This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft File: xq11SrfApAHA_x08Ensn1T_cyYE.mft (raw, json) Hash identifier: X5EvyTcFUNXG76GaYL10hZEV1npCuElnJDhBjXhMID0= Subject key identifier: 7B:DF:4D:37:85:36:1B:A7:F4:15:1E:3E:08:77:CF:EA:24:F8:5F:76 Authority key identifier: C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81 Certificate issuer: /CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981 Certificate serial: 019B41A48B93D26B1BBBF4BA572626DB30DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 16:01:01 +0000 Manifest this update: Sun 21 Dec 2025 16:01:01 +0000 Manifest next update: Mon 22 Dec 2025 16:01:01 +0000 Files and hashes: 1: xq11SrfApAHA_x08Ensn1T_cyYE.crl (hash: L0NW7e0AdbhXeoCa96AEk8x5Zy8DcmL9q0pwoKQVpR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:8b:93:d2:6b:1b:bb:f4:ba:57:26:26:db:30:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ad754ab7c0a401c0ff1d3c127b27d53fdcc981 Validity Not Before: Dec 21 16:01:01 2025 GMT Not After : Dec 22 16:01:01 2025 GMT Subject: CN=7bdf4d3785361ba7f4151e3e0877cfea24f85f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:f3:44:c1:dc:9d:1d:05:6f:a3:3f:93:06: 10:df:75:e2:dd:4e:d2:10:bb:6d:b9:b0:8d:de:e0: 58:8b:d6:41:42:1a:ff:78:3c:94:a4:a3:21:dd:29: 27:ee:da:69:ed:2c:d0:f9:1a:e4:31:fc:fc:f0:3d: ee:8c:57:ee:c1:59:3c:39:39:70:8a:b4:b6:a9:55: a3:69:f9:8b:71:5f:8b:d8:73:64:f2:5e:04:9e:95: 28:35:53:9f:2c:b9:86:e4:81:6d:18:32:b5:42:e5: fc:ad:9b:7f:42:70:9b:9d:4e:76:30:58:40:ea:09: 57:68:41:81:f8:7c:b9:34:9d:12:26:84:36:0a:81: 93:9e:01:e9:d0:11:ec:75:b4:14:07:b4:29:a9:6c: 71:d2:a9:c2:ad:9a:18:ff:08:d9:c5:fd:25:4a:f4: 45:2e:36:47:69:20:9b:31:5a:dc:f2:7b:9f:18:ba: 7a:c9:f8:b4:53:32:9e:a1:f4:03:6b:56:ec:a7:50: 4a:d9:3e:3b:fa:20:11:e7:99:20:12:3e:78:b6:f6: 42:a1:0e:84:1c:1a:d5:6a:4c:74:79:aa:a7:e0:5c: 10:b4:a7:dc:89:be:82:47:39:b3:db:88:a4:4c:95: d7:45:5e:c3:ec:01:7f:e2:37:66:06:e2:5f:e3:ad: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DF:4D:37:85:36:1B:A7:F4:15:1E:3E:08:77:CF:EA:24:F8:5F:76 X509v3 Authority Key Identifier: keyid:C6:AD:75:4A:B7:C0:A4:01:C0:FF:1D:3C:12:7B:27:D5:3F:DC:C9:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xq11SrfApAHA_x08Ensn1T_cyYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4c3133-cb98-4eae-abce-ba33d36755df/1/xq11SrfApAHA_x08Ensn1T_cyYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3f:d6:39:c8:8c:12:28:71:0c:f4:47:90:1b:a9:4a:93:c8: 