This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json) Hash identifier: Az+xRf50pm0c0PGx5keCdBXV3q1ql8HlqMb5gZmiGZw= Subject key identifier: B6:CE:E3:4E:89:68:9E:B8:FA:AE:6B:56:4D:6C:8C:B9:9E:03:6F:81 Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Certificate serial: 019B5A51FAE069B359C18F7CC9225D8B9B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft Manifest number: 1098 Signing time: Fri 26 Dec 2025 11:01:20 +0000 Manifest this update: Fri 26 Dec 2025 11:01:20 +0000 Manifest next update: Sat 27 Dec 2025 11:01:20 +0000 Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=) 2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: mvanis0YVpKnkoW2+EP1bSUWmPbvpBfswjSb7FTUDhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:fa:e0:69:b3:59:c1:8f:7c:c9:22:5d:8b:9b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec Validity Not Before: Dec 26 11:01:20 2025 GMT Not After : Dec 27 11:01:20 2025 GMT Subject: CN=b6cee34e89689eb8faae6b564d6c8cb99e036f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:d5:ea:2d:2f:01:89:44:f1:4f:87:10:50: 1c:3e:6b:68:32:0a:43:7e:f2:59:a6:e9:e7:49:3e: 34:3d:7e:7e:72:54:c4:09:dc:24:0c:b8:7d:3d:b8: f1:07:9e:6d:3e:76:68:7b:8d:d9:d7:01:60:a7:31: ae:dd:61:a3:09:0c:2a:61:f1:46:6b:d5:71:9d:a2: fb:16:02:10:8d:64:2b:ca:f1:3c:77:d8:4d:31:19: ed:0d:55:aa:6c:07:c0:3b:3c:3d:13:86:8c:13:84: 64:5b:5d:50:62:85:42:88:4c:14:89:4e:1d:44:69: 9c:bf:87:e8:97:e8:c9:c3:f9:a5:83:36:03:92:26: 67:4a:0d:10:76:ec:7c:b2:af:92:40:ff:1d:d3:1f: ed:e6:d3:af:6f:a9:32:19:bf:f9:19:df:11:67:53: 6d:83:86:b6:f0:3f:98:86:58:70:74:91:fd:d2:80: 5a:fc:4a:09:8e:91:8e:37:6c:09:d4:72:33:29:a2: 8b:6d:02:2d:fc:cc:f3:5c:cc:d3:76:63:ca:6a:ef: 51:31:8a:0e:65:00:ce:5a:b3:a1:63:c2:33:eb:3b: cf:ef:88:fa:61:13:7b:fe:88:33:a8:d0:50:aa:ff: 5e:0d:f4:cc:05:d8:d1:d9:95:f8:78:06:40:45:55: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CE:E3:4E:89:68:9E:B8:FA:AE:6B:56:4D:6C:8C:B9:9E:03:6F:81 X509v3 Authority Key Identifier: keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e1:e9:a6:8e:43:5f:81:be:00:4a:70:4b:8b:e5:ef:27:4d: e3:a4:b1:12:4d:5a:82:90:a4:ce:b8:86:32:7a:67:08:c4:cf: d2:ef:28:b3:81:e0:3f:90:36:2e:07:63:d9:f4:a3:e5:0b:41: 54:8e:62:4a:6c:5d:c6:3a:0c:5c:38:0a:9a:1f:74:18:34:90: 32:e1:53:7b:e6:3f:3b:e5:ea:ca:b9:0d:f7:bc:20:e9:00:fc: b8:ef:19:81:6b:5e:26:ce:4e:e2:bd:13:42:d0:4d:9b:7d:c4: 3c:6b:de:05:f6:d2:35:88:81:e5:f4:3d:07:1f:3b:32:82:1c: c8:b7:41:d6:e6:cb:53:1a:74:41:4e:94:d1:74:4d:ce:4d:f5: 85:75:25:50:5f:d8:48:d8:6d:31:2b:c7:8e:7f:78:a3:1e:b6: 6d:e8:f6:10:30:8c:4a:39:a2:43:0d:80:f3:6d:ba:63:18:0b: 3e:c4:93:9b:d1:63:f1:fb:d8:bf:62:9e:8d:bb:0e:8c:79:56: b4:28:fd:dc:04:8d:35:e0:50:9d:f3:21:97:cf:8b:f4:67:6b: 9a:b9:1a:2c:11:4a:d5:59:d0:96:d8:bc:34:18:7c:bc:c7:55: f0:74:c8:62:df:c8:c0:e8:fb:72:e6:66:f4:5b:20:fc:a5:ef: 95:c3:13:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUfrgabNZwY98ySJdi5tQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMWExNTdlMjBhZGNhM2I0NDA2N2JhOGQ4ZGNhYmFlNjk4 YThiZWMwHhcNMjUxMjI2MTEwMTIwWhcNMjUxMjI3MTEwMTIwWjAzMTEwLwYDVQQD EyhiNmNlZTM0ZTg5Njg5ZWI4ZmFhZTZiNTY0ZDZjOGNiOTllMDM2ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDDV6i0vAYlE8U+HEFAcPmtoMgpD fvJZpunnST40PX5+clTECdwkDLh9PbjxB55tPnZoe43Z1wFgpzGu3WGjCQwqYfFG a9VxnaL7FgIQjWQryvE8d9hNMRntDVWqbAfAOzw9E4aME4RkW11QYoVCiEwUiU4d RGmcv4fol+jJw/mlgzYDkiZnSg0Qdux8sq+SQP8d0x/t5tOvb6kyGb/5Gd8RZ1Nt g4a28D+YhlhwdJH90oBa/EoJjpGON2wJ1HIzKaKLbQIt/MzzXMzTdmPKau9RMYoO ZQDOWrOhY8Iz6zvP74j6YRN7/ogzqNBQqv9eDfTMBdjR2ZX4eAZARVVlvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbO406JaJ64+q5rVk1sjLmeA2+BMB8GA1UdIwQY MBaAFGsaFX4grco7RAZ7qNjcq65piovsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEt MzZkYzI4MDBmZGVkLzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84NzAzODMtZGY5YS00NzljLThlZTEtMzZkYzI4MDBmZGVk LzEvYXhvVmZpQ3R5anRFQm51bzJOeXJybW1LaS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+Hppo5D X4G+AEpwS4vl7ydN46SxEk1agpCkzriGMnpnCMTP0u8os4HgP5A2Lgdj2fSj5QtB VI5iSmxdxjoMXDgKmh90GDSQMuFTe+Y/O+XqyrkN97wg6QD8uO8ZgWteJs5O4r0T QtBNm33EPGveBfbSNYiB5fQ9Bx87MoIcyLdB1ubLUxp0QU6U0XRNzk31hXUlUF/Y SNhtMSvHjn94ox62bej2EDCMSjmiQw2A8226YxgLPsSTm9Fj8fvYv2KejbsOjHlW tCj93ASNNeBQnfMhl8+L9GdrmrkaLBFK1VnQlti8NBh8vMdV8HTIYt/IwOj7cuZm 9Fsg/KXvlcMT7A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:59 2025 by rpki-client