This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft File: aXE7HKgNhb8WGCF_qS29R6NcW44.mft (raw, json) Hash identifier: 4E1X4Zb5FMdoXozL574EIJGyjZNGsbvvi9bitwrs6Kc= Subject key identifier: AC:98:EE:C0:51:B9:71:38:64:E7:F0:1D:BB:8F:FC:61:57:34:40:C0 Authority key identifier: 69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E Certificate issuer: /CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e Certificate serial: 019B5976F82536FBDFF79671911FC8929F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft Manifest number: 0250 Signing time: Fri 26 Dec 2025 07:02:07 +0000 Manifest this update: Fri 26 Dec 2025 07:02:07 +0000 Manifest next update: Sat 27 Dec 2025 07:02:07 +0000 Files and hashes: 1: aXE7HKgNhb8WGCF_qS29R6NcW44.crl (hash: QzF9JNfxguqo/kEz9L2fvS1O9gS+TvnEOz0TMAbvIik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:f8:25:36:fb:df:f7:96:71:91:1f:c8:92:9f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69713b1ca80d85bf1618217fa92dbd47a35c5b8e Validity Not Before: Dec 26 07:02:07 2025 GMT Not After : Dec 27 07:02:07 2025 GMT Subject: CN=ac98eec051b9713864e7f01dbb8ffc61573440c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:3a:3e:eb:ca:11:75:2b:8a:cf:60:91:53: e7:1c:69:be:f2:72:c2:5d:84:23:98:24:24:01:42: 47:29:29:23:11:5e:fd:db:86:94:d6:64:6c:cd:ee: 01:12:20:1f:d5:99:ed:da:56:af:fb:b5:70:30:49: 25:f4:68:7d:1c:1c:a6:17:00:12:ff:4f:a8:d3:aa: 04:fa:39:91:ee:e7:a1:a2:72:dc:f1:a9:80:a9:22: 5d:e9:2f:0d:1c:53:93:cd:1b:6f:2f:52:f6:e9:d6: 2d:2c:6f:5d:7b:2a:38:a9:b1:f8:eb:e6:10:80:fe: 28:39:31:a3:c7:84:68:73:3b:9b:45:5c:e5:8a:83: 54:a3:1e:27:5e:a3:09:40:96:6e:33:65:31:86:c9: 78:a9:42:8a:58:de:6c:e8:86:46:8f:37:a0:84:c8: c5:34:92:e6:03:73:3e:1b:60:0e:e5:4d:d1:ef:12: d5:49:f8:fc:ee:21:6a:cf:81:3d:0a:db:e0:22:cc: ff:3d:76:c8:fa:b5:ab:5b:e4:c1:de:07:f1:b7:89: 66:c0:87:4a:db:1b:62:94:3f:ef:5b:1a:66:72:74: 23:ab:43:64:5e:0e:a8:ba:19:11:4e:cf:d7:48:53: ff:43:94:2b:8e:17:5e:8e:e7:82:81:7b:77:0a:89: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:EE:C0:51:B9:71:38:64:E7:F0:1D:BB:8F:FC:61:57:34:40:C0 X509v3 Authority Key Identifier: keyid:69:71:3B:1C:A8:0D:85:BF:16:18:21:7F:A9:2D:BD:47:A3:5C:5B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXE7HKgNhb8WGCF_qS29R6NcW44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/18c259-ba03-43a8-bf2c-4936f02fc760/1/aXE7HKgNhb8WGCF_qS29R6NcW44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3f:c1:a3:8e:74:6d:e3:53:8a:6b:9b:67:a4:30:ca:e0:c4: c2:9e:ee:57:35:d0:ec:42:f9:8f:b7:49:f7:5e:ee:85:e3:9b: b7:e4:d8:aa:df:00:d7:93:27:ec:42:35:a7:0d:1b:35:93:fc: ff:a6:32:94:f7:e9:3c:41:93:5e:7e:ae:ca:ff:27:4b:a5:ac: d4:1a:db:dd:75:85:f0:6c:ed:a0:b5:2e:3a:d1:ba:73:68:ac: d3:de:d0:a1:10:17:8f:0b:78:7f:7a:85:4b:5e:d0:0b:19:7c: 09:ba:b0:86:56:c8:f0:14:12:ee:a2:dd:4f:2d:6f:25:e8:6b: 78:2a:09:59:cc:2d:7d:90:a8:12:46:42:47:b2:0e:14:2d:53: 38:af:00:4a:dc:0b:38:1a:15:7b:7e:9b:8e:9b:1f:2d:c5:bf: be:42:bb:7e:b2:9a:0f:c2:c5:52:de:62:7e:af:f5:e0:d3:a1: db:c8:9d:49:ce:eb:8e:b3:a4:c2:b3:d4:d3:20:6b:c8:71:d2: 56:4c:9e:5a:a1:a2:62:4a:5f:6a:1a:9c:4d:d5:84:cc:ec:2f: f2:37:60:cd:63:5c:0f:c9:70:00:b2:4e:b2:bf:61:d6:bf:04: ec:f4:2d:10:ff:7a:65:f5:27:0d:ef:1f:18:c0:8f:a5:4f:f4: 05:3b:29:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvglNvvf95ZxkR/Ikp9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzEzYjFjYTgwZDg1YmYxNjE4MjE3ZmE5MmRiZDQ3YTM1 YzViOGUwHhcNMjUxMjI2MDcwMjA3WhcNMjUxMjI3MDcwMjA3WjAzMTEwLwYDVQQD EyhhYzk4ZWVjMDUxYjk3MTM4NjRlN2YwMWRiYjhmZmM2MTU3MzQ0MGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm246PuvKEXUris9gkVPnHGm+8nLC XYQjmCQkAUJHKSkjEV7924aU1mRsze4BEiAf1Znt2lav+7VwMEkl9Gh9HBymFwAS /0+o06oE+jmR7uehonLc8amAqSJd6S8NHFOTzRtvL1L26dYtLG9deyo4qbH46+YQ gP4oOTGjx4RoczubRVzlioNUox4nXqMJQJZuM2Uxhsl4qUKKWN5s6IZGjzeghMjF NJLmA3M+G2AO5U3R7xLVSfj87iFqz4E9CtvgIsz/PXbI+rWrW+TB3gfxt4lmwIdK 2xtilD/vWxpmcnQjq0NkXg6ouhkRTs/XSFP/Q5QrjhdejueCgXt3ComggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyY7sBRuXE4ZOfwHbuP/GFXNEDAMB8GA1UdIwQY MBaAFGlxOxyoDYW/Fhghf6ktvUejXFuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMt NDkzNmYwMmZjNzYwLzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xOGMyNTktYmEwMy00M2E4LWJmMmMtNDkzNmYwMmZjNzYw LzEvYVhFN0hLZ05oYjhXR0NGX3FTMjlSNk5jVzQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj/Bo450 beNTimubZ6QwyuDEwp7uVzXQ7EL5j7dJ917uheObt+TYqt8A15Mn7EI1pw0bNZP8 /6YylPfpPEGTXn6uyv8nS6Ws1Brb3XWF8GztoLUuOtG6c2is097QoRAXjwt4f3qF S17QCxl8CbqwhlbI8BQS7qLdTy1vJehreCoJWcwtfZCoEkZCR7IOFC1TOK8AStwL OBoVe36bjpsfLcW/vkK7frKaD8LFUt5ifq/14NOh28idSc7rjrOkwrPU0yBryHHS VkyeWqGiYkpfahqcTdWEzOwv8jdgzWNcD8lwALJOsr9h1r8E7PQtEP96ZfUnDe8f GMCPpU/0BTspOw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client