This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft File: RlxixrzUz7iTO8tqYc97Pa0vsRg.mft (raw, json) Hash identifier: s6oP7gEARyJa7X3xWrIgaEUnSNaKgfiVQfnCd8PkOYQ= Subject key identifier: 3B:C9:EA:32:30:9C:00:8E:A0:86:E9:B7:D9:74:C9:56:6C:AC:A0:04 Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18 Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118 Certificate serial: 019B41DB60B922FC3EF50DA340DBC3A13105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft Manifest number: 0E80 Signing time: Sun 21 Dec 2025 17:00:54 +0000 Manifest this update: Sun 21 Dec 2025 17:00:54 +0000 Manifest next update: Mon 22 Dec 2025 17:00:54 +0000 Files and hashes: 1: RlxixrzUz7iTO8tqYc97Pa0vsRg.crl (hash: 7gJPblEeVsYCkl3cbZT/HRq/J+wY8HHYMd5bPcJ0A4U=) 2: egGTR94gsD7sQAhG3KJ4vP9O6xI.roa (hash: U5VvDZubZFCpTXi93NWnw4hGkgnoWx3BFWnLjsNRwko=) 3: iZoqGkHfTscgkTRCL_nQYe_AAg4.roa (hash: gZNhRS+asEm9YEfETKtD9xHhALpBNhQLktZUScrlo6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:60:b9:22:fc:3e:f5:0d:a3:40:db:c3:a1:31:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118 Validity Not Before: Dec 21 17:00:54 2025 GMT Not After : Dec 22 17:00:54 2025 GMT Subject: CN=3bc9ea32309c008ea086e9b7d974c9566caca004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:d6:fd:ec:52:a5:5b:81:72:58:3c:e4:e5: 3a:93:0b:38:5c:e7:e2:73:70:4e:a7:44:ec:63:a5: 68:de:05:d6:e2:1a:a1:cb:c0:1e:8e:44:f3:d5:d6: 12:4d:5e:08:18:54:4f:c3:2f:d2:fd:d3:88:47:cb: 47:14:91:bb:a4:ed:10:8d:fd:fa:25:b4:9d:17:3c: ff:e9:8b:e0:c9:5c:c3:94:f7:9b:1c:7f:e1:07:1a: 39:e6:81:58:79:48:6f:61:19:74:64:8d:df:02:a5: b9:5c:7e:95:09:4b:48:2e:b8:b9:4e:a4:6a:96:e7: f2:b0:44:3f:2c:79:ce:78:26:be:45:a1:cd:e1:b3: 06:7a:f9:52:9c:7c:0a:d7:5b:8b:53:9b:04:ec:15: a2:da:58:b7:eb:f1:00:8c:6c:1f:59:e2:6a:44:af: d6:28:6c:9c:6e:79:c5:98:70:d6:24:2b:04:27:31: 44:f4:2d:2d:3d:7e:39:04:98:ab:80:29:fd:61:1f: f5:69:67:d0:0b:7f:42:71:69:4e:90:ed:c1:de:50: 49:f7:a4:30:c9:00:ed:57:1b:3b:82:83:db:69:98: c9:7b:84:5a:d6:a2:15:38:af:b6:fe:d6:10:5c:19: a8:31:9f:9a:87:ec:06:20:de:bf:48:19:70:5d:a6: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C9:EA:32:30:9C:00:8E:A0:86:E9:B7:D9:74:C9:56:6C:AC:A0:04 X509v3 Authority Key Identifier: keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:6f:80:f7:c5:21:9c:13:04:73:74:67:33:ba:3b:62:0e:ae: