This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json) Hash identifier: XfZnhOjVnw8go6p6+/4ZWsXilH7FecWc+OVhWb0+5rk= Subject key identifier: C8:19:5B:8B:74:47:6E:17:0F:1B:F8:A6:26:57:3C:C0:4F:D3:32:4A Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1 Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1 Certificate serial: 019BB4A82F6FDDD9B3E2FF3D3AC28EDFD817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft Manifest number: 10C6 Signing time: Tue 13 Jan 2026 00:01:19 +0000 Manifest this update: Tue 13 Jan 2026 00:01:19 +0000 Manifest next update: Wed 14 Jan 2026 00:01:19 +0000 Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: 5ZMg7ER+0H+zHPs5pfOCa5jWiSBvDBzyGDzydeAnWYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 00:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:a8:2f:6f:dd:d9:b3:e2:ff:3d:3a:c2:8e:df:d8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1 Validity Not Before: Jan 13 00:01:19 2026 GMT Not After : Jan 14 00:01:19 2026 GMT Subject: CN=c8195b8b74476e170f1bf8a626573cc04fd3324a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:e9:21:3b:ed:e4:a1:8e:f5:31:57:44:9e: 9d:dc:55:9a:a4:d8:d7:e7:98:ff:05:29:db:48:9c: d6:95:39:e4:86:c9:c9:5b:b2:54:f4:89:6d:44:d1: 25:83:2b:31:da:78:ee:5c:6a:ad:d2:d4:ed:d5:b5: 4b:a2:e8:fd:30:fe:82:04:37:88:cb:57:ea:1e:4e: 23:61:d8:45:49:dc:4b:38:bc:0c:f8:76:b2:91:aa: 63:32:db:9c:0c:2e:cb:32:8f:66:32:b5:97:43:79: ae:35:d3:c0:b2:10:1a:2a:97:84:b4:bf:fe:a9:78: ec:0e:f8:03:cc:45:2b:de:68:11:c9:ee:7b:b6:1d: 09:58:37:fc:84:56:44:fc:7f:e5:2e:b0:90:a0:13: 3f:fd:31:82:66:23:2b:4c:41:b8:0a:e6:ff:13:22: 9d:84:c8:57:07:2e:f8:45:8d:fa:02:de:a9:c2:46: 83:b4:d1:f7:63:56:ee:31:41:b9:f6:69:60:86:95: cc:b4:44:3a:d7:d3:20:df:46:58:f3:15:20:23:dd: 00:f9:14:e5:27:1d:71:14:6d:8c:69:74:a0:f7:dc: 24:c5:2a:30:0a:b4:4b:45:90:4b:eb:dd:a0:db:46: b8:af:d0:86:f9:9d:a3:5d:85:81:58:9e:07:39:58: 25:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:19:5B:8B:74:47:6E:17:0F:1B:F8:A6:26:57:3C:C0:4F:D3:32:4A X509v3 Authority Key Identifier: keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0f:45:82:a5:37:d2:16:eb:5c:78:57:3d:09:44:48:47:0e: 61:da:0d:4d:1f:4b:8f:de:9c:b5:a6:97:1a:01:eb:51:0b:dc: 88:83:bb:6d:48:b3:c3:9e:be:66:10:2c:7f:59:74:be:3d:88: e4:bd:11:aa:aa:b3:02:81:53:9d:82:12:80:04:40:ba:b8:a2: f7:5e:59:f0:b5:37:6a:2f:74:01:a3:3b:24:7d:57:e6:3e:07: 09:63:22:ee:f4:70:e3:97:de:d2:32:0c:44:2c:98:3a:1d:fd: 30:2d:b8:46:e9:ae:a8:9f:d0:c7:5d:52:5b:d6:f3:d7:5f:53: 0d:1b:77:d2:d6:5c:7c:4b:46:b0:d6:80:d2:0f:e1:b2:57:9e: 26:53:cf:d4:c5:29:66:5b:15:4d:0b:11:a8:c2:49:a8:13:6c: 57:62:50:04:86:fb:21:79:aa:4b:82:38:74:4c:24:9b:eb:dc: f9:59:b9:85:67:00:97:03:7e:25:bc:f0:bd:c2:e8:18:15:82: 70:ec:e8:24:f3:ee:52:89:f3:cd:32:6a:2e:62:67:0b:1c:81: 4c:aa:d1:6d:a9:c6:34:9a:12:21:2c:91:67:36:cf:58:68:df: 17:c8:e3:2c:1b:41:dd:77:26:10:8b:4b:3d:55:22:73:96:ec: 68:53:06:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0qC9v3dmz4v89OsKO39gXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmE4NDk2OTIxNDJhZWM1NmQ3ZDBkZGM4ZGQ0ZGRiNDFj ZjgzYzEwHhcNMjYwMTEzMDAwMTE5WhcNMjYwMTE0MDAwMTE5WjAzMTEwLwYDVQQD EyhjODE5NWI4Yjc0NDc2ZTE3MGYxYmY4YTYyNjU3M2NjMDRmZDMzMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdrpITvt5KGO9TFXRJ6d3FWapNjX 55j/BSnbSJzWlTnkhsnJW7JU9IltRNElgysx2njuXGqt0tTt1bVLouj9MP6CBDeI y1fqHk4jYdhFSdxLOLwM+HaykapjMtucDC7LMo9mMrWXQ3muNdPAshAaKpeEtL/+ qXjsDvgDzEUr3mgRye57th0JWDf8hFZE/H/lLrCQoBM//TGCZiMrTEG4Cub/EyKd hMhXBy74RY36At6pwkaDtNH3Y1buMUG59mlghpXMtEQ619Mg30ZY8xUgI90A+RTl Jx1xFG2MaXSg99wkxSowCrRLRZBL692g20a4r9CG+Z2jXYWBWJ4HOVgldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgZW4t0R24XDxv4piZXPMBP0zJKMB8GA1UdIwQY MBaAFMW6hJaSFCrsVtfQ3cjdTdtBz4PBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wNjY4NGMtOTk1NS00MjRiLWFjZTgt MjM3OTdhZWFiYjBmLzEveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8wNjY4NGMtOTk1NS00MjRiLWFjZTgtMjM3OTdhZWFiYjBm LzEveGJxRWxwSVVLdXhXMTlEZHlOMU4yMEhQZzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgA9FgqU3 0hbrXHhXPQlESEcOYdoNTR9Lj96ctaaXGgHrUQvciIO7bUizw56+ZhAsf1l0vj2I 5L0RqqqzAoFTnYISgARAurii915Z8LU3ai90AaM7JH1X5j4HCWMi7vRw45fe0jIM RCyYOh39MC24RumuqJ/Qx11SW9bz119TDRt30tZcfEtGsNaA0g/hsleeJlPP1MUp ZlsVTQsRqMJJqBNsV2JQBIb7IXmqS4I4dEwkm+vc+Vm5hWcAlwN+JbzwvcLoGBWC cOzoJPPuUonzzTJqLmJnCxyBTKrRbanGNJoSISyRZzbPWGjfF8jjLBtB3XcmEItL PVUic5bsaFMGBg== -----END CERTIFICATE-----Generated at Tue Jan 13 09:24:35 2026 by rpki-client