This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft File: h66JOPDgseq2FIgzbSPKORh9bqM.mft (raw, json) Hash identifier: lAOEBLmUIFzihJYorNEbj6KBDan3MS48PGG6U3J+6OA= Subject key identifier: 85:89:E5:28:6F:56:7B:4A:3A:F8:4F:A8:A4:0F:50:EC:44:1E:4B:E9 Authority key identifier: 87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3 Certificate issuer: /CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3 Certificate serial: 019B46CAE96B8082B0EA8704C37C34E51F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft Manifest number: 06A0 Signing time: Mon 22 Dec 2025 16:01:01 +0000 Manifest this update: Mon 22 Dec 2025 16:01:01 +0000 Manifest next update: Tue 23 Dec 2025 16:01:01 +0000 Files and hashes: 1: h66JOPDgseq2FIgzbSPKORh9bqM.crl (hash: Uw+sl8aH3uBacPVushCAeF5EQF/DD6GITeLWO0jkDWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:e9:6b:80:82:b0:ea:87:04:c3:7c:34:e5:1f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87ae8938f0e0b1eab61488336d23ca39187d6ea3 Validity Not Before: Dec 22 16:01:01 2025 GMT Not After : Dec 23 16:01:01 2025 GMT Subject: CN=8589e5286f567b4a3af84fa8a40f50ec441e4be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:19:fb:e7:a0:e8:e2:52:dc:d4:44:06:18: ac:a7:1e:0a:3c:5f:76:ca:72:a3:8f:9c:10:32:54: ab:b3:17:ce:18:e0:fd:6a:a1:fb:4c:fd:3d:dd:f3: c4:08:23:0a:ca:3d:45:a5:01:e3:70:8c:df:ac:91: 93:f1:c7:8f:73:87:b9:9e:da:d9:1e:c8:7f:a3:9e: 90:1b:31:54:35:4b:01:f0:0a:a4:b0:09:63:e3:ce: ed:37:c6:e1:b3:6b:71:5f:79:fb:2d:5b:a8:ac:dc: 5b:11:8f:a6:71:ea:72:2d:72:09:f1:b3:1d:5f:f9: 22:64:16:97:55:8a:c5:b5:5d:08:ba:e4:98:fc:c9: c8:e9:8d:1a:9d:91:a7:18:fe:36:13:20:29:1a:52: 1b:6f:9c:8d:68:ba:7d:de:ab:d2:8e:79:41:b9:53: 66:e3:72:ae:dd:da:06:f7:9a:8e:d0:91:bb:b0:1f: 30:7a:d2:ac:4f:d0:79:83:d2:ae:ab:c6:f3:1a:34: 4b:56:92:10:58:da:c9:8c:fb:f8:08:05:5d:15:4d: 98:af:ac:56:ad:83:1a:38:8f:58:5e:55:15:11:30: a5:90:64:a9:b1:22:e6:0d:d1:bc:6d:80:07:71:8a: 9e:d3:8e:f4:39:fc:bb:98:0f:dc:e3:28:8c:93:e3: 33:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:E5:28:6F:56:7B:4A:3A:F8:4F:A8:A4:0F:50:EC:44:1E:4B:E9 X509v3 Authority Key Identifier: keyid:87:AE:89:38:F0:E0:B1:EA:B6:14:88:33:6D:23:CA:39:18:7D:6E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h66JOPDgseq2FIgzbSPKORh9bqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/5ef3e2-31fe-4664-b5df-29d0ba12eda2/1/h66JOPDgseq2FIgzbSPKORh9bqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3f:36:23:c0:96:44:1f:22:ff:62:14:1a:41:bf:6f:a9:44: 