This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json) Hash identifier: Tt+DT6CAoBowXwTw3cRUC+nfzkxOhT7mZ9SDG/zEy+U= Subject key identifier: 22:ED:EA:45:C9:C0:90:37:2F:54:2A:7D:6C:54:81:1F:F5:72:1A:7C Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b Certificate serial: 019C4322CBD243FAF5AC0097B7526AAE2A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: O/9nFFkAdP0nu1s8AptAPFpnlCzrYsAKGKBD52HgZsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:cb:d2:43:fa:f5:ac:00:97:b7:52:6a:ae:2a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=22edea45c9c090372f542a7d6c54811ff5721a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:5d:e1:b7:46:2c:d1:d1:04:91:f8:6a:b7: dc:46:9d:f1:e0:28:5b:c6:5c:f4:6c:ad:9f:ac:4e: bc:c4:26:da:c7:15:e2:ae:e2:31:93:cd:89:14:57: 7c:75:33:a5:25:3c:93:86:01:b3:ae:df:b5:94:2c: a1:a0:48:b0:b2:a7:67:77:76:19:eb:08:72:c1:74: 9b:23:07:9f:7d:bc:a0:61:89:3d:25:93:64:67:a8: d6:88:81:4e:84:0a:a4:df:91:56:d2:c4:d4:65:e8: c7:e1:61:a7:d7:73:a6:99:bc:d3:fb:54:08:a5:f2: 53:9f:00:88:57:7c:f1:16:29:bc:b5:ca:61:85:a1: cd:66:fd:eb:4f:7a:52:6d:75:08:ef:4c:61:95:20: 0c:f3:97:66:e9:4a:12:f9:21:4f:63:fe:58:0b:a7: 62:49:71:95:d8:9a:b3:7a:5c:fb:1e:b2:6b:0e:af: b1:0f:9c:7b:6e:69:33:83:a5:61:b7:e7:b6:2b:1f: 9c:ce:16:49:55:91:ea:e3:f7:2a:1f:b5:53:60:e1: 93:af:66:01:d6:ad:f8:3f:ec:82:4f:9f:9d:5c:f6: 03:85:c2:66:6e:92:c4:b1:01:f2:1b:8d:85:5c:0b: dd:95:9e:47:bd:58:b4:53:7a:90:c0:73:79:9c:05: cb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:ED:EA:45:C9:C0:90:37:2F:54:2A:7D:6C:54:81:1F:F5:72:1A:7C X509v3 Authority Key Identifier: keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:80:4f:12:d7:a1:cf:65:9d:33:18:bd:c0:dc:4e:1a:7d:78: 88:09:b1:0e:32:99:32:4c:70:e9:c1:8b:1b:30:11:22:67:dd: fc:22:88:d2:ae:88:7e:2c:f5:22:42:14:65:e4:6f:24:2d:06: 4f:23:10:d3:a6:c2:68:f1:94:f7:6e:5a:d9:1b:76:a5:ee:52: 16:a7:fd:30:13:27:aa:93:23:3b:13:af:09:73:db:c4:f9:d1: ae:82:b0:6c:b8:f0:a1:6e:10:2f:6a:30:be:d4:a7:93:42:43: aa:39:50:67:6d:88:b3:18:09:78:93:70:f6:9b:98:be:c1:06: f3:91:82:d6:e6:b5:c7:f2:6b:6c:48:d5:f6:72:69:21:8e:e0: f4:d5:84:2b:2f:6f:58:d5:81:ae:ea:89:64:db:43:30:b4:50: ed:4e:69:1a:f1:a1:5e:15:c8:c3:ec:03:fd:82:44:81:df:bd: ac:5d:c4:20:7f:1d:af:20:f0:68:bb:8d:b5:55:0a:c0:f6:1f: 31:c9:c0:a7:15:fc:a1:7c:e0:68:b2:c4:91:29:11:4d:b3:19: 6b:fd:b8:98:f5:09:86:fb:07:90:a5:8a:bc:ef:e9:f4:ed:92: 07:c1:4a:db:65:fb:74:a7:01:45:8b:6a:29:49:0c:09:ec:c9: 6c:09:d6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsvSQ/r1rACXt1JqripNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTZiYzExMGJhYTJhYzlkMTYyMGMyNTA3MTc1NzdkZTY0 YTkyNGIwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD EygyMmVkZWE0NWM5YzA5MDM3MmY1NDJhN2Q2YzU0ODExZmY1NzIxYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT1d4bdGLNHRBJH4arfcRp3x4Chb xlz0bK2frE68xCbaxxXiruIxk82JFFd8dTOlJTyThgGzrt+1lCyhoEiwsqdnd3YZ 6whywXSbIweffbygYYk9JZNkZ6jWiIFOhAqk35FW0sTUZejH4WGn13OmmbzT+1QI pfJTnwCIV3zxFim8tcphhaHNZv3rT3pSbXUI70xhlSAM85dm6UoS+SFPY/5YC6di SXGV2Jqzelz7HrJrDq+xD5x7bmkzg6Vht+e2Kx+czhZJVZHq4/cqH7VTYOGTr2YB 1q34P+yCT5+dXPYDhcJmbpLEsQHyG42FXAvdlZ5HvVi0U3qQwHN5nAXLxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLt6kXJwJA3L1QqfWxUgR/1chp8MB8GA1UdIwQY MBaAFGsWvBELqirJ0WIMJQcXV33mSpJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2Yt NTgzYzk4YTA2MzAxLzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2YtNTgzYzk4YTA2MzAx LzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoBPEteh z2WdMxi9wNxOGn14iAmxDjKZMkxw6cGLGzARImfd/CKI0q6Ifiz1IkIUZeRvJC0G TyMQ06bCaPGU925a2Rt2pe5SFqf9MBMnqpMjOxOvCXPbxPnRroKwbLjwoW4QL2ow vtSnk0JDqjlQZ22IsxgJeJNw9puYvsEG85GC1ua1x/JrbEjV9nJpIY7g9NWEKy9v WNWBruqJZNtDMLRQ7U5pGvGhXhXIw+wD/YJEgd+9rF3EIH8dryDwaLuNtVUKwPYf McnApxX8oXzgaLLEkSkRTbMZa/24mPUJhvsHkKWKvO/p9O2SB8FK22X7dKcBRYtq KUkMCezJbAnW3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:22 2026 by rpki-client