This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json) Hash identifier: LoIkCMN6wKbp32CaTBL+Jtcx4pMnaO88y3MpzFOc0mk= Subject key identifier: 5A:31:F6:E5:98:74:EE:1D:08:BD:C6:AF:2C:FD:79:01:B8:C7:DB:BA Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3 Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3 Certificate serial: 019AF3C0383B23DCEF3E220EE138D0D91750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft Manifest number: 0675 Signing time: Sat 06 Dec 2025 13:00:51 +0000 Manifest this update: Sat 06 Dec 2025 13:00:51 +0000 Manifest next update: Sun 07 Dec 2025 13:00:51 +0000 Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: GWpoXqc15ZXqd6WHVFzs2SZUtXr7orJXiRggUcIWkEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:38:3b:23:dc:ef:3e:22:0e:e1:38:d0:d9:17:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3 Validity Not Before: Dec 6 13:00:51 2025 GMT Not After : Dec 7 13:00:51 2025 GMT Subject: CN=5a31f6e59874ee1d08bdc6af2cfd7901b8c7dbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:bc:8c:6d:b2:e3:53:70:e1:14:c3:7c:cb: 2b:90:2c:ec:79:11:26:33:07:fa:c0:c1:d1:8e:8c: 8e:f4:38:52:9b:92:db:f4:40:84:7d:0f:5d:75:91: 81:9a:d7:82:fb:ce:60:1e:84:6d:08:3c:ce:1e:41: 63:68:35:5d:df:f8:4d:9e:3b:11:75:98:31:e5:f2: 6d:7f:a3:49:b7:da:42:56:43:05:0a:f9:b6:48:47: a9:f5:68:68:73:d9:79:0e:cd:09:27:be:38:bf:f4: c6:7c:fd:80:eb:48:cf:ee:75:85:ff:44:49:6c:08: cf:1f:df:37:59:0c:02:b6:1d:a1:3c:f1:43:17:7c: cb:3d:a1:64:9f:8e:e7:aa:33:58:c6:a8:ca:53:26: 90:44:cc:9f:34:84:50:eb:e2:ba:80:82:b6:46:9e: d4:64:eb:fb:b1:23:03:6f:ea:53:cd:71:18:c0:83: da:08:cf:d3:21:be:6d:cd:f0:0f:24:c7:d8:52:ab: e1:2a:2b:9b:92:08:79:67:e6:d4:03:d3:d6:c8:c7: 1a:fe:21:b6:b6:e7:0c:26:fc:85:81:5b:c3:7c:18: 6b:b4:40:84:97:af:83:cf:24:04:cf:7b:e0:07:50: 24:3f:66:32:35:c3:2b:9d:9c:7a:2a:a2:d6:86:dc: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:F6:E5:98:74:EE:1D:08:BD:C6:AF:2C:FD:79:01:B8:C7:DB:BA X509v3 Authority Key Identifier: keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:04:ee:8d:3a:78:8f:5d:b5:ee:14:8f:a2:23:7f:5b:72:e6: 58:80:1d:fe:c9:90:60:1a:d8:e8:0c:59:f3:e9:2b:ec:34:60: 09:47:c7:ec:33:3d:ee:1e:94:12:09:19:d8:ab:4c:3a:15:23: aa:70:54:14:f1:d1:22:fd:af:97:47:56:53:46:53:7c:81:d1: 91:09:51:8b:e5:4a:b1:26:1e:b2:5c:eb:ac:f1:93:f6:c1:90: c3:f1:f8:0f:6a:e5:a0:c7:b9:8c:37:8b:22:48:fb:83:fe:e6: 7a:cf:8d:a3:b7:86:6a:c1:20:66:6f:a6:68:b0:51:9b:51:5c: 74:31:eb:d7:bd:c4:e0:76:c8:a4:34:7c:10:91:77:6d:f4:9c: 0c:02:0e:1f:3b:64:7f:05:0f:eb:7f:4f:2f:02:95:a0:a2:67: ef:a9:90:1e:92:07:4b:26:fb:56:4d:ef:20:8a:3b:7d:b4:64: a7:ce:f3:5e:3e:29:24:49:43:8c:b9:e4:46:79:8f:53:c8:b0: b4:85:d5:d4:fb:53:ac:0b:16:ad:e0:5f:3a:e5:9b:74:8e:14: 1f:73:22:2d:eb:ce:9d:98:53:9b:c7:28:2a:e0:76:e9:10:87: e2:f6:51:11:19:80:58:f8:7d:8d:d2:a0:e1:8a:c0:c9:27:07: 37:8a:c0:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDg7I9zvPiIO4TjQ2RdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3 ZDZlYTMwHhcNMjUxMjA2MTMwMDUxWhcNMjUxMjA3MTMwMDUxWjAzMTEwLwYDVQQD Eyg1YTMxZjZlNTk4NzRlZTFkMDhiZGM2YWYyY2ZkNzkwMWI4YzdkYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpi8jG2y41Nw4RTDfMsrkCzseREm Mwf6wMHRjoyO9DhSm5Lb9ECEfQ9ddZGBmteC+85gHoRtCDzOHkFjaDVd3/hNnjsR dZgx5fJtf6NJt9pCVkMFCvm2SEep9Whoc9l5Ds0JJ744v/TGfP2A60jP7nWF/0RJ bAjPH983WQwCth2hPPFDF3zLPaFkn47nqjNYxqjKUyaQRMyfNIRQ6+K6gIK2Rp7U ZOv7sSMDb+pTzXEYwIPaCM/TIb5tzfAPJMfYUqvhKiubkgh5Z+bUA9PWyMca/iG2 tucMJvyFgVvDfBhrtECEl6+DzyQEz3vgB1AkP2YyNcMrnZx6KqLWhtzORwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFox9uWYdO4dCL3Gryz9eQG4x9u6MB8GA1UdIwQY MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQTujTp4 j1217hSPoiN/W3LmWIAd/smQYBrY6AxZ8+kr7DRgCUfH7DM97h6UEgkZ2KtMOhUj qnBUFPHRIv2vl0dWU0ZTfIHRkQlRi+VKsSYeslzrrPGT9sGQw/H4D2rloMe5jDeL Ikj7g/7mes+No7eGasEgZm+maLBRm1FcdDHr173E4HbIpDR8EJF3bfScDAIOHztk fwUP639PLwKVoKJn76mQHpIHSyb7Vk3vIIo7fbRkp87zXj4pJElDjLnkRnmPU8iw tIXV1PtTrAsWreBfOuWbdI4UH3MiLevOnZhTm8coKuB26RCH4vZRERmAWPh9jdKg 4YrAyScHN4rAlA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:32:08 2025 by rpki-client