This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json) Hash identifier: +cZD8VXafc9gc71E23GdUi1vUnr5mVuF+wc3e00Azx0= Subject key identifier: 20:8E:71:8B:63:8E:DC:3E:B3:C7:A4:C5:05:0B:DC:9D:FB:69:3F:62 Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5 Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5 Certificate serial: 019AF1D2141F38555C118A967AF2B825BE76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft Manifest number: 016E Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: gdyR1dGQDuN9RBGm55xpdHVOKXE88AY8q/8h9FnWdIM=) 2: eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa (hash: KSBVppHXh5GaOp6rIqFzma8M+CxkT9xkf7FurYUushA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:14:1f:38:55:5c:11:8a:96:7a:f2:b8:25:be:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=208e718b638edc3eb3c7a4c5050bdc9dfb693f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:42:30:5c:a9:0b:56:dc:35:6a:39:d9:f9: ef:d1:fb:ef:ef:9d:5e:ea:2c:75:1e:40:b3:7f:af: e0:f7:f3:ef:f8:aa:0d:15:cc:d8:12:07:d8:e1:32: 87:df:56:25:f6:7e:d4:f2:49:00:3b:86:84:1f:c6: 9e:28:4f:90:b7:6b:90:36:c7:24:9e:4b:fe:c7:5d: 92:bb:69:ad:42:9a:cd:08:ae:36:73:03:bc:c4:8f: 51:12:38:6b:af:a4:be:ca:86:2c:fc:cd:66:51:bd: 2d:f4:10:b9:48:e0:33:06:3c:6f:b5:af:06:62:03: 14:e4:4d:d6:5c:93:3a:5b:4f:68:f1:8e:cc:b6:52: 03:2f:46:43:4d:f6:ef:34:20:f5:7a:22:48:ba:83: e2:7d:74:91:c4:db:d4:ea:84:c2:9d:1c:fe:4d:6f: a1:ef:0c:2d:a0:4d:f9:51:fa:c5:40:cf:fa:ab:b1: 77:17:dc:9c:9c:ce:75:64:35:98:45:8e:12:b1:42: 50:94:e6:22:d8:06:d8:7d:ef:99:f8:7f:0a:c0:d5: 1d:b0:15:bb:f5:74:76:9f:e7:ab:4d:c4:c6:18:fc: a5:fd:98:dc:79:d8:26:7c:47:69:9f:96:04:c6:d0: 55:d6:8c:5d:6c:53:72:e7:5f:cb:31:82:9a:8b:82: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:71:8B:63:8E:DC:3E:B3:C7:A4:C5:05:0B:DC:9D:FB:69:3F:62 X509v3 Authority Key Identifier: keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:89:02:cb:9c:cc:6d:5c:c1:c3:d0:36:f7:c6:68:ad:df:8f: 74:ff:89:b5:f7:cd:67:1b:20:bd:85:15:c3:e6:27:d4:67:92: 0c:96:11:a6:1f:87:55:92:90:a6:32:3d:93:c9:10:33:35:6a: 7f:94:15:b1:34:5a:b3:d0:a6:12:15:9c:25:32:b6:40:f4:cf: b7:f1:ae:56:07:51:fb:8c:a5:1b:f0:3d:1b:77:94:e2:23:70: 67:a9:20:c6:b1:23:91:62:e7:86:6f:94:9a:c8:43:59:c7:39: cd:a8:1a:88:5c:28:46:61:e3:ec:40:dc:8a:2a:33:4a:6e:b4: 1b:fe:99:e8:f6:95:8a:52:5c:16:5c:fe:90:66:38:fa:56:25: bb:39:cf:25:dd:cf:4b:e5:46:c1:6f:53:fb:71:ea:21:4f:d4: b9:7d:62:0e:df:f2:55:e6:6b:ed:3e:2f:37:75:c4:c2:9c:fc: d8:03:b8:f3:ce:0c:17:35:4f:b0:20:c7:ae:9d:b8:94:c2:52: b1:cd:9d:12:c3:7b:f5:8e:a7:bd:0f:a4:5a:f6:85:3f:76:7e: 44:95:e9:f7:f3:f6:80:bf:30:25:9b:2e:97:98:04:c8:9d:b0: 51:26:a0:74:69:77:81:cf:68:3a:ed:3b:a2:d2:25:22:f4:72: 13:9c:a3:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hQfOFVcEYqWevK4Jb52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYWNkOThkZTc5MTkyMzU3YWRjZjlkZjBhZGJlODMxOTIy MjhiZDUwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EygyMDhlNzE4YjYzOGVkYzNlYjNjN2E0YzUwNTBiZGM5ZGZiNjkzZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSxCMFypC1bcNWo52fnv0fvv751e 6ix1HkCzf6/g9/Pv+KoNFczYEgfY4TKH31Yl9n7U8kkAO4aEH8aeKE+Qt2uQNsck nkv+x12Su2mtQprNCK42cwO8xI9REjhrr6S+yoYs/M1mUb0t9BC5SOAzBjxvta8G YgMU5E3WXJM6W09o8Y7MtlIDL0ZDTfbvNCD1eiJIuoPifXSRxNvU6oTCnRz+TW+h 7wwtoE35UfrFQM/6q7F3F9ycnM51ZDWYRY4SsUJQlOYi2AbYfe+Z+H8KwNUdsBW7 9XR2n+erTcTGGPyl/ZjcedgmfEdpn5YExtBV1oxdbFNy51/LMYKai4KqsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCOcYtjjtw+s8ekxQUL3J37aT9iMB8GA1UdIwQY MBaAFOus2Y3nkZI1etz53wrb6DGSIovVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgt Njk5YzQ1YmE3ZTU4LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgtNjk5YzQ1YmE3ZTU4 LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYkCy5zM bVzBw9A298Zord+PdP+JtffNZxsgvYUVw+Yn1GeSDJYRph+HVZKQpjI9k8kQMzVq f5QVsTRas9CmEhWcJTK2QPTPt/GuVgdR+4ylG/A9G3eU4iNwZ6kgxrEjkWLnhm+U mshDWcc5zagaiFwoRmHj7EDciiozSm60G/6Z6PaVilJcFlz+kGY4+lYluznPJd3P S+VGwW9T+3HqIU/UuX1iDt/yVeZr7T4vN3XEwpz82AO4884MFzVPsCDHrp24lMJS sc2dEsN79Y6nvQ+kWvaFP3Z+RJXp9/P2gL8wJZsul5gEyJ2wUSagdGl3gc9oOu07 otIlIvRyE5yjNw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:27 2025 by rpki-client