This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json) Hash identifier: 46db8ucBaMaMhaO08W9tEVT5QhWnGfhfobIVE1vwH9M= Subject key identifier: 2E:89:87:64:84:44:2C:CA:69:7D:09:9A:B4:EB:82:E1:0D:8D:A7:FE Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Certificate serial: 019B58D1C30D84C4D12CCBBF22CA1164D3F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft Manifest number: 048A Signing time: Fri 26 Dec 2025 04:01:40 +0000 Manifest this update: Fri 26 Dec 2025 04:01:40 +0000 Manifest next update: Sat 27 Dec 2025 04:01:40 +0000 Files and hashes: 1: 9dpvTj3dN-E7QsiczyUqUE2pmXg.roa (hash: jPZhbMHjd5Wy0OIvYiA0rk7oPkiRrytJe32NXuq6K3g=) 2: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: 2h78V97pJ2zuzf+PnRPX2ss7Fza0MJqHLkYKYWtuqtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:c3:0d:84:c4:d1:2c:cb:bf:22:ca:11:64:d3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581 Validity Not Before: Dec 26 04:01:40 2025 GMT Not After : Dec 27 04:01:40 2025 GMT Subject: CN=2e89876484442cca697d099ab4eb82e10d8da7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:6e:a0:f9:33:69:58:ef:f2:b7:2c:a2:94: 36:50:37:f6:39:42:c5:e0:41:00:20:8c:37:64:f9: 2c:65:f9:a7:60:3e:39:f7:85:19:a5:7e:07:11:0d: ea:99:e6:75:8d:c4:b0:06:d0:05:87:77:ba:db:48: 86:5b:0a:73:79:6c:90:6a:36:2e:05:df:32:dc:80: cc:f9:50:e7:0f:a7:28:6c:d6:f1:fd:07:f3:4b:56: b9:9a:47:24:15:39:9e:e7:cc:7e:e5:13:47:36:bd: 8b:c1:c8:1b:d6:4e:62:c2:3f:02:c9:f6:d3:80:ab: ef:0c:d7:9e:41:ef:e1:c7:6e:24:52:ec:f7:48:18: ab:09:cc:32:73:6d:58:38:f3:0d:81:70:03:35:01: 42:2d:e7:a3:b5:67:44:7e:6d:98:7e:e5:59:63:ca: 5d:f2:00:49:33:0a:50:0a:79:f1:df:69:8a:02:f1: 6e:d4:b8:07:16:ed:e8:37:85:5e:13:f9:0d:1d:47: 31:a6:d5:1a:cc:86:d4:38:f5:ac:c1:04:9f:e4:09: 27:1b:7a:1f:3a:78:07:5a:6e:e6:11:be:49:ab:57: 3b:70:eb:8e:f5:d2:7e:0f:ac:41:3e:4f:c2:2d:3b: 8e:63:3b:4a:7a:df:3e:1c:5e:b7:a1:bd:0b:c3:af: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:89:87:64:84:44:2C:CA:69:7D:09:9A:B4:EB:82:E1:0D:8D:A7:FE X509v3 Authority Key Identifier: keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:16:11:bb:02:df:7e:07:30:4e:52:8a:e6:e8:e8:2b:c5:1f: 92:66:b8:74:82:30:2e:63:91:f8:45:1e:32:1d:68:c0:ec:2b: 5e:10:3e:63:d4:dc:ae:93:3d:ec:bf:60:df:e0:d5:27:77:ff: 77:b1:30:9a:c6:db:2d:73:3e:66:94:64:83:73:05:06:93:53: 0a:a6:a0:b0:7a:dc:65:6a:f3:26:76:a4:e8:d9:45:6b:39:7d: 82:5b:08:94:a3:cb:13:f3:0a:60:c9:e6:95:f6:d7:d4:cc:02: cb:e5:cf:7d:e1:a3:99:36:ee:db:c1:09:1d:51:7e:77:88:19: 20:87:ab:03:31:4f:42:d8:a9:2e:8b:0c:58:10:e1:41:e4:76: 7e:0f:ec:8f:32:dd:ee:21:78:3a:90:63:a3:0a:cb:e1:ab:88: f7:9e:28:e5:22:f2:1b:15:69:88:6a:10:3d:d6:d6:b2:68:9a: e8:fb:76:1c:b2:ff:47:ff:a9:87:d4:5e:7a:bc:49:db:10:d0: ef:75:6e:10:5d:52:a8:89:b1:49:6b:a7:5d:3d:37:1c:2d:b5: 2f:7c:d3:88:51:bf:6c:82:5a:a5:f5:f0:73:56:e7:fe:73:ac: b2:e8:d2:02:c9:f8:6c:81:ea:9c:d6:13:52:78:e6:b2:54:87: ef:ce:00:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0cMNhMTRLMu/IsoRZNP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw MGU1ODEwHhcNMjUxMjI2MDQwMTQwWhcNMjUxMjI3MDQwMTQwWjAzMTEwLwYDVQQD EygyZTg5ODc2NDg0NDQyY2NhNjk3ZDA5OWFiNGViODJlMTBkOGRhN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEBuoPkzaVjv8rcsopQ2UDf2OULF 4EEAIIw3ZPksZfmnYD4594UZpX4HEQ3qmeZ1jcSwBtAFh3e620iGWwpzeWyQajYu Bd8y3IDM+VDnD6cobNbx/QfzS1a5mkckFTme58x+5RNHNr2Lwcgb1k5iwj8CyfbT gKvvDNeeQe/hx24kUuz3SBirCcwyc21YOPMNgXADNQFCLeejtWdEfm2YfuVZY8pd 8gBJMwpQCnnx32mKAvFu1LgHFu3oN4VeE/kNHUcxptUazIbUOPWswQSf5AknG3of OngHWm7mEb5Jq1c7cOuO9dJ+D6xBPk/CLTuOYztKet8+HF63ob0Lw6940QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6Jh2SERCzKaX0JmrTrguENjaf+MB8GA1UdIwQY MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt NDI5NTFjMmNhNzM4LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4 LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhYRuwLf fgcwTlKK5ujoK8Ufkma4dIIwLmOR+EUeMh1owOwrXhA+Y9TcrpM97L9g3+DVJ3f/ d7EwmsbbLXM+ZpRkg3MFBpNTCqagsHrcZWrzJnak6NlFazl9glsIlKPLE/MKYMnm lfbX1MwCy+XPfeGjmTbu28EJHVF+d4gZIIerAzFPQtipLosMWBDhQeR2fg/sjzLd 7iF4OpBjowrL4auI954o5SLyGxVpiGoQPdbWsmia6Pt2HLL/R/+ph9ReerxJ2xDQ 73VuEF1SqImxSWunXT03HC21L3zTiFG/bIJapfXwc1bn/nOssujSAsn4bIHqnNYT UnjmslSH784A7Q== -----END CERTIFICATE-----Generated at Fri Dec 26 11:16:36 2025 by rpki-client