This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json) Hash identifier: /RQ9Llv5aMBAg8v54Uam8HRrfmhDB0RZ7RG0H8tynCw= Subject key identifier: CF:E2:FF:21:A0:18:CC:DB:D2:5B:39:C9:9C:BA:F0:E2:A1:A7:23:16 Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85 Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385 Certificate serial: 019AF2AD398877E4F4B6779A0CBB4B9FBF31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:29 +0000 Manifest this update: Sat 06 Dec 2025 08:00:29 +0000 Manifest next update: Sun 07 Dec 2025 08:00:29 +0000 Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=) 2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: 9ue7ecb+B7ZSBFaiaAmg6T9+PypKxsD014R5M1Tu1xI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:39:88:77:e4:f4:b6:77:9a:0c:bb:4b:9f:bf:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385 Validity Not Before: Dec 6 08:00:29 2025 GMT Not After : Dec 7 08:00:29 2025 GMT Subject: CN=cfe2ff21a018ccdbd25b39c99cbaf0e2a1a72316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f4:8a:d8:74:9e:bf:0e:d2:58:ae:c0:72:fb: ca:b4:46:e4:dd:9e:9e:4e:f8:b8:45:c0:e8:d2:10: d2:ae:fb:50:81:e2:b4:55:37:d1:47:68:84:90:3b: b2:4d:8e:15:56:52:5e:0f:c9:fc:4d:4d:61:48:12: a5:1b:d8:eb:1f:20:c4:7e:29:cf:bc:db:bb:d6:80: 38:43:bb:cc:17:f9:fe:47:fc:17:75:dd:05:c7:bd: 6d:2d:af:c9:1d:56:0e:aa:6f:57:2b:42:54:68:8c: 2f:44:87:4f:91:ba:03:92:35:ce:c7:2b:ef:29:a4: f6:8a:60:f1:11:55:4d:eb:05:2f:71:bf:fd:23:fb: fc:07:cd:12:7c:40:36:d7:32:56:c6:71:d3:8e:13: 01:c6:a9:12:ae:2a:70:44:bf:2f:6b:39:fd:34:69: 03:ee:2e:a8:a2:07:ed:da:47:dc:eb:c1:22:7e:9a: 9f:da:d6:8b:86:c9:24:4e:83:65:d8:e5:73:48:e1: 80:63:6b:fc:12:22:00:0b:2f:30:03:8c:94:57:8f: 39:5d:30:f6:d1:97:6d:73:f8:de:c3:92:13:f1:0f: 7f:aa:c0:a9:2a:c9:f5:81:16:11:63:15:ba:14:b6: 05:f3:9a:21:d1:51:a0:4c:e5:3c:9c:b9:12:44:e0: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E2:FF:21:A0:18:CC:DB:D2:5B:39:C9:9C:BA:F0:E2:A1:A7:23:16 X509v3 Authority Key Identifier: keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:63:96:c3:63:52:a3:cb:b3:ec:d8:d5:92:71:06:bd:3e:87: 7a:fe:ee:e0:cd:46:be:3c:24:f7:22:59:9a:27:c6:bc:17:48: 9e:e4:ca:36:53:30:81:47:c3:07:71:62:39:82:48:be:cb:a9: 4b:0e:96:0d:36:32:9f:57:94:82:30:bc:3d:1c:a8:d1:26:cb: 74:96:d2:cc:e3:cf:e2:ef:dd:ee:4d:58:db:84:dd:99:fe:c6: b3:65:bc:9a:c4:df:36:b1:a1:07:4d:12:ea:fc:f6:55:49:2e: cc:5e:8a:38:58:e3:1e:27:8c:0f:14:6f:87:79:66:e5:47:19: 8e:b4:e4:43:53:fc:19:19:94:91:b5:8e:cb:bc:a6:ed:8e:e2: 95:4b:aa:29:26:8d:0b:5c:53:e4:05:0b:ea:e4:a2:1b:ec:b5: 23:59:a9:d5:a8:e8:fd:5b:fb:24:3c:73:85:32:50:ed:94:b8: 90:06:d0:75:35:d9:71:d4:b3:b9:b8:34:38:81:d4:f9:47:13: 61:4a:20:54:38:6c:c0:66:b9:b3:eb:44:18:df:73:23:fa:3c: 3c:1e:a3:08:ea:59:27:e1:5a:bd:84:90:89:3e:42:54:f2:4e: 0c:ce:91:31:e5:bc:22:93:02:94:07:c0:e6:f2:e2:f3:a0:df: fa:4f:ca:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTmId+T0tneaDLtLn78xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTQ1NDY1ZjA2OTZhNzBkNWYwM2VlMWQ1ZGVjYWZkNDFk YzYzODUwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD EyhjZmUyZmYyMWEwMThjY2RiZDI1YjM5Yzk5Y2JhZjBlMmExYTcyMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PSK2HSevw7SWK7AcvvKtEbk3Z6e Tvi4RcDo0hDSrvtQgeK0VTfRR2iEkDuyTY4VVlJeD8n8TU1hSBKlG9jrHyDEfinP vNu71oA4Q7vMF/n+R/wXdd0Fx71tLa/JHVYOqm9XK0JUaIwvRIdPkboDkjXOxyvv KaT2imDxEVVN6wUvcb/9I/v8B80SfEA21zJWxnHTjhMBxqkSripwRL8vazn9NGkD 7i6oogft2kfc68Eifpqf2taLhskkToNl2OVzSOGAY2v8EiIACy8wA4yUV485XTD2 0Zdtc/jew5IT8Q9/qsCpKsn1gRYRYxW6FLYF85oh0VGgTOU8nLkSROC2FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/i/yGgGMzb0ls5yZy68OKhpyMWMB8GA1UdIwQY MBaAFMQUVGXwaWpw1fA+4dXeyv1B3GOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQt NjVlOTk2MzEyY2JlLzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQtNjVlOTk2MzEyY2Jl LzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmOWw2NS o8uz7NjVknEGvT6Hev7u4M1Gvjwk9yJZmifGvBdInuTKNlMwgUfDB3FiOYJIvsup Sw6WDTYyn1eUgjC8PRyo0SbLdJbSzOPP4u/d7k1Y24Tdmf7Gs2W8msTfNrGhB00S 6vz2VUkuzF6KOFjjHieMDxRvh3lm5UcZjrTkQ1P8GRmUkbWOy7ym7Y7ilUuqKSaN C1xT5AUL6uSiG+y1I1mp1ajo/Vv7JDxzhTJQ7ZS4kAbQdTXZcdSzubg0OIHU+UcT YUogVDhswGa5s+tEGN9zI/o8PB6jCOpZJ+FavYSQiT5CVPJODM6RMeW8IpMClAfA 5vLi86Df+k/Kkg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:16:51 2025 by rpki-client