14:f1:0d:7b:c5:a3:b0:0c:27:22:73:7b:94:1e:fc:98:61:e9: d0:5e:25:2b:95:73:81:59:d3:06:b2:74:34:cc:86:0c:7e:2f: 2b:c6:bf:8f:cc:8c:0d:20:b5:c8:c7:63:a3:6d:3c:9f:03:e5: 60:da:d7:a0:67:8e:33:d2:d5:8e:85:e8:23:36:38:52:68:0d: 3d:ee:fe:6d:73:f2:0e:91:27:ec:85:0c:04:c0:7b:7f:bf:2e: ac:f9:34:1c:19:7b:52:63:e5:da:7a:f7:c0:46:76:52:ba:14: 8c:16:de:fa:53:ed:a0:44:92:b7:3e:ac:12:25:7d:81:c9:bd: 66:df:4d:8d:0b:1b:ca:aa:79:ec:ed:66:49:9a:ea:3a:f6:e0: ef:84:09:50:e2:d2:ed:e1:e9:ed:71:af:58:0e:e9:64:13:da: 1e:ed:ff:3f:ba:75:c0:c9:6d:e8:5c:a3:02:51:ba:df:5b:c8: 57:59:e7:a9:5a:80:01:1a:4a:01:75:ba:de:90:f4:00:99:c0: d3:a2:cb:fa:1b:51:7c:24:7a:22:b8:60:41:f2:a8:9d:45:4f: 6c:dc:ca:3b:a9:50:b3:d6:f7:8a:05:dc:21:26:79:fe:59:e0: b6:c5:d9:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpIuT0msbu/S6VyYm2zDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YWQ3NTRhYjdjMGE0MDFjMGZmMWQzYzEyN2IyN2Q1M2Zk Y2M5ODEwHhcNMjUxMjIxMTYwMTAxWhcNMjUxMjIyMTYwMTAxWjAzMTEwLwYDVQQD Eyg3YmRmNGQzNzg1MzYxYmE3ZjQxNTFlM2UwODc3Y2ZlYTI0Zjg1Zjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseTzRMHcnR0Fb6M/kwYQ33Xi3U7S ELttubCN3uBYi9ZBQhr/eDyUpKMh3Skn7tpp7SzQ+RrkMfz88D3ujFfuwVk8OTlw irS2qVWjafmLcV+L2HNk8l4EnpUoNVOfLLmG5IFtGDK1QuX8rZt/QnCbnU52MFhA 6glXaEGB+Hy5NJ0SJoQ2CoGTngHp0BHsdbQUB7QpqWxx0qnCrZoY/wjZxf0lSvRF LjZHaSCbMVrc8nufGLp6yfi0UzKeofQDa1bsp1BK2T47+iAR55kgEj54tvZCoQ6E HBrVakx0eaqn4FwQtKfcib6CRzmz24ikTJXXRV7D7AF/4jdmBuJf463DywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvfTTeFNhun9BUePgh3z+ok+F92MB8GA1UdIwQY MBaAFMatdUq3wKQBwP8dPBJ7J9U/3MmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YzMxMzMtY2I5OC00ZWFlLWFiY2Ut YmEzM2QzNjc1NWRmLzEveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YzMxMzMtY2I5OC00ZWFlLWFiY2UtYmEzM2QzNjc1NWRm LzEveHExMVNyZkFwQUhBX3gwOEVuc24xVF9jeVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdj/WOciM EihxDPRHkBupSpPIFPENe8WjsAwnInN7lB78mGHp0F4lK5VzgVnTBrJ0NMyGDH4v K8a/j8yMDSC1yMdjo208nwPlYNrXoGeOM9LVjoXoIzY4UmgNPe7+bXPyDpEn7IUM BMB7f78urPk0HBl7UmPl2nr3wEZ2UroUjBbe+lPtoESStz6sEiV9gcm9Zt9NjQsb yqp57O1mSZrqOvbg74QJUOLS7eHp7XGvWA7pZBPaHu3/P7p1wMlt6FyjAlG631vI V1nnqVqAARpKAXW63pD0AJnA06LL+htRfCR6IrhgQfKonUVPbNzKO6lQs9b3igXc ISZ5/lngtsXZqw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:56 2025 by rpki-client