This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft File: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft (raw, json) Hash identifier: tLaULD1P5Wo4di4EFgI/eYS4K9lJ0Jr2VxTLPu526AE= Subject key identifier: DA:DD:0E:E4:E6:1E:39:70:B1:33:5D:4E:C3:0E:90:CB:FF:10:2F:86 Authority key identifier: 9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA Certificate issuer: /CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca Certificate serial: 019B70D9972C041FB2ECC6EBEC8525057966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft Manifest number: 15A9 Signing time: Tue 30 Dec 2025 20:01:06 +0000 Manifest this update: Tue 30 Dec 2025 20:01:06 +0000 Manifest next update: Wed 31 Dec 2025 20:01:06 +0000 Files and hashes: 1: 1-gKSfvIN-nj0ZloNW8DzQVcPMUI.roa (hash: jjlcCOoXxhW/QhUDEGdmxYJMbYMGzmfukEFaEb16efs=) 2: Q5geBAbDdm6rceW2SdCihO9xnZc.roa (hash: qZEJzIP9JlpWgbCaDR3U8w6e1Yf/y2ElsSB5u5JRzoI=) 3: m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl (hash: NSfDgwvzzZl9QlVvFkCWgbbVS6PEO4FVI1CHTeIRynM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:97:2c:04:1f:b2:ec:c6:eb:ec:85:25:05:79:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bad10f972e6789e2a4377a2c29ee08bc3a367ca Validity Not Before: Dec 30 20:01:06 2025 GMT Not After : Dec 31 20:01:06 2025 GMT Subject: CN=dadd0ee4e61e3970b1335d4ec30e90cbff102f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a7:cd:9c:ba:ca:86:29:c7:e5:89:32:5a:2d: e1:01:86:27:89:0f:c8:9a:94:8a:42:07:f6:58:e2: 15:64:d6:64:f7:76:4c:3a:ec:79:68:13:ef:89:68: a0:2e:9f:c5:f8:3c:4f:e7:4e:8a:6f:dc:76:a8:f2: 81:98:b0:9b:ca:6c:78:5b:cc:50:b4:b0:a1:75:af: 52:e3:06:e9:24:09:01:72:9a:11:9c:44:84:94:de: 30:0a:01:cd:1b:1d:b2:f9:f8:b3:8e:d1:26:fa:7a: ce:97:a1:6e:45:bd:75:94:47:d1:81:f9:f8:07:3d: 52:3a:fa:d4:81:d0:cd:90:a3:d5:cc:84:5e:c3:76: ea:a5:22:81:0f:04:63:67:da:4b:c0:e8:af:1f:e6: 12:a8:92:cb:a6:4e:4c:3a:07:4a:de:bc:56:73:db: 1a:cf:5b:5b:22:aa:0a:cc:0c:89:e3:7e:9b:d5:5b: 0c:c1:05:f0:3e:4f:00:89:dd:8c:e8:2d:4c:af:10: 72:09:b5:51:bf:ae:72:5e:49:0f:ac:c1:ec:e1:58: 2c:d6:67:26:70:29:81:0e:15:63:34:59:b0:53:21: c4:4c:0b:6c:43:3c:04:b7:ff:72:38:ac:83:61:0e: 44:03:f3:43:fb:e3:3a:51:ab:11:cb:da:4f:56:f1: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DD:0E:E4:E6:1E:39:70:B1:33:5D:4E:C3:0E:90:CB:FF:10:2F:86 X509v3 Authority Key Identifier: keyid:9B:AD:10:F9:72:E6:78:9E:2A:43:77:A2:C2:9E:E0:8B:C3:A3:67:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4f6d3-a4c0-437c-b4c6-0d3814ea73c7/1/m60Q-XLmeJ4qQ3eiwp7gi8OjZ8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ef:98:47:14:d0:66:18:d3:a7:c9:34:61:40:13:0d:7a:d0: