This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json) Hash identifier: 13VuW2/CK78PZhPZ4au4+UsWU0yR5n322L5Uq8iNlmU= Subject key identifier: BD:4D:CB:D2:DE:E6:A1:57:DC:AE:08:A7:F0:B3:B5:59:FF:1A:01:43 Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb Certificate serial: 019B30E883EDFE29DA46A3E610B2F28E8F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 10:01:42 +0000 Manifest this update: Thu 18 Dec 2025 10:01:42 +0000 Manifest next update: Fri 19 Dec 2025 10:01:42 +0000 Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: QfNPWb5eCh/jVoJPF1aegFWIdYYaR7yiJuRY8WY92so=) 2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=) 3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:83:ed:fe:29:da:46:a3:e6:10:b2:f2:8e:8f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb Validity Not Before: Dec 18 10:01:42 2025 GMT Not After : Dec 19 10:01:42 2025 GMT Subject: CN=bd4dcbd2dee6a157dcae08a7f0b3b559ff1a0143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:ed:9e:13:7d:34:b8:23:6f:74:e7:46:b0: 4a:ab:50:34:5b:0d:4e:ee:45:fa:a2:b4:ed:bb:53: f5:73:09:2c:a0:88:2b:09:f3:d5:0f:a3:cb:e3:2d: 56:e0:18:41:b7:a9:49:1a:98:01:fe:ac:b5:03:21: b4:ee:25:ea:62:70:52:ef:65:c9:9b:54:aa:8a:c5: 83:21:7f:4d:2b:42:6a:05:c0:df:ee:bf:37:56:a4: 1e:f0:d9:8b:e1:8e:7a:56:6f:a9:c4:76:56:b2:72: 37:f2:d7:0f:25:92:cd:5f:8a:d8:ff:c5:a6:37:c0: c6:79:ba:65:f0:30:07:6a:d0:e7:aa:5d:46:99:10: 40:32:ec:47:58:93:e2:3f:b3:75:84:d0:7d:e9:5f: 02:31:8b:53:1a:57:c3:b3:e3:21:11:a9:bf:a1:0e: d5:62:b3:1d:7d:a9:f4:93:4c:72:e4:e5:f2:da:6e: 42:f5:e1:3c:91:2b:20:6d:6a:7f:03:93:d3:d3:53: 69:86:70:be:f7:86:3c:df:3b:32:62:a0:92:6b:7b: 9f:82:65:bd:8d:64:d6:07:59:ac:8f:39:15:39:9d: 77:9d:94:0e:ac:c6:c6:e2:7f:e6:ac:ab:7d:80:5c: db:52:2a:5f:34:9e:51:da:0e:9d:18:4f:b7:0f:49: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4D:CB:D2:DE:E6:A1:57:DC:AE:08:A7:F0:B3:B5:59:FF:1A:01:43 X509v3 Authority Key Identifier: keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b1:e6:7b:13:39:69:63:b2:f9:a6:ae:a4:52:f9:10:36:52: 82:59:fe:17:f3:25:4b:c9:84:35:f4:57:5a:0f:c7:ed:82:b2: 27:26:9d:48:3b:0d:61:98:0c:1f:71:79:38:04:1e:6b:c1:86: 40:38:b2:ee:46:6e:bf:9c:e9:82:1b:7b:91:28:9b:66:e5:c8: cf:d8:01:d9:80:03:9f:80:4b:c6:7a:47:6b:8d:d0:d0:a3:f4: c8:3d:35:81:3a:7f:e3:31:06:88:64:3c:03:1a:5b:4b:03:60: 63:ab:25:aa:cd:e2:56:05:1e:53:4e:7e:3f:d8:a3:aa:ac:1b: 80:8c:41:79:d4:b0:94:0c:f0:bc:21:44:bd:11:d9:8c:70:a0: 11:bd:98:6a:64:48:11:89:d7:33:4f:64:2c:76:72:50:ec:dd: 77:52:f0:1a:a6:90:1a:71:1b:ea:e4:13:aa:af:ee:6e:77:3b: 02:9f:54:cd:2b:c0:69:a4:7e:d5:8f:10:92:11:26:00:a6:a8: 58:50:6c:52:4a:99:f6:14:bd:e7:6a:e4:39:84:b4:61:61:f2: af:37:3d:7b:a4:40:79:93:a0:f0:ce:45:f5:ad:00:19:fc:a0: 49:a4:b1:b3:f3:58:53:2c:f6:01:85:47:e1:c6:0f:78:10:64: b2:69:08:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6IPt/inaRqPmELLyjo+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzIzNTA2NzE4ZGZjZjJhOGJkMTc2ZDRlYTI0ZTI3NTMy MmZjZmIwHhcNMjUxMjE4MTAwMTQyWhcNMjUxMjE5MTAwMTQyWjAzMTEwLwYDVQQD EyhiZDRkY2JkMmRlZTZhMTU3ZGNhZTA4YTdmMGIzYjU1OWZmMWEwMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLtnhN9NLgjb3TnRrBKq1A0Ww1O 7kX6orTtu1P1cwksoIgrCfPVD6PL4y1W4BhBt6lJGpgB/qy1AyG07iXqYnBS72XJ m1SqisWDIX9NK0JqBcDf7r83VqQe8NmL4Y56Vm+pxHZWsnI38tcPJZLNX4rY/8Wm N8DGebpl8DAHatDnql1GmRBAMuxHWJPiP7N1hNB96V8CMYtTGlfDs+MhEam/oQ7V YrMdfan0k0xy5OXy2m5C9eE8kSsgbWp/A5PT01NphnC+94Y83zsyYqCSa3ufgmW9 jWTWB1msjzkVOZ13nZQOrMbG4n/mrKt9gFzbUipfNJ5R2g6dGE+3D0k7/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1Ny9Le5qFX3K4Ip/CztVn/GgFDMB8GA1UdIwQY MBaAFAFyNQZxjfzyqL0XbU6iTidTIvz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEt MDUzNzNiYTk0ODNkLzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi84M2FhOGMtMDU4MS00NGQ4LWE1YzEtMDUzNzNiYTk0ODNk LzEvQVhJMUJuR05fUEtvdlJkdFRxSk9KMU1pX1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabHmexM5 aWOy+aaupFL5EDZSgln+F/MlS8mENfRXWg/H7YKyJyadSDsNYZgMH3F5OAQea8GG QDiy7kZuv5zpght7kSibZuXIz9gB2YADn4BLxnpHa43Q0KP0yD01gTp/4zEGiGQ8 AxpbSwNgY6slqs3iVgUeU05+P9ijqqwbgIxBedSwlAzwvCFEvRHZjHCgEb2YamRI EYnXM09kLHZyUOzdd1LwGqaQGnEb6uQTqq/ubnc7Ap9UzSvAaaR+1Y8QkhEmAKao WFBsUkqZ9hS952rkOYS0YWHyrzc9e6RAeZOg8M5F9a0AGfygSaSxs/NYUyz2AYVH 4cYPeBBksmkICA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:06:06 2025 by rpki-client