This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json) Hash identifier: eBjBJk+Rif4mFxx9zVq37yGWHDB0+fD5Dmwljt42yuE= Subject key identifier: 1C:16:AD:35:4E:AF:17:55:52:DE:EE:F2:40:DF:56:10:27:DD:C5:C0 Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c Certificate serial: 019B119419715AF8DA56FA8721E59A039EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft Manifest number: 178D Signing time: Fri 12 Dec 2025 08:01:17 +0000 Manifest this update: Fri 12 Dec 2025 08:01:17 +0000 Manifest next update: Sat 13 Dec 2025 08:01:17 +0000 Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=) 2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: PrqOEKk+PeDUFIbSeroxok943+3q7KCOE5e745TzS4w=) 3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=) 4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=) 5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=) 6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=) 7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=) 8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:94:19:71:5a:f8:da:56:fa:87:21:e5:9a:03:9e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c Validity Not Before: Dec 12 08:01:17 2025 GMT Not After : Dec 13 08:01:17 2025 GMT Subject: CN=1c16ad354eaf175552deeef240df561027ddc5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:f2:38:4c:91:ac:ed:02:11:a1:44:a5:8b: 38:dd:dc:d7:c2:dd:8d:82:d8:c9:c0:77:62:37:15: 35:0f:bf:ba:6c:9c:87:21:16:70:06:67:85:69:b7: 26:fb:3b:c9:54:f1:21:5f:9a:4b:f0:19:26:b7:1c: 65:7e:49:a4:f3:21:34:6f:8b:09:dc:dd:09:95:a5: 9c:e9:7c:61:ba:52:77:14:f1:4b:ff:12:e8:f3:db: 2c:3f:4a:3d:37:82:00:ce:2b:47:10:53:e5:ec:a4: 40:55:5b:29:70:66:52:e3:eb:da:43:93:8e:b3:51: 30:e6:27:ed:82:10:18:98:4b:41:1f:7a:c7:ea:f3: 05:24:44:c0:04:ce:6a:a2:7e:86:87:85:b3:8b:76: c0:98:71:ad:5f:54:eb:07:3c:ad:dd:d6:ec:2d:76: da:2b:ae:13:57:fd:a1:c2:22:98:1d:a4:ed:67:81: 34:b4:ca:37:89:17:5d:a0:55:67:d0:03:5b:3f:0f: 19:31:64:c4:7c:4e:be:28:fb:b3:a4:2c:55:f1:ec: da:08:ad:69:bf:46:b2:15:41:2f:ca:7b:c4:e2:36: 8c:7a:d4:4a:7d:cf:32:6d:25:8f:03:e5:34:8f:c5: fe:1f:62:64:1d:8f:b2:57:1f:c5:2b:c5:fc:28:9d: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:16:AD:35:4E:AF:17:55:52:DE:EE:F2:40:DF:56:10:27:DD:C5:C0 X509v3 Authority Key Identifier: keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a7:62:3e:0f:7e:00:5f:33:90:7b:f3:73:d2:76:79:14:92: 29:52:1f:c8:fc:46:96:d7:3b:de:8c:34:54:ae:cc:da:3e:e9: 66:08:ce:fa:0e:84:e9:0f:d0:35:a7:c5:be:9b:2f:d9:34:ea: 07:70:c4:f3:92:9c:13:4f:a9:b4:ac:51:be:b3:63:ab:ef:55: 9f:9f:8b:3b:7c:ca:e0:3f:ad:aa:cb:f7:32:83:1e:3e:97:f1: cd:58:8c:6d:80:48:66:05:a1:64:04:56:ee:98:10:dd:8b:b4: c5:69:2c:ef:29:56:be:b4:d5:c0:b4:a2:c0:70:94:17:4d:56: 34:27:f7:78:1b:18:7f:5a:4a:ad:99:af:ad:f6:8e:4c:7a:a1: c4:a8:f3:82:66:b2:07:a5:1b:d9:9b:77:b6:0d:ee:85:46:0f: 39:d4:a0:c3:a9:52:4a:cb:90:45:d6:97:a9:bd:6d:cf:66:3c: 12:5f:3f:86:ea:85:4f:fd:83:7d:e8:09:40:a4:dc:fe:17:75: 23:0c:ea:44:f0:fc:66:02:50:23:f1:a1:d9:7f:44:20:e8:3e: 40:d2:e6:b2:c2:a7:8f:10:72:63:73:49:4e:e0:1f:8c:e3:6d: 07:70:cb:20:75:a7:67:92:be:68:75:2e:66:ab:15:bf:67:4c: 85:96:3d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRlBlxWvjaVvqHIeWaA569MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1 NGFiMWMwHhcNMjUxMjEyMDgwMTE3WhcNMjUxMjEzMDgwMTE3WjAzMTEwLwYDVQQD EygxYzE2YWQzNTRlYWYxNzU1NTJkZWVlZjI0MGRmNTYxMDI3ZGRjNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4HyOEyRrO0CEaFEpYs43dzXwt2N gtjJwHdiNxU1D7+6bJyHIRZwBmeFabcm+zvJVPEhX5pL8Bkmtxxlfkmk8yE0b4sJ 3N0JlaWc6XxhulJ3FPFL/xLo89ssP0o9N4IAzitHEFPl7KRAVVspcGZS4+vaQ5OO s1Ew5iftghAYmEtBH3rH6vMFJETABM5qon6Gh4Wzi3bAmHGtX1TrBzyt3dbsLXba K64TV/2hwiKYHaTtZ4E0tMo3iRddoFVn0ANbPw8ZMWTEfE6+KPuzpCxV8ezaCK1p v0ayFUEvynvE4jaMetRKfc8ybSWPA+U0j8X+H2JkHY+yVx/FK8X8KJ3xKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwWrTVOrxdVUt7u8kDfVhAn3cXAMB8GA1UdIwQY MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt N2Q0YmIyMzgwNDg3LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3 LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUadiPg9+ AF8zkHvzc9J2eRSSKVIfyPxGltc73ow0VK7M2j7pZgjO+g6E6Q/QNafFvpsv2TTq B3DE85KcE0+ptKxRvrNjq+9Vn5+LO3zK4D+tqsv3MoMePpfxzViMbYBIZgWhZARW 7pgQ3Yu0xWks7ylWvrTVwLSiwHCUF01WNCf3eBsYf1pKrZmvrfaOTHqhxKjzgmay B6Ub2Zt3tg3uhUYPOdSgw6lSSsuQRdaXqb1tz2Y8El8/huqFT/2DfegJQKTc/hd1 IwzqRPD8ZgJQI/Gh2X9EIOg+QNLmssKnjxByY3NJTuAfjONtB3DLIHWnZ5K+aHUu ZqsVv2dMhZY9HQ== -----END CERTIFICATE-----Generated at Fri Dec 12 12:59:22 2025 by rpki-client