This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json) Hash identifier: cSdQgQcp/TrpK8DVzxR/eEnxFOcnwBuFrbSHEt6CoXc= Subject key identifier: 4F:90:54:C4:80:93:1B:26:78:D9:D2:BE:FD:19:05:BD:A9:EC:8A:AF Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef Certificate serial: 019B416DAEA6CE4A57991561A951814ECDDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft Manifest number: 0C9A Signing time: Sun 21 Dec 2025 15:01:05 +0000 Manifest this update: Sun 21 Dec 2025 15:01:05 +0000 Manifest next update: Mon 22 Dec 2025 15:01:05 +0000 Files and hashes: 1: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: +85ZCwtb5/Dvbyii7SXTdOkBpBaZIkGFb9LpM5xUfVc=) 2: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (hash: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:ae:a6:ce:4a:57:99:15:61:a9:51:81:4e:cd:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef Validity Not Before: Dec 21 15:01:05 2025 GMT Not After : Dec 22 15:01:05 2025 GMT Subject: CN=4f9054c480931b2678d9d2befd1905bda9ec8aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:cd:45:26:b9:56:9b:80:38:fe:0d:9b:47: 9a:32:d7:16:2b:46:1b:7b:b0:ec:d6:54:78:fb:e0: a2:8e:23:45:f0:79:c2:c0:d3:eb:08:be:c8:b9:4a: b9:b3:9b:b4:43:2c:54:2e:93:45:9b:34:9c:b8:5f: d2:b0:66:b3:94:29:ff:b5:b5:1e:ab:ad:cc:c8:cb: 9f:2d:cd:f7:8e:a5:ac:39:4d:41:27:4a:c6:e2:43: 28:b5:cc:d4:f4:74:c0:bb:67:80:4a:18:a1:8e:16: e7:cf:d8:0c:e8:7d:5b:76:d6:18:54:87:8c:fd:98: 0b:26:14:c0:3f:a5:41:2c:cb:25:e2:73:fd:29:15: 5e:62:0f:fd:1e:20:9d:50:45:e9:97:e3:2b:45:4d: 62:24:9c:e3:de:71:55:a0:bf:7d:83:70:7a:ae:8e: eb:14:94:d4:67:53:36:1d:66:96:fe:5b:6e:1a:f0: d4:d1:de:15:48:14:9e:a2:10:21:2d:21:c5:0b:c6: d3:56:b3:3e:45:32:b2:88:f0:6d:17:80:57:70:1e: 24:ad:01:2e:a3:03:d8:09:42:34:d7:2f:81:fd:35: 8b:b2:25:a3:e5:a5:63:d3:69:83:2c:61:de:2e:61: 12:da:b5:17:0e:d2:50:72:6b:22:10:be:02:28:05: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:54:C4:80:93:1B:26:78:D9:D2:BE:FD:19:05:BD:A9:EC:8A:AF X509v3 Authority Key Identifier: keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4a:d2:2f:f9:34:2c:3b:6d:13:b4:50:f4:37:d7:9a:75:df: 2b:af:cf:54:df:6f:a8:a8:f4:07:e9:1a:76:74:c9:60:6b:da: 49:58:b2:59:de:61:17:d5:17:94:dd:e6:c3:00:2f:b7:5f:51: e2:7b:63:82:9e:77:19:95:b2:88:4a:93:3d:8f:97:cd:d0:c5: e8:59:97:27:ea:65:8b:75:fd:79:f8:f4:47:6b:2c:b4:88:01: e1:bb:25:3f:5b:5f:c2:50:58:86:00:b1:b4:db:d5:e2:03:12: 02:9d:96:b8:22:46:a4:8f:35:9f:89:b7:a1:10:0d:e6:b7:de: 68:e7:0b:0f:41:09:4b:b0:cb:02:e0:78:3b:00:a3:41:5a:78: de:56:af:07:8b:29:b0:71:d3:7b:bf:12:ac:90:e8:18:8a:5e: de:b5:3b:1f:bf:7b:eb:d7:9a:57:40:7d:c7:22:c8:ac:26:c1: 0a:8d:7d:63:f6:83:00:65:d6:08:9a:8b:28:cb:b3:da:72:d1: e4:8d:c5:21:34:46:5d:e5:08:2e:5a:df:b9:7d:42:35:70:a3: 1c:cf:95:d4:00:f6:3c:c6:48:b8:3b:c9:6d:bb:07:3a:56:7f: 0b:43:ce:ec:6a:fb:f2:ec:5c:fd:1e:68:39:e5:d8:cf:37:3c: 7a:d3:33:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBba6mzkpXmRVhqVGBTs3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz YmVjZWYwHhcNMjUxMjIxMTUwMTA1WhcNMjUxMjIyMTUwMTA1WjAzMTEwLwYDVQQD Eyg0ZjkwNTRjNDgwOTMxYjI2NzhkOWQyYmVmZDE5MDViZGE5ZWM4YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfLNRSa5VpuAOP4Nm0eaMtcWK0Yb e7Ds1lR4++CijiNF8HnCwNPrCL7IuUq5s5u0QyxULpNFmzScuF/SsGazlCn/tbUe q63MyMufLc33jqWsOU1BJ0rG4kMotczU9HTAu2eAShihjhbnz9gM6H1bdtYYVIeM /ZgLJhTAP6VBLMsl4nP9KRVeYg/9HiCdUEXpl+MrRU1iJJzj3nFVoL99g3B6ro7r FJTUZ1M2HWaW/ltuGvDU0d4VSBSeohAhLSHFC8bTVrM+RTKyiPBtF4BXcB4krQEu owPYCUI01y+B/TWLsiWj5aVj02mDLGHeLmES2rUXDtJQcmsiEL4CKAUlAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+QVMSAkxsmeNnSvv0ZBb2p7IqvMB8GA1UdIwQY MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt MzBkZjYyNDI5ZGYwLzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUrSL/k0 LDttE7RQ9DfXmnXfK6/PVN9vqKj0B+kadnTJYGvaSViyWd5hF9UXlN3mwwAvt19R 4ntjgp53GZWyiEqTPY+XzdDF6FmXJ+pli3X9efj0R2sstIgB4bslP1tfwlBYhgCx tNvV4gMSAp2WuCJGpI81n4m3oRAN5rfeaOcLD0EJS7DLAuB4OwCjQVp43lavB4sp sHHTe78SrJDoGIpe3rU7H79769eaV0B9xyLIrCbBCo19Y/aDAGXWCJqLKMuz2nLR 5I3FITRGXeUILlrfuX1CNXCjHM+V1AD2PMZIuDvJbbsHOlZ/C0PO7Gr78uxc/R5o OeXYzzc8etMzUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:10:16 2025 by rpki-client