This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json) Hash identifier: 0o6nwqy8xQVfUi65MM+GA/H/NYxCbjHRm+jYhH6+UGc= Subject key identifier: 9B:0F:EB:32:97:33:1A:21:F7:64:56:C3:3F:07:E2:2B:C8:1D:40:CC Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f Certificate serial: 019B21E3403309DB353EE73D7A131CAD3118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft Manifest number: 1491 Signing time: Mon 15 Dec 2025 12:01:39 +0000 Manifest this update: Mon 15 Dec 2025 12:01:39 +0000 Manifest next update: Tue 16 Dec 2025 12:01:39 +0000 Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=) 2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: KGNHhmYKIBsm2ZL6spaX2qj3/ntZXqs/CCX2FD2dDgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:40:33:09:db:35:3e:e7:3d:7a:13:1c:ad:31:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f Validity Not Before: Dec 15 12:01:39 2025 GMT Not After : Dec 16 12:01:39 2025 GMT Subject: CN=9b0feb3297331a21f76456c33f07e22bc81d40cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:80:1e:51:2e:ed:af:6f:f3:3d:92:09:53: ad:6a:bf:46:19:69:bd:c6:75:d1:31:fa:51:27:89: 00:04:65:79:2a:d1:21:65:ed:81:19:37:56:60:18: 75:21:8c:68:7e:16:79:73:aa:c9:fc:61:fc:6c:14: ff:22:a4:bd:51:e6:26:9e:18:8c:42:f9:29:3e:6e: 2b:ca:26:0b:98:d5:aa:5d:ba:b3:1a:9e:69:96:24: 45:41:31:49:93:e4:af:c8:c5:9d:ca:ae:c3:5b:90: 00:2e:9a:ae:d7:19:32:4f:d1:da:14:a8:6f:11:d1: 14:e6:0e:9e:81:63:e7:fd:31:33:50:b3:a4:79:98: ce:c9:82:a2:fd:fd:df:f1:12:4b:cf:20:a1:93:90: 6c:8c:ba:8b:7a:ea:2f:40:10:bb:8c:d2:4a:e2:47: 69:18:ed:2a:63:8b:48:4d:43:ef:4a:ab:b9:ff:6f: 88:62:b6:9f:b3:63:c5:1f:6a:38:fc:cb:6c:bc:c1: b4:08:1d:77:31:e0:77:2d:68:cd:68:f2:56:8f:74: 57:2f:dc:83:89:62:1c:20:90:6c:00:72:5f:ac:e7: ea:51:64:b6:b0:9a:64:16:81:b1:7d:47:b6:4f:ac: f2:83:d5:57:b2:ac:a8:6c:bc:cf:c2:bb:23:7a:ca: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0F:EB:32:97:33:1A:21:F7:64:56:C3:3F:07:E2:2B:C8:1D:40:CC X509v3 Authority Key Identifier: keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:35:21:b4:62:02:53:83:c6:c1:97:ea:b0:7f:1c:7c:ac:bb: 7d:63:55:a9:13:82:e5:0f:9f:c2:6d:8d:fd:26:91:c8:98:b9: 9c:77:31:e3:bf:2a:0f:31:1b:73:d3:b3:fa:99:54:01:ae:68: 1a:95:81:90:83:2e:0c:02:64:f5:bb:a7:1b:66:d6:ed:f2:3a: 5a:5b:ad:0a:32:70:2f:fc:22:ba:0e:5c:01:aa:fb:ea:da:ac: d1:fc:73:5d:49:ea:22:42:2f:67:ba:68:1e:5e:6c:ad:0a:19: ae:a0:6c:97:c5:46:85:23:f3:56:5c:bd:48:5d:d4:1a:be:61: a0:4a:39:3f:e1:76:32:fa:c4:01:1c:73:39:81:6f:86:90:c7: bf:0b:29:77:57:80:39:bc:23:74:3e:30:cc:4b:93:47:2e:55: 78:82:71:0a:04:da:cd:22:b8:73:33:ae:9f:f9:50:22:39:b3: 73:83:ee:14:10:1b:99:bb:1a:ce:37:1d:90:07:49:0f:32:af: bc:55:2c:e7:8b:42:f2:6a:52:67:84:87:ad:bd:ca:1b:80:c2: 20:4a:f7:9a:88:0a:af:ed:13:26:67:d7:09:99:bf:3c:90:39: 44:d3:0a:4b:4d:1f:c5:c6:67:61:06:d9:0b:fb:16:7e:19:7e: 7a:cf:cf:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh40AzCds1Puc9ehMcrTEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3 MzMwMWYwHhcNMjUxMjE1MTIwMTM5WhcNMjUxMjE2MTIwMTM5WjAzMTEwLwYDVQQD Eyg5YjBmZWIzMjk3MzMxYTIxZjc2NDU2YzMzZjA3ZTIyYmM4MWQ0MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1eAHlEu7a9v8z2SCVOtar9GGWm9 xnXRMfpRJ4kABGV5KtEhZe2BGTdWYBh1IYxofhZ5c6rJ/GH8bBT/IqS9UeYmnhiM QvkpPm4ryiYLmNWqXbqzGp5pliRFQTFJk+SvyMWdyq7DW5AALpqu1xkyT9HaFKhv EdEU5g6egWPn/TEzULOkeZjOyYKi/f3f8RJLzyChk5BsjLqLeuovQBC7jNJK4kdp GO0qY4tITUPvSqu5/2+IYrafs2PFH2o4/MtsvMG0CB13MeB3LWjNaPJWj3RXL9yD iWIcIJBsAHJfrOfqUWS2sJpkFoGxfUe2T6zyg9VXsqyobLzPwrsjesqoeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsP6zKXMxoh92RWwz8H4ivIHUDMMB8GA1UdIwQY MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt ZWViZGNiZDNhZWU4LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4 LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDUhtGIC U4PGwZfqsH8cfKy7fWNVqROC5Q+fwm2N/SaRyJi5nHcx478qDzEbc9Oz+plUAa5o GpWBkIMuDAJk9bunG2bW7fI6WlutCjJwL/wiug5cAar76tqs0fxzXUnqIkIvZ7po Hl5srQoZrqBsl8VGhSPzVly9SF3UGr5hoEo5P+F2MvrEARxzOYFvhpDHvwspd1eA ObwjdD4wzEuTRy5VeIJxCgTazSK4czOun/lQIjmzc4PuFBAbmbsazjcdkAdJDzKv vFUs54tC8mpSZ4SHrb3KG4DCIEr3mogKr+0TJmfXCZm/PJA5RNMKS00fxcZnYQbZ C/sWfhl+es/PRQ== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:04 2025 by rpki-client