This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json) Hash identifier: 11fMeajJXYys3M2cuZ+nlON5ivh6BoEDFYYvFmKGOBY= Subject key identifier: 3C:A4:46:58:44:FF:BE:6A:1E:8D:D1:DE:61:03:16:C0:80:02:AB:0D Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1 Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1 Certificate serial: 019AF19B3369CC590C006D6F50FF02A52B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft Manifest number: 1061 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: qgbZVJlNVAoIEENli/U/i+X9HffcfPhP6evdvHQqxIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:33:69:cc:59:0c:00:6d:6f:50:ff:02:a5:2b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=3ca4465844ffbe6a1e8dd1de610316c08002ab0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:34:8a:10:74:c5:b7:20:0f:74:68:02:6f: 68:e7:3c:52:f4:62:79:58:0c:63:78:16:22:2f:82: c7:ae:ac:79:b3:ed:73:cb:a9:43:3c:9a:94:82:05: a6:7e:21:bf:4b:c3:72:ec:11:f0:b9:3e:4c:60:24: 43:c0:e5:04:83:e1:73:a0:36:b0:96:c8:cb:aa:e4: 1c:25:a1:f0:c9:57:d7:e5:ba:60:28:fd:8d:48:35: ba:cd:8c:73:9a:06:c3:09:e7:9d:d0:5b:2a:4a:d2: 00:70:4e:63:87:f9:1c:9a:4c:6a:d7:51:6c:3e:3d: 9b:9a:6e:3d:21:2a:f7:43:d8:c7:0c:35:1a:50:1f: 7a:27:a0:82:47:20:d3:92:46:69:29:0a:bb:8e:65: 9b:3e:9d:68:94:be:df:a3:68:14:c9:7c:f6:9a:10: c7:ea:09:a1:e6:6b:b2:83:67:f5:b5:55:65:4c:9b: 71:6e:c8:3a:ae:72:53:c5:6c:23:41:af:60:c6:64: ed:04:c0:d0:a6:a2:bb:45:7e:8b:ba:94:9d:1f:d0: a8:ff:69:84:00:f7:eb:51:a0:6a:16:1f:15:b0:e0: 7c:85:d6:63:aa:5b:6f:b4:c1:47:3a:d4:51:82:7f: c7:17:46:c4:f7:7b:44:0a:2f:46:d3:1e:3c:12:90: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A4:46:58:44:FF:BE:6A:1E:8D:D1:DE:61:03:16:C0:80:02:AB:0D X509v3 Authority Key Identifier: keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:5b:61:33:48:b2:a9:85:20:b5:6b:29:d0:2b:94:25:58:a4: 79:b6:d1:fb:a4:cf:17:42:43:8b:6c:f6:cd:cf:30:c8:6f:4f: 90:a5:33:c2:a7:ec:fb:2e:47:14:24:0b:82:32:a9:9b:07:dc: 2f:44:fb:4a:6d:c8:cb:c2:05:fc:18:05:94:00:f0:a1:1f:21: f2:e0:4a:78:22:c2:c4:8f:d1:d5:25:62:49:29:99:bb:14:49: cd:6c:eb:54:1f:fb:af:61:b2:86:5d:59:1f:41:5c:76:eb:fe: 8f:7e:18:a1:7e:56:8b:f1:a9:a4:32:4e:c4:1c:22:8f:a9:56: 95:8e:1a:e0:7a:31:4b:63:37:10:8e:77:2d:4d:72:a0:45:1e: 1d:70:29:6f:17:2e:d7:bc:18:61:19:fa:c8:7a:f7:54:d4:92: 02:c0:ef:4b:05:00:37:a6:86:4f:00:f1:26:ab:54:86:37:75: 3d:1c:e9:89:03:cf:08:47:f9:d2:ed:fd:00:4e:b4:c3:51:80: 55:7b:c3:d9:b4:81:f3:48:31:84:79:1d:08:35:9c:79:20:72: 9f:b2:e4:e9:58:87:41:a4:ff:ef:e3:c4:16:b9:e3:b6:ce:bd: 39:b4:fd:7f:54:6c:a7:4c:49:05:a3:0e:e7:fb:ae:24:0b:6d: 72:25:c3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzNpzFkMAG1vUP8CpSuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmE4NDk2OTIxNDJhZWM1NmQ3ZDBkZGM4ZGQ0ZGRiNDFj ZjgzYzEwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EygzY2E0NDY1ODQ0ZmZiZTZhMWU4ZGQxZGU2MTAzMTZjMDgwMDJhYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfA0ihB0xbcgD3RoAm9o5zxS9GJ5 WAxjeBYiL4LHrqx5s+1zy6lDPJqUggWmfiG/S8Ny7BHwuT5MYCRDwOUEg+FzoDaw lsjLquQcJaHwyVfX5bpgKP2NSDW6zYxzmgbDCeed0FsqStIAcE5jh/kcmkxq11Fs Pj2bmm49ISr3Q9jHDDUaUB96J6CCRyDTkkZpKQq7jmWbPp1olL7fo2gUyXz2mhDH 6gmh5muyg2f1tVVlTJtxbsg6rnJTxWwjQa9gxmTtBMDQpqK7RX6LupSdH9Co/2mE APfrUaBqFh8VsOB8hdZjqltvtMFHOtRRgn/HF0bE93tECi9G0x48EpAv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDykRlhE/75qHo3R3mEDFsCAAqsNMB8GA1UdIwQY MBaAFMW6hJaSFCrsVtfQ3cjdTdtBz4PBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wNjY4NGMtOTk1NS00MjRiLWFjZTgt MjM3OTdhZWFiYjBmLzEveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8wNjY4NGMtOTk1NS00MjRiLWFjZTgtMjM3OTdhZWFiYjBm LzEveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFthM0iy qYUgtWsp0CuUJVikebbR+6TPF0JDi2z2zc8wyG9PkKUzwqfs+y5HFCQLgjKpmwfc L0T7Sm3Iy8IF/BgFlADwoR8h8uBKeCLCxI/R1SViSSmZuxRJzWzrVB/7r2Gyhl1Z H0Fcduv+j34YoX5Wi/GppDJOxBwij6lWlY4a4HoxS2M3EI53LU1yoEUeHXApbxcu 17wYYRn6yHr3VNSSAsDvSwUAN6aGTwDxJqtUhjd1PRzpiQPPCEf50u39AE60w1GA VXvD2bSB80gxhHkdCDWceSByn7Lk6ViHQaT/7+PEFrnjts69ObT9f1Rsp0xJBaMO 5/uuJAttciXDdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:35 2025 by rpki-client