This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json) Hash identifier: HeZnI4Qz1MmtXEE3vIpAqndJU+SRiJ/vjyyKsAUYcq0= Subject key identifier: A7:E0:04:64:DE:9A:A6:9C:57:3B:E9:19:22:BE:12:2C:C8:3B:B9:61 Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Certificate serial: 019AF2AD9158B5E5B2DE53FE4BD092619180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=) 2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: 7099V384a3R1uEuyRzBEZ89ocpS7N4OiR5zolc/fUaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:91:58:b5:e5:b2:de:53:fe:4b:d0:92:61:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=a7e00464de9aa69c573be91922be122cc83bb961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:ce:12:5c:54:44:5d:c6:de:94:df:12:37: 67:f3:55:fb:35:8d:b6:5b:f7:e4:26:40:f4:da:d2: d0:b2:30:31:aa:e8:9b:b4:b9:ec:c3:19:be:92:37: e2:3a:62:b0:6e:ea:7c:f4:48:33:ce:a3:3e:c0:a7: 18:8c:e4:93:f5:fc:39:80:70:15:ed:41:c4:a0:55: 2d:3f:18:43:c8:3c:0b:a6:41:f7:a4:31:01:85:57: da:d5:08:93:0a:8e:da:58:ec:f8:50:16:16:e6:4f: 67:d3:e4:aa:f6:6c:40:83:b1:14:7c:f2:c8:74:2b: d1:cb:c0:3f:07:85:e5:d4:7e:a7:11:0d:33:ae:15: 3a:e2:89:fe:dc:9d:0c:9d:69:9f:db:bd:d4:0e:f8: 60:41:80:b0:49:6d:ce:a7:47:a9:06:bb:f4:2d:6a: 11:7a:49:90:4c:41:ea:6e:91:f4:ff:f8:c3:96:d0: e8:f5:c6:58:47:19:00:f3:f6:46:c9:b9:c5:24:28: 49:91:34:31:c5:a5:b7:11:eb:c4:a4:3b:fb:34:9e: d3:fa:d8:e2:07:7f:6a:5d:41:94:28:af:5b:42:e8: 6b:da:69:0a:ce:e7:b4:27:8a:2a:cc:3d:9c:31:b0: 53:6f:29:e9:0a:ac:85:5c:21:89:1d:96:de:1d:bc: 19:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E0:04:64:DE:9A:A6:9C:57:3B:E9:19:22:BE:12:2C:C8:3B:B9:61 X509v3 Authority Key Identifier: keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6a:1d:82:64:70:3d:a8:f7:48:60:c7:05:41:ef:97:e6:78: 33:1e:98:b3:94:46:1a:ee:1a:8f:9c:c4:4f:b6:d5:d0:a4:76: 8d:5a:5c:37:53:11:f8:f7:56:57:4d:61:55:d3:09:84:87:b1: cb:c2:df:b5:be:32:89:de:ff:9e:fa:fd:60:1d:cf:4d:65:1b: 69:4a:b0:2f:84:c1:10:bd:42:07:1b:d0:64:64:90:e5:c2:4a: 38:bd:b7:bd:7d:9c:43:32:cf:c1:b7:b9:f5:70:34:af:3f:90: 13:52:eb:5f:88:4e:89:c5:fa:81:2b:74:7b:06:af:62:c5:2b: 3c:3c:29:d6:33:46:59:00:0b:54:ec:4c:94:72:c3:c3:ba:0e: 1c:f5:24:44:c5:d1:f2:fe:62:cb:11:26:45:03:ef:ee:9b:af: 70:4e:3e:28:12:c9:26:77:23:0a:f9:26:bf:55:5b:7c:b8:ad: 4b:cc:a6:5a:d7:c6:51:27:92:3e:0c:85:c8:b9:39:d8:98:d1: c1:ca:4e:e3:bc:de:3e:b8:0d:ab:b1:41:57:e4:83:f2:9e:e8: ea:cc:83:28:35:0d:4d:19:3c:73:e2:af:72:1a:4f:a5:d5:ea: 16:a5:5a:ea:6a:6c:0f:5c:c9:03:6f:d7:5f:63:c3:fe:b4:3d: 71:ad:33:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZFYteWy3lP+S9CSYZGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3 MzMwZjIwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD EyhhN2UwMDQ2NGRlOWFhNjljNTczYmU5MTkyMmJlMTIyY2M4M2JiOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4STOElxURF3G3pTfEjdn81X7NY22 W/fkJkD02tLQsjAxquibtLnswxm+kjfiOmKwbup89EgzzqM+wKcYjOST9fw5gHAV 7UHEoFUtPxhDyDwLpkH3pDEBhVfa1QiTCo7aWOz4UBYW5k9n0+Sq9mxAg7EUfPLI dCvRy8A/B4Xl1H6nEQ0zrhU64on+3J0MnWmf273UDvhgQYCwSW3Op0epBrv0LWoR ekmQTEHqbpH0//jDltDo9cZYRxkA8/ZGybnFJChJkTQxxaW3EevEpDv7NJ7T+tji B39qXUGUKK9bQuhr2mkKzue0J4oqzD2cMbBTbynpCqyFXCGJHZbeHbwZzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfgBGTemqacVzvpGSK+EizIO7lhMB8GA1UdIwQY MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2 LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWodgmRw Paj3SGDHBUHvl+Z4Mx6Ys5RGGu4aj5zET7bV0KR2jVpcN1MR+PdWV01hVdMJhIex y8Lftb4yid7/nvr9YB3PTWUbaUqwL4TBEL1CBxvQZGSQ5cJKOL23vX2cQzLPwbe5 9XA0rz+QE1LrX4hOicX6gSt0ewavYsUrPDwp1jNGWQALVOxMlHLDw7oOHPUkRMXR 8v5iyxEmRQPv7puvcE4+KBLJJncjCvkmv1VbfLitS8ymWtfGUSeSPgyFyLk52JjR wcpO47zePrgNq7FBV+SD8p7o6syDKDUNTRk8c+KvchpPpdXqFqVa6mpsD1zJA2/X X2PD/rQ9ca0zjw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:13 2025 by rpki-client