This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json) Hash identifier: w+mvJU9rP2LUVLUoguhVqp4sBzLCJWQjggiYGNqM6Ns= Subject key identifier: A7:75:1B:52:AB:D4:CD:89:A6:28:D8:FB:68:D2:23:BB:E6:C9:E5:C4 Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc Certificate serial: 019B4E1620EDAFEB9DE2CFB97678C5626FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 02:00:31 +0000 Manifest this update: Wed 24 Dec 2025 02:00:31 +0000 Manifest next update: Thu 25 Dec 2025 02:00:31 +0000 Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: SWOqNmtfAe4sKmUgQPrjKxJgGryQVAPxJttNjy3abAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:20:ed:af:eb:9d:e2:cf:b9:76:78:c5:62:6f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc Validity Not Before: Dec 24 02:00:31 2025 GMT Not After : Dec 25 02:00:31 2025 GMT Subject: CN=a7751b52abd4cd89a628d8fb68d223bbe6c9e5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:a0:80:f4:1f:14:68:f4:8e:c5:3f:6a:e7: e7:66:a8:8a:96:ad:2f:86:fb:8e:21:e4:c9:8b:bc: 4f:93:47:f8:c7:de:d8:ff:b5:07:6c:34:41:5b:b1: 3f:c2:7b:03:3c:4f:fd:be:fb:f9:39:83:22:a5:38: 4e:0b:2a:6d:72:8d:9d:5c:15:d1:a5:e4:48:a9:45: 0d:96:50:a2:59:75:55:29:8d:93:e6:a6:f0:a5:d9: d5:57:92:b3:e3:b8:80:cb:b5:56:a1:27:6d:64:4b: 3d:ad:75:71:c2:5a:bd:9a:52:22:92:7a:cf:0e:60: 52:29:5a:e4:49:ab:1d:7c:53:59:f8:e5:6d:70:38: 65:7b:9c:79:ee:c1:87:a0:2c:c7:91:da:e9:a3:2c: 51:22:fa:1b:50:93:00:2a:a4:04:78:9e:e2:70:e7: 21:04:a6:bf:37:f2:85:a9:7a:05:13:7a:b7:ea:30: ae:fb:ef:11:9a:dd:18:6a:39:7a:a7:80:16:f8:91: 4b:7d:46:71:b8:27:92:b5:d0:44:6e:72:21:24:bb: 35:69:97:57:cb:74:ae:b6:f7:64:dd:d9:05:65:c2: b8:42:af:fa:cc:82:81:24:aa:bb:7a:1a:16:73:1b: d9:8a:2f:f0:40:24:b3:c6:15:4a:e8:23:54:46:6b: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:75:1B:52:AB:D4:CD:89:A6:28:D8:FB:68:D2:23:BB:E6:C9:E5:C4 X509v3 Authority Key Identifier: keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:09:da:d5:50:9f:1b:a7:f6:7b:07:4a:7e:c0:d2:9e:01: 37:f5:0a:70:02:94:fd:ed:5c:bd:ac:dc:be:25:93:dd:a5:60: 7d:76:9f:bc:f6:67:2c:1a:c7:81:e0:13:03:66:49:8e:b6:51: 98:b0:92:5c:90:67:91:69:55:a1:bc:4c:ab:d1:9e:8c:64:64: 07:57:53:b1:99:55:be:b4:6d:49:8f:10:b1:39:b5:00:2a:da: ba:40:d4:a2:e5:74:38:e2:73:ad:a6:92:ec:b5:df:53:c1:62: 4f:e7:32:58:81:4b:10:3c:ae:55:78:61:87:45:e7:0b:fd:2d: 6e:a6:c8:90:09:94:4e:80:ab:20:01:f3:81:dc:de:c8:ef:e5: df:c5:b0:36:f5:57:ce:3d:48:57:f1:c6:52:6d:d2:1f:49:71: 6e:0b:87:be:8d:71:d8:79:19:cf:0e:36:91:80:5f:e0:87:1e: aa:9d:c3:56:db:ba:7f:f2:99:21:76:47:87:be:9a:fd:4c:2e: 8d:e2:2f:2e:30:d3:9d:f5:a0:05:84:e1:4e:6f:6b:d7:16:71: 18:3b:70:28:7f:cf:ac:f2:cc:91:15:99:ed:29:e1:73:f8:be: c7:f5:8d:4b:c2:bf:42:50:5a:63:73:0c:29:05:ac:14:48:9b: aa:32:82:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFiDtr+ud4s+5dnjFYm+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk ZWQ3Y2MwHhcNMjUxMjI0MDIwMDMxWhcNMjUxMjI1MDIwMDMxWjAzMTEwLwYDVQQD EyhhNzc1MWI1MmFiZDRjZDg5YTYyOGQ4ZmI2OGQyMjNiYmU2YzllNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSmggPQfFGj0jsU/aufnZqiKlq0v hvuOIeTJi7xPk0f4x97Y/7UHbDRBW7E/wnsDPE/9vvv5OYMipThOCyptco2dXBXR peRIqUUNllCiWXVVKY2T5qbwpdnVV5Kz47iAy7VWoSdtZEs9rXVxwlq9mlIiknrP DmBSKVrkSasdfFNZ+OVtcDhle5x57sGHoCzHkdrpoyxRIvobUJMAKqQEeJ7icOch BKa/N/KFqXoFE3q36jCu++8Rmt0Yajl6p4AW+JFLfUZxuCeStdBEbnIhJLs1aZdX y3Sutvdk3dkFZcK4Qq/6zIKBJKq7ehoWcxvZii/wQCSzxhVK6CNURmvZlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd1G1Kr1M2JpijY+2jSI7vmyeXEMB8GA1UdIwQY MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBgJ2tVQ nxun9nsHSn7A0p4BN/UKcAKU/e1cvazcviWT3aVgfXafvPZnLBrHgeATA2ZJjrZR mLCSXJBnkWlVobxMq9GejGRkB1dTsZlVvrRtSY8QsTm1ACraukDUouV0OOJzraaS 7LXfU8FiT+cyWIFLEDyuVXhhh0XnC/0tbqbIkAmUToCrIAHzgdzeyO/l38WwNvVX zj1IV/HGUm3SH0lxbguHvo1x2HkZzw42kYBf4Iceqp3DVtu6f/KZIXZHh76a/Uwu jeIvLjDTnfWgBYThTm9r1xZxGDtwKH/PrPLMkRWZ7Snhc/i+x/WNS8K/QlBaY3MM KQWsFEibqjKCww== -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:16 2025 by rpki-client