This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json) Hash identifier: ijrI1AiKMvkLJkRF6zin9D4Cbg+JLxjvUImVQWEbx2k= Subject key identifier: DB:DD:35:B3:1F:29:70:E4:A4:C4:5F:93:47:5E:A2:87:8F:99:74:88 Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Certificate serial: 019B72FE428FAFC4DA6A251347D9F0ACEE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 06:00:24 +0000 Manifest this update: Wed 31 Dec 2025 06:00:24 +0000 Manifest next update: Thu 01 Jan 2026 06:00:24 +0000 Files and hashes: 1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: imPnMm1bRs+nwiUiQgJnD5kfiQkQVocHYHUEaGxHTHw=) 2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:42:8f:af:c4:da:6a:25:13:47:d9:f0:ac:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Validity Not Before: Dec 31 06:00:24 2025 GMT Not After : Jan 1 06:00:24 2026 GMT Subject: CN=dbdd35b31f2970e4a4c45f93475ea2878f997488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:21:fb:c6:15:c1:58:d3:ed:aa:b5:25:72: 92:ff:81:ad:f1:cc:33:da:4c:18:12:62:fc:cd:89: b6:b6:53:12:64:69:e5:1f:9c:b9:fb:49:19:6e:a6: 2a:4f:3e:a4:f0:d0:f6:61:53:8f:bd:2f:bf:95:ca: 5c:fa:43:89:4c:e6:df:a2:a4:76:8b:bb:a8:0e:af: 44:49:af:96:5b:91:e5:1b:77:05:52:b5:93:e5:d4: bf:c2:f2:2d:60:28:c1:08:18:8c:e3:04:98:47:70: 3d:43:d6:9d:48:d1:95:02:ce:62:4b:34:79:2e:98: bf:4c:a6:9d:b9:c6:f6:99:66:5f:38:c4:c1:40:22: ac:80:a4:4e:e8:f4:de:a0:c1:01:55:86:30:6b:7a: c2:d8:9a:1d:a5:4b:29:73:7f:ce:8f:1d:2d:5c:67: 21:95:33:9a:bf:32:85:2d:f3:de:41:6e:43:5a:8b: 36:eb:0f:6b:66:e8:5b:5d:9f:51:1a:55:8e:e8:b1: 56:46:41:6e:e3:13:47:cb:f4:1f:cc:d6:09:ae:be: ab:1a:e6:db:e2:d8:59:6e:14:a1:78:ba:44:e0:4c: bd:19:3b:cc:85:18:a9:30:77:63:bb:60:f2:9f:d2: b7:4d:dd:aa:fd:9f:56:2c:31:cf:f8:27:14:c6:9a: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DD:35:B3:1F:29:70:E4:A4:C4:5F:93:47:5E:A2:87:8F:99:74:88 X509v3 Authority Key Identifier: keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3d:d6:6d:b0:1d:d6:e8:ec:4b:fb:91:63:40:f1:d4:cb:55: c7:63:b3:a2:47:43:de:95:2a:33:25:fc:b9:38:81:f7:08:38: df:27:98:e7:6f:ea:ef:7a:8e:7a:7b:84:fc:65:7d:06:14:02: 26:98:fd:e8:d2:1f:e7:2d:5a:d7:36:4f:7e:48:53:eb:e6:6f: 96:d9:67:9e:a5:54:cc:c5:ab:ba:f8:1c:67:02:8c:e0:1a:66: f1:ab:1c:12:48:2e:e1:6f:05:90:41:84:fc:40:9b:bb:f1:41: 7b:5a:c5:1b:8d:40:35:48:b2:3a:56:53:74:b0:1a:bf:69:27: 71:70:05:de:10:e0:32:31:f6:4b:e1:ab:4b:f5:6f:bb:75:d6: ad:ed:00:3a:99:c4:0b:c8:1f:e0:9b:29:5a:b9:ef:33:e3:9e: 60:32:b1:d0:57:65:83:f6:0e:af:0e:dc:82:7c:ed:42:91:6f: 62:e5:12:a5:46:ce:50:65:dc:96:2d:b0:a0:2b:5c:33:52:d1: f7:bd:bd:7f:9c:23:12:89:6e:ce:07:01:43:1a:2a:02:b8:7c: bd:75:fb:52:bd:15:e6:bc:ef:59:c6:22:72:a8:f8:b2:85:ec: 6f:e7:c7:f5:34:b9:a0:74:dd:47:e6:d2:50:0e:ce:07:85:a6: 93:a6:97:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/kKPr8TaaiUTR9nwrO6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj NWVmY2YwHhcNMjUxMjMxMDYwMDI0WhcNMjYwMTAxMDYwMDI0WjAzMTEwLwYDVQQD EyhkYmRkMzViMzFmMjk3MGU0YTRjNDVmOTM0NzVlYTI4NzhmOTk3NDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb4h+8YVwVjT7aq1JXKS/4Gt8cwz 2kwYEmL8zYm2tlMSZGnlH5y5+0kZbqYqTz6k8ND2YVOPvS+/lcpc+kOJTObfoqR2 i7uoDq9ESa+WW5HlG3cFUrWT5dS/wvItYCjBCBiM4wSYR3A9Q9adSNGVAs5iSzR5 Lpi/TKaducb2mWZfOMTBQCKsgKRO6PTeoMEBVYYwa3rC2JodpUspc3/Ojx0tXGch lTOavzKFLfPeQW5DWos26w9rZuhbXZ9RGlWO6LFWRkFu4xNHy/QfzNYJrr6rGubb 4thZbhSheLpE4Ey9GTvMhRipMHdju2Dyn9K3Td2q/Z9WLDHP+CcUxpo7AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvdNbMfKXDkpMRfk0deooePmXSIMB8GA1UdIwQY MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2 LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPT3WbbAd 1ujsS/uRY0Dx1MtVx2OzokdD3pUqMyX8uTiB9wg43yeY52/q73qOenuE/GV9BhQC Jpj96NIf5y1a1zZPfkhT6+ZvltlnnqVUzMWruvgcZwKM4Bpm8ascEkgu4W8FkEGE /ECbu/FBe1rFG41ANUiyOlZTdLAav2kncXAF3hDgMjH2S+GrS/Vvu3XWre0AOpnE C8gf4JspWrnvM+OeYDKx0Fdlg/YOrw7cgnztQpFvYuUSpUbOUGXcli2woCtcM1LR 9729f5wjEoluzgcBQxoqArh8vXX7Ur0V5rzvWcYicqj4soXsb+fH9TS5oHTdR+bS UA7OB4Wmk6aXLA== -----END CERTIFICATE-----Generated at Wed Dec 31 09:22:55 2025 by rpki-client