This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json) Hash identifier: PAZnlrD9WtECiZvdDLpugfTu/8VOU2/Uqo+NLNRBAYE= Subject key identifier: E2:DE:D5:94:3B:BD:F4:FA:F1:07:01:AB:87:3C:86:28:2D:06:3D:49 Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6 Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6 Certificate serial: 019B3F1185C3B9EC902C84F445FC65B88C2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft Manifest number: 157E Signing time: Sun 21 Dec 2025 04:01:11 +0000 Manifest this update: Sun 21 Dec 2025 04:01:11 +0000 Manifest next update: Mon 22 Dec 2025 04:01:11 +0000 Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=) 2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: DiBDyph3f9Qhp1yc0yD+tL0XH9Q2gQtp3aOdnoDazVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:85:c3:b9:ec:90:2c:84:f4:45:fc:65:b8:8c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6 Validity Not Before: Dec 21 04:01:11 2025 GMT Not After : Dec 22 04:01:11 2025 GMT Subject: CN=e2ded5943bbdf4faf10701ab873c86282d063d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:fe:05:ee:0d:ab:a3:12:b3:6a:3d:9b:0a: 7f:6e:44:1a:d1:8d:68:f7:07:c8:7e:52:f2:3f:5a: fb:64:e9:c5:b4:91:92:1c:4c:f6:5d:f3:a6:06:7e: 77:07:9e:30:f4:a6:8d:a2:9d:dd:05:e6:19:81:fb: aa:24:19:e7:6f:26:8d:e2:99:02:ab:a3:da:d9:e9: 4e:7a:92:54:5d:cb:8a:27:9a:69:57:cb:54:63:72: 1a:56:d4:dd:7d:cb:d5:19:d1:2c:c4:39:4d:30:b3: d4:60:79:b3:1a:8d:21:f4:f3:a6:42:b5:78:8e:f8: 5e:f0:4c:09:a9:61:32:65:6c:cd:b7:73:f7:70:04: d1:3c:33:68:9d:b5:13:ae:71:22:b7:83:6c:cf:61: 13:f3:1e:93:f8:1f:83:42:20:e7:1b:c3:cc:5e:b2: 3b:15:5e:2b:b8:49:69:3a:af:f6:33:1c:42:cb:6f: 92:9a:2f:bc:84:08:a8:a2:86:26:ae:ec:52:ec:73: f1:e6:9d:2a:ab:78:22:a7:99:0b:81:1e:77:2f:0c: 18:d4:94:0e:08:9d:d9:da:7f:92:e1:5a:6f:f5:5e: ee:73:fc:6a:c7:c4:c5:0e:8b:59:ca:af:8f:9e:d9: 86:e2:94:5c:45:df:b2:8d:d9:6c:46:7d:b4:35:9c: f9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DE:D5:94:3B:BD:F4:FA:F1:07:01:AB:87:3C:86:28:2D:06:3D:49 X509v3 Authority Key Identifier: keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d0:cd:3d:ad:e7:47:78:d3:56:94:5d:37:98:a1:42:22:50: 62:bb:83:de:9d:87:45:fb:30:78:1e:83:b2:4a:63:88:b6:2e: c0:62:e9:1a:83:84:c3:bd:58:f7:ee:fc:46:93:08:02:c2:a4: 4e:e5:52:da:75:cc:30:09:97:ab:08:f6:56:a6:5f:0c:75:46: b5:de:45:9d:56:74:b5:e5:ea:04:70:a8:44:17:47:d8:cd:9b: a1:e6:05:1d:da:41:a4:73:ee:8d:c4:59:8c:8f:80:ef:b5:6c: d0:5e:3f:2a:32:71:2d:a8:df:57:fa:9e:f4:be:d1:42:b9:aa: 3f:d4:77:c5:ad:97:5a:d3:ae:93:be:37:fd:c8:97:0d:d5:f6: 06:40:a5:9a:7d:5f:43:92:e6:de:54:9d:54:33:3a:95:27:a1: 0a:fe:f4:3d:0a:6d:6f:ab:4f:76:d5:14:ee:c6:2e:75:88:37: 94:b0:e6:ea:18:ed:8b:d0:7b:fa:33:5f:75:f0:02:cb:2b:36: 94:40:31:5a:c9:16:cf:f5:23:0b:23:da:02:62:a4:7d:57:75: e5:2c:54:f0:32:ba:ac:5d:34:e1:45:1a:d9:64:19:9a:f3:13: 55:12:a1:da:d5:03:f1:28:94:3d:44:42:93:30:a9:c5:26:ff: f4:40:69:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYXDueyQLIT0RfxluIwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh YjZiZDYwHhcNMjUxMjIxMDQwMTExWhcNMjUxMjIyMDQwMTExWjAzMTEwLwYDVQQD EyhlMmRlZDU5NDNiYmRmNGZhZjEwNzAxYWI4NzNjODYyODJkMDYzZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDn+Be4Nq6MSs2o9mwp/bkQa0Y1o 9wfIflLyP1r7ZOnFtJGSHEz2XfOmBn53B54w9KaNop3dBeYZgfuqJBnnbyaN4pkC q6Pa2elOepJUXcuKJ5ppV8tUY3IaVtTdfcvVGdEsxDlNMLPUYHmzGo0h9POmQrV4 jvhe8EwJqWEyZWzNt3P3cATRPDNonbUTrnEit4Nsz2ET8x6T+B+DQiDnG8PMXrI7 FV4ruElpOq/2MxxCy2+Smi+8hAioooYmruxS7HPx5p0qq3gip5kLgR53LwwY1JQO CJ3Z2n+S4Vpv9V7uc/xqx8TFDotZyq+PntmG4pRcRd+yjdlsRn20NZz5vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLe1ZQ7vfT68QcBq4c8higtBj1JMB8GA1UdIwQY MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtDNPa3n R3jTVpRdN5ihQiJQYruD3p2HRfsweB6DskpjiLYuwGLpGoOEw71Y9+78RpMIAsKk TuVS2nXMMAmXqwj2VqZfDHVGtd5FnVZ0teXqBHCoRBdH2M2boeYFHdpBpHPujcRZ jI+A77Vs0F4/KjJxLajfV/qe9L7RQrmqP9R3xa2XWtOuk743/ciXDdX2BkClmn1f Q5Lm3lSdVDM6lSehCv70PQptb6tPdtUU7sYudYg3lLDm6hjti9B7+jNfdfACyys2 lEAxWskWz/UjCyPaAmKkfVd15SxU8DK6rF004UUa2WQZmvMTVRKh2tUD8SiUPURC kzCpxSb/9EBpUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:01 2025 by rpki-client