cd:b7:b6:cb:38:2a:a6:ae:7b:24:03:ff:ff:61:c1:35:e2:fd: 1f:7e:0e:38:69:6b:e8:ec:b2:27:35:2e:f8:48:9f:77:0a:a3: f7:f0:f2:ee:b2:8e:2a:d0:fa:30:79:e7:21:cf:1b:ea:64:56: 15:df:1e:ee:3a:31:47:a5:66:f4:62:19:e9:e3:c3:46:d1:4b: 2f:99:eb:55:d7:ab:99:b7:d9:5d:32:d5:4f:04:36:48:0b:62: 4a:94:ba:79:69:c4:60:c3:96:c0:95:ee:b6:d5:96:5c:93:79: f5:ed:5d:23:38:77:05:d0:69:35:44:39:5d:2e:62:88:0d:e1: 95:e1:92:18:41:14:94:4e:ab:19:f7:7a:fe:38:1e:09:8e:53: 9a:1b:bb:07:6f:a0:94:32:2c:dc:fa:1f:43:24:61:cc:ef:2f: 16:7e:c3:e1:f7:49:19:9c:75:6c:00:c4:e2:76:87:98:ed:9b: b2:bb:e6:bf:93:22:c1:ee:8c:c6:cd:9a:ab:a0:d7:0d:57:ad: 2c:6e:7e:de:0f:62:92:09:2c:62:87:f6:49:2e:ca:33:ac:bb: 99:b8:f0:96:57:e0:bb:ea:36:06:7d:5b:8f:66:8f:d8:42:de: f0:c5:46:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB22C5Ivw+9Q2jQNvDoTEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWM2MmM2YmNkNGNmYjg5MzNiY2I2YTYxY2Y3YjNkYWQy ZmIxMTgwHhcNMjUxMjIxMTcwMDU0WhcNMjUxMjIyMTcwMDU0WjAzMTEwLwYDVQQD EygzYmM5ZWEzMjMwOWMwMDhlYTA4NmU5YjdkOTc0Yzk1NjZjYWNhMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurnW/exSpVuBclg85OU6kws4XOfi c3BOp0TsY6Vo3gXW4hqhy8AejkTz1dYSTV4IGFRPwy/S/dOIR8tHFJG7pO0Qjf36 JbSdFzz/6YvgyVzDlPebHH/hBxo55oFYeUhvYRl0ZI3fAqW5XH6VCUtILri5TqRq lufysEQ/LHnOeCa+RaHN4bMGevlSnHwK11uLU5sE7BWi2li36/EAjGwfWeJqRK/W KGycbnnFmHDWJCsEJzFE9C0tPX45BJirgCn9YR/1aWfQC39CcWlOkO3B3lBJ96Qw yQDtVxs7goPbaZjJe4Ra1qIVOK+2/tYQXBmoMZ+ah+wGIN6/SBlwXaaPNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvJ6jIwnACOoIbpt9l0yVZsrKAEMB8GA1UdIwQY MBaAFEZcYsa81M+4kzvLamHPez2tL7EYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQt NGQyYzRjNWFkMTRlLzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80OWEyMjEtNjdmNS00ZWRkLWIwMGQtNGQyYzRjNWFkMTRl LzEvUmx4aXhyelV6N2lUTzh0cVljOTdQYTB2c1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2+A98Uh nBMEc3RnM7o7Yg6uzbe2yzgqpq57JAP//2HBNeL9H34OOGlr6OyyJzUu+Eifdwqj 9/Dy7rKOKtD6MHnnIc8b6mRWFd8e7joxR6Vm9GIZ6ePDRtFLL5nrVdermbfZXTLV TwQ2SAtiSpS6eWnEYMOWwJXuttWWXJN59e1dIzh3BdBpNUQ5XS5iiA3hleGSGEEU lE6rGfd6/jgeCY5Tmhu7B2+glDIs3PofQyRhzO8vFn7D4fdJGZx1bADE4naHmO2b srvmv5Miwe6Mxs2aq6DXDVetLG5+3g9ikgksYof2SS7KM6y7mbjwllfgu+o2Bn1b j2aP2ELe8MVGqg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:16 2025 by rpki-client