This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json) Hash identifier: CqoxeSKXbg96WTiTTBhZ8mis8uB9R8zAs0BSvc0faNI= Subject key identifier: FE:9D:D4:E0:13:F3:D4:2A:A0:25:5B:BB:25:42:9E:42:5A:8E:26:BC Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c Certificate serial: 019B18A85D6AD8B276D4D7C3C8FE7841C867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft Manifest number: 0455 Signing time: Sat 13 Dec 2025 17:00:45 +0000 Manifest this update: Sat 13 Dec 2025 17:00:45 +0000 Manifest next update: Sun 14 Dec 2025 17:00:45 +0000 Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: 61JFcjMbKASwRx8Q2TKslcUaUclsvJfI39yCGlSdQBM=) 2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:5d:6a:d8:b2:76:d4:d7:c3:c8:fe:78:41:c8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c Validity Not Before: Dec 13 17:00:45 2025 GMT Not After : Dec 14 17:00:45 2025 GMT Subject: CN=fe9dd4e013f3d42aa0255bbb25429e425a8e26bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:05:04:6b:10:5f:61:da:3f:95:4c:42:72: 06:97:d1:83:c4:c5:e9:ff:63:5d:f0:87:a3:11:01: cd:cb:c8:ac:bf:b7:d8:bb:cb:b2:26:22:05:b7:ca: 0e:64:b3:0a:e5:6d:0f:fd:18:93:0a:6b:19:93:1b: 88:a5:0a:89:87:18:5d:ac:dc:ac:29:4f:61:ae:6f: 28:c6:77:1c:8c:a5:15:29:31:22:02:bf:96:09:fe: 1e:34:f8:69:e6:ec:1c:a3:ad:62:6f:74:ef:aa:27: 67:74:57:89:bb:4d:8f:93:b2:99:d8:59:20:a9:04: ce:35:70:69:fb:2c:e5:ff:36:ef:95:3d:d1:cc:49: dd:39:b6:60:20:af:27:65:7d:35:4f:ac:b9:02:c4: 33:8b:dc:76:e7:f9:9d:63:33:ba:8b:61:48:81:ed: ad:d1:8d:c7:27:46:33:20:26:94:a6:53:e7:e4:60: 54:f7:3d:73:c0:44:2b:0f:cf:5e:09:f7:6d:75:42: ac:06:58:df:c4:97:89:41:46:8f:ae:d6:df:26:c6: bc:ed:6d:a9:11:88:6f:47:2d:83:a7:6a:62:38:f6: d5:15:a4:96:d8:6b:46:38:b2:2a:5f:cf:32:1b:c7: fc:00:0d:92:cb:d5:10:f7:7d:9e:10:a6:0e:15:2d: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9D:D4:E0:13:F3:D4:2A:A0:25:5B:BB:25:42:9E:42:5A:8E:26:BC X509v3 Authority Key Identifier: keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:db:59:e7:e7:e2:c4:d3:9c:55:f6:b6:7e:63:cc:b9:58:b7: 81:4a:57:2c:1d:ee:59:49:d7:cb:b2:30:d5:0d:5a:ba:4c:c7: 8c:34:fb:9d:c7:11:e2:2a:70:77:cc:f7:5b:cd:02:7a:d9:5b: 0e:8c:a8:b5:aa:c7:43:96:23:22:57:e9:30:f6:ec:92:f9:42: de:3c:9a:43:4c:bd:41:63:8c:2f:80:26:b2:29:40:79:e1:b1: 1d:55:e6:2b:9d:f9:7e:d0:61:ce:19:c3:a0:89:89:9a:38:da: 59:07:30:dd:7c:d7:36:c1:30:56:1c:03:a6:1d:89:6b:79:a6: 59:43:d4:87:91:ee:fc:e5:af:bb:8b:f8:2c:c0:21:64:49:01: 64:e3:a2:cb:d0:77:dd:1e:10:8d:5e:eb:5e:79:f8:4c:cf:e7: da:63:93:1c:61:5a:7f:e8:94:9b:76:19:c7:6a:0b:51:e2:d8: e0:b5:39:24:5c:72:1e:2d:68:5b:53:6c:b9:3e:8b:35:29:3b: 32:58:90:23:13:10:c1:30:72:f6:6d:58:20:9b:85:5d:0f:52: e2:90:d7:94:28:af:1d:da:c3:f5:cb:7d:e5:25:59:a5:07:66: 1c:10:5d:ef:3f:fd:57:2a:92:ad:78:d2:90:5b:9e:3a:ec:15: 0b:92:3a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqF1q2LJ21NfDyP54QchnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGQxNzQ3ZjM1YzBjZDZiMjVmMGIwYTBlNjhkMDQ0MmM5 MzkxNGMwHhcNMjUxMjEzMTcwMDQ1WhcNMjUxMjE0MTcwMDQ1WjAzMTEwLwYDVQQD EyhmZTlkZDRlMDEzZjNkNDJhYTAyNTViYmIyNTQyOWU0MjVhOGUyNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnMFBGsQX2HaP5VMQnIGl9GDxMXp /2Nd8IejEQHNy8isv7fYu8uyJiIFt8oOZLMK5W0P/RiTCmsZkxuIpQqJhxhdrNys KU9hrm8oxnccjKUVKTEiAr+WCf4eNPhp5uwco61ib3TvqidndFeJu02Pk7KZ2Fkg qQTONXBp+yzl/zbvlT3RzEndObZgIK8nZX01T6y5AsQzi9x25/mdYzO6i2FIge2t 0Y3HJ0YzICaUplPn5GBU9z1zwEQrD89eCfdtdUKsBljfxJeJQUaPrtbfJsa87W2p EYhvRy2Dp2piOPbVFaSW2GtGOLIqX88yG8f8AA2Sy9UQ932eEKYOFS3ogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6d1OAT89QqoCVbuyVCnkJajia8MB8GA1UdIwQY MBaAFL9NF0fzXAzWsl8LCg5o0EQsk5FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2Ut N2YxOWU4YzhiODNkLzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2UtN2YxOWU4YzhiODNk LzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9tZ5+fi xNOcVfa2fmPMuVi3gUpXLB3uWUnXy7Iw1Q1aukzHjDT7nccR4ipwd8z3W80Cetlb DoyotarHQ5YjIlfpMPbskvlC3jyaQ0y9QWOML4AmsilAeeGxHVXmK535ftBhzhnD oImJmjjaWQcw3XzXNsEwVhwDph2Ja3mmWUPUh5Hu/OWvu4v4LMAhZEkBZOOiy9B3 3R4QjV7rXnn4TM/n2mOTHGFaf+iUm3YZx2oLUeLY4LU5JFxyHi1oW1NsuT6LNSk7 MliQIxMQwTBy9m1YIJuFXQ9S4pDXlCivHdrD9ct95SVZpQdmHBBd7z/9VyqSrXjS kFueOuwVC5I6Bw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:49 2025 by rpki-client