This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json) Hash identifier: EFq3ujR8aI8cA//LOCVcoMhJH6TfD3u5rkX1WK9VXno= Subject key identifier: D9:BE:47:16:EF:26:4F:ED:A4:AC:44:AB:86:9F:AA:F6:4B:16:1C:7D Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Certificate serial: 019B446E8CCA38EB90BDE8C6075BE393B42F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft Manifest number: 0C00 Signing time: Mon 22 Dec 2025 05:00:54 +0000 Manifest this update: Mon 22 Dec 2025 05:00:54 +0000 Manifest next update: Tue 23 Dec 2025 05:00:54 +0000 Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: jgL3tvrLu8Rvu+tdjOWIsj75ZQRJtU+nmhJxQRqxXZM=) 2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:8c:ca:38:eb:90:bd:e8:c6:07:5b:e3:93:b4:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Validity Not Before: Dec 22 05:00:54 2025 GMT Not After : Dec 23 05:00:54 2025 GMT Subject: CN=d9be4716ef264feda4ac44ab869faaf64b161c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:ef:18:22:bb:05:63:6b:19:0f:a3:53:d1: 5c:65:83:57:ea:f2:5b:f3:da:41:bf:5c:a0:f2:7d: 27:14:3c:14:56:e5:89:ca:28:d3:1f:e0:87:76:44: 52:8b:d2:66:3a:09:cf:58:d6:73:37:d1:5a:e7:b7: 6a:d5:f0:05:40:27:a7:08:1c:51:f6:c5:08:28:72: ec:46:64:ef:e0:46:10:95:73:10:f0:66:e1:1a:49: 41:34:b9:3c:2f:2c:6c:53:2a:6d:a0:95:0d:d7:d1: c3:ec:55:ac:63:ab:cf:4d:2b:b6:72:30:ef:3b:02: 7d:7c:8b:4e:1b:3a:b8:33:0b:61:03:1d:d0:5b:88: 8a:69:2c:7a:5d:bf:1a:6b:4f:df:94:be:64:35:78: e1:1f:69:6e:95:c2:6a:67:f3:b0:53:48:cf:6c:e1: 5f:ce:34:28:90:5a:f1:28:db:9d:6e:b8:60:b8:50: 32:a9:f8:17:b3:c9:38:ca:62:49:5f:d2:28:68:dc: d4:c1:51:24:64:84:63:c0:d6:81:7b:35:11:12:87: fe:db:77:09:4f:3a:0f:8e:1b:fa:87:c4:48:bb:a9: 06:fd:b0:70:43:8e:d4:a9:11:67:de:8b:9d:db:97: 77:53:a4:54:16:b2:2f:73:7d:b4:97:74:3c:e9:fc: 5c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BE:47:16:EF:26:4F:ED:A4:AC:44:AB:86:9F:AA:F6:4B:16:1C:7D X509v3 Authority Key Identifier: keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f1:c5:63:1f:20:34:87:d1:3a:88:6f:09:81:fe:66:c9:76: 7d:c9:7a:9d:54:c2:4e:31:d9:90:c5:75:74:35:60:90:8f:b1: 9c:c8:26:ca:e1:5d:d8:88:87:e8:cd:1d:13:30:b2:9b:2a:95: 33:f6:8d:8c:ae:c5:f9:73:32:8d:10:f5:08:e9:76:e9:62:68: 9a:cd:bf:77:80:14:4a:55:2a:2f:c7:60:41:e6:db:19:2e:fe: a8:63:52:31:56:50:97:9a:e8:4a:7d:60:43:b8:26:7f:01:b7: 36:86:bf:4a:3c:41:2e:fc:23:7a:5d:6b:52:c4:64:d2:ff:eb: 26:d5:39:97:20:e9:d4:d7:35:1b:67:67:91:0c:09:fa:91:e0: f9:c5:bb:55:b3:92:3a:1c:63:c0:51:8b:14:42:59:3c:38:ca: a9:fb:2e:a4:80:d1:7b:fe:88:4b:e1:eb:fc:5f:83:03:e9:93: 74:3f:9b:22:cc:e9:35:f3:70:fb:45:f2:d0:08:85:4e:6c:d5: fe:de:6a:62:cd:da:66:a3:1d:38:ce:76:9a:71:ab:07:44:65: d1:a8:cd:2e:5a:f4:88:65:91:b1:3e:a7:e2:39:8a:8d:53:f1: 8d:b9:1c:8e:a0:6b:45:62:2d:12:56:bf:17:d0:9d:7f:3b:6a: 31:8a:ed:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbozKOOuQvejGB1vjk7QvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4 ZTgwNTIwHhcNMjUxMjIyMDUwMDU0WhcNMjUxMjIzMDUwMDU0WjAzMTEwLwYDVQQD EyhkOWJlNDcxNmVmMjY0ZmVkYTRhYzQ0YWI4NjlmYWFmNjRiMTYxYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hTvGCK7BWNrGQ+jU9FcZYNX6vJb 89pBv1yg8n0nFDwUVuWJyijTH+CHdkRSi9JmOgnPWNZzN9Fa57dq1fAFQCenCBxR 9sUIKHLsRmTv4EYQlXMQ8GbhGklBNLk8LyxsUyptoJUN19HD7FWsY6vPTSu2cjDv OwJ9fItOGzq4MwthAx3QW4iKaSx6Xb8aa0/flL5kNXjhH2lulcJqZ/OwU0jPbOFf zjQokFrxKNudbrhguFAyqfgXs8k4ymJJX9IoaNzUwVEkZIRjwNaBezUREof+23cJ TzoPjhv6h8RIu6kG/bBwQ47UqRFn3oud25d3U6RUFrIvc320l3Q86fxcnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNm+RxbvJk/tpKxEq4afqvZLFhx9MB8GA1UdIwQY MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3 LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPHFYx8g NIfROohvCYH+Zsl2fcl6nVTCTjHZkMV1dDVgkI+xnMgmyuFd2IiH6M0dEzCymyqV M/aNjK7F+XMyjRD1COl26WJoms2/d4AUSlUqL8dgQebbGS7+qGNSMVZQl5roSn1g Q7gmfwG3Noa/SjxBLvwjel1rUsRk0v/rJtU5lyDp1Nc1G2dnkQwJ+pHg+cW7VbOS OhxjwFGLFEJZPDjKqfsupIDRe/6IS+Hr/F+DA+mTdD+bIszpNfNw+0Xy0AiFTmzV /t5qYs3aZqMdOM52mnGrB0Rl0ajNLlr0iGWRsT6n4jmKjVPxjbkcjqBrRWItEla/ F9CdfztqMYrtbQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:14:29 2025 by rpki-client