This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json) Hash identifier: ZkBt965CO/CFHapZvNM2M9n5hI+YBXeo8xak6snuBWw= Subject key identifier: 44:D5:BA:07:F8:93:E7:A0:EE:01:21:F0:80:84:7E:9C:42:D7:56:5D Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef Certificate serial: 019B3BA23ED48C1B15606C6C021595C076C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft Manifest number: 0C97 Signing time: Sat 20 Dec 2025 12:00:47 +0000 Manifest this update: Sat 20 Dec 2025 12:00:47 +0000 Manifest next update: Sun 21 Dec 2025 12:00:47 +0000 Files and hashes: 1: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: F5b5tcrIW1gFSsOQv4MPy6h+WjF3hr0BbSxxkMTSOyI=) 2: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (hash: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:3e:d4:8c:1b:15:60:6c:6c:02:15:95:c0:76:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef Validity Not Before: Dec 20 12:00:47 2025 GMT Not After : Dec 21 12:00:47 2025 GMT Subject: CN=44d5ba07f893e7a0ee0121f080847e9c42d7565d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e8:e0:28:4a:49:24:02:64:30:42:c7:27:e9: b7:15:55:4e:83:12:08:98:f2:19:d3:96:5c:fa:88: 7e:68:0f:48:eb:46:a7:04:d9:e9:aa:7b:b0:8e:f3: 22:82:d7:65:d5:c4:66:a6:07:9b:92:10:bd:da:2d: 5b:1f:ee:d4:0e:14:a8:70:5e:e5:cb:9d:e0:d4:fa: 23:3b:ac:4f:37:ef:24:98:15:bd:95:e4:d5:ed:d6: 8b:4c:e8:10:60:ec:7a:73:ad:71:71:40:00:5b:f4: ba:37:f4:55:d0:fb:e0:ef:28:d6:50:f8:71:6d:44: 3a:4d:66:89:8f:56:8d:60:89:0b:db:9e:78:03:89: 09:22:04:cc:bc:df:a2:17:aa:67:cf:6e:72:69:68: 91:16:47:48:63:9d:73:27:1f:78:24:d0:a8:06:d2: c4:a5:78:6d:f7:51:62:f3:c0:29:50:84:3c:be:3d: 81:0f:08:57:a3:ee:ca:a1:ac:a9:13:70:23:a7:ad: 75:14:fa:a6:e0:d2:a1:48:7c:9b:5c:62:e1:24:d4: c3:a6:cd:26:91:3b:51:a5:4d:de:ea:b9:a7:2f:31: 67:d0:57:27:f3:19:ba:56:a5:25:3b:c6:7b:f4:69: e6:42:ba:4c:f2:04:a5:68:a4:9d:67:41:23:94:5e: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D5:BA:07:F8:93:E7:A0:EE:01:21:F0:80:84:7E:9C:42:D7:56:5D X509v3 Authority Key Identifier: keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:bf:c2:b9:f3:c8:b9:4c:7f:18:77:ab:85:7b:80:88:c4:c1: 83:ff:76:62:10:2b:04:03:78:02:96:6d:fb:03:ef:6b:7c:c3: 49:d9:e8:9e:0e:66:e5:3a:a1:83:e4:c5:d5:83:b5:4f:7b:81: b2:cc:b8:3a:92:20:35:58:18:56:8b:9b:8a:e8:fc:1b:60:28: 7f:97:5d:3b:d0:6e:9f:91:61:5f:f8:5f:c7:48:22:bf:39:cc: ff:2c:c7:61:21:17:0d:2f:06:0b:6c:cc:0f:8c:9f:16:12:c2: 52:3a:4f:5e:5d:75:5f:ff:4e:00:10:b2:a4:04:e8:5e:c4:39: 90:60:70:91:89:d6:5a:9e:9c:ed:c1:f8:33:b6:8c:b1:25:5c: be:df:2e:8a:8a:a0:db:b0:c5:a4:2f:98:f1:05:1a:ce:4d:aa: 99:9d:85:1f:af:21:70:5b:c5:25:3b:a5:56:5f:83:8d:d0:ef: 02:9a:31:2e:f2:bd:55:3b:f6:32:e0:bc:c1:67:b1:e9:ad:07: 3e:53:85:33:73:de:68:78:4d:9c:90:a1:81:a1:36:08:b6:25: 88:e0:0e:e8:5e:68:f2:f1:23:6f:c0:b7:82:5b:56:f1:b1:9b: 41:ca:02:7c:cb:cb:ca:6e:11:82:8c:c6:d9:c6:51:b1:4e:d7: 61:70:64:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oj7UjBsVYGxsAhWVwHbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz YmVjZWYwHhcNMjUxMjIwMTIwMDQ3WhcNMjUxMjIxMTIwMDQ3WjAzMTEwLwYDVQQD Eyg0NGQ1YmEwN2Y4OTNlN2EwZWUwMTIxZjA4MDg0N2U5YzQyZDc1NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiejgKEpJJAJkMELHJ+m3FVVOgxII mPIZ05Zc+oh+aA9I60anBNnpqnuwjvMigtdl1cRmpgebkhC92i1bH+7UDhSocF7l y53g1PojO6xPN+8kmBW9leTV7daLTOgQYOx6c61xcUAAW/S6N/RV0Pvg7yjWUPhx bUQ6TWaJj1aNYIkL2554A4kJIgTMvN+iF6pnz25yaWiRFkdIY51zJx94JNCoBtLE pXht91Fi88ApUIQ8vj2BDwhXo+7KoaypE3Ajp611FPqm4NKhSHybXGLhJNTDps0m kTtRpU3e6rmnLzFn0Fcn8xm6VqUlO8Z79GnmQrpM8gSlaKSdZ0EjlF4V9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETVugf4k+eg7gEh8ICEfpxC11ZdMB8GA1UdIwQY MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt MzBkZjYyNDI5ZGYwLzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwb/CufPI uUx/GHerhXuAiMTBg/92YhArBAN4ApZt+wPva3zDSdnong5m5Tqhg+TF1YO1T3uB ssy4OpIgNVgYVoubiuj8G2Aof5ddO9Bun5FhX/hfx0givznM/yzHYSEXDS8GC2zM D4yfFhLCUjpPXl11X/9OABCypAToXsQ5kGBwkYnWWp6c7cH4M7aMsSVcvt8uioqg 27DFpC+Y8QUazk2qmZ2FH68hcFvFJTulVl+DjdDvApoxLvK9VTv2MuC8wWex6a0H PlOFM3PeaHhNnJChgaE2CLYliOAO6F5o8vEjb8C3gltW8bGbQcoCfMvLym4RgozG 2cZRsU7XYXBkAg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:48:50 2025 by rpki-client