This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json) Hash identifier: +5XmePFnVyNgxidTArm8YR5YMpk+PikJ8wRDBC0A6to= Subject key identifier: 08:B4:DB:E4:A9:12:5A:CC:A4:BA:E1:16:D3:1A:23:03:3D:6A:BD:7B Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94 Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694 Certificate serial: 019B3D230BF1A062783963327CF41ABC6E22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft Manifest number: 12B4 Signing time: Sat 20 Dec 2025 19:01:05 +0000 Manifest this update: Sat 20 Dec 2025 19:01:05 +0000 Manifest next update: Sun 21 Dec 2025 19:01:05 +0000 Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=) 2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: IJmUHYpCgmNJ+unnC8w08gFYAbOaExgwJGbmhuLQYyI=) 3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:0b:f1:a0:62:78:39:63:32:7c:f4:1a:bc:6e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03196c89e554dbe4774522759906e2581a174694 Validity Not Before: Dec 20 19:01:05 2025 GMT Not After : Dec 21 19:01:05 2025 GMT Subject: CN=08b4dbe4a9125acca4bae116d31a23033d6abd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:6e:25:6a:c2:e2:eb:b8:af:46:0f:22:3d: 22:5d:0e:ed:8e:bc:9c:a6:8d:71:cc:91:df:fa:7a: 97:65:fe:6f:08:13:2d:99:2e:ec:3b:a8:c9:71:80: 26:c3:ea:2a:79:13:2f:72:62:8f:f9:bb:90:1b:0a: 8d:7d:50:c6:f3:ef:45:91:a5:44:e6:83:1b:51:94: 6a:3a:c4:ac:3c:ed:7d:68:07:df:f1:73:51:9f:c9: 51:66:23:a2:34:1e:57:03:17:81:2f:9f:83:ae:47: a4:bb:1e:2a:66:ae:b0:9e:06:a2:e4:61:a9:db:64: b1:34:b4:86:b8:10:dc:fd:cc:85:f7:13:61:da:68: d1:65:64:d3:a7:af:f0:eb:f2:c3:5f:99:8a:18:75: e8:d1:65:b9:3f:27:69:8b:dd:d5:41:5d:05:82:74: e2:5a:1e:af:26:bb:6c:7c:6a:b7:23:34:a2:22:a9: cc:3b:55:57:eb:d8:61:ab:46:de:5c:4b:ad:eb:f9: ae:6d:eb:3d:35:2b:9d:1c:22:ca:f2:43:c2:1e:52: 4c:c3:42:8a:b5:01:18:54:40:1f:43:09:3a:46:48: b6:77:79:2f:01:f3:c3:39:cd:1f:9e:55:f1:a0:c0: 2f:72:cc:fb:ba:63:81:b1:cb:43:96:35:b2:55:84: 05:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B4:DB:E4:A9:12:5A:CC:A4:BA:E1:16:D3:1A:23:03:3D:6A:BD:7B X509v3 Authority Key Identifier: keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c3:c7:32:11:1f:4c:34:b9:c9:84:f5:2e:37:06:7f:94:5d: e4:dc:2e:1e:d9:e9:21:f3:f2:b3:86:3e:a2:a9:25:2b:d3:c0: 8e:a6:81:40:ce:f9:dc:9e:1e:c7:4a:89:db:c1:7b:a0:ed:3c: f7:aa:6c:6c:8d:f3:b3:33:15:42:84:be:3f:76:10:3f:24:3d: 9e:0e:1c:48:82:b7:9b:7f:05:83:c0:c5:07:a6:3c:8e:a8:f7: aa:cd:8c:39:0e:53:dc:21:2c:b3:54:7d:0c:de:e8:3e:16:3a: e0:c2:42:a1:8a:72:ba:b7:57:0f:49:d0:24:fb:5e:d8:dd:14: 15:67:48:91:c2:14:6b:e7:e1:c4:21:ca:ae:86:b1:23:8a:71: f5:8c:32:60:1c:0e:83:db:5f:a3:20:6d:5f:c0:92:ef:f2:90: f1:95:ca:b8:47:9d:88:e9:7c:d6:06:79:ee:d7:aa:07:2a:b2: 1a:6f:35:73:8c:d4:33:ca:38:9b:d6:92:64:a6:8a:e0:7b:d7: 53:38:82:23:6f:f3:7e:2d:c2:41:3e:75:de:71:40:92:ab:75: 73:12:64:93:bb:53:48:31:00:77:e8:48:ca:fd:51:a4:0b:5a: eb:c8:c1:21:19:3f:d6:bf:73:bc:83:b4:93:b6:93:8f:df:08: f3:6b:69:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwvxoGJ4OWMyfPQavG4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMTk2Yzg5ZTU1NGRiZTQ3NzQ1MjI3NTk5MDZlMjU4MWEx NzQ2OTQwHhcNMjUxMjIwMTkwMTA1WhcNMjUxMjIxMTkwMTA1WjAzMTEwLwYDVQQD EygwOGI0ZGJlNGE5MTI1YWNjYTRiYWUxMTZkMzFhMjMwMzNkNmFiZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S5uJWrC4uu4r0YPIj0iXQ7tjryc po1xzJHf+nqXZf5vCBMtmS7sO6jJcYAmw+oqeRMvcmKP+buQGwqNfVDG8+9FkaVE 5oMbUZRqOsSsPO19aAff8XNRn8lRZiOiNB5XAxeBL5+Drkekux4qZq6wngai5GGp 22SxNLSGuBDc/cyF9xNh2mjRZWTTp6/w6/LDX5mKGHXo0WW5Pydpi93VQV0FgnTi Wh6vJrtsfGq3IzSiIqnMO1VX69hhq0beXEut6/mubes9NSudHCLK8kPCHlJMw0KK tQEYVEAfQwk6Rki2d3kvAfPDOc0fnlXxoMAvcsz7umOBsctDljWyVYQFmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi02+SpElrMpLrhFtMaIwM9ar17MB8GA1UdIwQY MBaAFAMZbInlVNvkd0UidZkG4lgaF0aUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYt ODUxN2E4ZjM1NWFlLzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYtODUxN2E4ZjM1NWFl LzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcPHMhEf TDS5yYT1LjcGf5Rd5NwuHtnpIfPys4Y+oqklK9PAjqaBQM753J4ex0qJ28F7oO08 96psbI3zszMVQoS+P3YQPyQ9ng4cSIK3m38Fg8DFB6Y8jqj3qs2MOQ5T3CEss1R9 DN7oPhY64MJCoYpyurdXD0nQJPte2N0UFWdIkcIUa+fhxCHKroaxI4px9YwyYBwO g9tfoyBtX8CS7/KQ8ZXKuEediOl81gZ57teqByqyGm81c4zUM8o4m9aSZKaK4HvX UziCI2/zfi3CQT513nFAkqt1cxJkk7tTSDEAd+hIyv1RpAta68jBIRk/1r9zvIO0 k7aTj98I82tpSg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:16:41 2025 by rpki-client