This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json) Hash identifier: P+CduulT5XUT7i9Qti0jQyefDuayJwvobcaNb54uIgg= Subject key identifier: F7:E3:01:62:86:4D:CD:1F:43:2E:00:1B:E9:10:F3:14:9B:1D:4C:30 Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6 Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6 Certificate serial: 019B5A1AC53D1C576054980EFA7145130AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft Manifest number: 158C Signing time: Fri 26 Dec 2025 10:01:02 +0000 Manifest this update: Fri 26 Dec 2025 10:01:02 +0000 Manifest next update: Sat 27 Dec 2025 10:01:02 +0000 Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=) 2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: W08pa+8papMzjWYT12poHfshvGxoBjnNqerAqvn4Sis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c5:3d:1c:57:60:54:98:0e:fa:71:45:13:0a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6 Validity Not Before: Dec 26 10:01:02 2025 GMT Not After : Dec 27 10:01:02 2025 GMT Subject: CN=f7e30162864dcd1f432e001be910f3149b1d4c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:69:e4:0b:39:eb:e4:ca:13:96:63:5d:e0: b0:20:64:21:37:93:70:ec:07:eb:48:56:2d:e7:2a: 22:26:5a:50:95:56:6e:ea:34:43:a6:ba:6f:2a:f9: c5:48:c1:61:29:5f:fe:d0:bf:53:5e:dc:c5:4c:a2: 45:1b:2f:06:c1:ef:bd:82:21:83:68:2f:4a:6a:f0: 3d:0d:23:19:a0:f4:71:c5:e3:e5:88:c8:96:38:a3: 6e:ac:06:36:b7:af:2f:6c:f9:8d:7a:57:a4:a7:79: 2e:68:e6:79:09:44:3b:a7:a0:54:8e:2d:a8:00:1a: fb:13:59:de:ed:c5:33:48:02:ae:99:36:b1:27:1a: 12:62:f8:dd:b2:04:ca:c9:a6:45:60:f6:db:1e:83: ed:6f:3e:e0:01:a1:40:16:9c:9f:23:72:5c:5a:77: 82:63:e3:f5:91:05:80:f8:b5:db:d6:1f:a7:c5:2f: 7d:04:98:e5:72:79:5f:3d:5a:2c:ca:50:5c:d4:6b: 8b:e4:ef:65:51:5b:43:d1:24:2d:75:e5:ea:87:66: 8c:80:43:fa:17:00:46:a1:cc:15:3e:67:5f:f5:28: 51:6b:74:eb:db:2f:1d:08:25:7c:28:3b:d3:47:6e: 2c:49:82:23:dd:50:f1:d6:b8:3b:43:f7:94:43:22: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:01:62:86:4D:CD:1F:43:2E:00:1B:E9:10:F3:14:9B:1D:4C:30 X509v3 Authority Key Identifier: keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:aa:33:70:62:86:78:2d:ab:ed:a5:ff:2a:ad:30:f3:fa:b5: 94:9c:91:b5:86:10:3e:6a:43:9a:0d:51:85:68:39:13:eb:08: 23:55:a2:fc:b2:60:00:d2:e5:05:e9:01:43:90:e0:56:39:43: db:fb:9e:b7:99:25:34:24:67:62:4c:f0:b1:43:f5:c9:d7:a3: 19:ba:19:f8:89:50:75:e3:e8:0d:94:16:80:10:45:e1:31:c3: e2:76:29:96:b4:46:5e:35:14:35:91:a8:84:13:83:8d:0b:cb: 17:c8:27:7a:2d:b7:27:f4:e8:4d:ed:73:3f:bc:17:25:35:f6: 00:84:9e:34:f4:06:8e:d3:3f:79:34:07:01:59:6e:ea:a3:34: bb:8a:9c:5c:a7:4a:9d:20:81:fc:d1:49:2d:fc:c8:2e:54:43: c9:ed:a9:08:3f:3b:4e:8d:e3:b0:f1:c6:e5:19:36:fd:55:40: 27:7c:b4:30:6d:07:e2:7b:71:66:fa:b3:50:58:fc:d1:ea:5c: b3:7c:3e:3f:b9:a3:f3:78:8d:90:48:98:2c:c0:d8:62:78:05: 54:2b:26:12:86:54:79:ae:c0:23:49:1f:9c:c8:49:4a:55:02: 4a:1c:c4:82:32:c8:12:75:fc:a0:aa:aa:a1:b6:68:cd:d3:ce: b9:97:db:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsU9HFdgVJgO+nFFEwr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh YjZiZDYwHhcNMjUxMjI2MTAwMTAyWhcNMjUxMjI3MTAwMTAyWjAzMTEwLwYDVQQD EyhmN2UzMDE2Mjg2NGRjZDFmNDMyZTAwMWJlOTEwZjMxNDliMWQ0YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttBp5As56+TKE5ZjXeCwIGQhN5Nw 7AfrSFYt5yoiJlpQlVZu6jRDprpvKvnFSMFhKV/+0L9TXtzFTKJFGy8Gwe+9giGD aC9KavA9DSMZoPRxxePliMiWOKNurAY2t68vbPmNelekp3kuaOZ5CUQ7p6BUji2o ABr7E1ne7cUzSAKumTaxJxoSYvjdsgTKyaZFYPbbHoPtbz7gAaFAFpyfI3JcWneC Y+P1kQWA+LXb1h+nxS99BJjlcnlfPVosylBc1GuL5O9lUVtD0SQtdeXqh2aMgEP6 FwBGocwVPmdf9ShRa3Tr2y8dCCV8KDvTR24sSYIj3VDx1rg7Q/eUQyI3TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfjAWKGTc0fQy4AG+kQ8xSbHUwwMB8GA1UdIwQY MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKozcGKG eC2r7aX/Kq0w8/q1lJyRtYYQPmpDmg1RhWg5E+sII1Wi/LJgANLlBekBQ5DgVjlD 2/uet5klNCRnYkzwsUP1ydejGboZ+IlQdePoDZQWgBBF4THD4nYplrRGXjUUNZGo hBODjQvLF8gnei23J/ToTe1zP7wXJTX2AISeNPQGjtM/eTQHAVlu6qM0u4qcXKdK nSCB/NFJLfzILlRDye2pCD87To3jsPHG5Rk2/VVAJ3y0MG0H4ntxZvqzUFj80epc s3w+P7mj83iNkEiYLMDYYngFVCsmEoZUea7AI0kfnMhJSlUCShzEgjLIEnX8oKqq obZozdPOuZfbog== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:56 2025 by rpki-client