This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json) Hash identifier: LKdKF0CqLew9cOJfF9ik1opfcNEVxbKtTxQcpWfeAqE= Subject key identifier: 3F:0E:99:80:7F:28:23:77:6D:56:AC:A6:C8:FD:3E:3D:52:88:36:A4 Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Certificate serial: 019B57BEA4B3ED3F37782A4783F1C1E3ED7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft Manifest number: 0C0A Signing time: Thu 25 Dec 2025 23:01:10 +0000 Manifest this update: Thu 25 Dec 2025 23:01:10 +0000 Manifest next update: Fri 26 Dec 2025 23:01:10 +0000 Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: rKgFH6GPIpE9VlxGMF9bQHS/LqIB9OZTLT3tV/tKkNw=) 2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:be:a4:b3:ed:3f:37:78:2a:47:83:f1:c1:e3:ed:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052 Validity Not Before: Dec 25 23:01:10 2025 GMT Not After : Dec 26 23:01:10 2025 GMT Subject: CN=3f0e99807f2823776d56aca6c8fd3e3d528836a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:da:e6:39:bb:c2:74:ac:86:99:41:4d:b5: ae:b3:da:3f:a7:3f:b9:5a:14:35:69:b7:94:ae:d2: ea:07:d7:43:e8:9f:ef:e9:75:b7:4e:16:4e:87:fa: 1a:37:ab:53:b3:99:28:c8:a9:fa:de:0f:38:0a:96: 92:4c:26:ba:52:01:e5:db:75:7b:a7:33:47:6b:51: f8:7f:7a:14:84:0c:e6:dc:2f:d3:d2:30:15:5c:d9: 3c:72:e7:60:ef:7e:58:ec:67:8b:90:e8:44:24:b3: 70:c7:b0:93:3b:b4:a7:b3:46:e6:44:18:0b:6d:cb: 7d:07:56:b7:97:b8:38:0f:ff:f7:3c:4f:86:f1:8e: 99:5c:49:c7:78:fd:e9:2b:6e:18:41:35:e8:98:9a: 62:3a:e4:40:ec:db:52:68:30:25:43:16:5c:f8:9e: 4d:eb:92:f1:f6:20:c6:07:d8:f3:b0:61:49:70:7a: e9:5a:30:db:7b:30:dd:30:68:7b:82:19:6e:52:fd: 9a:f3:0d:ad:34:d9:2c:96:99:38:b6:d5:82:b7:7d: 32:e0:55:e6:c5:32:89:e0:6a:49:7f:07:44:cc:3a: 21:ad:02:02:fd:85:bb:b3:aa:f5:40:f0:7b:23:0b: 04:bd:1b:cb:96:d1:21:3b:3c:92:4e:67:d9:0c:c4: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0E:99:80:7F:28:23:77:6D:56:AC:A6:C8:FD:3E:3D:52:88:36:A4 X509v3 Authority Key Identifier: keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b8:17:68:96:b3:6f:57:36:ba:76:55:68:e7:f7:78:20:28: ae:4c:33:03:df:38:c0:ba:20:0f:81:25:09:fc:33:04:cf:e0: 39:cf:a8:39:07:f6:3d:b4:ba:19:da:51:2b:c6:85:42:2e:41: 2e:9b:e5:a9:7e:86:8c:39:a0:13:f0:9c:63:86:56:cc:a7:1b: 8e:cb:71:5a:58:8f:b4:f0:c3:bd:f2:23:3e:ae:f2:fa:e6:2c: de:62:6e:00:72:c4:33:a9:1e:f2:8e:9b:60:ff:f0:32:6d:ab: 31:a3:91:16:69:b5:ea:b7:e0:a2:92:0b:95:a5:2b:45:36:9e: 21:28:a9:a0:70:65:34:f7:e6:8c:68:6f:3c:f6:cf:6f:e1:62: 9a:25:70:16:8d:66:3c:9f:fe:ae:32:b3:ce:44:2e:b3:25:ff: f1:d4:45:68:18:33:c1:f6:ab:16:37:0c:9f:b0:2b:88:36:a9: 2a:69:dc:31:09:1a:05:1e:72:17:99:64:59:05:9a:a8:15:65: e5:ec:c4:db:b6:5d:cb:b4:53:85:13:bb:ce:b5:a5:e0:5c:31: 83:df:ac:40:22:14:c9:84:81:78:0d:79:e4:44:c9:f1:4d:34: 95:41:2b:0c:53:bd:22:b0:ea:2d:c3:0a:86:3f:67:fe:f0:9e: c7:00:7e:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXvqSz7T83eCpHg/HB4+19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4 ZTgwNTIwHhcNMjUxMjI1MjMwMTEwWhcNMjUxMjI2MjMwMTEwWjAzMTEwLwYDVQQD EygzZjBlOTk4MDdmMjgyMzc3NmQ1NmFjYTZjOGZkM2UzZDUyODgzNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3va5jm7wnSshplBTbWus9o/pz+5 WhQ1abeUrtLqB9dD6J/v6XW3ThZOh/oaN6tTs5koyKn63g84CpaSTCa6UgHl23V7 pzNHa1H4f3oUhAzm3C/T0jAVXNk8cudg735Y7GeLkOhEJLNwx7CTO7Sns0bmRBgL bct9B1a3l7g4D//3PE+G8Y6ZXEnHeP3pK24YQTXomJpiOuRA7NtSaDAlQxZc+J5N 65Lx9iDGB9jzsGFJcHrpWjDbezDdMGh7ghluUv2a8w2tNNkslpk4ttWCt30y4FXm xTKJ4GpJfwdEzDohrQIC/YW7s6r1QPB7IwsEvRvLltEhOzySTmfZDMRQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8OmYB/KCN3bVaspsj9Pj1SiDakMB8GA1UdIwQY MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3 LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLgXaJaz b1c2unZVaOf3eCAorkwzA984wLogD4ElCfwzBM/gOc+oOQf2PbS6GdpRK8aFQi5B LpvlqX6GjDmgE/CcY4ZWzKcbjstxWliPtPDDvfIjPq7y+uYs3mJuAHLEM6ke8o6b YP/wMm2rMaORFmm16rfgopILlaUrRTaeISipoHBlNPfmjGhvPPbPb+FimiVwFo1m PJ/+rjKzzkQusyX/8dRFaBgzwfarFjcMn7AriDapKmncMQkaBR5yF5lkWQWaqBVl 5ezE27Zdy7RThRO7zrWl4Fwxg9+sQCIUyYSBeA155ETJ8U00lUErDFO9IrDqLcMK hj9n/vCexwB+wQ== -----END CERTIFICATE-----Generated at Fri Dec 26 01:29:56 2025 by rpki-client