da:3c:ba:d2:49:f2:31:2c:84:10:bf:ba:31:b2:ed:4b:f6:2f: 34:8c:7d:ac:7e:bf:3f:5d:65:72:b4:af:fa:c0:7b:33:bb:1a: 38:5a:b3:96:06:a4:59:9b:6d:85:60:cd:b6:80:07:14:7f:cc: cb:36:74:b4:15:9b:6a:bf:51:04:6a:eb:46:cc:aa:06:9c:71: 50:8a:f6:a5:06:94:09:a1:21:c3:c3:dc:d7:40:fa:4c:4a:dd: 14:fa:22:e6:91:f0:f3:26:bc:09:d0:9f:f8:fb:2c:5a:8e:22: e0:35:4b:b4:6c:99:8b:03:ac:e1:82:5a:fe:1e:20:0f:d4:00: 03:36:67:2f:ce:47:26:28:bc:b0:09:7f:d8:5b:85:dc:04:ec: a4:57:d6:de:22:b6:11:a3:20:3d:2c:52:15:21:8b:54:02:12: 8d:71:b9:82:a5:c7:6f:4d:6e:8b:ef:1e:0e:25:af:fa:a4:1f: bd:93:eb:5b:26:05:f6:0e:a5:1c:4f:2c:50:63:35:5b:dc:a2: 4e:1a:53:f8:6d:b8:64:15:f3:8d:02:90:51:54:12:94:ca:34: 74:f2:94:15:f7:d4:cf:a1:67:99:5c:0c:bf:3e:3f:a6:a2:46: 5a:1f:2c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2ZcsBB+y7Mbr7IUlBXlmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYWQxMGY5NzJlNjc4OWUyYTQzNzdhMmMyOWVlMDhiYzNh MzY3Y2EwHhcNMjUxMjMwMjAwMTA2WhcNMjUxMjMxMjAwMTA2WjAzMTEwLwYDVQQD EyhkYWRkMGVlNGU2MWUzOTcwYjEzMzVkNGVjMzBlOTBjYmZmMTAyZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkafNnLrKhinH5YkyWi3hAYYniQ/I mpSKQgf2WOIVZNZk93ZMOux5aBPviWigLp/F+DxP506Kb9x2qPKBmLCbymx4W8xQ tLChda9S4wbpJAkBcpoRnESElN4wCgHNGx2y+fizjtEm+nrOl6FuRb11lEfRgfn4 Bz1SOvrUgdDNkKPVzIRew3bqpSKBDwRjZ9pLwOivH+YSqJLLpk5MOgdK3rxWc9sa z1tbIqoKzAyJ436b1VsMwQXwPk8Aid2M6C1MrxByCbVRv65yXkkPrMHs4Vgs1mcm cCmBDhVjNFmwUyHETAtsQzwEt/9yOKyDYQ5EA/ND++M6UasRy9pPVvFBWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrdDuTmHjlwsTNdTsMOkMv/EC+GMB8GA1UdIwQY MBaAFJutEPly5nieKkN3osKe4IvDo2fKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTYwUS1YTG1lSjRxUTNlaXdwN2dpOE9qWjhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGY2ZDMtYTRjMC00MzdjLWI0YzYt MGQzODE0ZWE3M2M3LzEvbTYwUS1YTG1lSjRxUTNlaXdwN2dpOE9qWjhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iNGY2ZDMtYTRjMC00MzdjLWI0YzYtMGQzODE0ZWE3M2M3 LzEvbTYwUS1YTG1lSjRxUTNlaXdwN2dpOE9qWjhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu+YRxTQ ZhjTp8k0YUATDXrQ2jy60knyMSyEEL+6MbLtS/YvNIx9rH6/P11lcrSv+sB7M7sa OFqzlgakWZtthWDNtoAHFH/MyzZ0tBWbar9RBGrrRsyqBpxxUIr2pQaUCaEhw8Pc 10D6TErdFPoi5pHw8ya8CdCf+PssWo4i4DVLtGyZiwOs4YJa/h4gD9QAAzZnL85H Jii8sAl/2FuF3ATspFfW3iK2EaMgPSxSFSGLVAISjXG5gqXHb01ui+8eDiWv+qQf vZPrWyYF9g6lHE8sUGM1W9yiThpT+G24ZBXzjQKQUVQSlMo0dPKUFffUz6FnmVwM vz4/pqJGWh8sNg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:29:43 2025 by rpki-client