This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft File: 60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json) Hash identifier: V+LgwnWE/VwCfbmmYCbDsn/geRGuhqsDAw56lW3A+ro= Subject key identifier: AE:A8:E0:02:7E:FF:2A:0D:40:6A:A9:65:58:F7:BD:B4:C4:7C:24:58 Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79 Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79 Certificate serial: 019AF23FE549964BF118D06D2F1292486330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: kGUyrlVmx6Ti6FRYbpiZEYA3OtCWZmFFy4T4hp/GFLI=) 2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e5:49:96:4b:f1:18:d0:6d:2f:12:92:48:63:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=aea8e0027eff2a0d406aa96558f7bdb4c47c2458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:36:e5:a1:b4:d2:1c:c6:ee:16:b7:66:0d: e5:7d:ee:9d:84:d6:fa:9e:69:9e:67:b9:d3:78:30: d9:58:a7:31:f9:e1:a6:d6:b1:f5:71:da:08:70:33: b9:12:49:26:37:12:57:86:db:47:68:ef:1f:4c:2e: d1:3f:1e:85:03:a6:35:ca:4d:b1:01:3b:b9:2a:04: 6c:85:75:44:42:d9:d9:a0:ab:52:d0:5c:fb:36:c0: f9:2c:3d:10:06:69:39:16:fc:d4:fc:10:de:19:5e: d0:6a:53:8d:01:b1:da:e7:ee:5a:76:40:4e:7e:df: 80:dc:e8:b3:d6:c5:37:cc:59:ec:e4:04:68:8c:3e: 9d:14:0e:b4:58:04:2b:2d:88:8c:a5:65:66:99:74: 5a:ec:58:66:44:b1:ae:2f:0d:1e:44:a8:bc:56:c6: 04:6d:c6:c6:2e:0f:20:e0:c5:7e:73:41:40:54:c8: 9c:6b:17:f5:dc:35:23:61:89:8f:14:a7:f2:1d:0e: 0f:e4:9e:1d:eb:ab:fe:ac:7b:de:d0:74:bb:07:e9: 9d:13:6f:df:9c:f3:48:20:bd:eb:5d:7a:98:db:9f: cc:0e:ea:46:14:7d:f0:b5:10:7d:da:6c:6e:42:e5: 41:92:4d:2b:44:25:20:d0:b5:c5:34:f6:1b:dd:b7: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A8:E0:02:7E:FF:2A:0D:40:6A:A9:65:58:F7:BD:B4:C4:7C:24:58 X509v3 Authority Key Identifier: keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d4:f5:64:a4:61:39:7b:98:92:d5:24:46:f4:b9:25:59:dd: 30:f8:24:0a:d6:11:67:39:86:ff:15:f0:d8:e0:2f:3f:8f:40: 76:6d:bd:0c:ff:4b:94:64:a4:66:9a:7f:2d:28:22:df:98:0c: e2:4c:4b:d7:43:d8:a6:3c:e4:04:4c:5f:04:2e:30:fb:91:b4: 36:19:73:b8:ba:7d:e8:1e:1b:19:45:62:7e:b2:a6:22:b8:c1: 40:ff:69:df:fd:04:cd:a5:31:c2:b5:93:13:ff:6c:2d:c4:55: e9:44:d9:c8:3a:8d:38:94:45:c7:14:41:db:99:cd:63:d9:9e: fd:a2:eb:b1:65:0e:7b:63:e4:d0:eb:a9:05:49:03:a3:c6:53: 79:f3:18:24:b5:87:bf:c1:8b:09:3c:5c:85:3f:f5:aa:57:a3: b2:67:9f:18:a3:bf:77:cf:17:4b:07:c2:eb:b4:34:5f:8e:aa: 6c:d9:4c:88:37:2b:82:69:d9:4c:54:0a:af:79:98:0e:73:7c: fe:35:c5:f5:00:ec:09:87:ff:75:94:4b:dd:3b:2d:0c:0d:ad: a0:9b:3f:77:f1:c5:b3:3b:f9:21:ab:68:57:fd:d9:5b:a7:c2: 3b:8a:be:b4:6c:44:98:67:f6:6f:8d:d1:40:12:bb:9c:52:3c: 51:97:bf:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+VJlkvxGNBtLxKSSGMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNDE5NTZkMTJkY2I5ODJiZWQ0N2E5ZmFjNGE3ZTQ4ZTc3 ODdjNzkwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EyhhZWE4ZTAwMjdlZmYyYTBkNDA2YWE5NjU1OGY3YmRiNGM0N2MyNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYc25aG00hzG7ha3Zg3lfe6dhNb6 nmmeZ7nTeDDZWKcx+eGm1rH1cdoIcDO5EkkmNxJXhttHaO8fTC7RPx6FA6Y1yk2x ATu5KgRshXVEQtnZoKtS0Fz7NsD5LD0QBmk5FvzU/BDeGV7QalONAbHa5+5adkBO ft+A3Oiz1sU3zFns5ARojD6dFA60WAQrLYiMpWVmmXRa7FhmRLGuLw0eRKi8VsYE bcbGLg8g4MV+c0FAVMicaxf13DUjYYmPFKfyHQ4P5J4d66v+rHve0HS7B+mdE2/f nPNIIL3rXXqY25/MDupGFH3wtRB92mxuQuVBkk0rRCUg0LXFNPYb3bfH8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6o4AJ+/yoNQGqpZVj3vbTEfCRYMB8GA1UdIwQY MBaAFOtBlW0S3LmCvtR6n6xKfkjneHx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYt Njc4NDdjNzZjYjc2LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYtNjc4NDdjNzZjYjc2 LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdT1ZKRh OXuYktUkRvS5JVndMPgkCtYRZzmG/xXw2OAvP49Adm29DP9LlGSkZpp/LSgi35gM 4kxL10PYpjzkBExfBC4w+5G0NhlzuLp96B4bGUVifrKmIrjBQP9p3/0EzaUxwrWT E/9sLcRV6UTZyDqNOJRFxxRB25nNY9me/aLrsWUOe2Pk0OupBUkDo8ZTefMYJLWH v8GLCTxchT/1qlejsmefGKO/d88XSwfC67Q0X46qbNlMiDcrgmnZTFQKr3mYDnN8 /jXF9QDsCYf/dZRL3TstDA2toJs/d/HFszv5IatoV/3ZW6fCO4q+tGxEmGf2b43R QBK7nFI8UZe/xA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:48 2025 by rpki-client