This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json) Hash identifier: eKspQjnzZBz1/4LcEHcxzvGW2LMc3t8+w2PEjOcxOwc= Subject key identifier: 1B:0C:78:8C:A0:84:F3:3D:EE:12:3F:04:AD:22:98:D1:11:4A:6F:30 Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c Certificate serial: 019B47028BADD1CDBBB782B54A64E8D48248 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft Manifest number: 046D Signing time: Mon 22 Dec 2025 17:01:47 +0000 Manifest this update: Mon 22 Dec 2025 17:01:47 +0000 Manifest next update: Tue 23 Dec 2025 17:01:47 +0000 Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: 4be5Ae9ucYS8Ua2cxFrUTdqoEFeFbEsGyYpG1zvZn8U=) 2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:8b:ad:d1:cd:bb:b7:82:b5:4a:64:e8:d4:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c Validity Not Before: Dec 22 17:01:47 2025 GMT Not After : Dec 23 17:01:47 2025 GMT Subject: CN=1b0c788ca084f33dee123f04ad2298d1114a6f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:83:42:b5:57:08:c6:da:57:24:1f:29:20: e8:ee:90:0d:f3:29:95:14:ad:01:42:de:a0:1b:ee: c5:d3:0d:c4:9c:46:33:59:05:72:8f:2c:0e:82:b5: f1:46:59:1f:c1:8c:10:55:92:e4:b6:26:0f:3b:c9: 2c:c5:e4:1d:cd:9a:24:03:ac:26:35:86:83:b9:da: 74:f5:e6:ed:31:da:bf:3d:23:40:22:e1:5f:5a:0a: 09:1d:8b:93:94:d0:d0:1a:fe:fd:a3:ce:20:27:21: c5:31:52:e6:dd:bf:53:25:37:ca:0c:af:7b:0c:61: 34:a9:c2:24:c2:06:f3:64:73:5e:4f:d5:4f:ed:13: 04:fa:91:1b:2b:c3:49:8c:4a:01:05:b0:14:ca:7f: 4d:76:53:23:80:d7:39:e8:79:0d:94:59:16:51:91: fb:0e:23:df:4a:16:91:33:70:6d:7b:b5:9a:4e:f2: 6f:0b:41:39:27:a5:41:02:af:c6:cb:ff:3e:3c:81: e6:9c:91:85:99:e2:c7:10:4d:bf:df:a2:d0:e6:e3: d0:42:43:8d:aa:9f:8d:42:2e:3e:2e:b2:a1:43:33: a0:68:04:cf:a7:3f:03:6e:2f:9f:fd:03:e9:5e:11: b9:d4:c7:ce:e5:48:b7:a8:59:5a:d2:4c:01:00:57: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0C:78:8C:A0:84:F3:3D:EE:12:3F:04:AD:22:98:D1:11:4A:6F:30 X509v3 Authority Key Identifier: keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a7:33:be:5e:10:60:8b:b8:41:fd:aa:18:05:3f:a7:5a:81: fe:85:2c:e7:e8:27:97:bf:dd:57:1b:e0:1e:a2:66:a4:c2:3c: 3f:c5:5d:68:31:e0:e0:15:93:95:86:bb:3c:77:33:bb:ec:bf: a1:17:23:4a:63:0e:44:9b:24:f3:55:6f:ea:12:cf:37:ab:47: 81:a8:92:f8:fd:7b:c1:13:f0:53:ce:a1:b0:a3:65:2f:ef:e4: 77:a6:6d:96:75:9d:56:aa:ca:fb:ca:07:98:55:cc:e4:ab:89: fb:1b:52:9f:65:1e:cc:b9:a5:6c:39:55:45:eb:a3:55:1f:ae: 79:70:a7:e8:ed:d1:53:06:13:32:7d:01:80:84:bc:45:aa:82: 31:87:28:19:b5:ab:0e:dc:fc:a7:2d:de:b2:d1:d4:4b:c1:2f: 15:a4:6e:cc:99:a5:45:55:97:26:c6:6f:79:dc:fe:fb:6c:b8: 12:d9:0a:92:4e:58:31:23:f4:bf:8d:88:96:20:78:fd:0b:06: 38:41:89:57:8f:c0:94:de:52:2e:4a:73:5b:40:c0:01:72:12: 1e:20:de:7d:58:0e:eb:a0:46:70:cb:b4:b5:d5:00:37:17:bf: f5:33:c7:ae:16:07:18:ee:5c:05:43:85:63:ab:2b:70:79:6e: ef:6a:5f:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAout0c27t4K1SmTo1IJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGQxNzQ3ZjM1YzBjZDZiMjVmMGIwYTBlNjhkMDQ0MmM5 MzkxNGMwHhcNMjUxMjIyMTcwMTQ3WhcNMjUxMjIzMTcwMTQ3WjAzMTEwLwYDVQQD EygxYjBjNzg4Y2EwODRmMzNkZWUxMjNmMDRhZDIyOThkMTExNGE2ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7qDQrVXCMbaVyQfKSDo7pAN8ymV FK0BQt6gG+7F0w3EnEYzWQVyjywOgrXxRlkfwYwQVZLktiYPO8ksxeQdzZokA6wm NYaDudp09ebtMdq/PSNAIuFfWgoJHYuTlNDQGv79o84gJyHFMVLm3b9TJTfKDK97 DGE0qcIkwgbzZHNeT9VP7RME+pEbK8NJjEoBBbAUyn9NdlMjgNc56HkNlFkWUZH7 DiPfShaRM3Bte7WaTvJvC0E5J6VBAq/Gy/8+PIHmnJGFmeLHEE2/36LQ5uPQQkON qp+NQi4+LrKhQzOgaATPpz8Dbi+f/QPpXhG51MfO5Ui3qFla0kwBAFd6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsMeIyghPM97hI/BK0imNERSm8wMB8GA1UdIwQY MBaAFL9NF0fzXAzWsl8LCg5o0EQsk5FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2Ut N2YxOWU4YzhiODNkLzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2UtN2YxOWU4YzhiODNk LzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6czvl4Q YIu4Qf2qGAU/p1qB/oUs5+gnl7/dVxvgHqJmpMI8P8VdaDHg4BWTlYa7PHczu+y/ oRcjSmMORJsk81Vv6hLPN6tHgaiS+P17wRPwU86hsKNlL+/kd6ZtlnWdVqrK+8oH mFXM5KuJ+xtSn2UezLmlbDlVReujVR+ueXCn6O3RUwYTMn0BgIS8RaqCMYcoGbWr Dtz8py3estHUS8EvFaRuzJmlRVWXJsZvedz++2y4EtkKkk5YMSP0v42IliB4/QsG OEGJV4/AlN5SLkpzW0DAAXISHiDefVgO66BGcMu0tdUANxe/9TPHrhYHGO5cBUOF Y6srcHlu72pfaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:03 2025 by rpki-client