This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft File: 60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json) Hash identifier: Xozqd2pgYR3Vnek4iRkWjDMcPYuNOSnzkSuqxypl5cc= Subject key identifier: CC:1D:08:B8:D2:2A:4F:81:30:08:4E:54:40:BA:23:2B:0C:A7:77:68 Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79 Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79 Certificate serial: 019B4D03F9F6B34D5CD02B359205592B5266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 21:01:04 +0000 Manifest this update: Tue 23 Dec 2025 21:01:04 +0000 Manifest next update: Wed 24 Dec 2025 21:01:04 +0000 Files and hashes: 1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: V3KuDbOrEItJgs6xkW5fIhmz/Dqlkck8xdaAa0DcJoY=) 2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:03:f9:f6:b3:4d:5c:d0:2b:35:92:05:59:2b:52:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79 Validity Not Before: Dec 23 21:01:04 2025 GMT Not After : Dec 24 21:01:04 2025 GMT Subject: CN=cc1d08b8d22a4f8130084e5440ba232b0ca77768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:7c:60:3c:ed:94:ac:e1:ef:28:47:90:fd: a8:65:a7:af:8e:66:8c:b7:82:5a:01:af:0d:1b:17: 0d:91:9c:08:e5:38:47:16:12:d5:41:37:84:81:9b: dc:f8:7e:86:f8:95:e1:f4:6c:c7:6e:84:d4:41:95: e8:43:a5:65:a5:df:79:de:de:85:7a:d1:69:48:d4: 3c:ee:0f:4e:3c:62:25:63:67:b7:73:4f:a7:52:2a: 66:a2:99:25:00:88:23:2c:f4:47:04:86:e7:35:4e: 03:2e:41:74:75:ce:61:ca:fc:6c:62:fc:ab:11:a4: 1d:f9:06:b3:c5:7e:eb:72:92:0f:af:84:39:18:24: 9b:4d:b0:db:76:09:c8:c4:e9:1d:2b:ed:40:cc:66: 34:d0:96:7c:3d:bf:35:6c:33:ee:42:b6:23:00:88: c7:c3:07:f0:41:fc:1b:98:43:93:6b:99:e5:5b:83: 16:54:84:34:79:2d:2e:d6:e0:74:9b:91:c4:10:ae: 2e:72:e1:1f:52:b9:3b:04:66:42:7e:fc:84:93:f9: 09:8f:55:77:07:91:7c:79:bc:25:b1:cd:3f:20:e0: 3f:b6:0a:53:98:4b:9f:93:62:93:e9:b0:5f:c4:32: 19:a1:2f:c6:48:7a:d0:6a:a1:8a:43:82:1f:df:12: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:08:B8:D2:2A:4F:81:30:08:4E:54:40:BA:23:2B:0C:A7:77:68 X509v3 Authority Key Identifier: keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:22:4b:db:9a:5a:d9:f5:12:14:5b:66:9f:ac:c4:dc:44:47: 3b:7e:f3:d4:75:f0:8f:50:65:73:bc:ad:e3:26:98:1a:d1:c1: 4d:66:04:a7:c0:c1:7c:13:24:9a:6f:7b:2a:7c:9b:a0:62:6a: f2:fe:06:78:84:60:b0:26:47:2b:fc:c1:ce:7f:c3:e8:19:25: bd:e1:5f:f2:6a:db:9f:c7:e8:7b:11:a5:8b:06:69:0d:c9:5f: dc:8d:83:c9:86:d1:a2:44:52:63:7f:ed:19:05:fc:ee:a7:b1: 58:12:cb:ae:98:e6:cb:0a:74:8f:46:4d:ae:44:58:0e:f8:90: ac:84:25:f2:b0:1b:1d:07:fb:e1:f8:eb:07:1c:d9:6c:ef:8a: 41:42:0a:1a:91:c0:34:02:c9:26:cf:3a:69:75:b3:7e:89:5f: 58:e2:25:69:f9:0c:61:63:e4:70:cd:39:f8:d7:c8:4e:9b:7d: 7a:9a:b6:4a:af:a5:48:fd:f1:fc:ba:76:e5:f9:24:bc:8f:55: 64:aa:fe:ee:79:8d:49:96:ec:42:a1:ff:12:db:df:b5:05:75: 05:80:17:c8:bc:29:31:49:d6:ce:d7:9a:31:e7:59:c2:2b:78: de:9f:23:78:d2:78:d5:a3:df:43:4e:03:dd:95:d2:ea:53:8c: 2b:2b:40:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNA/n2s01c0Cs1kgVZK1JmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNDE5NTZkMTJkY2I5ODJiZWQ0N2E5ZmFjNGE3ZTQ4ZTc3 ODdjNzkwHhcNMjUxMjIzMjEwMTA0WhcNMjUxMjI0MjEwMTA0WjAzMTEwLwYDVQQD EyhjYzFkMDhiOGQyMmE0ZjgxMzAwODRlNTQ0MGJhMjMyYjBjYTc3NzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrt8YDztlKzh7yhHkP2oZaevjmaM t4JaAa8NGxcNkZwI5ThHFhLVQTeEgZvc+H6G+JXh9GzHboTUQZXoQ6Vlpd953t6F etFpSNQ87g9OPGIlY2e3c0+nUipmopklAIgjLPRHBIbnNU4DLkF0dc5hyvxsYvyr EaQd+QazxX7rcpIPr4Q5GCSbTbDbdgnIxOkdK+1AzGY00JZ8Pb81bDPuQrYjAIjH wwfwQfwbmEOTa5nlW4MWVIQ0eS0u1uB0m5HEEK4ucuEfUrk7BGZCfvyEk/kJj1V3 B5F8ebwlsc0/IOA/tgpTmEufk2KT6bBfxDIZoS/GSHrQaqGKQ4If3xJppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwdCLjSKk+BMAhOVEC6IysMp3doMB8GA1UdIwQY MBaAFOtBlW0S3LmCvtR6n6xKfkjneHx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYt Njc4NDdjNzZjYjc2LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZDNmMWMtY2ZmNS00YjJiLTllNDYtNjc4NDdjNzZjYjc2 LzEvNjBHVmJSTGN1WUstMUhxZnJFcC1TT2Q0ZkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCJL25pa 2fUSFFtmn6zE3ERHO37z1HXwj1Blc7yt4yaYGtHBTWYEp8DBfBMkmm97KnyboGJq 8v4GeIRgsCZHK/zBzn/D6BklveFf8mrbn8foexGliwZpDclf3I2DyYbRokRSY3/t GQX87qexWBLLrpjmywp0j0ZNrkRYDviQrIQl8rAbHQf74fjrBxzZbO+KQUIKGpHA NALJJs86aXWzfolfWOIlafkMYWPkcM05+NfITpt9epq2Sq+lSP3x/Lp25fkkvI9V ZKr+7nmNSZbsQqH/EtvftQV1BYAXyLwpMUnWzteaMedZwit43p8jeNJ41aPfQ04D 3ZXS6lOMKytA2A== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:58 2025 by rpki-client