This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File:                     66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier:          9/HBq9qRXu7z50VBzBFlPPsmdnlzElaCMzqnu09aVRo=
Subject key identifier:   CF:BD:EE:E5:EA:44:4F:8E:0F:6D:0F:49:CD:19:90:46:00:A5:EE:3B
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer:       /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial:       491A31DC2DA6980BDCD7A694D6F396D8D46AC7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number:          0333
Signing time:             Mon 09 Feb 2026 18:52:13 +0000
Manifest this update:     Mon 09 Feb 2026 18:47:13 +0000
Manifest next update:     Tue 10 Feb 2026 21:06:13 +0000
Files and hashes:         1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: B5/+XO3sExzMR4b4EdjzWpEQ8p2r2btJfFj4yipkdjQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1a:31:dc:2d:a6:98:0b:dc:d7:a6:94:d6:f3:96:d8:d4:6a:c7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
        Validity
            Not Before: Feb  9 18:47:13 2026 GMT
            Not After : Feb 10 21:06:13 2026 GMT
        Subject: CN=CFBDEEE5EA444F8E0F6D0F49CD19904600A5EE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:af:87:6e:be:90:91:b9:d2:38:aa:80:f6:
                    10:19:62:a9:e9:f0:ef:5f:bf:7d:17:ef:3c:73:b0:
                    a0:7e:82:86:0f:78:3a:13:ce:a2:1e:c1:7d:07:47:
                    dc:78:c5:2d:a8:6f:8d:b7:55:43:06:db:9c:a3:c4:
                    b2:98:38:75:8f:b6:90:22:08:99:35:8b:8b:bb:51:
                    4f:ca:56:0a:fd:c0:2e:ec:0c:19:7b:03:75:ff:b2:
                    8f:09:37:ad:4c:7e:33:1a:17:f4:e3:5e:b5:ba:23:
                    67:82:30:03:f7:73:1e:96:20:5d:44:8c:5c:b7:f5:
                    ed:00:19:0d:f0:25:51:72:6e:02:2e:83:1c:a9:3b:
                    d8:9d:0a:33:c3:bb:9d:a3:37:be:4a:b2:1e:e6:19:
                    26:21:ab:5b:c8:25:7f:c8:34:de:46:db:48:c6:d6:
                    47:9e:07:76:cd:18:9a:81:fd:83:07:7d:52:12:7b:
                    7f:4f:cb:1e:8c:72:16:f6:c6:c7:b7:d3:d6:9a:56:
                    99:73:ad:8f:2d:09:b8:86:a5:48:34:c4:87:ce:23:
                    c1:61:21:07:f5:4f:56:af:c4:15:6f:49:82:99:d9:
                    c6:86:91:44:bf:1a:6b:14:cf:94:ae:e8:32:d0:f4:
                    fb:8c:45:f5:66:8c:ee:f1:94:53:7e:16:bb:c3:8a:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BD:EE:E5:EA:44:4F:8E:0F:6D:0F:49:CD:19:90:46:00:A5:EE:3B
            X509v3 Authority Key Identifier:
                keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:47:ad:cb:b1:4e:47:fe:6a:e4:03:d3:ec:be:65:63:2d:
         3a:df:65:c3:f6:94:80:8c:c5:4e:b2:bb:64:94:5d:37:dc:de:
         ca:da:17:33:c0:dd:aa:fd:48:ef:3e:17:98:1f:c5:1a:17:27:
         54:e0:80:d4:ff:52:a4:e7:22:5a:a0:ff:31:6c:52:ca:a7:2f:
         3a:fa:f6:71:7b:a3:9b:4b:b7:ad:fc:4c:f3:00:f6:98:91:ca:
         32:24:be:c5:91:a0:cd:c0:b0:6a:d1:3d:15:00:3d:7a:d1:07:
         3c:7a:2b:1c:7f:34:af:3b:99:6a:33:76:3d:94:85:ce:9e:a7:
         3d:e7:f0:8c:0b:0e:ed:e3:cd:74:2f:85:7c:83:2d:2f:a4:9f:
         81:69:00:0e:b7:9f:d1:cb:69:42:0d:5b:4f:7d:98:82:c4:09:
         0d:20:3d:96:70:36:b8:77:e2:d8:70:b4:bd:82:f3:aa:1c:b1:
         b1:9e:c5:e7:21:76:d6:37:5c:f6:37:8f:96:76:37:a5:9e:02:
         5b:f2:07:e5:39:d4:96:be:2c:9e:cc:9f:c3:1c:c7:1b:b0:40:
         81:26:3f:c8:9d:e6:58:1b:79:b8:e2:52:83:3b:43:96:d6:04:
         d5:90:a8:74:6a:db:90:49:b8:db:09:e4:2d:d0:76:b2:e6:73:
         57:ff:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:45 2026 by rpki-client