This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json) Hash identifier: Yt8ZVC5es74NLWngXDIkU1/a0wu9CsUdN5fjY92QkbI= Subject key identifier: 14:D7:85:1A:3A:85:EA:2A:A9:71:37:2E:4C:46:13:DF:C4:22:FD:65 Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1 Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1 Certificate serial: 019AF12DFC812D04D1B4A6F45E7F21CF8251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft Manifest number: 0C01 Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=) 2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: WaQRxkyFNsECyBzXgfBNzBT8yxR/8804RB3prVuv6Ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fc:81:2d:04:d1:b4:a6:f4:5e:7f:21:cf:82:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1 Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=14d7851a3a85ea2aa971372e4c4613dfc422fd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:37:20:d2:33:ab:dd:88:6c:12:f3:d7:28: 38:35:93:67:22:11:cd:bb:50:54:f1:55:65:44:5d: 5e:f1:42:23:fe:d9:c1:5a:fd:bc:d8:5a:a2:1d:03: 7f:bc:51:a2:40:15:b2:3d:f0:e9:3b:44:94:d2:eb: 62:f4:44:62:fa:b9:64:5b:98:d0:56:79:20:5b:2b: 47:52:76:b3:5a:49:e4:c0:69:21:0f:8e:f9:a2:75: 82:2d:c6:73:24:4c:99:f3:b4:12:80:b6:1f:75:5c: 2f:70:82:32:35:39:72:9e:a7:e4:bf:ff:e5:81:03: 98:18:31:e2:aa:78:c6:83:28:e1:61:0d:d3:28:a1: 9f:5c:73:74:f9:84:7c:89:2b:74:04:41:57:f3:81: 0e:e8:bf:11:90:a8:40:9c:40:b5:43:c7:2b:f5:ec: 80:21:77:fd:bb:75:24:15:a7:2f:78:98:ba:a4:ce: 3d:31:ca:2f:95:09:86:b9:24:eb:a7:85:fb:38:6a: e0:fc:1f:da:13:83:ec:fd:fd:93:bc:a3:1a:d5:f7: d0:f3:38:14:66:4f:f7:5d:58:49:43:d0:f1:a5:31: da:c2:dd:10:63:cf:8c:79:cf:7c:7b:c8:fc:5c:15: 4b:e2:6d:8e:63:66:21:4f:74:24:a3:aa:32:f2:f5: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D7:85:1A:3A:85:EA:2A:A9:71:37:2E:4C:46:13:DF:C4:22:FD:65 X509v3 Authority Key Identifier: keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2d:96:de:49:e3:a7:c2:20:f4:2d:42:9b:68:d8:1e:6d:40: 28:8e:24:36:91:91:a8:56:7e:5c:11:08:a8:45:18:f5:85:24: e8:b0:40:ef:46:d7:9d:5f:03:7b:2d:17:83:57:e6:28:48:5e: 9d:eb:1c:7d:3b:25:db:1a:c0:b0:d6:0d:d9:a0:f0:15:f9:7d: 86:10:62:9e:58:51:6d:cc:d5:15:34:08:66:c6:44:b3:30:25: f3:50:09:d9:30:9a:1e:1f:25:52:d1:ed:25:58:87:90:31:55: cb:e8:96:97:68:74:6b:47:24:6e:63:53:e7:f5:96:fb:a2:8d: b2:8a:bf:b4:99:f5:b4:5a:cf:28:98:50:9e:bb:e7:bd:1f:46: 03:23:43:bc:a5:59:e5:2b:4c:be:64:7a:6c:c7:12:85:f0:d5: 8e:fa:91:f5:cd:de:03:fd:ae:87:96:2e:70:fb:0b:37:e2:05: b9:14:19:6e:2d:b6:a1:34:a4:1d:8b:62:11:83:d8:47:3e:c5: 25:81:6d:6b:e7:2d:bd:12:cb:89:db:b1:3b:c4:33:6e:e6:13: 1f:ff:a3:1a:13:7e:45:df:c1:bc:ad:1b:26:4b:b7:db:df:87: 3c:ff:41:f0:98:e7:1b:c2:50:77:90:4b:0b:fe:69:0a:fc:61: 9c:09:e5:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfyBLQTRtKb0Xn8hz4JRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NGViNGIyMGJjNTk0YWMyYmEzYWE1YWVmMzBlNzRlMjVl MTU2ZTEwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD EygxNGQ3ODUxYTNhODVlYTJhYTk3MTM3MmU0YzQ2MTNkZmM0MjJmZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvA3INIzq92IbBLz1yg4NZNnIhHN u1BU8VVlRF1e8UIj/tnBWv282FqiHQN/vFGiQBWyPfDpO0SU0uti9ERi+rlkW5jQ VnkgWytHUnazWknkwGkhD475onWCLcZzJEyZ87QSgLYfdVwvcIIyNTlynqfkv//l gQOYGDHiqnjGgyjhYQ3TKKGfXHN0+YR8iSt0BEFX84EO6L8RkKhAnEC1Q8cr9eyA IXf9u3UkFacveJi6pM49McovlQmGuSTrp4X7OGrg/B/aE4Ps/f2TvKMa1ffQ8zgU Zk/3XVhJQ9DxpTHawt0QY8+Mec98e8j8XBVL4m2OY2YhT3Qko6oy8vWPQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTXhRo6heoqqXE3LkxGE9/EIv1lMB8GA1UdIwQY MBaAFLdOtLILxZSsK6OqWu8w504l4VbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDA2MHNndkZsS3dybzZwYTd6RG5UaVhoVnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kY2Q1MTItMGNiNy00OWEwLWE2MTgt NmZiYjE5NDgzMjg3LzEvdDA2MHNndkZsS3dybzZwYTd6RG5UaVhoVnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9kY2Q1MTItMGNiNy00OWEwLWE2MTgtNmZiYjE5NDgzMjg3 LzEvdDA2MHNndkZsS3dybzZwYTd6RG5UaVhoVnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy2W3knj p8Ig9C1Cm2jYHm1AKI4kNpGRqFZ+XBEIqEUY9YUk6LBA70bXnV8Dey0Xg1fmKEhe nescfTsl2xrAsNYN2aDwFfl9hhBinlhRbczVFTQIZsZEszAl81AJ2TCaHh8lUtHt JViHkDFVy+iWl2h0a0ckbmNT5/WW+6KNsoq/tJn1tFrPKJhQnrvnvR9GAyNDvKVZ 5StMvmR6bMcShfDVjvqR9c3eA/2uh5YucPsLN+IFuRQZbi22oTSkHYtiEYPYRz7F JYFta+ctvRLLiduxO8QzbuYTH/+jGhN+Rd/BvK0bJku329+HPP9B8JjnG8JQd5BL C/5pCvxhnAnl9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:30 2025 by rpki-client