f7e50cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:a2:d3:aa:a2:d4:b3:85:eb:62:68:25:07: 8b:2a:7f:82:43:80:f8:c9:09:af:23:51:74:78:31: b8:25:14:16:fc:bc:c5:94:3d:6f:c7:b8:3b:67:48: 73:5c:23:52:7c:27:4c:35:08:6b:ec:7e:7f:72:e9: a5:ea:3d:f9:3f:56:f2:37:fd:a7:cd:97:4a:f9:16: 5e:09:76:61:af:a9:15:66:86:c4:24:34:e2:7a:ad: 1b:44:b7:d6:a3:83:5b:55:34:ae:3c:9f:8e:f2:f2: 17:77:e3:20:62:ce:b9:41:17:be:c8:d5:78:94:63: 23:2b:d7:57:4b:a0:74:30:41:99:6f:32:56:d7:7b: b9:d1:62:b4:6b:f8:0a:5a:19:cc:43:40:39:d2:d9: a0:65:20:fe:db:53:88:76:c6:17:73:ae:9d:c3:ee: 9f:29:9d:0d:f0:c7:d6:8a:76:04:55:9e:ea:72:7c: a4:6c:45:6f:e5:0a:0e:a8:ee:dc:9f:5a:18:c3:b3: c2:f4:81:d1:32:ad:ac:77:4e:8a:0a:1c:6b:e4:4c: b6:d9:c0:73:0b:dd:67:4d:3a:2e:4a:7a:d9:80:ab: a0:1c:8a:26:a7:5b:66:8b:7d:4f:b4:3f:89:40:2f: 5c:5c:04:85:c5:b4:f8:7a:0d:b4:19:e7:d2:2c:55: 8c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AB:F1:88:84:0D:EF:6E:38:EF:F9:85:62:42:CD:40:4F:7E:50:CC X509v3 Authority Key Identifier: keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:39:d9:e0:35:11:76:d3:d4:da:83:91:8d:67:e3:9e:d2:99: d9:b0:6c:e6:d6:d6:3e:04:45:06:92:8f:df:70:e2:4d:41:3e: c6:9b:cb:49:ed:9a:e4:4a:66:fa:13:ad:40:29:8a:ac:f9:e0: c0:dc:27:ba:18:1c:a2:98:4d:41:7e:15:a0:e5:49:18:f4:76: 0c:60:1d:f3:ce:55:8a:96:bb:82:f8:51:31:c4:ca:a1:0a:85: 38:63:44:91:61:74:3d:00:c7:b4:3d:01:a7:50:f5:c7:69:dd: cf:a0:f6:af:55:3a:3a:6c:e9:34:f6:6b:18:00:d2:b7:bc:9a: de:66:31:92:91:0f:8e:80:de:61:3b:a5:f7:54:b1:51:74:99: bd:da:24:0d:ff:4a:ff:ac:80:bd:ea:fb:ab:29:19:27:26:d7: c6:e8:fc:c0:7c:f9:d3:a8:55:f3:bf:d9:3d:3a:54:d9:eb:4c: 23:f8:bd:24:8e:26:ad:95:1e:ef:63:94:9d:75:8d:61:d6:98: 82:e4:67:86:8c:55:48:a9:2d:04:1e:08:71:83:f1:8f:4f:06: 63:a7:0f:d2:01:0f:12:79:0f:de:45:69:33:7b:26:61:04:b8: 72:5a:12:ad:18:aa:08:72:9d:67:5c:8d:77:a4:98:30:61:a0: d8:ab:5b:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flt4d7eFi5pqOBhwrzg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzIzNTA2NzE4ZGZjZjJhOGJkMTc2ZDRlYTI0ZTI3NTMy MmZjZmIwHhcNMjUxMjIwMTYwMTEyWhcNMjUxMjIxMTYwMTEyWjAzMTEwLwYDVQQD Eyg1YmFiZjE4ODg0MGRlZjZlMzhlZmY5ODU2MjQyY2Q0MDRmN2U1MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE2i06qi1LOF62JoJQeLKn+CQ4D4 yQmvI1F0eDG4JRQW/LzFlD1vx7g7Z0hzXCNSfCdMNQhr7H5/cuml6j35P1byN/2n zZdK+RZeCXZhr6kVZobEJDTieq0bRLfWo4NbVTSuPJ+O8vIXd+MgYs65QRe+yNV4 lGMjK9dXS6B0MEGZbzJW13u50WK0a/gKWhnMQ0A50tmgZSD+21OIdsYXc66dw+6f KZ0N8MfWinYEVZ7qcnykbEVv5QoOqO7cn1oYw7PC9IHRMq2sd06KChxr5Ey22cBz C91nTTouSnrZgKugHIomp1tmi31PtD+JQC9cXASFxbT4eg20GefSLFWMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFur8YiEDe9uOO/5hWJCzUBPflDMMB8GA1UdIwQY MBaAFAFyNQZxjfzyqL0XbU6iTidTIvz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEt MDUzNzNiYTk0ODNkLzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEtMDUzNzNiYTk0ODNk LzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjnZ4DUR dtPU2oORjWfjntKZ2bBs5tbWPgRFBpKP33DiTUE+xpvLSe2a5Epm+hOtQCmKrPng wNwnuhgcophNQX4VoOVJGPR2DGAd885Vipa7gvhRMcTKoQqFOGNEkWF0PQDHtD0B p1D1x2ndz6D2r1U6OmzpNPZrGADSt7ya3mYxkpEPjoDeYTul91SxUXSZvdokDf9K /6yAver7qykZJybXxuj8wHz506hV87/ZPTpU2etMI/i9JI4mrZUe72OUnXWNYdaY guRnhoxVSKktBB4IcYPxj08GY6cP0gEPEnkP3kVpM3smYQS4cloSrRiqCHKdZ1yN d6SYMGGg2KtbHA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:12:07 2025 by rpki-client