This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft File: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json) Hash identifier: DwQuRL38yZHBYTuiax+zmp+gLmBRO+MVzozv3fO9oro= Subject key identifier: 41:DE:CA:89:7C:AC:2E:F9:DC:7E:F2:4C:4A:36:BF:FB:5D:2B:B3:7A Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4 Certificate issuer: /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4 Certificate serial: 019AF31C8CC14281BF02D865F640ABC1B84C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft Manifest number: 06D4 Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: RQ+/C4+0Tm+vwgrgRmS1D7stCFCp6DOr1jA87FCeR5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8c:c1:42:81:bf:02:d8:65:f6:40:ab:c1:b8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4 Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=41deca897cac2ef9dc7ef24c4a36bffb5d2bb37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:c4:80:9e:c0:a4:a2:20:7f:1b:dc:a5:49: de:db:28:0e:63:7a:61:9a:98:cb:ff:0f:51:9b:1e: 47:3c:b5:31:23:3d:5a:d4:cd:07:f2:61:32:18:1a: c0:e5:a2:d3:e6:1a:e6:8e:44:75:58:84:90:e3:ef: d4:9a:4c:44:c5:e2:c7:62:08:99:74:0a:5c:68:ab: 47:f0:e9:ee:a5:63:f5:2d:ce:5e:4e:46:c1:56:da: 2f:a9:8d:b6:e7:03:f3:82:1f:6a:d5:87:39:09:98: f4:03:2d:97:fd:03:7f:22:93:2e:0d:f6:13:2e:ab: 83:4d:ec:38:f6:4c:af:81:42:99:38:d3:2c:2d:bc: ab:f7:6e:15:b0:4e:f2:55:34:39:12:36:fb:99:29: 6a:d3:9e:1c:18:d0:a2:f1:c0:41:d3:d6:00:65:d2: d1:6d:9d:b9:83:7a:04:91:86:9e:1e:48:df:e4:3f: 6c:d6:05:e1:26:61:85:6d:0e:a8:20:c2:82:79:48: c9:7b:70:d6:79:2a:1b:a1:fa:f0:d3:c7:96:b5:60: d7:d2:3d:45:af:0c:28:b6:68:e5:0b:93:b6:32:f7: 3b:70:bb:03:46:ef:42:00:4f:38:0d:c5:c7:17:c6: 5c:7f:53:ea:a6:71:c7:e3:6d:00:84:fd:3a:2d:00: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DE:CA:89:7C:AC:2E:F9:DC:7E:F2:4C:4A:36:BF:FB:5D:2B:B3:7A X509v3 Authority Key Identifier: keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:2c:a4:b9:89:5f:11:27:e6:df:49:ce:34:12:94:37:d8:73: f5:1d:c4:68:78:2f:e7:a7:f8:d3:86:ef:a1:a0:ac:43:c2:be: eb:c8:b0:87:cc:ea:f4:59:66:8b:6c:02:e5:09:b1:4c:db:e8: 86:b9:1c:a9:5d:f9:52:95:81:ca:62:79:85:a5:b6:ae:9f:2e: 2c:04:04:45:54:76:73:bc:55:80:39:a0:2e:41:1b:30:00:cf: 6e:be:c8:35:78:7c:dd:5c:69:b8:99:d9:7a:e7:20:c3:51:5e: 40:06:77:77:25:d4:38:37:43:87:0c:d1:f7:91:10:03:ef:3a: a3:0c:18:12:21:d6:d6:a9:32:39:60:c8:0b:ff:3c:17:76:94: b8:4e:b9:f8:d8:33:c5:97:17:db:d2:fb:bc:de:78:97:ce:f6: 47:c0:a9:59:19:0a:98:1b:6f:5b:79:fb:6e:e6:ac:0c:43:7b: 5a:1c:c5:c2:d2:bf:d4:ad:18:8b:28:4f:81:a7:9f:2e:b2:59: 19:cb:81:ab:ff:cd:62:fa:21:55:46:b5:52:d1:ac:dd:c7:82: 4b:b2:3c:59:99:f9:e9:2a:d3:0b:40:4f:b6:17:18:ef:67:cc: fb:49:24:fb:73:5e:bc:cb:5c:05:33:f8:13:83:96:1d:84:15: dc:1b:91:80 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHIzBQoG/Athl9kCrwbhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYWQyMjg4MDM1ZTQwNTZlYjBjZWMxNTQ0NmEwYzQxODBk MjZlYTQwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD Eyg0MWRlY2E4OTdjYWMyZWY5ZGM3ZWYyNGM0YTM2YmZmYjVkMmJiMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgHEgJ7ApKIgfxvcpUne2ygOY3ph mpjL/w9Rmx5HPLUxIz1a1M0H8mEyGBrA5aLT5hrmjkR1WISQ4+/UmkxExeLHYgiZ dApcaKtH8OnupWP1Lc5eTkbBVtovqY225wPzgh9q1Yc5CZj0Ay2X/QN/IpMuDfYT LquDTew49kyvgUKZONMsLbyr924VsE7yVTQ5Ejb7mSlq054cGNCi8cBB09YAZdLR bZ25g3oEkYaeHkjf5D9s1gXhJmGFbQ6oIMKCeUjJe3DWeSobofrw08eWtWDX0j1F rwwotmjlC5O2Mvc7cLsDRu9CAE84DcXHF8Zcf1PqpnHH420AhP06LQCpCwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEHeyol8rC753H7yTEo2v/tdK7N6MB8GA1UdIwQY MBaAFPutIogDXkBW6wzsFURqDEGA0m6kMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02MGlpQU5lUUZickRPd1ZSR29NUVlEU2JxUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvYTZiMGJmLWMwNjUtNDhkMS1hZmNl LTg4YTY1OTNhNjVjYi8xLzEtNjBpaUFOZVFGYnJET3dWUkdvTVFZRFNicVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IyL2E2YjBiZi1jMDY1LTQ4ZDEtYWZjZS04OGE2NTkzYTY1 Y2IvMS8xLTYwaWlBTmVRRmJyRE93VlJHb01RWURTYnFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSyk uYlfESfm30nONBKUN9hz9R3EaHgv56f404bvoaCsQ8K+68iwh8zq9Flmi2wC5Qmx TNvohrkcqV35UpWBymJ5haW2rp8uLAQERVR2c7xVgDmgLkEbMADPbr7INXh83Vxp uJnZeucgw1FeQAZ3dyXUODdDhwzR95EQA+86owwYEiHW1qkyOWDIC/88F3aUuE65 +NgzxZcX29L7vN54l872R8CpWRkKmBtvW3n7buasDEN7WhzFwtK/1K0YiyhPgaef LrJZGcuBq//NYvohVUa1UtGs3ceCS7I8WZn56SrTC0BPthcY72fM+0kk+3NevMtc BTP4E4OWHYQV3BuRgA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:43:30 2025 by rpki-client