This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json) Hash identifier: RNcHiwtF8BbhVQnUZuvdKAwCoP7GQrXDpTFTWp2SzWE= Subject key identifier: 97:EF:82:DD:46:2A:34:77:44:8A:87:8F:71:73:41:85:A5:65:88:47 Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63 Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763 Certificate serial: 5DB9EC67F6F7D0CE65D33256EBE41F1998EB63FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft Manifest number: 02DC Signing time: Fri 05 Dec 2025 18:42:14 +0000 Manifest this update: Fri 05 Dec 2025 18:37:14 +0000 Manifest next update: Sat 06 Dec 2025 21:32:14 +0000 Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: PaLvRkPd2VMQIaQCCRCmCirnorSygOkZlmTaRWnqmk0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b9:ec:67:f6:f7:d0:ce:65:d3:32:56:eb:e4:1f:19:98:eb:63:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763 Validity Not Before: Dec 5 18:37:14 2025 GMT Not After : Dec 6 21:32:14 2025 GMT Subject: CN=97EF82DD462A3477448A878F71734185A5658847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:1e:86:77:88:06:f3:05:0a:cb:eb:a3:a8: 88:13:5b:7e:ae:57:92:31:39:92:8f:84:63:51:c5: 7f:82:bb:50:e4:7a:64:43:14:2a:28:2f:34:a8:37: 7c:66:65:97:5e:96:51:1d:4d:35:19:9b:b6:e4:0f: a9:f4:5a:a7:b1:21:38:ca:30:6e:68:d9:3f:e5:2c: d1:77:a9:e2:97:93:66:94:08:0e:5f:ca:19:ef:b1: 98:6c:11:6d:78:80:1f:5c:b9:02:43:cc:86:e5:50: 1a:d2:ad:93:08:c1:b8:91:61:b3:c6:8b:27:1a:7b: 60:26:a4:d0:30:8f:d6:1c:78:4a:79:ec:36:69:d2: a1:ed:c2:5d:86:5b:9e:7e:92:bb:5c:7a:b1:0a:ab: d7:c5:44:b7:11:c0:5e:e7:eb:af:3c:9f:c9:6f:e7: 95:02:eb:09:09:79:0a:31:f3:58:df:39:40:14:26: 64:3e:61:fe:e5:5d:b8:6c:fe:05:3c:9d:01:6e:9d: a3:28:58:18:d6:14:cf:5a:ee:9e:77:0d:50:df:22: 04:3a:ee:b7:01:0b:c2:95:5f:8c:bb:d9:8b:1c:95: ea:19:ce:d6:59:d7:d7:72:ad:07:09:af:6f:2a:b1: ee:b2:b2:c3:9b:46:82:8d:1f:1f:4c:a1:74:70:b3: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EF:82:DD:46:2A:34:77:44:8A:87:8F:71:73:41:85:A5:65:88:47 X509v3 Authority Key Identifier: keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d7:2f:31:55:d5:de:1c:ca:1b:f1:45:d4:3c:6f:42:28:43: f3:0a:98:f5:e6:5f:35:47:6d:8d:5f:13:7a:83:24:4a:1c:4b: 1b:18:e2:51:c7:4e:1b:f5:2c:99:11:8a:75:86:95:77:65:69: 9f:ae:1c:67:c5:dc:20:a5:5f:4b:ff:93:c7:e2:40:64:40:66: 58:91:ac:95:95:81:a0:ef:a7:79:45:3a:00:a3:59:4c:25:57: 26:89:02:35:ca:0c:bc:98:66:f3:c4:50:64:f5:b9:fe:9f:df: 7f:64:12:82:43:f7:54:98:7b:1c:f2:7a:f7:5c:aa:c8:8d:aa: 98:9d:6a:f2:36:f9:26:89:63:5b:ef:a6:f8:e7:8d:88:95:8e: ef:df:55:7f:48:ee:6d:27:bc:5c:6f:53:5c:d1:16:00:07:3d: c2:66:3c:24:74:21:be:44:0d:0a:9a:91:b6:68:69:a2:31:d6: 39:8c:c9:29:d4:99:06:fd:75:c8:74:ab:81:57:22:36:12:10: 7d:81:89:50:da:57:80:4d:bc:9a:2b:a2:51:33:b3:94:83:f4: 06:72:48:79:04:3b:3b:a4:16:26:14:0b:f3:eb:96:df:bf:66: 65:8c:41:20:ac:b2:6b:51:07:33:67:cc:2a:9f:ab:79:b8:54: a0:50:89:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXbnsZ/b30M5l0zJW6+QfGZjrY/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZjY2YxOWQ3YjYxMDg4MGRiMjJkNDBlYzliYWUwMmIx MjAxMzc2MzAeFw0yNTEyMDUxODM3MTRaFw0yNTEyMDYyMTMyMTRaMDMxMTAvBgNV BAMTKDk3RUY4MkRENDYyQTM0Nzc0NDhBODc4RjcxNzM0MTg1QTU2NTg4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqx6Gd4gG8wUKy+ujqIgTW36u V5IxOZKPhGNRxX+Cu1DkemRDFCooLzSoN3xmZZdellEdTTUZm7bkD6n0WqexITjK MG5o2T/lLNF3qeKXk2aUCA5fyhnvsZhsEW14gB9cuQJDzIblUBrSrZMIwbiRYbPG iycae2AmpNAwj9YceEp57DZp0qHtwl2GW55+krtcerEKq9fFRLcRwF7n6688n8lv 55UC6wkJeQox81jfOUAUJmQ+Yf7lXbhs/gU8nQFunaMoWBjWFM9a7p53DVDfIgQ6 7rcBC8KVX4y72YscleoZztZZ19dyrQcJr28qse6yssObRoKNHx9MoXRwszWtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl++C3UYqNHdEioePcXNBhaVliEcwHwYDVR0j BBgwFoAUZszxnXthCIDbItQOybrgKxIBN2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzIvNjZDQ0YxOUQ3QjYxMDg4MERCMjJENDBFQzlCQUUwMkIxMjAxMzc2My5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pzenhuWHRoQ0lEYkl0UU95YnJnS3hJ Qk4yTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hY2VjZmRjNy02 ZGI5LTQyNWItYWNhZS03ZTIwZmJlNmUxMjkvMi82NkNDRjE5RDdCNjEwODgwREIy MkQ0MEVDOUJBRTAyQjEyMDEzNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtcvMVXV3hzKG/FF1Dxv QihD8wqY9eZfNUdtjV8TeoMkShxLGxjiUcdOG/UsmRGKdYaVd2Vpn64cZ8XcIKVf S/+Tx+JAZEBmWJGslZWBoO+neUU6AKNZTCVXJokCNcoMvJhm88RQZPW5/p/ff2QS gkP3VJh7HPJ691yqyI2qmJ1q8jb5JoljW++m+OeNiJWO799Vf0jubSe8XG9TXNEW AAc9wmY8JHQhvkQNCpqRtmhpojHWOYzJKdSZBv11yHSrgVciNhIQfYGJUNpXgE28 miuiUTOzlIP0BnJIeQQ7O6QWJhQL8+uW379mZYxBIKyya1EHM2fMKp+rebhUoFCJ dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:00 2025 by rpki-client