This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json) Hash identifier: 5myGHO5/B8voXGAJCrjOvS53kWw6DeUq9Oj7cTBd6QM= Subject key identifier: 4C:F0:9F:FD:D1:48:50:ED:53:43:B9:6F:3B:B0:4A:71:39:BE:6E:FF Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236 Certificate serial: 019B6053B9F702F6A239E3808B94AE79BC18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft Manifest number: 08AF Signing time: Sat 27 Dec 2025 15:00:58 +0000 Manifest this update: Sat 27 Dec 2025 15:00:58 +0000 Manifest next update: Sun 28 Dec 2025 15:00:58 +0000 Files and hashes: 1: HzDvBeLYGr_ZTI1_kgKXDeomTvk.roa (hash: N7WWBB3O4TVdAGj4IUZ2US/YD6EO1XiPjFKXmTMrnlw=) 2: b9AIQo2x9jntukrx1Uj7sPuI_aU.roa (hash: aFgDzZZcyVKX26cN4A82A1C39YCM2w3yZIzMCv2edgs=) 3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: JRg7/+d62ztZYeuVqQBPjCXxzoEvHIHjHfszB2Ojo2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:b9:f7:02:f6:a2:39:e3:80:8b:94:ae:79:bc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236 Validity Not Before: Dec 27 15:00:58 2025 GMT Not After : Dec 28 15:00:58 2025 GMT Subject: CN=4cf09ffdd14850ed5343b96f3bb04a7139be6eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ff:fe:30:dd:d3:63:c0:f1:0b:64:7d:b3:d5: 2e:be:4c:e9:69:e4:4e:37:fb:ca:02:33:aa:3e:52: 4a:04:9c:f1:b9:3d:6a:c3:bc:c0:35:68:bc:a0:87: c5:bd:aa:3d:e5:5f:78:c0:88:40:03:5b:11:dc:99: 97:d6:b0:bf:68:28:6d:ce:60:f3:a7:ac:2f:87:51: 68:8a:61:7e:8b:19:bd:01:d5:c8:a3:83:37:21:3c: 96:8c:dc:f9:5a:d7:fd:97:92:3c:77:ba:3f:28:c6: cf:d2:99:67:b2:89:b9:84:55:d8:69:a2:4e:85:91: d5:17:c3:86:af:43:b2:b6:d4:4d:9a:39:d2:66:65: 92:e2:bf:43:f1:35:78:13:09:70:a0:03:63:9e:2e: 69:c2:a1:a1:38:c6:3f:fa:2c:67:a0:d4:94:00:f9: 33:66:75:d4:a2:51:67:55:7a:7b:bb:15:1e:7c:1e: a7:b7:5a:00:5e:21:db:a8:20:24:7c:e2:00:53:dd: 6d:55:fb:91:b0:aa:93:ba:91:44:6e:15:d2:0f:e6: 9b:c5:5d:35:7a:99:13:78:98:35:32:06:c6:5c:ce: cd:09:b1:c7:9f:3f:2f:7a:20:38:0f:a0:10:fc:55: de:fc:63:b2:33:59:e3:f2:44:01:5a:6f:ed:8d:7d: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:9F:FD:D1:48:50:ED:53:43:B9:6F:3B:B0:4A:71:39:BE:6E:FF X509v3 Authority Key Identifier: keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:77:f7:88:8e:a0:23:04:2d:b4:b0:15:78:c9:d5:23:5d:dd: 00:03:76:b4:1e:cd:77:d4:e5:78:ae:21:5e:32:47:8e:64:5b: c8:3b:97:be:11:1c:f9:40:8a:ab:a5:7e:a3:ac:b3:ed:67:f6: 1e:44:9e:c1:09:d7:7e:5c:86:dd:1f:78:36:93:06:ac:72:ad: fe:c1:fb:ee:d2:1c:20:5c:1e:a8:3d:63:2b:ee:86:bd:fc:58: b7:99:87:72:ae:e8:e3:23:8d:77:90:9f:38:81:e5:0b:67:dc: a8:c4:31:69:ff:3c:ab:0e:05:77:b5:ef:ae:9f:f6:1a:96:a3: ff:dc:40:80:5b:92:3c:b7:d1:dd:31:1b:0f:4b:2b:20:4f:71: 8b:09:8c:b1:ee:d7:4b:5a:a1:bb:32:ae:93:03:ad:ea:eb:d4: 28:f1:81:28:97:6e:f2:d0:67:88:8a:ec:50:86:1f:6b:f3:c9: 46:d5:c2:1d:1a:9e:25:a1:ab:4a:4f:d7:d0:09:83:f5:f8:2e: f5:8a:f6:dd:b5:29:70:16:56:9f:b5:61:c5:b3:5d:78:3b:ad: 87:38:57:88:3a:3f:df:a8:7d:d0:d1:5f:79:ea:22:a3:fa:61: db:78:c3:f0:40:d1:d6:04:a1:fd:ae:ac:93:4e:d5:f1:f3:b0: b3:77:11:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgU7n3AvaiOeOAi5SuebwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjQ2MmM2MmM3ZjYzZDJmNWQ3ODdhNzAxZDc3OWFiNjk2 ZTIyMzYwHhcNMjUxMjI3MTUwMDU4WhcNMjUxMjI4MTUwMDU4WjAzMTEwLwYDVQQD Eyg0Y2YwOWZmZGQxNDg1MGVkNTM0M2I5NmYzYmIwNGE3MTM5YmU2ZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf/+MN3TY8DxC2R9s9UuvkzpaeRO N/vKAjOqPlJKBJzxuT1qw7zANWi8oIfFvao95V94wIhAA1sR3JmX1rC/aChtzmDz p6wvh1FoimF+ixm9AdXIo4M3ITyWjNz5Wtf9l5I8d7o/KMbP0plnsom5hFXYaaJO hZHVF8OGr0OyttRNmjnSZmWS4r9D8TV4EwlwoANjni5pwqGhOMY/+ixnoNSUAPkz ZnXUolFnVXp7uxUefB6nt1oAXiHbqCAkfOIAU91tVfuRsKqTupFEbhXSD+abxV01 epkTeJg1MgbGXM7NCbHHnz8veiA4D6AQ/FXe/GOyM1nj8kQBWm/tjX3H8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzwn/3RSFDtU0O5bzuwSnE5vm7/MB8GA1UdIwQY MBaAFINkYsYsf2PS9deHpwHXeatpbiI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMt ZjkxMGU1MTc2YjVlLzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMtZjkxMGU1MTc2YjVl LzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnf3iI6g IwQttLAVeMnVI13dAAN2tB7Nd9TleK4hXjJHjmRbyDuXvhEc+UCKq6V+o6yz7Wf2 HkSewQnXflyG3R94NpMGrHKt/sH77tIcIFweqD1jK+6GvfxYt5mHcq7o4yONd5Cf OIHlC2fcqMQxaf88qw4Fd7Xvrp/2Gpaj/9xAgFuSPLfR3TEbD0srIE9xiwmMse7X S1qhuzKukwOt6uvUKPGBKJdu8tBniIrsUIYfa/PJRtXCHRqeJaGrSk/X0AmD9fgu 9Yr23bUpcBZWn7VhxbNdeDuthzhXiDo/36h90NFfeeoio/ph23jD8EDR1gSh/a6s k07V8fOws3cR1w== -----END CERTIFICATE-----Generated at Sat Dec 27 19:23:35 2025 by rpki-client