This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json) Hash identifier: 9M0J/YizEIr/WtrNDWu5FOVTQSCajWAyouZce5UWzTQ= Subject key identifier: 2F:75:8E:55:7B:0D:A9:BE:B5:56:DC:5F:DE:BA:E7:45:71:49:F2:0C Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Certificate serial: 019B3D59B06339B4E4AAB5547135CFA4D71D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft Manifest number: 1089 Signing time: Sat 20 Dec 2025 20:00:46 +0000 Manifest this update: Sat 20 Dec 2025 20:00:46 +0000 Manifest next update: Sun 21 Dec 2025 20:00:46 +0000 Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=) 2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: Wu9Le45uD2T3jiyT4IG5VOdkZV0OO8Gn2iBGay5nM20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b0:63:39:b4:e4:aa:b5:54:71:35:cf:a4:d7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Validity Not Before: Dec 20 20:00:46 2025 GMT Not After : Dec 21 20:00:46 2025 GMT Subject: CN=2f758e557b0da9beb556dc5fdebae7457149f20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:3f:ee:89:89:16:53:0b:ca:fc:e6:95:8a: 73:85:eb:7c:27:fd:e5:7b:15:d0:4e:6f:d5:75:60: 3b:92:1b:a4:fa:63:13:b9:04:4b:0a:08:72:00:65: 7e:83:d9:e1:b6:9e:c3:5b:d9:5b:f4:7b:e4:1b:0f: 01:5c:0d:fa:39:ff:99:e0:34:22:b0:50:eb:6e:76: 67:54:49:55:4d:fd:64:6d:10:76:19:66:34:13:63: 22:be:7b:9f:96:95:4a:53:bb:86:7a:36:52:3b:52: 62:03:23:ce:7f:8b:44:3d:a0:0b:a9:ba:1e:cc:fa: ae:9f:1b:78:49:2f:3f:fc:67:f6:de:33:1d:28:04: 2a:fb:62:dc:84:34:8e:b6:e8:5c:f9:7d:a2:3d:6d: 8d:6d:3f:2d:4f:4e:d4:62:70:be:79:48:25:e2:43: 9f:43:7b:42:ed:33:75:2d:69:2a:77:b8:f4:ab:9b: f9:dc:76:14:ed:5e:d7:37:ef:d9:83:54:4c:53:44: 2a:f3:77:03:fc:dc:e2:89:78:1f:73:c5:4b:74:2f: 06:5e:79:da:a7:44:23:9c:58:42:f9:e3:a5:90:98: 7e:57:56:10:00:ff:16:6d:da:45:de:d8:61:70:4d: b5:4e:e4:e1:6e:31:77:a9:a8:73:cb:2c:ad:6a:52: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:75:8E:55:7B:0D:A9:BE:B5:56:DC:5F:DE:BA:E7:45:71:49:F2:0C X509v3 Authority Key Identifier: keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:18:58:41:8b:fb:0c:e9:8b:0a:04:c9:1a:42:b3:b6:95:20: 80:7c:56:50:36:84:1e:37:04:5f:ba:d2:70:20:47:89:9d:69: 5e:13:7f:d0:52:93:9c:87:97:4b:07:4b:21:f8:3f:9b:45:35: 54:93:25:f9:f4:42:a3:9d:63:c0:fb:a3:19:05:9a:56:09:7a: a7:97:05:c9:4f:78:93:bc:79:a7:f1:0b:11:40:28:57:52:a7: cf:2f:99:72:66:69:a6:e5:79:03:01:9d:5a:c8:7b:96:22:cd: 71:2a:44:cd:e1:2c:b2:10:2f:3f:f2:31:88:26:04:c8:fd:ce: 0f:5d:36:98:f9:61:e9:70:79:1c:92:91:4d:c6:5e:ee:4f:e5: dd:c8:86:ed:c9:d8:4f:6a:88:48:42:68:0b:3a:ad:12:7b:e6: 4f:a1:48:13:3f:d7:95:f7:50:43:42:87:64:be:e6:7d:f9:fa: ff:a0:7a:63:71:e4:b3:ca:cc:85:fc:0e:b8:79:27:36:90:46: 72:cc:1e:6f:09:c6:a1:96:e5:b0:ab:69:16:56:46:0b:ca:05: c9:09:00:10:5a:33:b0:20:d5:e1:f4:2e:1e:24:ed:e2:ce:37: 67:ff:44:98:c5:42:d3:c3:f2:28:c7:30:c1:7d:33:ed:00:3f: 9e:c0:4a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbBjObTkqrVUcTXPpNcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWExNTdlMjBhZGNhM2I0NDA2N2JhOGQ4ZGNhYmFlNjk4 YThiZWMwHhcNMjUxMjIwMjAwMDQ2WhcNMjUxMjIxMjAwMDQ2WjAzMTEwLwYDVQQD EygyZjc1OGU1NTdiMGRhOWJlYjU1NmRjNWZkZWJhZTc0NTcxNDlmMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn8/7omJFlMLyvzmlYpzhet8J/3l exXQTm/VdWA7khuk+mMTuQRLCghyAGV+g9nhtp7DW9lb9HvkGw8BXA36Of+Z4DQi sFDrbnZnVElVTf1kbRB2GWY0E2MivnuflpVKU7uGejZSO1JiAyPOf4tEPaALqboe zPqunxt4SS8//Gf23jMdKAQq+2LchDSOtuhc+X2iPW2NbT8tT07UYnC+eUgl4kOf Q3tC7TN1LWkqd7j0q5v53HYU7V7XN+/Zg1RMU0Qq83cD/NziiXgfc8VLdC8GXnna p0QjnFhC+eOlkJh+V1YQAP8WbdpF3thhcE21TuThbjF3qahzyyytalK6ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC91jlV7Dam+tVbcX96650VxSfIMMB8GA1UdIwQY MBaAFGsaFX4grco7RAZ7qNjcq65piovsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEt MzZkYzI4MDBmZGVkLzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEtMzZkYzI4MDBmZGVk LzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRhYQYv7 DOmLCgTJGkKztpUggHxWUDaEHjcEX7rScCBHiZ1pXhN/0FKTnIeXSwdLIfg/m0U1 VJMl+fRCo51jwPujGQWaVgl6p5cFyU94k7x5p/ELEUAoV1Knzy+ZcmZppuV5AwGd Wsh7liLNcSpEzeEsshAvP/IxiCYEyP3OD102mPlh6XB5HJKRTcZe7k/l3ciG7cnY T2qISEJoCzqtEnvmT6FIEz/XlfdQQ0KHZL7mffn6/6B6Y3Hks8rMhfwOuHknNpBG cswebwnGoZblsKtpFlZGC8oFyQkAEFozsCDV4fQuHiTt4s43Z/9EmMVC08PyKMcw wX0z7QA/nsBKgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:30:58 2025 by rpki-client