This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json) Hash identifier: OQ2xR7/cjPuYPhy45Rh2CWpGdPYXVSXrDqkndkRwisk= Subject key identifier: 9A:D2:58:EB:F2:8D:14:70:C5:22:F9:A0:81:C9:24:97:CD:FA:4E:60 Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Certificate serial: 019B533CBA672C653FB12BA7F3EA6E438211 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft Manifest number: 0CF6 Signing time: Thu 25 Dec 2025 02:00:47 +0000 Manifest this update: Thu 25 Dec 2025 02:00:47 +0000 Manifest next update: Fri 26 Dec 2025 02:00:47 +0000 Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=) 2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: P6SM17Wm8zKi8xCtSLbMh1Pnsy96eqC/eww2vvtXz+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:ba:67:2c:65:3f:b1:2b:a7:f3:ea:6e:43:82:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84 Validity Not Before: Dec 25 02:00:47 2025 GMT Not After : Dec 26 02:00:47 2025 GMT Subject: CN=9ad258ebf28d1470c522f9a081c92497cdfa4e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:d9:20:00:1e:f4:be:74:8b:cb:11:ea:8c: 82:d6:50:81:10:ff:29:25:b3:9f:5d:94:2d:24:ab: 33:f6:a9:9b:6b:51:02:40:0c:10:c5:8a:d3:9d:1c: 1b:3b:96:c6:c7:c4:54:50:13:af:27:e0:49:ce:fc: 6e:19:66:45:b7:45:62:62:97:de:a1:7b:e2:04:20: 01:df:ef:e1:f9:4b:63:aa:9f:08:15:de:e4:7d:dd: 8d:1a:b2:8c:cb:22:29:ba:15:02:ce:38:4d:ae:17: 25:6e:76:71:e5:04:5c:1b:5d:ee:14:51:d9:3e:0e: 87:b9:a1:50:c4:a0:c9:42:47:d6:ba:17:77:0e:35: 1a:e0:cf:40:c4:65:e8:a7:26:8a:01:a3:f9:79:57: 7d:e8:9f:8c:b0:03:99:98:3b:55:5b:66:63:75:15: 45:fe:41:75:cb:ef:80:c4:56:93:2a:10:f8:22:b9: a0:fd:aa:4d:00:0c:eb:6e:c2:ea:ee:3d:e4:2d:4c: 67:46:d4:1a:29:48:49:b2:f1:aa:70:d7:c2:0e:6e: 23:53:fc:78:d5:3f:2c:d3:f4:62:d8:5e:ab:8e:7e: 9c:89:ce:d4:fa:d8:99:26:bd:16:ae:08:45:11:3a: 0f:a8:c0:6f:02:8c:d6:d2:57:79:ba:03:a7:50:b7: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D2:58:EB:F2:8D:14:70:C5:22:F9:A0:81:C9:24:97:CD:FA:4E:60 X509v3 Authority Key Identifier: keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bb:3e:73:63:e5:59:db:d3:ce:9a:c5:0e:49:2c:16:5b:33: 8a:d7:27:be:49:27:46:58:06:b7:74:41:4f:47:0d:1c:fd:2c: bf:21:6a:ea:7d:80:2d:02:a5:3d:f8:a6:3d:bd:f7:cb:71:56: 38:75:66:23:28:dd:5a:b5:09:03:89:48:cd:17:cb:04:85:2e: 16:c0:63:b9:93:92:4e:e8:2e:76:db:71:c5:cb:1f:30:24:b6: 10:63:41:98:bb:49:66:14:17:02:14:be:b6:11:31:72:4c:1a: 48:62:08:65:47:24:0a:98:58:37:c6:10:14:1b:99:c5:1a:f9: fd:4a:c9:f1:fa:be:6a:91:87:8c:05:42:19:97:1c:ba:96:7c: 66:3c:02:a9:d1:67:d3:ad:38:d8:e0:f2:3f:d7:87:9b:80:04: 69:58:34:24:9a:76:9c:7a:8d:4a:1b:35:95:e9:bf:8f:46:df: 00:73:b7:56:7a:f7:78:4a:29:5c:ce:d5:14:e8:db:da:08:c0: 9d:b6:fd:0c:fc:02:e2:d6:19:29:94:1e:72:31:e1:3d:0c:a8: 55:66:6e:0b:52:18:d8:90:69:07:f3:37:38:41:bc:93:db:5c: b0:73:49:40:9e:76:c2:1c:7b:5b:5b:e9:1c:2d:c7:06:30:96: 4d:75:f0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPLpnLGU/sSun8+puQ4IRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTA5MWQzNDcwM2MwM2VmOGY4ZDI5Y2JiZGNkOThjM2U3 MDZmODQwHhcNMjUxMjI1MDIwMDQ3WhcNMjUxMjI2MDIwMDQ3WjAzMTEwLwYDVQQD Eyg5YWQyNThlYmYyOGQxNDcwYzUyMmY5YTA4MWM5MjQ5N2NkZmE0ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEzZIAAe9L50i8sR6oyC1lCBEP8p JbOfXZQtJKsz9qmba1ECQAwQxYrTnRwbO5bGx8RUUBOvJ+BJzvxuGWZFt0ViYpfe oXviBCAB3+/h+Utjqp8IFd7kfd2NGrKMyyIpuhUCzjhNrhclbnZx5QRcG13uFFHZ Pg6HuaFQxKDJQkfWuhd3DjUa4M9AxGXopyaKAaP5eVd96J+MsAOZmDtVW2ZjdRVF /kF1y++AxFaTKhD4Irmg/apNAAzrbsLq7j3kLUxnRtQaKUhJsvGqcNfCDm4jU/x4 1T8s0/Ri2F6rjn6cic7U+tiZJr0WrghFEToPqMBvAozW0ld5ugOnULcJtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrSWOvyjRRwxSL5oIHJJJfN+k5gMB8GA1UdIwQY MBaAFMQQkdNHA8A++PjSnLvc2Yw+cG+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQt ZjdlN2JiMDE0ZGI4LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yNzg5NTItOTM1My00YWZkLWEwMGQtZjdlN2JiMDE0ZGI4 LzEveEJDUjAwY0R3RDc0LU5LY3U5elpqRDV3YjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErs+c2Pl WdvTzprFDkksFlszitcnvkknRlgGt3RBT0cNHP0svyFq6n2ALQKlPfimPb33y3FW OHVmIyjdWrUJA4lIzRfLBIUuFsBjuZOSTugudttxxcsfMCS2EGNBmLtJZhQXAhS+ thExckwaSGIIZUckCphYN8YQFBuZxRr5/UrJ8fq+apGHjAVCGZccupZ8ZjwCqdFn 06042ODyP9eHm4AEaVg0JJp2nHqNShs1lem/j0bfAHO3Vnr3eEopXM7VFOjb2gjA nbb9DPwC4tYZKZQecjHhPQyoVWZuC1IY2JBpB/M3OEG8k9tcsHNJQJ52whx7W1vp HC3HBjCWTXXwhA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:51 2025 by rpki-client