This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json) Hash identifier: CN68xrQngDVTIK4lLTz+LizxqSN2pXwltHrd7E71nK0= Subject key identifier: 47:7D:EC:99:A4:B6:74:30:65:E4:97:F5:DD:FA:20:86:E4:24:89:08 Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Certificate serial: 019B05FD9A67E69CB7CC3FC499DF256BB8CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 02:01:04 +0000 Manifest this update: Wed 10 Dec 2025 02:01:04 +0000 Manifest next update: Thu 11 Dec 2025 02:01:04 +0000 Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=) 2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: 6tmUyqda42K3JNo0OxSdcBWdWmR84doCAPJYaAcHeQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:fd:9a:67:e6:9c:b7:cc:3f:c4:99:df:25:6b:b8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2 Validity Not Before: Dec 10 02:01:04 2025 GMT Not After : Dec 11 02:01:04 2025 GMT Subject: CN=477dec99a4b6743065e497f5ddfa2086e4248908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:03:99:2e:10:69:d4:bc:78:fd:1b:d3:0e: 25:1a:90:b7:00:3b:4a:1a:35:2f:45:28:29:d7:81: 06:9a:89:fd:87:c7:fb:94:6a:c2:eb:b9:fc:75:b6: b7:10:2c:c1:73:a8:c0:2c:95:60:95:9b:c5:d7:65: cd:a2:33:cc:16:0b:32:c5:81:d8:09:6b:67:c3:68: a4:a8:95:1b:e9:aa:d2:91:e8:76:ca:ea:65:f6:86: 7c:e9:fb:fb:67:c5:ca:46:68:df:f5:ff:f9:cb:28: 88:98:09:46:75:ac:6b:a8:a1:a7:f2:19:c0:5d:7a: 5e:7e:47:72:7f:39:e7:02:31:86:4c:57:1c:a7:1e: 4b:40:fb:e0:48:6d:04:72:84:52:f1:a4:1b:1c:a1: 29:c7:da:18:00:2b:bc:22:a3:74:61:2f:5a:ca:61: b0:7a:b1:5a:82:10:de:b7:1a:7f:3b:66:67:39:e6: cc:ea:35:8a:f0:00:83:e0:8b:a2:be:40:e0:36:eb: e3:f7:46:96:e7:4f:4b:da:72:b1:31:71:06:f8:19: c6:c1:f7:af:58:7b:e0:50:bf:5b:cd:d6:54:e1:33: 3a:64:29:a3:d8:5d:85:fd:cf:5c:a2:3a:41:ba:89: 3a:87:70:93:a2:e9:5b:96:b3:f9:94:31:09:35:f5: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7D:EC:99:A4:B6:74:30:65:E4:97:F5:DD:FA:20:86:E4:24:89:08 X509v3 Authority Key Identifier: keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6c:e1:3a:4a:f6:a6:c6:7c:05:bd:77:bc:e9:37:49:f2:1b: ee:b5:7e:cf:5e:ed:be:67:69:34:ac:60:92:96:65:e3:8d:21: 95:da:f1:a3:f9:c2:ae:0d:e1:ba:13:d6:41:48:e5:3e:7a:ac: 76:6f:75:98:a5:0f:65:1f:32:0f:93:8d:34:34:8b:c9:9b:f9: 0b:3a:8b:e1:29:ac:8c:d5:a1:b8:6b:2f:87:f2:db:d5:ce:42: ce:ae:13:ad:2f:d1:68:b0:c8:4c:d3:a5:73:85:0b:cd:b7:2f: 04:6e:6e:e2:b5:79:93:5f:dd:25:7d:8d:06:23:bb:3e:cd:d4: b5:84:39:3d:7c:33:45:24:f7:d5:e1:3e:eb:64:a2:06:e0:d7: e6:ff:9b:7b:2c:d5:d7:55:36:4f:b0:d4:d3:84:f2:20:76:f1: 3d:1d:a3:94:1f:f7:55:bf:a8:4c:0a:51:3c:4e:ae:47:d7:7f: 17:82:3e:f8:94:46:81:7b:69:68:dd:3c:93:02:0b:d7:f3:34: fa:41:45:7d:ac:dd:93:cb:c6:9c:ae:ab:d6:81:05:11:c2:61: aa:3e:2e:a3:cd:09:89:e2:90:f9:d1:c8:70:db:fc:38:0f:c0: 34:53:cc:5b:a2:e6:8a:98:70:6b:c2:40:38:3c:4d:64:cc:b8: ce:a4:3b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsF/Zpn5py3zD/Emd8la7jLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjlmNGVjYzVkMDUwNzYyYzU1Njk4NDQwZjg1ZWE5NmY3 MzMwZjIwHhcNMjUxMjEwMDIwMTA0WhcNMjUxMjExMDIwMTA0WjAzMTEwLwYDVQQD Eyg0NzdkZWM5OWE0YjY3NDMwNjVlNDk3ZjVkZGZhMjA4NmU0MjQ4OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6kDmS4QadS8eP0b0w4lGpC3ADtK GjUvRSgp14EGmon9h8f7lGrC67n8dba3ECzBc6jALJVglZvF12XNojPMFgsyxYHY CWtnw2ikqJUb6arSkeh2yupl9oZ86fv7Z8XKRmjf9f/5yyiImAlGdaxrqKGn8hnA XXpefkdyfznnAjGGTFccpx5LQPvgSG0EcoRS8aQbHKEpx9oYACu8IqN0YS9aymGw erFaghDetxp/O2ZnOebM6jWK8ACD4IuivkDgNuvj90aW509L2nKxMXEG+BnGwfev WHvgUL9bzdZU4TM6ZCmj2F2F/c9cojpBuok6h3CToulblrP5lDEJNfWA6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd97JmktnQwZeSX9d36IIbkJIkIMB8GA1UdIwQY MBaAFF/59OzF0FB2LFVphED4XqlvczDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzkt NGMxZTQ5ZWM4ZjE2LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83N2M2NjAtZjgyYy00MTA2LWFiYzktNGMxZTQ5ZWM4ZjE2 LzEvWF9uMDdNWFFVSFlzVldtRVFQaGVxVzl6TVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2zhOkr2 psZ8Bb13vOk3SfIb7rV+z17tvmdpNKxgkpZl440hldrxo/nCrg3huhPWQUjlPnqs dm91mKUPZR8yD5ONNDSLyZv5CzqL4SmsjNWhuGsvh/Lb1c5Czq4TrS/RaLDITNOl c4ULzbcvBG5u4rV5k1/dJX2NBiO7Ps3UtYQ5PXwzRST31eE+62SiBuDX5v+beyzV 11U2T7DU04TyIHbxPR2jlB/3Vb+oTApRPE6uR9d/F4I++JRGgXtpaN08kwIL1/M0 +kFFfazdk8vGnK6r1oEFEcJhqj4uo80JieKQ+dHIcNv8OA/ANFPMW6Lmiphwa8JA ODxNZMy4zqQ71Q== -----END CERTIFICATE-----Generated at Wed Dec 10 09:23:17 2025 by rpki-client