This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json) Hash identifier: 1dUKJGXBL28TKfOvEK5c/rm08AQDyZNA/57st8FGrOU= Subject key identifier: 36:57:4F:8E:42:F3:4B:32:40:EC:D5:EE:20:D3:B4:38:B4:B1:D1:BD Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c Certificate serial: 019AF209590FEC228BDBCB4EE570FC2CCEE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft Manifest number: 0441 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: BkBI4iRrrgSFdQB6BvlnHW0HCz45WWRvz40UXlHmKmA=) 2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:59:0f:ec:22:8b:db:cb:4e:e5:70:fc:2c:ce:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=36574f8e42f34b3240ecd5ee20d3b438b4b1d1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:97:bd:dd:c5:03:e3:ce:1f:12:9f:c1:ee: 98:cc:63:ee:b4:d4:ff:4e:47:75:43:16:7b:0d:2b: 44:1d:84:71:c0:63:60:fd:f4:b4:89:d4:ff:dc:80: 54:87:d6:de:f9:8f:82:14:5e:87:62:c0:26:2c:2e: 94:f0:30:7a:48:ac:66:46:bc:70:f4:6e:5f:0d:8d: 93:07:15:ab:50:6c:b1:aa:62:62:5d:9d:3f:32:b3: 55:4d:46:c8:06:04:99:50:de:c2:1f:24:fc:7c:92: 2a:5c:b8:ad:6c:d9:9d:44:2a:8a:e8:4c:c4:4d:98: e4:3d:83:09:cc:bd:dc:4a:8f:23:ec:96:3e:3d:95: bd:fd:65:23:e6:40:bd:c8:0d:3c:bd:6b:35:a0:50: 41:f9:08:3b:9f:c8:58:a5:58:13:3f:26:d9:4d:02: d8:93:d4:42:54:5b:84:2d:da:58:eb:31:e6:79:69: 2d:7f:e1:7a:30:bb:0f:68:63:52:cb:d3:fa:3e:db: f4:49:48:9b:1d:81:ad:a5:7e:26:d5:e3:fc:a8:08: 8b:af:9d:85:18:10:32:fa:48:b9:e9:f1:28:dc:eb: 05:96:48:36:82:d6:2a:df:14:ab:5c:e2:1e:64:7d: c9:7e:73:5f:74:ed:26:9e:f9:68:bb:3a:f6:63:dc: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:57:4F:8E:42:F3:4B:32:40:EC:D5:EE:20:D3:B4:38:B4:B1:D1:BD X509v3 Authority Key Identifier: keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4c:d4:db:83:e0:d2:58:a6:fd:d5:66:f6:a2:e7:61:f0:f8: 4c:16:c3:e2:9a:f3:7c:47:26:e6:55:b6:1f:37:7b:db:0e:32: 82:c0:ba:b2:ac:ae:74:5c:ac:1d:ea:a0:75:5f:c9:a8:4c:d4: 3e:46:68:ed:57:7a:80:61:85:f6:fe:22:00:b7:b7:97:62:28: f8:4a:76:ad:9b:1a:25:8e:30:51:22:a2:d1:2b:db:de:86:ae: 0f:82:b5:fa:07:e5:be:86:37:f0:0d:b2:a4:19:26:a0:0e:ed: 25:dc:bc:5e:2c:cb:73:ad:d2:69:b1:d5:23:6f:25:d7:5a:ff: d6:f1:83:aa:5d:2e:79:36:01:37:74:ca:13:7e:de:1b:86:5f: 11:09:2a:e6:c5:c0:5a:28:16:ac:cc:e0:d8:0e:b2:77:a7:92: d5:1e:f0:8d:3a:1b:3a:27:09:96:6c:91:bf:66:f1:2e:62:63: 8a:84:f6:a7:4f:ad:be:19:b4:c1:47:44:51:7c:1c:25:51:ad: f6:86:f9:9b:8c:bc:af:1d:15:7c:e2:40:d6:f2:9d:d4:6e:17: 52:ad:d0:f8:aa:71:7d:e3:a4:47:89:31:fc:de:0c:af:83:fd: d2:94:37:f2:bc:76:46:32:d9:73:76:1a:18:e9:29:7a:d2:78: 91:2d:8c:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVkP7CKL28tO5XD8LM7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGQxNzQ3ZjM1YzBjZDZiMjVmMGIwYTBlNjhkMDQ0MmM5 MzkxNGMwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EygzNjU3NGY4ZTQyZjM0YjMyNDBlY2Q1ZWUyMGQzYjQzOGI0YjFkMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgqXvd3FA+POHxKfwe6YzGPutNT/ Tkd1QxZ7DStEHYRxwGNg/fS0idT/3IBUh9be+Y+CFF6HYsAmLC6U8DB6SKxmRrxw 9G5fDY2TBxWrUGyxqmJiXZ0/MrNVTUbIBgSZUN7CHyT8fJIqXLitbNmdRCqK6EzE TZjkPYMJzL3cSo8j7JY+PZW9/WUj5kC9yA08vWs1oFBB+Qg7n8hYpVgTPybZTQLY k9RCVFuELdpY6zHmeWktf+F6MLsPaGNSy9P6Ptv0SUibHYGtpX4m1eP8qAiLr52F GBAy+ki56fEo3OsFlkg2gtYq3xSrXOIeZH3JfnNfdO0mnvlouzr2Y9yzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZXT45C80syQOzV7iDTtDi0sdG9MB8GA1UdIwQY MBaAFL9NF0fzXAzWsl8LCg5o0EQsk5FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2Ut N2YxOWU4YzhiODNkLzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2UtN2YxOWU4YzhiODNk LzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUzU24Pg 0lim/dVm9qLnYfD4TBbD4przfEcm5lW2Hzd72w4ygsC6sqyudFysHeqgdV/JqEzU PkZo7Vd6gGGF9v4iALe3l2Io+Ep2rZsaJY4wUSKi0Svb3oauD4K1+gflvoY38A2y pBkmoA7tJdy8XizLc63SabHVI28l11r/1vGDql0ueTYBN3TKE37eG4ZfEQkq5sXA WigWrMzg2A6yd6eS1R7wjTobOicJlmyRv2bxLmJjioT2p0+tvhm0wUdEUXwcJVGt 9ob5m4y8rx0VfOJA1vKd1G4XUq3Q+KpxfeOkR4kx/N4Mr4P90pQ38rx2RjLZc3Ya GOkpetJ4kS2MIA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:55 2025 by rpki-client