This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json) Hash identifier: yLPdAG+DvF3IIXE/BG+hxg6B5G9GUhD6zt+jc6G7r+E= Subject key identifier: A5:C3:C0:7A:0C:7F:A1:42:52:7C:5F:1F:4C:02:FA:15:CA:83:F9:EC Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Certificate serial: 019B1B3B881905F0C26DE5F3061CC39C1B03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft Manifest number: 0CD9 Signing time: Sun 14 Dec 2025 05:00:44 +0000 Manifest this update: Sun 14 Dec 2025 05:00:44 +0000 Manifest next update: Mon 15 Dec 2025 05:00:44 +0000 Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=) 2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: lHgHS9xlf6rB0WKyasrQNAcJRQf6IaDzWVtHZv/p9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:88:19:05:f0:c2:6d:e5:f3:06:1c:c3:9c:1b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Validity Not Before: Dec 14 05:00:44 2025 GMT Not After : Dec 15 05:00:44 2025 GMT Subject: CN=a5c3c07a0c7fa142527c5f1f4c02fa15ca83f9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:c0:71:ea:49:c4:c2:51:3b:8b:40:db:d3: 9d:2a:89:61:27:46:33:8f:d0:c1:80:69:d9:83:b7: 05:8b:c5:43:bd:31:a0:43:db:34:54:d5:2d:7a:fa: f0:69:e5:4e:31:41:a2:f0:c6:52:2a:19:fe:6a:8c: 12:c6:59:9e:a5:fe:50:8a:e0:2b:ef:f5:ea:af:bf: d4:a5:58:40:de:81:70:ca:84:6b:55:96:59:20:99: e3:ba:31:56:42:f3:e5:b8:7e:7f:cc:34:b7:16:c9: 4f:91:65:04:27:86:47:74:02:e2:9f:72:ed:a7:7a: d2:34:b7:4f:d2:d0:07:1b:b8:07:1b:85:9e:62:bc: 34:6d:8d:24:16:9e:79:ec:3e:92:22:59:4f:58:42: 4e:35:40:12:0b:c6:51:b8:c0:05:ed:f1:92:fa:79: 11:ce:7e:c4:76:d6:52:d4:d2:ed:63:a5:b8:f5:ef: 5a:1f:ee:70:ad:21:bd:46:5b:68:0b:00:1f:a8:a0: bf:07:da:9e:10:50:75:b0:ca:3f:6d:8f:0f:e4:4a: 80:75:25:c9:da:46:ed:60:dd:a5:3b:77:49:6b:69: d7:8e:57:92:89:dd:a2:61:70:9a:93:9c:b8:f0:24: 70:58:df:e5:dd:5a:d1:53:1b:20:9b:f4:24:8a:b6: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:C0:7A:0C:7F:A1:42:52:7C:5F:1F:4C:02:FA:15:CA:83:F9:EC X509v3 Authority Key Identifier: keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f2:e1:98:59:b1:0e:9d:fd:58:40:54:73:85:60:5e:cd:31: 12:c0:24:15:7b:d0:35:4f:89:29:a8:3b:66:17:dd:ee:68:f2: 65:81:8e:4b:e9:c8:86:af:8b:9c:d6:f8:03:39:d2:13:5c:3e: ef:c9:ba:eb:aa:6a:4d:ae:00:92:64:f7:b2:ce:23:ed:2f:f7: 92:b5:1f:ab:be:f7:4b:1b:4c:f0:4d:1f:60:ef:70:60:ee:a2: 56:25:32:6e:c5:c4:6c:57:3f:23:36:ab:af:07:85:0c:82:ed: b9:f5:90:dc:ed:8a:6c:47:c9:04:1f:81:80:81:f7:70:4f:1f: 5f:72:e0:6f:8f:c8:75:c4:1f:47:b6:cd:50:41:36:bf:9d:5e: 37:08:4c:6b:f3:50:5c:54:14:cd:aa:75:33:1f:60:b7:d3:16: f2:f0:1c:d4:89:37:1a:ca:b1:ba:ae:91:25:08:3e:32:0d:8d: 1a:08:db:8b:f7:bc:8d:57:01:ec:0b:6d:c2:d0:e9:6c:82:9a: d2:83:d5:08:9c:76:4a:f2:50:bd:e2:9b:cd:e5:4f:40:46:c1: 93:e3:9d:af:bc:17:00:76:de:54:60:ed:5b:21:aa:ba:13:ee: 56:a9:6e:48:91:0e:1e:98:e4:bb:20:a1:e0:4a:e7:f6:eb:df: c7:4d:e2:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO4gZBfDCbeXzBhzDnBsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3 MDZmODQwHhcNMjUxMjE0MDUwMDQ0WhcNMjUxMjE1MDUwMDQ0WjAzMTEwLwYDVQQD EyhhNWMzYzA3YTBjN2ZhMTQyNTI3YzVmMWY0YzAyZmExNWNhODNmOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvXAcepJxMJRO4tA29OdKolhJ0Yz j9DBgGnZg7cFi8VDvTGgQ9s0VNUtevrwaeVOMUGi8MZSKhn+aowSxlmepf5QiuAr 7/Xqr7/UpVhA3oFwyoRrVZZZIJnjujFWQvPluH5/zDS3FslPkWUEJ4ZHdALin3Lt p3rSNLdP0tAHG7gHG4WeYrw0bY0kFp557D6SIllPWEJONUASC8ZRuMAF7fGS+nkR zn7EdtZS1NLtY6W49e9aH+5wrSG9RltoCwAfqKC/B9qeEFB1sMo/bY8P5EqAdSXJ 2kbtYN2lO3dJa2nXjleSid2iYXCak5y48CRwWN/l3VrRUxsgm/QkirZNewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXDwHoMf6FCUnxfH0wC+hXKg/nsMB8GA1UdIwQY MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4 LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/LhmFmx Dp39WEBUc4VgXs0xEsAkFXvQNU+JKag7Zhfd7mjyZYGOS+nIhq+LnNb4AznSE1w+ 78m666pqTa4AkmT3ss4j7S/3krUfq773SxtM8E0fYO9wYO6iViUybsXEbFc/Izar rweFDILtufWQ3O2KbEfJBB+BgIH3cE8fX3Lgb4/IdcQfR7bNUEE2v51eNwhMa/NQ XFQUzap1Mx9gt9MW8vAc1Ik3Gsqxuq6RJQg+Mg2NGgjbi/e8jVcB7AttwtDpbIKa 0oPVCJx2SvJQveKbzeVPQEbBk+Odr7wXAHbeVGDtWyGquhPuVqluSJEOHpjkuyCh 4Ern9uvfx03iQA== -----END CERTIFICATE-----Generated at Sun Dec 14 15:04:11 2025 by rpki-client