This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft File: g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json) Hash identifier: mY60ha16Fb4YGDJeMyZJrbeGiDxe3no7NW922H2N9DU= Subject key identifier: E7:63:82:31:7A:9D:E3:E6:DC:8D:F5:E4:ED:69:75:3F:06:2F:73:FB Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236 Certificate serial: 019BA26AF1628A357DA138306C6BB8168633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft Manifest number: 08D2 Signing time: Fri 09 Jan 2026 11:01:16 +0000 Manifest this update: Fri 09 Jan 2026 11:01:16 +0000 Manifest next update: Sat 10 Jan 2026 11:01:16 +0000 Files and hashes: 1: 3xPRafeWx70gR7UkLCG5F9C2rHo.roa (hash: U7UkGJf+A9s/ynCa6+kyvE2RYV9ZJf+qvn3E4k0mve0=) 2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=) 3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: L8Cis0gf+6aEd3pk056cdaGvLXdLZNHusGGdK2nHs2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:6a:f1:62:8a:35:7d:a1:38:30:6c:6b:b8:16:86:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236 Validity Not Before: Jan 9 11:01:16 2026 GMT Not After : Jan 10 11:01:16 2026 GMT Subject: CN=e76382317a9de3e6dc8df5e4ed69753f062f73fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:a5:96:d4:31:47:1a:b3:50:ff:fb:8a:ef: 8c:8d:d2:d1:20:ea:7e:e6:6a:81:7a:76:1d:98:88: cf:02:f7:d9:a3:12:ac:b4:44:1d:76:f2:6e:e3:3e: 49:2e:b4:80:95:91:28:f8:77:a8:26:b4:71:5f:41: 06:78:db:bd:e9:59:20:f7:f6:ce:90:33:2a:8a:6a: b4:e5:80:dd:66:81:84:90:3c:05:77:4e:2d:cf:20: 57:31:5c:5f:d0:f9:54:0a:44:b0:26:d6:05:2e:de: db:5c:a2:6a:14:8c:f1:a7:a5:3d:e1:bf:42:75:72: f0:54:39:93:03:df:a6:c1:95:82:17:18:77:06:93: f5:a1:32:8b:9a:67:1e:15:5c:ac:31:76:1e:42:1b: 4f:37:ff:a4:39:83:a7:a4:11:45:d4:4c:d1:9f:fe: 81:23:2f:b7:b9:f9:ad:0c:26:bc:4f:ac:d9:fa:f6: a6:6b:ee:94:77:7b:f0:36:5d:07:63:d9:e3:12:e8: 68:b6:dc:ee:36:eb:27:05:f4:91:4f:d7:b8:48:db: bb:c6:2a:f1:09:61:86:fa:ad:86:d8:24:b1:e6:dd: 5c:49:d4:80:5a:60:9a:18:87:54:19:12:c9:65:cd: 16:d5:05:cb:df:1a:20:e4:01:a8:c2:a3:5d:a7:41: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:63:82:31:7A:9D:E3:E6:DC:8D:F5:E4:ED:69:75:3F:06:2F:73:FB X509v3 Authority Key Identifier: keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4d:0b:47:5f:12:1f:80:4c:73:01:85:94:76:45:0b:a6:43: 6c:4d:71:29:36:de:d8:39:e2:9b:e3:60:73:79:ab:cd:26:af: c7:e8:2f:ef:7d:e8:a0:fb:fb:a1:3a:53:f9:4e:eb:16:2c:26: 01:69:13:ab:57:b7:ac:4c:c7:80:ca:27:84:72:7b:e0:dd:5f: 54:99:df:d6:8c:40:c4:34:2c:9c:b1:6f:e9:d1:7a:45:54:3f: 66:69:e9:22:72:90:d0:24:b6:60:17:e6:94:fe:d0:09:49:ea: ed:87:7b:f5:61:eb:52:ee:4d:d6:1e:95:3c:38:a7:ee:4f:75: fd:a6:10:4e:ca:98:aa:d4:78:94:8c:0e:ee:a1:02:68:2b:d1: 71:7c:12:6d:f4:b9:76:74:f0:57:67:3d:a5:c1:c1:22:60:da: 83:7b:a3:0d:bc:7f:9c:f0:7e:c8:f5:1c:21:93:f3:e8:d7:3c: ee:09:fc:49:a7:c0:06:2b:ab:f7:a5:e4:a7:7b:fa:5b:e8:01: 93:67:d0:79:b7:2a:4a:ba:76:9d:ea:c4:c9:b6:1d:82:26:75: fd:de:93:a9:91:92:06:1c:35:76:be:99:a9:7c:6a:77:e3:00: a4:39:31:6b:a2:27:86:bf:08:7d:51:eb:99:19:5f:11:99:e8: 21:eb:3d:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiavFiijV9oTgwbGu4FoYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjQ2MmM2MmM3ZjYzZDJmNWQ3ODdhNzAxZDc3OWFiNjk2 ZTIyMzYwHhcNMjYwMTA5MTEwMTE2WhcNMjYwMTEwMTEwMTE2WjAzMTEwLwYDVQQD EyhlNzYzODIzMTdhOWRlM2U2ZGM4ZGY1ZTRlZDY5NzUzZjA2MmY3M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje+lltQxRxqzUP/7iu+MjdLRIOp+ 5mqBenYdmIjPAvfZoxKstEQddvJu4z5JLrSAlZEo+HeoJrRxX0EGeNu96Vkg9/bO kDMqimq05YDdZoGEkDwFd04tzyBXMVxf0PlUCkSwJtYFLt7bXKJqFIzxp6U94b9C dXLwVDmTA9+mwZWCFxh3BpP1oTKLmmceFVysMXYeQhtPN/+kOYOnpBFF1EzRn/6B Iy+3ufmtDCa8T6zZ+vama+6Ud3vwNl0HY9njEuhottzuNusnBfSRT9e4SNu7xirx CWGG+q2G2CSx5t1cSdSAWmCaGIdUGRLJZc0W1QXL3xog5AGowqNdp0G7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdjgjF6nePm3I315O1pdT8GL3P7MB8GA1UdIwQY MBaAFINkYsYsf2PS9deHpwHXeatpbiI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMt ZjkxMGU1MTc2YjVlLzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMtZjkxMGU1MTc2YjVl LzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE0LR18S H4BMcwGFlHZFC6ZDbE1xKTbe2Dnim+Ngc3mrzSavx+gv733ooPv7oTpT+U7rFiwm AWkTq1e3rEzHgMonhHJ74N1fVJnf1oxAxDQsnLFv6dF6RVQ/ZmnpInKQ0CS2YBfm lP7QCUnq7Yd79WHrUu5N1h6VPDin7k91/aYQTsqYqtR4lIwO7qECaCvRcXwSbfS5 dnTwV2c9pcHBImDag3ujDbx/nPB+yPUcIZPz6Nc87gn8SafABiur96Xkp3v6W+gB k2fQebcqSrp2nerEybYdgiZ1/d6TqZGSBhw1dr6ZqXxqd+MApDkxa6Inhr8IfVHr mRlfEZnoIes9MQ== -----END CERTIFICATE-----Generated at Fri Jan 9 21:04:15 2026 by rpki-client