This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json) Hash identifier: 6suMNSBT1lSGGSpI3FP+tV0c7ohTWiDxc1ohZqp6E0Q= Subject key identifier: B8:71:02:ED:9A:6C:B5:38:07:74:08:49:DB:EB:65:37:D5:D8:54:26 Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Certificate serial: 019B514EBA88517F0E358E84ED6FAA939B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 17:01:12 +0000 Manifest this update: Wed 24 Dec 2025 17:01:12 +0000 Manifest next update: Thu 25 Dec 2025 17:01:12 +0000 Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=) 2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: uOL2X7UAwssxtx4ty27bh5Bg4w/mkuq8Z+92C+k63aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:ba:88:51:7f:0e:35:8e:84:ed:6f:aa:93:9b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Validity Not Before: Dec 24 17:01:12 2025 GMT Not After : Dec 25 17:01:12 2025 GMT Subject: CN=b87102ed9a6cb53807740849dbeb6537d5d85426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:a7:22:a5:25:5e:b2:d5:3b:81:0e:c7:50: 24:55:41:09:8c:f9:db:ef:f4:55:33:64:60:5c:f3: 61:e7:dd:84:cd:c8:56:76:47:d8:9b:45:94:41:d1: 31:27:92:f7:b9:fd:b6:6a:78:ce:43:e9:20:a2:3e: ee:4e:d2:17:d8:46:c6:02:48:13:b5:e7:16:f3:b8: e8:13:1c:f7:87:c0:60:c6:93:f0:1d:ec:cb:ac:4f: 45:65:84:17:59:bd:23:12:64:7e:24:f5:b4:d2:d7: e3:e1:d3:b5:9b:a6:45:a7:03:34:51:2c:77:0f:0e: 5f:f3:eb:0c:e6:35:90:8f:c2:49:c3:87:7b:82:39: 22:2c:80:69:26:9c:b0:e5:39:a1:e6:49:93:af:b2: be:15:3d:ef:79:bb:4b:7c:68:19:12:d7:41:0e:73: 50:9c:c2:31:d9:84:2a:91:71:4a:8a:5e:b0:14:87: 7c:3b:b1:86:52:c9:74:cb:f9:25:8d:16:d9:1b:fc: 9d:de:63:23:99:21:d8:7d:02:16:7b:cd:7b:d4:6d: df:49:cf:4b:e3:4e:c6:33:36:6f:64:e9:f5:3d:13: 6c:1e:fa:e1:f8:ae:aa:27:7d:b3:ee:d9:72:45:4e: 03:13:68:77:9d:c0:63:0b:17:29:3a:5c:b1:08:2f: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:71:02:ED:9A:6C:B5:38:07:74:08:49:DB:EB:65:37:D5:D8:54:26 X509v3 Authority Key Identifier: keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ea:e1:bf:f9:08:9f:a7:cc:51:99:e9:84:89:3c:da:4d:5b: 90:09:56:9d:3b:cb:ff:9f:bd:9c:68:98:35:d6:ea:f0:6a:30: d9:36:a7:77:d9:91:7c:e4:a8:7b:43:2e:c5:29:97:80:af:89: da:d2:b9:9f:be:96:68:d6:fa:3a:2c:bb:a8:0d:85:63:18:fb: 83:e3:6f:b0:62:62:66:83:e0:a4:12:de:7d:ad:c9:37:b1:57: 4f:7a:96:b6:f6:95:9b:66:13:9a:6a:b8:ed:ed:7e:ea:95:9f: 6b:75:06:98:86:6f:66:a1:ee:02:72:0e:29:1c:ac:6d:5a:a7: c1:40:ba:0f:4f:92:92:6c:6d:63:2f:b6:d1:8e:bf:58:08:f1: a7:c8:a1:df:85:4f:9d:bc:c7:22:c9:b7:3c:2b:91:b7:8e:0c: 86:88:f3:bf:7f:db:36:72:55:df:82:30:a9:9e:77:51:c0:3f: d0:a2:59:81:43:8a:cb:43:71:83:31:db:65:9e:ff:ea:bb:8e: e5:f4:d2:4a:f4:3d:42:9c:c2:4a:ba:01:77:e1:f0:fe:2a:97: c5:da:9c:fa:c9:ff:50:08:26:71:94:7b:94:19:7d:54:51:de: 80:ee:8a:56:3c:74:43:0b:f0:1d:24:05:06:ff:49:bb:5d:79: 11:31:7e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTrqIUX8ONY6E7W+qk5uUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3 MzMwZjIwHhcNMjUxMjI0MTcwMTEyWhcNMjUxMjI1MTcwMTEyWjAzMTEwLwYDVQQD EyhiODcxMDJlZDlhNmNiNTM4MDc3NDA4NDlkYmViNjUzN2Q1ZDg1NDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rOnIqUlXrLVO4EOx1AkVUEJjPnb 7/RVM2RgXPNh592EzchWdkfYm0WUQdExJ5L3uf22anjOQ+kgoj7uTtIX2EbGAkgT tecW87joExz3h8BgxpPwHezLrE9FZYQXWb0jEmR+JPW00tfj4dO1m6ZFpwM0USx3 Dw5f8+sM5jWQj8JJw4d7gjkiLIBpJpyw5Tmh5kmTr7K+FT3vebtLfGgZEtdBDnNQ nMIx2YQqkXFKil6wFId8O7GGUsl0y/kljRbZG/yd3mMjmSHYfQIWe8171G3fSc9L 407GMzZvZOn1PRNsHvrh+K6qJ32z7tlyRU4DE2h3ncBjCxcpOlyxCC/dnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhxAu2abLU4B3QISdvrZTfV2FQmMB8GA1UdIwQY MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2 LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+rhv/kI n6fMUZnphIk82k1bkAlWnTvL/5+9nGiYNdbq8Gow2Tand9mRfOSoe0MuxSmXgK+J 2tK5n76WaNb6Oiy7qA2FYxj7g+NvsGJiZoPgpBLefa3JN7FXT3qWtvaVm2YTmmq4 7e1+6pWfa3UGmIZvZqHuAnIOKRysbVqnwUC6D0+SkmxtYy+20Y6/WAjxp8ih34VP nbzHIsm3PCuRt44Mhojzv3/bNnJV34IwqZ53UcA/0KJZgUOKy0NxgzHbZZ7/6ruO 5fTSSvQ9QpzCSroBd+Hw/iqXxdqc+sn/UAgmcZR7lBl9VFHegO6KVjx0QwvwHSQF Bv9Ju115ETF+sw== -----END CERTIFICATE-----Generated at Thu Dec 25 02:45:40 2025 by rpki-client