This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json) Hash identifier: iGYRsFSMXQR7+QK05fQroHkHSxv/XNvgYASji3DFjyw= Subject key identifier: 87:AD:B9:B9:4F:DC:CC:19:D7:3C:E7:69:47:7A:C6:8B:52:C5:9E:D5 Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc Certificate serial: 019B3A8F858832674110F61A05B6AE6E1D22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft Manifest number: 0F61 Signing time: Sat 20 Dec 2025 07:00:42 +0000 Manifest this update: Sat 20 Dec 2025 07:00:42 +0000 Manifest next update: Sun 21 Dec 2025 07:00:42 +0000 Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=) 2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: ij7PxFh+dMbJ1UMqP2P+3j/OKQSGRbVeNyNMWXlt4N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:85:88:32:67:41:10:f6:1a:05:b6:ae:6e:1d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc Validity Not Before: Dec 20 07:00:42 2025 GMT Not After : Dec 21 07:00:42 2025 GMT Subject: CN=87adb9b94fdccc19d73ce769477ac68b52c59ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5c:0c:0b:bc:27:5c:9f:dc:f8:66:f0:47:df: 6b:f4:45:69:88:fa:f4:06:79:7e:29:6f:de:27:d9: 20:ea:94:06:ba:e6:0a:30:e9:85:f0:f2:c8:1d:c4: d2:c4:0e:83:53:4e:ce:fe:e5:53:3e:0e:64:69:3a: 04:f2:98:fb:4e:70:35:62:8f:42:c0:b9:ce:06:a3: dc:23:8e:04:7a:cf:28:8d:fe:67:bb:fc:97:04:b7: 00:e7:02:8c:f2:9e:de:99:dd:1e:e5:e7:60:ca:56: 56:ee:8d:e1:94:f0:85:8d:88:d3:e0:03:4a:9d:3c: 19:3f:ce:17:07:02:67:ef:e6:b2:f9:b2:50:5b:ec: 80:b1:61:5a:35:8d:0c:4d:96:57:d3:ba:f9:44:cd: c0:c5:36:b3:0e:8c:ce:40:05:d5:55:4d:c8:b2:a5: c0:05:1c:a7:8b:98:a0:45:44:d2:74:3e:6f:34:33: d3:ad:88:66:cb:42:1f:ad:bd:71:89:a0:b7:70:d8: 47:01:0d:ba:bb:28:da:13:23:42:83:c1:a5:6d:43: a1:36:e1:c3:b3:27:e0:dc:bb:39:6c:db:e4:92:48: 2d:da:99:90:18:b5:1a:4a:41:fc:6b:b3:a3:34:ae: d1:e8:f8:9d:61:4f:65:f8:72:20:de:31:0a:58:ed: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AD:B9:B9:4F:DC:CC:19:D7:3C:E7:69:47:7A:C6:8B:52:C5:9E:D5 X509v3 Authority Key Identifier: keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:10:3c:4c:1f:5d:7f:27:df:89:65:6c:e6:5d:4a:71:b5:90: dd:e5:56:18:2c:36:c1:00:5f:b7:0f:90:b5:72:8f:aa:97:c0: 88:00:73:57:68:13:37:74:53:04:6b:04:ad:f3:e1:a3:e7:a3: e5:28:e6:44:7e:e1:57:a2:b2:6a:4e:cf:90:3b:95:fc:4c:37: 24:a2:24:4a:c4:74:a3:79:d3:08:c4:7f:c2:90:02:7d:7c:23: 22:28:95:94:26:da:fe:01:e7:14:3d:84:87:70:5b:b5:a3:4b: d1:b6:48:11:98:36:49:72:32:5b:1f:ca:26:61:04:eb:81:9e: 31:c7:75:8a:2e:fb:30:da:26:b0:db:e1:c6:e1:26:c2:bb:fa: 47:2f:04:ba:e0:c1:5b:2c:6d:bd:bb:2b:c8:56:86:f5:e2:98: 02:a0:c2:f2:69:d7:b1:85:5d:bd:56:b2:c6:80:c6:9a:81:bf: 65:90:c3:81:e9:4f:42:54:0a:37:2e:32:3e:d0:ee:df:9f:d1: f5:07:e1:f8:50:60:98:38:24:6c:bd:e4:15:4b:4c:69:6b:82: 20:5c:71:cd:2e:8a:ea:d8:8a:61:65:61:43:5f:40:d7:ed:c1: d4:10:45:c8:ec:a5:54:32:c0:74:8a:29:28:9d:d5:1d:f6:5e: 24:d6:a9:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4WIMmdBEPYaBbaubh0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWQwOGFjODYyZGI2YWUwYmIwYjg4MGFlYzA1NWVkYmNi YjgyZmMwHhcNMjUxMjIwMDcwMDQyWhcNMjUxMjIxMDcwMDQyWjAzMTEwLwYDVQQD Eyg4N2FkYjliOTRmZGNjYzE5ZDczY2U3Njk0NzdhYzY4YjUyYzU5ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31wMC7wnXJ/c+GbwR99r9EVpiPr0 Bnl+KW/eJ9kg6pQGuuYKMOmF8PLIHcTSxA6DU07O/uVTPg5kaToE8pj7TnA1Yo9C wLnOBqPcI44Ees8ojf5nu/yXBLcA5wKM8p7emd0e5edgylZW7o3hlPCFjYjT4ANK nTwZP84XBwJn7+ay+bJQW+yAsWFaNY0MTZZX07r5RM3AxTazDozOQAXVVU3IsqXA BRyni5igRUTSdD5vNDPTrYhmy0Ifrb1xiaC3cNhHAQ26uyjaEyNCg8GlbUOhNuHD syfg3Ls5bNvkkkgt2pmQGLUaSkH8a7OjNK7R6PidYU9l+HIg3jEKWO2eUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIetublP3MwZ1zznaUd6xotSxZ7VMB8GA1UdIwQY MBaAFL+tCKyGLbauC7C4gK7AVe28u4L8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEt MWZiM2Y4MTc2MDhmLzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNWRjNjEtODgyYi00NjM2LWFmZjEtMWZiM2Y4MTc2MDhm LzEvdjYwSXJJWXR0cTRMc0xpQXJzQlY3Ynk3Z3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhA8TB9d fyffiWVs5l1KcbWQ3eVWGCw2wQBftw+QtXKPqpfAiABzV2gTN3RTBGsErfPho+ej 5SjmRH7hV6Kyak7PkDuV/Ew3JKIkSsR0o3nTCMR/wpACfXwjIiiVlCba/gHnFD2E h3BbtaNL0bZIEZg2SXIyWx/KJmEE64GeMcd1ii77MNomsNvhxuEmwrv6Ry8EuuDB WyxtvbsryFaG9eKYAqDC8mnXsYVdvVayxoDGmoG/ZZDDgelPQlQKNy4yPtDu35/R 9Qfh+FBgmDgkbL3kFUtMaWuCIFxxzS6K6tiKYWVhQ19A1+3B1BBFyOylVDLAdIop KJ3VHfZeJNapWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:36 2025 by rpki-client