This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json) Hash identifier: QZoc7xsZkUQq9c5KmttRdIM9h1jfotHBI+VqdKpwy+Y= Subject key identifier: D8:D7:1E:2F:E0:1E:49:C1:88:97:F5:94:CD:9A:94:B0:60:1B:91:91 Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4 Certificate issuer: /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4 Certificate serial: 019B2EF9532E3ED8B1ECB99F6C1CE1545B6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft Manifest number: 06F3 Signing time: Thu 18 Dec 2025 01:00:50 +0000 Manifest this update: Thu 18 Dec 2025 01:00:50 +0000 Manifest next update: Fri 19 Dec 2025 01:00:50 +0000 Files and hashes: 1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: IJ1WoRT64RymTOvM104NWmnDNAF+VainZtBHAFYIA9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:53:2e:3e:d8:b1:ec:b9:9f:6c:1c:e1:54:5b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4 Validity Not Before: Dec 18 01:00:50 2025 GMT Not After : Dec 19 01:00:50 2025 GMT Subject: CN=d8d71e2fe01e49c18897f594cd9a94b0601b9191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:95:29:1f:93:4e:d8:85:88:8d:fd:fa:91: 64:b6:54:2d:e6:c7:bc:b1:e6:61:b3:67:24:3b:22: b8:f9:f8:14:7e:eb:e2:1c:35:79:82:e9:a1:44:f3: 32:68:ab:5f:2e:ee:d9:a7:31:88:83:e6:b3:1c:8a: fd:21:b8:c5:9e:af:c6:f1:c4:fb:f3:5d:d8:d0:a1: 0a:70:d8:4a:a3:d0:57:c5:2d:fe:f4:08:d9:7d:bf: 9e:4f:cc:ec:b8:28:0e:47:3e:e2:4f:9e:9f:68:ef: 55:fa:21:e0:6d:a9:81:b1:69:ec:8a:85:97:d4:66: 03:c6:ad:44:63:b5:35:ff:48:f4:fb:12:5a:43:7c: d8:fa:d9:0c:11:4a:f1:d1:f0:d3:fe:74:30:65:64: 52:9e:ce:5b:b3:90:ae:e6:29:8c:f2:b7:8d:77:04: 27:7b:66:13:bd:1a:fe:d2:77:e7:67:f6:b3:e7:a7: ae:26:2a:d7:2e:29:aa:bc:47:40:0d:f3:09:ec:fb: e1:fd:07:3e:f6:95:1a:a4:0c:01:0c:b4:b5:60:4a: 21:cf:1a:a3:e9:5f:a4:b6:19:f8:41:08:ff:7d:29: ec:9d:a0:28:0f:a9:99:b3:a0:17:45:19:4e:e9:d4: 2f:4e:29:73:54:66:de:a4:3d:61:ca:c8:a4:53:35: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:1E:2F:E0:1E:49:C1:88:97:F5:94:CD:9A:94:B0:60:1B:91:91 X509v3 Authority Key Identifier: keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a8:99:50:00:97:d7:f3:f8:32:c3:3d:3b:c4:f3:09:39:38: 70:4d:22:a4:e6:d3:e4:68:e5:0c:7b:3c:f1:34:c4:91:00:c2: 36:72:ce:c0:f3:f6:aa:b2:d7:29:c3:09:20:c6:21:de:32:8b: 16:a2:ab:ee:1b:3c:dc:41:7f:cb:46:73:b3:48:f1:db:4e:a0: 77:71:10:1d:dd:23:0d:1e:eb:ec:54:41:b5:4e:04:39:0c:77: 40:39:14:da:f1:19:1f:8c:11:ee:ca:0c:38:f0:b2:1c:84:3e: f4:c0:7c:d1:ed:93:7a:84:04:7c:16:e8:0f:20:4c:c5:a8:c4: 1a:ba:c1:8e:f3:f0:89:c9:8f:88:bf:d1:32:b6:51:47:83:5e: dd:8a:22:26:9a:46:16:a3:ab:5f:6d:e9:46:d2:7c:ff:2a:58: 91:9f:73:9e:5b:59:13:e0:bb:af:10:57:58:96:23:8f:c5:59: 26:1c:d1:1c:ae:99:3c:eb:69:eb:50:44:f2:e6:4a:b3:35:41: 00:a0:a2:a0:1f:fe:4e:03:7a:65:fb:09:e4:ca:02:ce:c0:1f: 4c:d1:c5:27:f8:ea:ad:c7:4f:a9:9f:ee:04:96:01:29:67:f1: 09:79:4b:44:bd:60:ac:e5:c8:dc:2f:3c:b9:27:fc:e8:e4:bf: 0f:43:7d:98 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsu+VMuPtix7LmfbBzhVFtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYWQyMjg4MDM1ZTQwNTZlYjBjZWMxNTQ0NmEwYzQxODBk MjZlYTQwHhcNMjUxMjE4MDEwMDUwWhcNMjUxMjE5MDEwMDUwWjAzMTEwLwYDVQQD EyhkOGQ3MWUyZmUwMWU0OWMxODg5N2Y1OTRjZDlhOTRiMDYwMWI5MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+yVKR+TTtiFiI39+pFktlQt5se8 seZhs2ckOyK4+fgUfuviHDV5gumhRPMyaKtfLu7ZpzGIg+azHIr9IbjFnq/G8cT7 813Y0KEKcNhKo9BXxS3+9AjZfb+eT8zsuCgORz7iT56faO9V+iHgbamBsWnsioWX 1GYDxq1EY7U1/0j0+xJaQ3zY+tkMEUrx0fDT/nQwZWRSns5bs5Cu5imM8reNdwQn e2YTvRr+0nfnZ/az56euJirXLimqvEdADfMJ7Pvh/Qc+9pUapAwBDLS1YEohzxqj 6V+kthn4QQj/fSnsnaAoD6mZs6AXRRlO6dQvTilzVGbepD1hysikUzU2TwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNjXHi/gHknBiJf1lM2alLBgG5GRMB8GA1UdIwQY MBaAFPutIogDXkBW6wzsFURqDEGA0m6kMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02MGlpQU5lUUZickRPd1ZSR29NUVlEU2JxUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTZiMGJmLWMwNjUtNDhkMS1hZmNl LTg4YTY1OTNhNjVjYi8xLzEtNjBpaUFOZVFGYnJET3dWUkdvTVFZRFNicVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IyL2E2YjBiZi1jMDY1LTQ4ZDEtYWZjZS04OGE2NTkzYTY1 Y2IvMS8xLTYwaWlBTmVRRmJyRE93VlJHb01RWURTYnFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqiZ UACX1/P4MsM9O8TzCTk4cE0ipObT5GjlDHs88TTEkQDCNnLOwPP2qrLXKcMJIMYh 3jKLFqKr7hs83EF/y0Zzs0jx206gd3EQHd0jDR7r7FRBtU4EOQx3QDkU2vEZH4wR 7soMOPCyHIQ+9MB80e2TeoQEfBboDyBMxajEGrrBjvPwicmPiL/RMrZRR4Ne3Yoi JppGFqOrX23pRtJ8/ypYkZ9znltZE+C7rxBXWJYjj8VZJhzRHK6ZPOtp61BE8uZK szVBAKCioB/+TgN6ZfsJ5MoCzsAfTNHFJ/jqrcdPqZ/uBJYBKWfxCXlLRL1grOXI 3C88uSf86OS/D0N9mA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:36 2025 by rpki-client