This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: jykREVmRe/ze0NBLV9CrvOMPCJIE0qDR9z7Rcz6x9Uo= Subject key identifier: 60:A7:BD:3B:34:B4:2D:72:E0:8D:9F:F2:A4:14:54:24:8E:E8:EC:EA Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019AF31B32864C8E618EE69DBA68C2B23B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0CC1 Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: CUbuh0PM3yqW-CpytCXAWwYdQ7Q.roa (hash: j6MdXA11jocwq2zYd6v7F0+Oq8jAXnx5FNp5BWwzZDI=) 2: CnlC6gqOGM7cGtyf3q7ZarTnKvk.roa (hash: 32RpDBghAJW0XgukjS2TZPf541ueKGSu7TqcJK/unyA=) 3: GlW6zMLj6EttAmWKHy7iwfBhWZE.roa (hash: ABJiNZOFb+afM+eJQ3jwpevUgACzN0c5eNSdwc405sQ=) 4: L80pK6ObZRSScU_AZIXdqKhbLPs.roa (hash: 18whVklVMP7ZtNSmFR8DrFdceRMOWEFp28FcU5z0yMo=) 5: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (hash: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=) 6: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (hash: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=) 7: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: DGkwKA0E/0/nY9YgrvfTx716Jgr8wQBNSlQ4wLVO7b8=) 8: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=) 9: ea6BO6jv5qXL6KOn3swl4W7fpN8.roa (hash: qb7RyOCex8dd5d/iXyz9TFdFXAm9eOIl5Q9VrGqRffk=) 10: f83w0UBpgcJD0dA64iAq7lmXARw.roa (hash: f9wovq1EqzUTh58ehH2r8oD0Nk4JJQcPOCa3DaAqpnI=) 11: h-PNQcjWOScse8WjyOhQeSbv950.roa (hash: /sFDGAAGqPfiAFmlm5KuC6NUsSeC3ZuPzrCQYYwFUic=) 12: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (hash: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=) 13: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (hash: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=) 14: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (hash: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=) 15: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (hash: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:32:86:4c:8e:61:8e:e6:9d:ba:68:c2:b2:3b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=60a7bd3b34b42d72e08d9ff2a41454248ee8ecea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:7d:73:a0:95:8f:6c:32:8a:48:45:68:23: c0:e6:37:0c:17:fc:e2:b3:de:62:e5:03:75:d1:6c: b3:61:a7:be:cc:57:13:e5:d7:5f:5b:d6:de:1f:b6: e4:ad:bf:b7:28:b4:e6:37:5a:02:9c:d9:aa:1f:ed: da:9e:f5:22:a8:1c:9d:2e:6c:dc:09:5b:40:12:06: 53:a2:70:c2:f3:e2:03:5a:4d:e9:65:6e:89:bd:b8: ba:ed:72:87:07:6f:0b:7d:0f:70:c7:ee:0b:15:ee: f3:72:2e:48:ce:61:0d:ba:49:7a:dc:a0:b6:9f:e6: 8b:9b:54:65:0b:13:cb:50:94:d9:14:df:86:80:5e: 55:ff:e6:b5:f1:93:09:12:14:f5:94:b8:2b:cf:73: dd:92:f5:bf:fd:d4:b1:dd:e2:e2:c0:f6:1e:36:0f: 40:e9:17:16:70:ba:73:b2:c1:9a:71:ee:cd:8f:d2: f4:59:a5:e3:ca:72:9a:95:3c:da:19:41:cd:e6:ba: 7c:01:3e:af:ff:ff:2e:29:29:42:58:07:43:e4:00: af:ed:24:e3:ca:03:35:b8:cf:36:6e:fa:03:ad:b7: 4b:b5:ab:78:a7:be:bc:77:b7:7e:94:ae:2c:4c:3b: ad:bf:7a:1a:cc:37:5d:35:01:81:0d:34:a0:23:3d: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:BD:3B:34:B4:2D:72:E0:8D:9F:F2:A4:14:54:24:8E:E8:EC:EA X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5f:2e:9e:ee:2a:ec:54:1f:e4:fc:e0:1e:93:06:86:a7:5d: 05:d1:7c:b9:e2:b1:56:53:05:94:b7:fe:99:b6:cd:a2:10:a9: f6:a6:8e:52:2f:9d:e0:cd:72:55:56:2b:37:22:49:1c:1e:3e: 7b:d1:94:c3:6a:10:51:b9:5b:bc:ef:7c:3c:1b:d3:60:30:93: 12:c5:12:f8:4f:d5:01:00:69:7d:69:b5:8f:70:0a:2b:1a:4f: 22:a0:46:92:b5:a7:cd:ae:35:76:0d:a2:04:af:f5:c3:df:98: a7:d7:d4:d2:20:18:9b:b8:5e:6d:85:53:a2:78:12:ff:ca:69: 5a:9f:00:ea:28:76:20:a2:44:03:29:5c:65:cb:49:d1:c4:6b: 49:5f:b3:de:60:7d:8e:05:8e:10:26:17:bb:63:8f:78:73:b6: 2f:7d:ae:6e:0b:23:8d:63:d3:21:2e:1b:f0:d4:01:3b:6a:15: 24:b2:26:57:c6:e2:2c:fd:12:48:3d:73:ca:52:9f:5e:63:c2: 42:77:1c:00:50:40:a0:b4:6c:8f:b8:4b:7d:da:51:55:cc:2d: 40:5d:e8:6c:36:88:34:af:b9:39:7e:6b:f7:c8:8a:37:e7:c1: c4:24:b7:a3:22:1d:8b:17:af:3c:c3:ab:33:9d:a7:cf:d7:a2: e0:99:76:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzKGTI5hjuadumjCsjuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD Eyg2MGE3YmQzYjM0YjQyZDcyZTA4ZDlmZjJhNDE0NTQyNDhlZThlY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7p9c6CVj2wyikhFaCPA5jcMF/zi s95i5QN10WyzYae+zFcT5ddfW9beH7bkrb+3KLTmN1oCnNmqH+3anvUiqBydLmzc CVtAEgZTonDC8+IDWk3pZW6Jvbi67XKHB28LfQ9wx+4LFe7zci5IzmENukl63KC2 n+aLm1RlCxPLUJTZFN+GgF5V/+a18ZMJEhT1lLgrz3PdkvW//dSx3eLiwPYeNg9A 6RcWcLpzssGace7Nj9L0WaXjynKalTzaGUHN5rp8AT6v//8uKSlCWAdD5ACv7STj ygM1uM82bvoDrbdLtat4p768d7d+lK4sTDutv3oazDddNQGBDTSgIz0IvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCnvTs0tC1y4I2f8qQUVCSO6OzqMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT18unu4q 7FQf5PzgHpMGhqddBdF8ueKxVlMFlLf+mbbNohCp9qaOUi+d4M1yVVYrNyJJHB4+ e9GUw2oQUblbvO98PBvTYDCTEsUS+E/VAQBpfWm1j3AKKxpPIqBGkrWnza41dg2i BK/1w9+Yp9fU0iAYm7hebYVTongS/8ppWp8A6ih2IKJEAylcZctJ0cRrSV+z3mB9 jgWOECYXu2OPeHO2L32ubgsjjWPTIS4b8NQBO2oVJLImV8biLP0SSD1zylKfXmPC QnccAFBAoLRsj7hLfdpRVcwtQF3obDaINK+5OX5r98iKN+fBxCS3oyIdixevPMOr M52nz9ei4Jl2tw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:28 2025 by rpki-client