This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json) Hash identifier: /HUUlTUPAgxBN+4ribDQWp3C0UB4G7hYoqPNJVjceFE= Subject key identifier: DD:29:A5:EB:4C:C0:C6:04:B9:EB:F1:03:C4:EE:86:7B:85:CD:9E:D4 Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236 Certificate serial: 019AF1D218B791ED235CC1936651F7948C33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft Manifest number: 0873 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: sSEGQcIEz3GbbhX7XkvawD1rlLqNNL/MvAnqwFLvmv8=) 2: gdmhIDx5ThYeMs_40Jhtb7jiPec.roa (hash: B6j4QxYlJa05lqgAAnP15E3D3T9lG/9Wl0NNB1LT9cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:18:b7:91:ed:23:5c:c1:93:66:51:f7:94:8c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=dd29a5eb4cc0c604b9ebf103c4ee867b85cd9ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:55:2a:e3:e6:ad:01:48:ee:63:dc:64:58: ac:ab:b9:d3:96:25:c6:22:2f:ed:fb:3b:45:e5:62: 28:91:73:43:f0:c5:cf:49:03:dd:2e:01:aa:d8:7b: 22:21:c4:bc:1c:15:79:0a:68:5e:85:0a:11:e1:d6: 46:76:a7:17:41:13:99:f3:42:e8:ab:e1:a8:46:dc: e8:e7:03:2d:c2:59:1c:49:63:1c:27:58:ca:51:cd: 8b:51:eb:09:36:05:3f:da:d4:78:90:67:da:53:83: 60:e7:16:50:55:1b:15:12:a4:2a:4d:47:75:d5:93: f4:f4:30:01:44:28:ba:00:53:2a:d7:03:b4:20:bc: d5:69:2c:52:9e:05:b1:dd:df:07:34:d6:82:69:b4: dd:24:fb:ba:61:52:61:95:da:ee:50:2e:a5:28:7a: d1:67:a3:d8:89:ac:38:47:e4:8e:f2:3a:9a:bb:02: cd:1f:10:46:3c:e0:a1:06:7e:fd:34:41:1c:06:10: ea:05:82:2b:bc:58:04:02:c0:8f:bc:3b:c1:f3:1d: 90:83:b0:bc:0e:c3:37:23:1e:70:99:d0:a8:f8:15: 7f:5f:03:b9:ab:f5:03:c2:e6:93:6b:b3:f1:4f:7f: 01:90:43:11:43:e9:3d:0e:8e:da:27:0a:97:46:37: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:29:A5:EB:4C:C0:C6:04:B9:EB:F1:03:C4:EE:86:7B:85:CD:9E:D4 X509v3 Authority Key Identifier: keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:9b:5a:b8:1e:1a:83:db:cb:84:88:17:cf:78:69:4e:2d:68: 36:db:12:18:44:72:af:f0:a0:6e:7f:4d:d6:b6:3f:5e:0a:dd: 16:93:9b:7c:7f:ec:41:57:13:9a:95:2d:15:f1:ac:c8:b2:1d: 08:ed:53:7f:b4:0e:a9:19:cc:eb:21:a3:69:75:b3:5a:41:ce: dd:0f:03:8c:6e:b3:18:c4:a3:82:70:44:88:41:68:e6:e7:e3: e1:c9:11:07:63:e7:33:27:e1:98:ed:c2:90:71:37:a5:18:57: 4e:93:f8:e3:91:f5:e9:e4:0d:b1:33:0c:52:1d:2f:18:93:f5: 79:4c:f7:ff:b0:c4:a4:10:ba:64:73:79:e0:e2:00:cd:e4:a7: 42:82:30:e5:7a:ba:21:20:69:53:12:09:07:10:96:be:5e:ad: 6f:c2:13:29:34:0d:8a:74:82:e6:01:b8:d3:fa:72:d0:9b:dd: c2:c4:68:bc:ff:15:8b:77:eb:dc:b2:f5:30:ef:7b:ff:a3:12: 22:27:c4:39:7e:f3:c7:fc:a3:4e:0c:9e:cd:74:37:29:0a:2d: 5c:59:d9:bf:e3:c3:be:20:01:8f:85:4e:f8:11:c1:ee:63:99: 2a:e3:c6:e5:78:ad:b8:ff:22:b9:3e:63:46:2e:ed:10:9e:1c: e4:b8:1c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hi3ke0jXMGTZlH3lIwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjQ2MmM2MmM3ZjYzZDJmNWQ3ODdhNzAxZDc3OWFiNjk2 ZTIyMzYwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EyhkZDI5YTVlYjRjYzBjNjA0YjllYmYxMDNjNGVlODY3Yjg1Y2Q5ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnFVKuPmrQFI7mPcZFisq7nTliXG Ii/t+ztF5WIokXND8MXPSQPdLgGq2HsiIcS8HBV5CmhehQoR4dZGdqcXQROZ80Lo q+GoRtzo5wMtwlkcSWMcJ1jKUc2LUesJNgU/2tR4kGfaU4Ng5xZQVRsVEqQqTUd1 1ZP09DABRCi6AFMq1wO0ILzVaSxSngWx3d8HNNaCabTdJPu6YVJhldruUC6lKHrR Z6PYiaw4R+SO8jqauwLNHxBGPOChBn79NEEcBhDqBYIrvFgEAsCPvDvB8x2Qg7C8 DsM3Ix5wmdCo+BV/XwO5q/UDwuaTa7PxT38BkEMRQ+k9Do7aJwqXRjfouwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0ppetMwMYEuevxA8TuhnuFzZ7UMB8GA1UdIwQY MBaAFINkYsYsf2PS9deHpwHXeatpbiI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMt ZjkxMGU1MTc2YjVlLzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMtZjkxMGU1MTc2YjVl LzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArptauB4a g9vLhIgXz3hpTi1oNtsSGERyr/Cgbn9N1rY/XgrdFpObfH/sQVcTmpUtFfGsyLId CO1Tf7QOqRnM6yGjaXWzWkHO3Q8DjG6zGMSjgnBEiEFo5ufj4ckRB2PnMyfhmO3C kHE3pRhXTpP445H16eQNsTMMUh0vGJP1eUz3/7DEpBC6ZHN54OIAzeSnQoIw5Xq6 ISBpUxIJBxCWvl6tb8ITKTQNinSC5gG40/py0JvdwsRovP8Vi3fr3LL1MO97/6MS IifEOX7zx/yjTgyezXQ3KQotXFnZv+PDviABj4VO+BHB7mOZKuPG5XituP8iuT5j Ri7tEJ4c5Lgcog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:27 2025 by rpki-client