This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json) Hash identifier: Lz1WVDF4yZfL0sJEHlF/koqINc4ImG3P3IMnzdZao2M= Subject key identifier: 06:AD:5B:6B:E9:1A:61:75:F2:47:B5:4A:58:BA:ED:2C:16:86:63:07 Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81 Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981 Certificate serial: 019AF276BC730CB4E7F1B39FFB7C794B2777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: P3X+2oWHfPzhC07CB5/plxyPkz0dSpA3xfEzzzmp3qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bc:73:0c:b4:e7:f1:b3:9f:fb:7c:79:4b:27:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=06ad5b6be91a6175f247b54a58baed2c16866307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:d3:62:35:6f:d5:06:59:af:75:b3:92:5d: 65:3b:47:f8:23:ba:c3:1f:d6:97:a9:20:c1:c2:df: 11:2d:d4:ae:9f:fb:03:a0:0c:bd:f2:75:9d:92:74: 42:69:59:cc:2c:c7:5d:06:56:0d:91:ae:5c:3b:ba: 5b:fb:84:81:9b:4c:5f:7c:98:49:77:5d:0b:2c:fa: 11:1a:6e:ce:3a:13:67:0e:f1:fb:52:99:29:8b:bc: 32:08:96:6f:f0:41:1c:d1:00:54:42:c6:aa:56:2d: ce:da:42:6e:98:75:84:06:b8:00:88:8e:bf:f8:df: 68:11:41:1e:5e:82:bb:96:48:d7:c3:db:c4:f6:dd: 17:1a:03:62:7d:c3:56:7b:4c:17:5b:f5:db:13:7a: 5a:31:e1:1d:3f:87:fc:ff:cd:df:9d:a6:f0:cc:03: 57:5d:6d:68:81:59:a6:03:d8:df:57:e9:17:16:df: fe:26:25:67:1b:c1:54:39:f2:fd:04:1f:16:2f:d6: 20:8c:69:b7:92:a9:56:60:42:21:d7:e3:3a:db:16: 09:b6:8f:bc:27:7c:4c:73:d8:c3:06:d0:80:5a:3f: 1b:21:23:fb:f4:b0:53:8b:1f:cb:71:f5:de:a2:91: fa:43:41:1f:bd:22:8b:26:95:4c:cb:c2:0e:34:42: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AD:5B:6B:E9:1A:61:75:F2:47:B5:4A:58:BA:ED:2C:16:86:63:07 X509v3 Authority Key Identifier: keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e7:a0:33:b9:61:49:dd:2c:44:18:37:b3:b1:74:35:f9:b4: eb:01:cf:b1:f1:3f:46:00:30:13:38:88:8d:c9:1f:85:e7:b4: 22:d3:b1:3b:ea:2c:e4:29:85:c4:0e:01:a5:a2:d0:86:ac:d0: f1:6e:13:04:94:be:c1:d5:93:56:0b:f6:3e:f3:58:80:77:66: 54:9d:13:b6:4b:04:97:e9:30:13:0a:1d:59:3d:f8:a8:ef:05: 0e:de:17:8c:e9:d2:b2:19:37:70:9d:ea:7d:6d:f3:94:d0:0f: a8:11:8b:f9:31:d3:2c:7f:49:b1:ff:55:21:a4:d5:3a:81:a1: 33:66:6d:38:e6:fa:bf:e2:8a:58:fc:c8:12:cc:ce:c4:6e:f5: 6a:29:b6:33:67:b5:ff:1d:39:70:64:1e:de:fb:2e:af:13:5a: e4:cd:ae:25:5f:eb:94:66:52:f0:64:f6:a2:cf:0d:3b:4c:7b: 32:87:d9:9a:18:a4:b9:ad:fd:30:05:97:58:94:d1:74:c4:b3: f1:58:5f:e5:64:df:3d:c7:80:5f:fa:ac:fe:58:fa:43:12:04: 63:47:5c:c6:63:f1:1c:0e:21:24:71:67:aa:e6:de:c8:36:3b: 77:91:54:0c:51:35:d1:1d:bf:02:14:e6:43:e3:41:ed:27:51: 47:4f:6d:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrxzDLTn8bOf+3x5Syd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YWQ3NTRhYjdjMGE0MDFjMGZmMWQzYzEyN2IyN2Q1M2Zk Y2M5ODEwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EygwNmFkNWI2YmU5MWE2MTc1ZjI0N2I1NGE1OGJhZWQyYzE2ODY2MzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws/TYjVv1QZZr3Wzkl1lO0f4I7rD H9aXqSDBwt8RLdSun/sDoAy98nWdknRCaVnMLMddBlYNka5cO7pb+4SBm0xffJhJ d10LLPoRGm7OOhNnDvH7Upkpi7wyCJZv8EEc0QBUQsaqVi3O2kJumHWEBrgAiI6/ +N9oEUEeXoK7lkjXw9vE9t0XGgNifcNWe0wXW/XbE3paMeEdP4f8/83fnabwzANX XW1ogVmmA9jfV+kXFt/+JiVnG8FUOfL9BB8WL9YgjGm3kqlWYEIh1+M62xYJto+8 J3xMc9jDBtCAWj8bISP79LBTix/LcfXeopH6Q0EfvSKLJpVMy8IONEIerwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAatW2vpGmF18ke1Sli67SwWhmMHMB8GA1UdIwQY MBaAFMatdUq3wKQBwP8dPBJ7J9U/3MmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YzMxMzMtY2I5OC00ZWFlLWFiY2Ut YmEzM2QzNjc1NWRmLzEveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YzMxMzMtY2I5OC00ZWFlLWFiY2UtYmEzM2QzNjc1NWRm LzEveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeegM7lh Sd0sRBg3s7F0Nfm06wHPsfE/RgAwEziIjckfhee0ItOxO+os5CmFxA4BpaLQhqzQ 8W4TBJS+wdWTVgv2PvNYgHdmVJ0TtksEl+kwEwodWT34qO8FDt4XjOnSshk3cJ3q fW3zlNAPqBGL+THTLH9Jsf9VIaTVOoGhM2ZtOOb6v+KKWPzIEszOxG71aim2M2e1 /x05cGQe3vsurxNa5M2uJV/rlGZS8GT2os8NO0x7MofZmhikua39MAWXWJTRdMSz 8Vhf5WTfPceAX/qs/lj6QxIEY0dcxmPxHA4hJHFnqubeyDY7d5FUDFE10R2/AhTm Q+NB7SdRR09tVg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:58 2025 by rpki-client