This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json) Hash identifier: ka4NDD21vKYG66GxoziUz0nf0nypd2JtGXz/Gj/CyF8= Subject key identifier: 58:60:7A:E8:85:F0:97:22:E6:39:92:0C:18:A0:92:38:BD:2A:E7:9D Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5 Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5 Certificate serial: 019B3CB4BF8DE0F7F4A4096E30140CCB8BEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft Manifest number: 0199 Signing time: Sat 20 Dec 2025 17:00:36 +0000 Manifest this update: Sat 20 Dec 2025 17:00:36 +0000 Manifest next update: Sun 21 Dec 2025 17:00:36 +0000 Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: GXcO1wz5Qn17AZrsOJfba3DGAy6/3gyltz0C1hziW8c=) 2: Uxu4Q0TQLr44cjN0cYKdbKg35yY.roa (hash: ikGuAWyfRLWcp4E/imXYwHNWtvbem/lJpu3rA5ZKSks=) 3: i2ESMVGHalD9fK93NEHhhvYFDNo.roa (hash: NCC6kUjDa4FWAUCxYNcYXdxPMLFJozK/uoobA+XRmJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:bf:8d:e0:f7:f4:a4:09:6e:30:14:0c:cb:8b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5 Validity Not Before: Dec 20 17:00:36 2025 GMT Not After : Dec 21 17:00:36 2025 GMT Subject: CN=58607ae885f09722e639920c18a09238bd2ae79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:f8:15:0f:8b:25:74:42:a0:71:21:98:1d: d6:f0:12:ea:cd:a8:a2:5f:3f:28:aa:1d:50:71:ac: 0d:cb:0b:41:6d:f8:5a:b7:8e:ff:31:53:24:a4:c0: 96:73:40:1c:70:99:50:f1:83:80:fd:62:e1:6b:d1: 15:8e:66:14:65:fd:fd:7e:4b:da:d0:57:b7:20:2f: be:3e:b8:bd:31:ea:37:7b:b4:62:b7:ed:1a:3d:59: 20:ba:68:9b:dd:09:d7:2d:62:d5:38:43:3b:1a:99: ef:a0:fc:50:9c:52:d5:49:71:aa:cb:9f:5c:b6:ce: 31:6f:f8:85:2f:53:2c:fd:be:fb:12:72:62:62:68: 55:ad:f1:1a:1f:30:59:b8:a7:08:5d:5c:aa:36:5c: 64:12:06:6b:54:25:0f:99:d1:0b:55:b4:98:25:6c: 3a:59:88:fe:dd:8e:14:d7:75:ad:c1:90:ae:0a:4e: 91:23:86:4d:80:66:d8:01:a8:11:23:4c:b7:07:36: c3:f6:c0:82:19:9e:78:24:d4:b3:fa:a2:e2:35:2d: 07:66:43:0e:c2:ee:91:a3:fe:ce:a1:8b:be:a2:ca: 7e:24:aa:e1:90:8b:c0:ad:41:1f:54:06:27:ca:64: b1:e3:75:2c:ee:af:d3:b3:55:d5:a0:50:b5:e8:50: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:60:7A:E8:85:F0:97:22:E6:39:92:0C:18:A0:92:38:BD:2A:E7:9D X509v3 Authority Key Identifier: keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f2:ca:f5:97:39:97:25:6e:00:c1:00:2a:6c:f5:7a:45:45: 32:f0:d1:01:b5:82:c9:3f:14:4a:34:3d:76:92:25:c7:5f:14: cf:b1:29:3b:d9:68:b2:27:55:09:de:10:6d:26:5d:1f:46:9c: e8:64:7e:c4:d1:9c:ff:49:6e:b8:44:3c:4a:dc:d4:ee:4a:ff: e4:de:05:71:21:6b:a2:fd:29:bc:47:85:4d:61:7e:5d:d5:a9: 79:11:66:57:ca:e0:30:4c:0e:9d:2e:b2:4b:7f:f1:29:4a:a0: c0:b6:56:ba:e4:02:23:5a:22:7f:04:89:5c:dc:08:50:37:09: 31:e9:6a:3f:af:d4:a8:f7:3d:37:d3:3a:ce:69:35:9a:b4:87: 57:5a:a3:55:f0:7c:93:59:b5:57:d1:fa:30:b8:79:ee:dd:85: c9:17:c3:56:bd:5d:8b:a6:7b:74:de:73:ac:d5:d2:97:1e:30: 3b:52:4c:ce:44:4d:f9:e9:24:a5:f7:b9:3e:24:29:c0:08:33: 0b:6e:0c:f4:1c:4b:f3:d8:86:e8:57:c8:d3:0e:26:26:d1:1f: 79:95:38:7b:e2:0f:35:2c:99:c6:3e:25:86:02:d2:40:6e:69: b9:b2:b9:fd:43:4e:53:a8:cb:fd:49:3f:74:13:c2:be:d6:2a: 0d:06:a4:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tL+N4Pf0pAluMBQMy4vuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYWNkOThkZTc5MTkyMzU3YWRjZjlkZjBhZGJlODMxOTIy MjhiZDUwHhcNMjUxMjIwMTcwMDM2WhcNMjUxMjIxMTcwMDM2WjAzMTEwLwYDVQQD Eyg1ODYwN2FlODg1ZjA5NzIyZTYzOTkyMGMxOGEwOTIzOGJkMmFlNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyP4FQ+LJXRCoHEhmB3W8BLqzaii Xz8oqh1QcawNywtBbfhat47/MVMkpMCWc0AccJlQ8YOA/WLha9EVjmYUZf39fkva 0Fe3IC++Pri9Meo3e7Rit+0aPVkgumib3QnXLWLVOEM7GpnvoPxQnFLVSXGqy59c ts4xb/iFL1Ms/b77EnJiYmhVrfEaHzBZuKcIXVyqNlxkEgZrVCUPmdELVbSYJWw6 WYj+3Y4U13WtwZCuCk6RI4ZNgGbYAagRI0y3BzbD9sCCGZ54JNSz+qLiNS0HZkMO wu6Ro/7OoYu+osp+JKrhkIvArUEfVAYnymSx43Us7q/Ts1XVoFC16FB8uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhgeuiF8Jci5jmSDBigkji9KuedMB8GA1UdIwQY MBaAFOus2Y3nkZI1etz53wrb6DGSIovVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgt Njk5YzQ1YmE3ZTU4LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgtNjk5YzQ1YmE3ZTU4 LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPLK9Zc5 lyVuAMEAKmz1ekVFMvDRAbWCyT8USjQ9dpIlx18Uz7EpO9losidVCd4QbSZdH0ac 6GR+xNGc/0luuEQ8StzU7kr/5N4FcSFrov0pvEeFTWF+XdWpeRFmV8rgMEwOnS6y S3/xKUqgwLZWuuQCI1oifwSJXNwIUDcJMelqP6/UqPc9N9M6zmk1mrSHV1qjVfB8 k1m1V9H6MLh57t2FyRfDVr1di6Z7dN5zrNXSlx4wO1JMzkRN+ekkpfe5PiQpwAgz C24M9BxL89iG6FfI0w4mJtEfeZU4e+IPNSyZxj4lhgLSQG5pubK5/UNOU6jL/Uk/ dBPCvtYqDQakYg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:41:19 2025 by rpki-client