This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft File: 60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json) Hash identifier: MoG3fZQ+HStG9Qo1lklxaBw2LNbVQDPe6Itc6lZUKIs= Subject key identifier: F7:EE:50:F7:E4:13:E1:24:0F:B2:3E:DF:67:7F:C5:AF:1E:36:21:FB Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79 Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79 Certificate serial: 019B416DA85AE57976969B5CC5D94099476C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 15:01:04 +0000 Manifest this update: Sun 21 Dec 2025 15:01:04 +0000 Manifest next update: Mon 22 Dec 2025 15:01:04 +0000 Files and hashes: 1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: b33FXLhrDZNw8Sgoqu4PAVdfUzeBmvSAPUd1cuhUIvQ=) 2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:a8:5a:e5:79:76:96:9b:5c:c5:d9:40:99:47:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79 Validity Not Before: Dec 21 15:01:04 2025 GMT Not After : Dec 22 15:01:04 2025 GMT Subject: CN=f7ee50f7e413e1240fb23edf677fc5af1e3621fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:f2:f8:ef:c5:21:29:e2:03:aa:40:5e:d1: 13:dd:1a:ea:89:3d:8c:b6:2e:01:05:cd:0e:84:fa: 9c:90:4d:02:6b:c5:f9:d1:f5:f3:15:94:f9:c6:19: 14:d8:49:5a:33:5a:72:35:f6:51:8a:d3:81:dd:1a: 40:fd:a0:04:5d:e5:a4:70:79:2e:b6:87:ba:d7:1b: 0a:a3:99:af:33:c2:d3:c8:75:07:26:28:8b:9e:6f: 31:0d:a2:db:6e:78:7c:cb:0a:f3:d4:b3:29:cb:6c: d9:a3:7a:51:3f:19:d4:66:55:ac:bf:cf:be:07:c3: 47:56:4d:e5:ed:86:e7:94:df:ab:0e:17:67:9f:00: c5:03:df:f8:1c:47:a0:b2:96:a6:83:9b:3c:cd:7c: 89:f4:75:2f:af:66:be:6f:c9:a8:30:f3:34:32:49: 38:6d:b6:b2:ad:ec:9c:2e:70:59:7d:9e:1e:d8:39: 57:c0:e4:21:09:82:20:18:6e:58:df:76:e5:f8:db: c9:e2:88:d5:ec:a5:4d:cd:32:72:6f:9d:ce:cb:44: 1d:2e:ad:d7:c2:4b:5b:8d:f0:8e:56:f3:fe:e3:59: 65:21:e0:8b:99:61:0d:89:da:01:0a:5e:cf:35:01: 5a:fd:0f:eb:3e:19:4f:60:32:18:ce:e2:5d:5b:db: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:50:F7:E4:13:E1:24:0F:B2:3E:DF:67:7F:C5:AF:1E:36:21:FB X509v3 Authority Key Identifier: keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1d:b0:62:9a:1a:7d:4c:c0:89:1a:f2:8b:9b:df:27:42:8f: db:8a:98:d5:3a:e3:19:46:fb:42:0c:72:84:4a:5c:93:90:20: e5:46:87:af:f4:ea:60:0c:3e:9f:fc:87:5f:69:0a:b7:f6:2d: 11:b4:c0:f2:cd:bb:f0:8a:52:26:1d:73:36:13:f5:25:44:14: 56:db:1c:d4:ec:b9:b3:ac:26:b7:d9:70:4f:8b:ef:50:2b:d4: d8:6a:a6:8b:83:8d:5e:1c:97:3b:da:c1:5a:d3:c3:6e:61:14: fb:b7:b4:c0:42:d6:26:0a:90:39:e6:6c:c0:fe:c3:40:0f:ea: 17:dd:00:26:30:c4:40:72:95:59:bb:6d:98:0d:25:47:0e:f4: ec:9c:c1:9f:37:57:30:68:85:92:41:6e:17:0f:f9:5d:2c:1f: 0e:88:c2:19:5a:02:99:b5:3c:92:7a:a8:6b:df:d9:1e:a0:3b: 6d:9d:88:8f:05:44:73:25:bc:98:3f:13:90:88:49:33:8e:46: bd:6f:58:bd:7d:2d:65:d0:bd:0a:65:33:df:ed:bc:97:94:db: f2:0f:1b:78:af:7a:e7:64:f3:0c:80:c0:16:f1:9a:6e:be:7c: 34:9b:95:c5:9a:d9:0d:88:0a:37:4a:73:b6:05:4e:74:2a:72: c3:b6:89:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbaha5Xl2lptcxdlAmUdsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNDE5NTZkMTJkY2I5ODJiZWQ0N2E5ZmFjNGE3ZTQ4ZTc3 ODdjNzkwHhcNMjUxMjIxMTUwMTA0WhcNMjUxMjIyMTUwMTA0WjAzMTEwLwYDVQQD EyhmN2VlNTBmN2U0MTNlMTI0MGZiMjNlZGY2NzdmYzVhZjFlMzYyMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwny+O/FISniA6pAXtET3RrqiT2M ti4BBc0OhPqckE0Ca8X50fXzFZT5xhkU2ElaM1pyNfZRitOB3RpA/aAEXeWkcHku toe61xsKo5mvM8LTyHUHJiiLnm8xDaLbbnh8ywrz1LMpy2zZo3pRPxnUZlWsv8++ B8NHVk3l7YbnlN+rDhdnnwDFA9/4HEegspamg5s8zXyJ9HUvr2a+b8moMPM0Mkk4 bbayreycLnBZfZ4e2DlXwOQhCYIgGG5Y33bl+NvJ4ojV7KVNzTJyb53Oy0QdLq3X wktbjfCOVvP+41llIeCLmWENidoBCl7PNQFa/Q/rPhlPYDIYzuJdW9t5YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfuUPfkE+EkD7I+32d/xa8eNiH7MB8GA1UdIwQY MBaAFOtBlW0S3LmCvtR6n6xKfkjneHx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYt Njc4NDdjNzZjYjc2LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYtNjc4NDdjNzZjYjc2 LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPh2wYpoa fUzAiRryi5vfJ0KP24qY1TrjGUb7QgxyhEpck5Ag5UaHr/TqYAw+n/yHX2kKt/Yt EbTA8s278IpSJh1zNhP1JUQUVtsc1Oy5s6wmt9lwT4vvUCvU2Gqmi4ONXhyXO9rB WtPDbmEU+7e0wELWJgqQOeZswP7DQA/qF90AJjDEQHKVWbttmA0lRw707JzBnzdX MGiFkkFuFw/5XSwfDojCGVoCmbU8knqoa9/ZHqA7bZ2IjwVEcyW8mD8TkIhJM45G vW9YvX0tZdC9CmUz3+28l5Tb8g8beK9652TzDIDAFvGabr58NJuVxZrZDYgKN0pz tgVOdCpyw7aJPw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:31 2025 by rpki-client