This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json) Hash identifier: mtESajcUHz43zh8xf+GAZ0cTOyojMZwo33MkgYO86RA= Subject key identifier: 35:91:B9:F4:D0:2A:56:3A:A3:FB:6A:6A:BE:EE:FD:C9:5B:04:FA:ED Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc Certificate serial: 019AF31B3A2AD1ED6883A614A367624B8B36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft Manifest number: 0F3C Signing time: Sat 06 Dec 2025 10:00:39 +0000 Manifest this update: Sat 06 Dec 2025 10:00:39 +0000 Manifest next update: Sun 07 Dec 2025 10:00:39 +0000 Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=) 2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: sMWG/tAP0aXYafrKXKWbkiACqlNs4tRB6PDKx9xO2ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3a:2a:d1:ed:68:83:a6:14:a3:67:62:4b:8b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc Validity Not Before: Dec 6 10:00:39 2025 GMT Not After : Dec 7 10:00:39 2025 GMT Subject: CN=3591b9f4d02a563aa3fb6a6abeeefdc95b04faed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:68:ba:73:6d:ea:95:37:25:0d:6b:f5:74:5b: 5c:d8:9e:4d:75:7e:e4:7d:25:1c:9e:bb:7c:e2:25: 90:c9:96:d2:b9:71:7c:eb:a6:b6:d6:35:1b:05:05: bd:20:98:03:d1:34:c2:ff:4d:27:89:85:f5:30:c8: b3:90:b0:aa:8a:31:47:96:4f:ce:6f:b4:07:18:91: e5:8a:40:86:3b:be:de:f8:2d:7a:70:11:23:08:c9: 50:7c:fb:bd:17:35:c4:51:d2:76:e2:3a:5e:7f:c0: ed:f0:3b:98:d0:22:49:31:fd:26:fc:40:b2:d4:6d: c2:59:22:ea:3b:a0:ff:dd:f8:d4:31:59:1c:e1:92: 45:a7:d5:be:0b:8e:49:45:46:f0:2e:27:d9:3e:65: 3f:3b:25:e6:0d:a0:a2:c6:22:87:f8:f5:68:50:6d: 08:34:19:41:f2:2e:b2:28:ae:11:c1:c0:2b:42:aa: 8a:cf:f4:1c:8c:96:32:26:4d:35:77:8a:fe:2e:24: 59:ef:04:c4:84:db:8e:09:f8:14:88:e4:46:97:05: 16:82:63:b2:96:87:10:d1:73:a0:8c:75:f6:6d:3a: 85:18:bd:5f:27:38:30:1c:8b:e3:43:2e:a0:92:5f: 81:97:11:a1:03:2b:f5:33:f7:f1:a3:cc:31:a4:90: c5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:91:B9:F4:D0:2A:56:3A:A3:FB:6A:6A:BE:EE:FD:C9:5B:04:FA:ED X509v3 Authority Key Identifier: keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7d:b8:ae:1d:88:0a:a0:c5:2b:c3:25:94:82:37:67:be:d2: 8d:23:60:eb:db:9e:c5:3d:e2:9c:51:9f:bd:65:58:7b:21:ca: 0b:63:82:fb:b8:cd:6a:df:68:e0:02:bf:61:8c:ef:fa:ba:6a: 59:7c:58:db:7a:bc:e3:8f:7c:1b:1d:43:7a:5e:cf:5f:46:24: da:9d:57:7a:b4:a9:48:51:8d:2d:ce:f5:33:8f:df:b3:68:b3: 66:1b:74:0f:1a:04:95:8d:69:02:a5:f7:46:7f:ff:61:90:8d: 48:16:39:88:92:f7:a1:27:6f:e4:e4:fe:e3:1b:f9:18:7b:9d: 52:ee:41:3b:ba:30:33:72:97:de:3f:81:bb:33:79:1c:2d:6d: 67:a2:60:78:0a:2e:6e:b9:1d:13:91:b5:87:e1:16:70:a1:98: 24:25:2a:f3:d8:a4:76:24:13:52:70:af:87:9c:25:b7:ff:ca: 0e:93:01:b5:a5:ee:a2:28:e8:e6:13:73:9c:34:b2:cd:d8:59: f4:46:57:fd:9e:7c:eb:f8:14:6b:16:89:44:aa:ca:65:01:04: e1:06:52:3d:af:85:8c:43:f1:a5:62:d7:3c:f2:b5:a6:fc:38: 54:43:66:9d:17:29:06:93:16:fd:bc:f1:10:8a:2e:1e:8e:13: 35:2d:8a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzoq0e1og6YUo2diS4s2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi YjgyZmMwHhcNMjUxMjA2MTAwMDM5WhcNMjUxMjA3MTAwMDM5WjAzMTEwLwYDVQQD EygzNTkxYjlmNGQwMmE1NjNhYTNmYjZhNmFiZWVlZmRjOTViMDRmYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWi6c23qlTclDWv1dFtc2J5NdX7k fSUcnrt84iWQyZbSuXF866a21jUbBQW9IJgD0TTC/00niYX1MMizkLCqijFHlk/O b7QHGJHlikCGO77e+C16cBEjCMlQfPu9FzXEUdJ24jpef8Dt8DuY0CJJMf0m/ECy 1G3CWSLqO6D/3fjUMVkc4ZJFp9W+C45JRUbwLifZPmU/OyXmDaCixiKH+PVoUG0I NBlB8i6yKK4RwcArQqqKz/QcjJYyJk01d4r+LiRZ7wTEhNuOCfgUiORGlwUWgmOy locQ0XOgjHX2bTqFGL1fJzgwHIvjQy6gkl+BlxGhAyv1M/fxo8wxpJDF/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWRufTQKlY6o/tqar7u/clbBPrtMB8GA1UdIwQY MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt MWZiM2Y4MTc2MDhmLzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX24rh2I CqDFK8MllII3Z77SjSNg69uexT3inFGfvWVYeyHKC2OC+7jNat9o4AK/YYzv+rpq WXxY23q84498Gx1Del7PX0Yk2p1XerSpSFGNLc71M4/fs2izZht0DxoElY1pAqX3 Rn//YZCNSBY5iJL3oSdv5OT+4xv5GHudUu5BO7owM3KX3j+BuzN5HC1tZ6JgeAou brkdE5G1h+EWcKGYJCUq89ikdiQTUnCvh5wlt//KDpMBtaXuoijo5hNznDSyzdhZ 9EZX/Z586/gUaxaJRKrKZQEE4QZSPa+FjEPxpWLXPPK1pvw4VENmnRcpBpMW/bzx EIouHo4TNS2KMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:46 2025 by rpki-client