This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json) Hash identifier: wCYMLIpT473Ji7aH1v2D9pp86l+sRgnKPyZQQR/hcaM= Subject key identifier: 67:BA:17:93:47:C4:91:A0:AB:6A:84:BC:3F:5F:B0:3C:CC:B6:6F:EB Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Certificate serial: 019AF3527F0142AC53544EC508D720CB4D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft Manifest number: 0BD6 Signing time: Sat 06 Dec 2025 11:01:01 +0000 Manifest this update: Sat 06 Dec 2025 11:01:01 +0000 Manifest next update: Sun 07 Dec 2025 11:01:01 +0000 Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: OhQBhz29SYSz9wJBqnitHsMlpuxM82moWg5LNcsRNPo=) 2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:7f:01:42:ac:53:54:4e:c5:08:d7:20:cb:4d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Validity Not Before: Dec 6 11:01:01 2025 GMT Not After : Dec 7 11:01:01 2025 GMT Subject: CN=67ba179347c491a0ab6a84bc3f5fb03cccb66feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:13:e9:be:01:ac:26:e8:45:e3:7f:a4:49: 8c:26:2e:b0:50:ae:82:bb:40:f7:09:45:29:ae:1a: c7:a6:ac:4d:1c:5d:b9:b0:0d:9a:2a:1d:33:95:69: 56:bc:4d:ef:9b:40:ad:03:6e:42:71:82:d5:37:80: 9f:14:0e:cf:b8:c1:28:ca:47:9b:72:4e:3a:d1:db: 43:a2:07:61:54:17:90:ec:d5:55:67:7e:81:f1:ea: ad:05:26:e1:3a:ff:f2:21:cc:06:39:42:41:b7:8e: 0e:e5:aa:87:13:28:da:62:24:7a:84:91:e2:e6:b4: 45:0f:25:d8:3d:cd:24:a3:3c:46:b0:b8:73:28:f4: b4:74:b1:e0:5a:19:ce:85:c6:ad:57:91:19:dc:b2: 93:ff:87:a8:f1:fc:c5:2e:d0:b9:dd:3d:a7:cc:15: b0:31:4e:99:cf:8b:b3:e5:38:68:10:3a:87:d0:cf: f6:76:c3:07:d5:d6:2a:de:87:68:e7:34:66:5e:e9: fb:4b:96:e8:84:ce:a8:7b:7e:ba:28:26:1a:03:33: 31:7f:a6:7c:b1:0a:a8:17:2c:16:cd:10:63:2f:74: e4:52:12:0e:47:fe:d8:b2:4c:f4:5a:f3:1e:cf:58: 08:ee:6b:36:2e:f4:8d:64:a7:30:61:b7:49:0f:f7: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BA:17:93:47:C4:91:A0:AB:6A:84:BC:3F:5F:B0:3C:CC:B6:6F:EB X509v3 Authority Key Identifier: keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0f:cf:b1:3b:1c:d7:af:78:23:c5:ad:59:a6:6f:9f:bf:2e: 1d:e2:c9:b3:a8:45:45:d6:03:be:64:40:f4:c5:fc:f7:21:2b: 94:f1:e3:ce:8a:b7:fe:2d:ec:ff:ff:bd:de:b6:de:24:d6:55: 13:a3:b8:28:b7:3d:cb:07:61:b3:e2:b8:25:9b:48:5f:31:f7: 80:69:4c:53:e2:0c:eb:7d:f1:d7:8f:56:04:aa:74:ff:ef:a5: ce:93:fa:85:53:02:cb:71:a6:4f:c9:66:6f:6b:d6:ed:ae:b0: 40:1a:43:2d:44:f8:10:ad:e8:08:75:4e:d5:c2:d9:cb:19:dd: 20:da:6c:b4:e3:b2:8a:07:ce:02:06:12:39:8c:0e:62:45:da: b4:63:bd:09:d7:14:5e:5d:e7:22:ef:69:23:bb:cd:8d:81:28: 20:dc:5d:37:61:95:ac:a7:19:b5:f6:74:0d:75:da:45:f6:22: 7c:93:6e:b5:a6:3a:63:9e:b4:4f:86:86:74:b1:13:32:9e:3b: f5:80:7d:e6:8d:43:2f:2e:86:e6:1f:c1:56:37:54:9e:f6:bb: 2f:71:d8:42:67:9b:86:e2:6d:5e:bc:56:c7:81:42:c8:8f:db: ef:7a:1a:56:6f:50:8f:54:80:01:46:b1:83:a0:f2:2c:50:8e: 85:a0:3c:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUn8BQqxTVE7FCNcgy00XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4 ZTgwNTIwHhcNMjUxMjA2MTEwMTAxWhcNMjUxMjA3MTEwMTAxWjAzMTEwLwYDVQQD Eyg2N2JhMTc5MzQ3YzQ5MWEwYWI2YTg0YmMzZjVmYjAzY2NjYjY2ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJUT6b4BrCboReN/pEmMJi6wUK6C u0D3CUUprhrHpqxNHF25sA2aKh0zlWlWvE3vm0CtA25CcYLVN4CfFA7PuMEoykeb ck460dtDogdhVBeQ7NVVZ36B8eqtBSbhOv/yIcwGOUJBt44O5aqHEyjaYiR6hJHi 5rRFDyXYPc0kozxGsLhzKPS0dLHgWhnOhcatV5EZ3LKT/4eo8fzFLtC53T2nzBWw MU6Zz4uz5ThoEDqH0M/2dsMH1dYq3odo5zRmXun7S5bohM6oe366KCYaAzMxf6Z8 sQqoFywWzRBjL3TkUhIOR/7Yskz0WvMez1gI7ms2LvSNZKcwYbdJD/eojwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGe6F5NHxJGgq2qEvD9fsDzMtm/rMB8GA1UdIwQY MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3 LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHA/PsTsc 1694I8WtWaZvn78uHeLJs6hFRdYDvmRA9MX89yErlPHjzoq3/i3s//+93rbeJNZV E6O4KLc9ywdhs+K4JZtIXzH3gGlMU+IM633x149WBKp0/++lzpP6hVMCy3GmT8lm b2vW7a6wQBpDLUT4EK3oCHVO1cLZyxndINpstOOyigfOAgYSOYwOYkXatGO9CdcU Xl3nIu9pI7vNjYEoINxdN2GVrKcZtfZ0DXXaRfYifJNutaY6Y560T4aGdLETMp47 9YB95o1DLy6G5h/BVjdUnva7L3HYQmebhuJtXrxWx4FCyI/b73oaVm9Qj1SAAUax g6DyLFCOhaA8tQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:57 2025 by rpki-client