This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json) Hash identifier: yo/C6xk8hcWcitUjGNDD7pWQWvr9oozBdRWhSx2W99s= Subject key identifier: 98:5F:FA:6D:CA:3D:2F:6B:93:16:55:FF:5B:83:9A:05:C5:48:0B:69 Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Certificate serial: 019AF0883C88FB7D2522DDF3D592632AB229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft Manifest number: 0454 Signing time: Fri 05 Dec 2025 22:00:51 +0000 Manifest this update: Fri 05 Dec 2025 22:00:51 +0000 Manifest next update: Sat 06 Dec 2025 22:00:51 +0000 Files and hashes: 1: 9dpvTj3dN-E7QsiczyUqUE2pmXg.roa (hash: jPZhbMHjd5Wy0OIvYiA0rk7oPkiRrytJe32NXuq6K3g=) 2: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: Z+UMXvr+0Y4vBulVUDZOsWhlRl3xQ2fmjl6eMXBQgHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:3c:88:fb:7d:25:22:dd:f3:d5:92:63:2a:b2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Validity Not Before: Dec 5 22:00:51 2025 GMT Not After : Dec 6 22:00:51 2025 GMT Subject: CN=985ffa6dca3d2f6b931655ff5b839a05c5480b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:1a:25:20:6b:51:2e:85:94:5b:0f:4c:bb: fe:63:f4:7a:19:1a:43:18:a6:15:ab:72:98:b8:3b: df:c8:18:8c:e8:4c:2c:29:ab:01:f9:03:13:28:0b: c5:19:9d:85:27:d5:1a:14:40:9a:db:77:43:51:4b: 8e:43:4f:f9:a7:58:f0:6a:0a:74:7c:fa:33:77:9a: 38:c6:a6:12:9c:13:d5:ef:26:3f:83:f3:2e:c6:53: 48:27:53:70:bb:70:7e:94:83:6c:20:76:72:88:ae: 76:52:ab:97:85:6a:08:54:1c:90:8d:0e:49:61:20: 7b:c6:c0:12:a9:34:b7:d3:3b:39:bd:bb:89:13:1d: d3:96:78:e5:61:30:34:47:ce:9c:92:77:8e:58:5d: c3:8a:9c:c5:d6:9a:99:70:5d:1f:57:3b:65:5c:fb: a4:11:36:2b:94:1b:0f:e0:75:c1:2e:c7:7d:23:74: 04:60:b7:ec:aa:d5:c4:1a:3d:8a:02:cf:09:de:f2: 9b:5c:aa:4e:f7:a1:06:b4:8d:87:9b:f6:5c:f4:8f: 7a:7b:58:01:ad:81:4d:d0:05:3d:48:63:a8:65:93: 66:a8:f8:8e:7c:9b:74:2e:67:ff:47:6a:00:ec:05: 06:f3:41:5e:dc:ef:d0:71:ce:f4:b7:08:01:61:2d: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:FA:6D:CA:3D:2F:6B:93:16:55:FF:5B:83:9A:05:C5:48:0B:69 X509v3 Authority Key Identifier: keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:dd:35:53:7e:d0:68:e8:25:ac:ce:79:57:d7:d6:d1:04:eb: 4d:45:a1:49:fe:6b:5c:bd:fb:42:6f:02:df:ee:49:b0:ae:5f: 5c:30:6d:70:cc:e4:10:f6:c2:fe:df:94:8b:3a:c9:b0:ba:2d: 69:8f:d1:4c:be:8e:f8:0f:b2:1c:55:dd:b7:ea:bb:ef:16:a8: 8c:89:c2:89:54:75:ff:ca:1b:09:9a:8b:65:f4:26:02:b9:b8: 95:97:69:1d:c6:83:8e:41:a9:dd:d4:7f:34:c6:ba:2f:9f:45: dd:b2:ac:84:84:6a:52:8a:32:e9:3b:7a:39:37:b5:86:6d:60: d4:b2:13:ef:79:1c:cf:71:dd:ab:db:0e:8a:fa:4a:dc:d7:e1: d9:eb:2b:f3:c8:ab:56:d0:fc:d1:83:43:5f:73:83:0c:cf:7b: 56:7e:66:87:d7:b2:ae:60:1c:81:6e:a0:0b:be:5c:68:22:3a: 40:d9:b6:92:08:38:19:2f:d2:a5:2a:c1:cc:96:71:44:b3:76: 33:42:b7:3d:31:6b:45:85:58:57:fb:3f:c3:ae:96:67:d3:0b: f4:27:13:ec:91:6b:3f:8d:b9:60:75:53:72:28:18:93:ca:5f: 99:b0:f7:d4:b0:25:48:b5:bf:d4:01:b9:7f:3f:be:19:71:fa: c8:56:f7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDyI+30lIt3z1ZJjKrIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw MGU1ODEwHhcNMjUxMjA1MjIwMDUxWhcNMjUxMjA2MjIwMDUxWjAzMTEwLwYDVQQD Eyg5ODVmZmE2ZGNhM2QyZjZiOTMxNjU1ZmY1YjgzOWEwNWM1NDgwYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCcaJSBrUS6FlFsPTLv+Y/R6GRpD GKYVq3KYuDvfyBiM6EwsKasB+QMTKAvFGZ2FJ9UaFECa23dDUUuOQ0/5p1jwagp0 fPozd5o4xqYSnBPV7yY/g/MuxlNIJ1Nwu3B+lINsIHZyiK52UquXhWoIVByQjQ5J YSB7xsASqTS30zs5vbuJEx3TlnjlYTA0R86ckneOWF3DipzF1pqZcF0fVztlXPuk ETYrlBsP4HXBLsd9I3QEYLfsqtXEGj2KAs8J3vKbXKpO96EGtI2Hm/Zc9I96e1gB rYFN0AU9SGOoZZNmqPiOfJt0Lmf/R2oA7AUG80Fe3O/Qcc70twgBYS2ZqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhf+m3KPS9rkxZV/1uDmgXFSAtpMB8GA1UdIwQY MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt NDI5NTFjMmNhNzM4LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4 LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB901U37Q aOglrM55V9fW0QTrTUWhSf5rXL37Qm8C3+5JsK5fXDBtcMzkEPbC/t+UizrJsLot aY/RTL6O+A+yHFXdt+q77xaojInCiVR1/8obCZqLZfQmArm4lZdpHcaDjkGp3dR/ NMa6L59F3bKshIRqUooy6Tt6OTe1hm1g1LIT73kcz3Hdq9sOivpK3Nfh2esr88ir VtD80YNDX3ODDM97Vn5mh9eyrmAcgW6gC75caCI6QNm2kgg4GS/SpSrBzJZxRLN2 M0K3PTFrRYVYV/s/w66WZ9ML9CcT7JFrP425YHVTcigYk8pfmbD31LAlSLW/1AG5 fz++GXH6yFb31w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:25 2025 by rpki-client