This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json) Hash identifier: 5UPmEid4kTT8tkLUq6ksBTRedw27i9dTG75+LTY2Q3U= Subject key identifier: 7D:96:9B:3E:D4:11:8E:4E:ED:F2:A6:89:2C:EE:C3:87:79:62:8E:68 Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Certificate serial: 019AF2ADA7BF9AA6DFB09CFDAE23FE724149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft Manifest number: 0CC4 Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=) 2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: fI9sxnqOCdbzGbIhYEp3u2E/NdgI40ACXWS+FnX6i9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a7:bf:9a:a6:df:b0:9c:fd:ae:23:fe:72:41:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=7d969b3ed4118e4eedf2a6892ceec38779628e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:9e:31:9f:bc:a9:67:fb:5d:3f:da:34:06: a9:11:c9:48:80:97:95:c6:7e:ce:60:6f:ed:34:04: 83:c1:f3:21:68:1c:ed:99:9d:60:0b:f5:a4:53:ad: 18:76:c6:8e:4d:65:4b:9e:c4:d7:74:cb:0e:5e:4e: 5c:4f:15:6b:73:a7:a5:5f:a5:39:f4:44:1e:23:ce: e1:52:9d:bc:97:b9:66:9b:1b:d3:66:90:0e:d0:20: b9:4b:78:3d:76:84:f1:59:59:31:b3:4f:b5:38:4a: 57:af:9e:a5:fc:64:c7:fd:f5:75:a4:cc:56:52:c5: de:92:f9:78:77:f2:55:be:02:ee:8a:91:1c:ae:37: 03:02:82:6e:4b:86:21:f1:c1:db:6e:bd:5f:b9:41: 9f:ea:63:55:64:16:d4:70:07:b0:a3:5b:b3:96:7e: 95:c7:47:e4:a4:72:36:3b:70:3d:5e:22:91:15:ca: cc:3d:7c:88:e3:5f:01:16:6b:c8:f2:72:5d:d8:3a: 38:62:3e:87:3e:f0:7c:fb:eb:c2:29:96:49:a6:aa: 13:9b:47:76:f7:cc:a8:9d:1b:c7:0d:49:1f:78:c8: 09:ac:33:29:30:e7:5c:07:8d:3c:76:c9:32:b0:15: 72:a2:ac:82:c7:0f:48:f9:f1:67:18:1b:89:a9:3b: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:96:9B:3E:D4:11:8E:4E:ED:F2:A6:89:2C:EE:C3:87:79:62:8E:68 X509v3 Authority Key Identifier: keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:7f:8b:99:57:17:c7:a3:c9:59:b0:ec:ad:70:1e:44:64:49: c9:a5:49:1a:9e:dd:1c:4b:e7:47:92:70:60:bf:b6:31:06:3e: fd:23:21:79:4b:15:59:6d:ff:88:e8:aa:01:70:c1:f2:62:f0: 55:39:85:6d:5a:3d:b1:6e:5a:c1:ae:ea:5a:fe:23:1f:c3:d5: b0:b7:ee:5e:62:b8:c8:71:1b:41:8c:30:11:fe:5d:ee:9e:8f: dd:f7:7f:c4:c0:4b:b3:b5:bf:da:d1:f2:ae:6d:ad:5a:46:e7: f0:b1:06:a3:e1:fe:7c:1a:32:54:7b:65:05:c6:c9:a8:7c:00: 4a:3c:9e:b4:87:a0:5f:9c:07:d0:ce:02:1a:a6:94:ce:df:a3: 26:19:a3:b3:85:94:62:37:52:c4:af:05:09:e4:8e:52:53:6f: ed:1e:02:24:86:f7:ba:d1:6a:4c:be:c0:e7:0d:f3:95:c9:92: 0b:92:6f:97:99:14:a1:7a:0b:8d:37:39:09:38:0b:77:b4:35: 1c:7e:9c:a9:42:f8:11:f4:07:d1:d5:51:92:3a:46:fe:98:dd: 89:aa:37:7f:5e:05:cc:24:3a:13:4d:8d:ef:6c:2d:17:19:3f: ef:09:e8:54:dc:e7:00:73:c6:6b:bd:cc:9f:5d:80:41:f1:14: 46:88:0f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrae/mqbfsJz9riP+ckFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3 MDZmODQwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD Eyg3ZDk2OWIzZWQ0MTE4ZTRlZWRmMmE2ODkyY2VlYzM4Nzc5NjI4ZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgyeMZ+8qWf7XT/aNAapEclIgJeV xn7OYG/tNASDwfMhaBztmZ1gC/WkU60YdsaOTWVLnsTXdMsOXk5cTxVrc6elX6U5 9EQeI87hUp28l7lmmxvTZpAO0CC5S3g9doTxWVkxs0+1OEpXr56l/GTH/fV1pMxW UsXekvl4d/JVvgLuipEcrjcDAoJuS4Yh8cHbbr1fuUGf6mNVZBbUcAewo1uzln6V x0fkpHI2O3A9XiKRFcrMPXyI418BFmvI8nJd2Do4Yj6HPvB8++vCKZZJpqoTm0d2 98yonRvHDUkfeMgJrDMpMOdcB408dskysBVyoqyCxw9I+fFnGBuJqTtASQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2Wmz7UEY5O7fKmiSzuw4d5Yo5oMB8GA1UdIwQY MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4 LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3+LmVcX x6PJWbDsrXAeRGRJyaVJGp7dHEvnR5JwYL+2MQY+/SMheUsVWW3/iOiqAXDB8mLw VTmFbVo9sW5awa7qWv4jH8PVsLfuXmK4yHEbQYwwEf5d7p6P3fd/xMBLs7W/2tHy rm2tWkbn8LEGo+H+fBoyVHtlBcbJqHwASjyetIegX5wH0M4CGqaUzt+jJhmjs4WU YjdSxK8FCeSOUlNv7R4CJIb3utFqTL7A5w3zlcmSC5Jvl5kUoXoLjTc5CTgLd7Q1 HH6cqUL4EfQH0dVRkjpG/pjdiao3f14FzCQ6E02N72wtFxk/7wnoVNznAHPGa73M n12AQfEURogP8w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:41 2025 by rpki-client