2c:51:7e:e0:2e:49:a1:14:f7:48:40:ed:1c:f0:b8:a7:6f:75: b1:e7:d3:49:7e:33:98:9a:34:d3:82:9b:41:75:3a:98:a0:2d: cd:3e:83:77:42:98:7c:e6:9e:0a:3e:ad:2c:a6:08:ab:fb:75: c8:ea:c6:bb:49:9e:28:e7:22:03:94:db:0a:eb:73:d3:5d:f8: f9:98:8d:61:72:44:58:c1:3d:9e:85:55:f3:60:36:d5:dd:25: 7e:a9:ed:8f:29:f5:ca:08:f3:b6:de:d2:18:b5:a8:f8:07:82: e7:43:1d:e7:12:e9:16:a2:ea:12:74:9f:85:69:06:40:2c:b6: e5:1b:48:37:25:cb:6e:3d:d1:35:16:ca:2e:8b:40:fa:89:c2: bd:cc:5a:1a:b4:28:d5:4a:a7:71:18:b0:46:e1:fe:d5:a5:f4: 70:1a:be:8f:ab:1e:51:14:15:82:f4:ed:55:6a:ba:b7:5f:65: ea:9f:f2:87:85:74:9c:f7:55:7f:7e:8d:59:1d:60:5c:04:8d: 66:c3:e3:7d:cf:96:40:19:26:b3:8c:d9:d1:96:9d:18:6a:3a: 7e:70:de:c1:0a:3b:ef:43:82:9d:2b:5a:94:69:35:58:bd:ae: 3b:fa:44:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyulrgIKw6ocEw3w05R97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YWU4OTM4ZjBlMGIxZWFiNjE0ODgzMzZkMjNjYTM5MTg3 ZDZlYTMwHhcNMjUxMjIyMTYwMTAxWhcNMjUxMjIzMTYwMTAxWjAzMTEwLwYDVQQD Eyg4NTg5ZTUyODZmNTY3YjRhM2FmODRmYThhNDBmNTBlYzQ0MWU0YmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbkZ++eg6OJS3NREBhispx4KPF92 ynKjj5wQMlSrsxfOGOD9aqH7TP093fPECCMKyj1FpQHjcIzfrJGT8cePc4e5ntrZ Hsh/o56QGzFUNUsB8AqksAlj487tN8bhs2txX3n7LVuorNxbEY+mcepyLXIJ8bMd X/kiZBaXVYrFtV0IuuSY/MnI6Y0anZGnGP42EyApGlIbb5yNaLp93qvSjnlBuVNm 43Ku3doG95qO0JG7sB8wetKsT9B5g9Kuq8bzGjRLVpIQWNrJjPv4CAVdFU2Yr6xW rYMaOI9YXlUVETClkGSpsSLmDdG8bYAHcYqe0470Ofy7mA/c4yiMk+MzVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWJ5ShvVntKOvhPqKQPUOxEHkvpMB8GA1UdIwQY MBaAFIeuiTjw4LHqthSIM20jyjkYfW6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYt MjlkMGJhMTJlZGEyLzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC81ZWYzZTItMzFmZS00NjY0LWI1ZGYtMjlkMGJhMTJlZGEy LzEvaDY2Sk9QRGdzZXEyRklnemJTUEtPUmg5YnFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAz82I8CW RB8i/2IUGkG/b6lELFF+4C5JoRT3SEDtHPC4p291sefTSX4zmJo004KbQXU6mKAt zT6Dd0KYfOaeCj6tLKYIq/t1yOrGu0meKOciA5TbCutz0134+ZiNYXJEWME9noVV 82A21d0lfqntjyn1ygjztt7SGLWo+AeC50Md5xLpFqLqEnSfhWkGQCy25RtINyXL bj3RNRbKLotA+onCvcxaGrQo1UqncRiwRuH+1aX0cBq+j6seURQVgvTtVWq6t19l 6p/yh4V0nPdVf36NWR1gXASNZsPjfc+WQBkms4zZ0ZadGGo6fnDewQo770OCnSta lGk1WL2uO/pEpw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:03 2025 by rpki-client