This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File:                     66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier:          maPYo8bcpKGAw7sDSp4JbACh88zhaCL62UMPN0QkBv4=
Subject key identifier:   0D:3D:1C:40:6D:DB:83:B6:BF:E5:71:37:86:79:F6:29:FA:EC:19:7D
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer:       /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial:       4F71A6089AB12012E08CEDA33A5CDFD43E682B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number:          02EF
Signing time:             Sat 20 Dec 2025 02:09:38 +0000
Manifest this update:     Sat 20 Dec 2025 02:04:38 +0000
Manifest next update:     Sun 21 Dec 2025 04:29:38 +0000
Files and hashes:         1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: OHlS7zbDYc+HVwUXXiKFyFId0VWp4PZMSO7IPg7WdWQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 04:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:71:a6:08:9a:b1:20:12:e0:8c:ed:a3:3a:5c:df:d4:3e:68:2b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
        Validity
            Not Before: Dec 20 02:04:38 2025 GMT
            Not After : Dec 21 04:29:38 2025 GMT
        Subject: CN=0D3D1C406DDB83B6BFE571378679F629FAEC197D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:6a:13:6c:5a:d6:10:d7:48:fb:11:17:b7:
                    41:b0:4c:93:3b:fc:a8:a3:c5:2c:79:05:e3:01:88:
                    d0:b3:e6:1d:88:cf:d9:9a:56:f3:80:84:bb:64:d2:
                    a9:a2:b5:13:0f:63:05:53:ce:32:39:07:60:71:bd:
                    3b:01:39:25:2b:00:2e:35:0e:64:e1:10:9b:21:f5:
                    71:7c:f8:71:d7:1e:1f:b7:58:d1:6e:3f:09:d9:c3:
                    54:df:e2:2d:72:94:b9:c4:ac:d5:5d:88:1f:e6:63:
                    82:da:e1:b3:ca:22:91:1d:15:d6:14:0e:63:38:5c:
                    36:48:31:b0:01:0f:d2:45:c6:39:92:3f:86:52:0d:
                    ea:7e:cd:29:dd:c0:ae:ef:7d:cb:94:84:f6:97:88:
                    c3:a4:fc:72:d7:11:2f:4f:3b:d8:e2:4d:28:8e:78:
                    65:00:9b:f9:09:aa:3e:ca:14:df:7b:8a:d0:b4:d3:
                    2b:13:4e:61:87:c4:41:da:20:68:72:19:9a:61:e1:
                    e9:53:46:84:d3:57:10:75:aa:d7:e5:d4:21:0f:35:
                    fd:67:57:87:b3:be:99:dc:40:4b:81:93:b4:35:2b:
                    7a:df:c8:47:0d:67:93:8e:71:30:a3:40:70:0b:e1:
                    e4:d3:f3:f0:2b:6b:2a:c3:9f:f2:f6:a8:2b:d4:86:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:1C:40:6D:DB:83:B6:BF:E5:71:37:86:79:F6:29:FA:EC:19:7D
            X509v3 Authority Key Identifier:
                keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:83:91:88:d6:3d:a0:0c:84:66:2d:8c:1e:95:d3:29:1c:90:
         a9:f8:aa:cb:98:53:7e:7f:dd:73:0e:97:85:86:a1:4f:b6:5a:
         5e:a9:c5:8d:ef:da:30:0f:b8:1e:01:28:37:9d:00:95:2c:8a:
         a8:a8:f4:9d:a8:ad:10:ec:bd:2f:9f:16:e9:9c:d7:a4:9b:b7:
         06:b2:18:02:31:36:50:df:c7:1c:a0:a8:db:29:6d:2f:9e:82:
         72:b4:52:0a:63:18:33:2b:52:a6:49:9e:db:32:98:57:1f:45:
         19:1c:ff:de:b0:ab:36:b1:a4:59:7a:7b:27:2e:fe:f7:d3:dd:
         52:5d:4a:8a:6a:e9:6e:77:3a:d3:3a:ec:8e:da:65:8b:66:88:
         f7:3a:d5:3c:5b:bf:71:d8:ff:4c:1d:ae:b5:b9:ae:c9:a1:b4:
         cf:61:97:b8:17:f7:43:33:5d:d0:eb:91:69:af:36:e6:29:7a:
         98:65:da:f4:5c:6f:0c:ff:5d:d1:e6:ef:f3:aa:fc:f9:8a:f4:
         9c:bc:ef:fc:e7:20:a4:6a:01:db:16:ce:af:e9:f6:f9:fd:95:
         47:bc:56:65:46:67:b2:89:36:30:b4:70:8d:d3:03:ae:f7:61:
         11:50:07:41:c5:de:df:7c:b2:42:c8:2e:8f:cd:79:47:bf:eb:
         8b:38:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:39:49 2025 by rpki-client