This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json) Hash identifier: 71+YvNmp+dWfLifBVJifZ2BaP2AkTXorP3hpSOVFDoU= Subject key identifier: 3A:EF:3E:70:41:6B:04:9D:8B:69:BA:45:AD:DC:5D:F0:AB:4B:96:EB Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Certificate serial: 019B21E24706394B7E53C35A23E0057EDE83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 12:00:35 +0000 Manifest this update: Mon 15 Dec 2025 12:00:35 +0000 Manifest next update: Tue 16 Dec 2025 12:00:35 +0000 Files and hashes: 1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: USQnXfGAIkU5dnK5Ug+0N//HGZ1zMU88ivtsoi6LCcY=) 2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:47:06:39:4b:7e:53:c3:5a:23:e0:05:7e:de:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Validity Not Before: Dec 15 12:00:35 2025 GMT Not After : Dec 16 12:00:35 2025 GMT Subject: CN=3aef3e70416b049d8b69ba45addc5df0ab4b96eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:aa:b0:ba:55:26:ef:e1:c1:4b:74:76:1c: 34:e0:e8:f1:e0:18:6d:50:28:f6:5a:71:08:4c:a2: d4:e0:71:d2:e7:6f:4a:84:c0:32:e8:b2:b8:5f:2a: 85:44:40:c3:95:11:bc:5a:44:ad:9b:78:ee:2e:97: 3f:28:f9:4e:13:a1:37:85:38:ae:75:61:2e:e8:18: a5:ff:7c:36:49:a2:62:cd:0d:fc:f3:4f:da:c5:e4: d3:9b:ff:e5:77:73:8e:31:53:75:45:f3:e3:b6:ab: 49:66:c2:93:89:83:00:3b:91:00:77:48:aa:86:d1: b9:14:b9:ae:80:a6:5a:b3:66:0c:0a:9f:6c:89:d1: 82:80:1a:51:a5:dd:e9:cc:f6:7f:e3:d7:7c:2c:4a: 6e:14:d5:53:bd:09:7e:fc:e9:18:e4:bc:30:27:1a: b5:b3:91:09:ee:d1:ac:36:79:78:17:05:67:6b:56: d1:ca:35:30:3b:d0:72:7c:a3:9a:19:25:2c:19:a6: 1f:25:5c:88:1e:7d:fe:62:61:f8:96:2b:5b:bb:a8: 42:42:3b:65:a6:a1:eb:3a:6b:30:a4:2e:ae:b8:f1: b1:55:ca:8c:fa:99:75:a7:75:27:5d:ff:e2:d4:ca: f0:80:e2:36:ba:41:c6:b2:10:82:94:02:7a:6c:be: 1f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:3E:70:41:6B:04:9D:8B:69:BA:45:AD:DC:5D:F0:AB:4B:96:EB X509v3 Authority Key Identifier: keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ea:c8:17:f2:a5:79:a8:32:02:24:98:0e:1c:2d:91:2a:cf: 19:54:1a:ad:46:ff:7b:35:9c:95:db:64:98:22:7c:f0:c9:c0: 95:c1:37:68:b2:be:fd:c5:57:60:17:15:3c:8c:0b:f3:8b:55: 11:9d:4f:cd:e3:9c:c3:ba:0a:b6:8a:17:5b:87:49:a4:bd:0a: 25:b4:28:3a:ec:07:74:f3:3f:69:a5:cb:76:31:a4:ba:38:27: 1f:c4:3b:f0:44:15:53:40:56:ff:b7:5e:b3:a0:d1:fd:98:b8: e6:6f:d4:64:90:a0:9a:0b:a9:b4:6b:e4:66:1f:de:3a:f1:85: 70:8a:78:18:2a:3b:85:2e:49:5b:44:81:b5:5b:75:45:f3:53: ea:2d:1b:98:3c:27:df:38:bc:f1:92:69:83:c5:bc:75:09:b8: 3a:21:2f:bc:2c:4b:7d:be:95:e5:cf:d4:9e:30:1d:a0:53:e0: c7:dc:72:e3:28:7e:82:26:4c:d1:ca:63:01:8d:bb:23:71:66: c3:20:bd:53:22:b7:19:2a:65:32:7c:37:d7:73:49:6a:4c:ea: 71:1e:f6:f3:b6:87:39:94:79:8b:43:fb:12:09:21:3f:6f:9b: 25:b0:78:fb:5d:52:9f:81:a1:16:b8:fb:d1:05:cd:ba:bf:42: a7:ab:36:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4kcGOUt+U8NaI+AFft6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj NWVmY2YwHhcNMjUxMjE1MTIwMDM1WhcNMjUxMjE2MTIwMDM1WjAzMTEwLwYDVQQD EygzYWVmM2U3MDQxNmIwNDlkOGI2OWJhNDVhZGRjNWRmMGFiNGI5NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMSqsLpVJu/hwUt0dhw04Ojx4Bht UCj2WnEITKLU4HHS529KhMAy6LK4XyqFREDDlRG8WkStm3juLpc/KPlOE6E3hTiu dWEu6Bil/3w2SaJizQ3880/axeTTm//ld3OOMVN1RfPjtqtJZsKTiYMAO5EAd0iq htG5FLmugKZas2YMCp9sidGCgBpRpd3pzPZ/49d8LEpuFNVTvQl+/OkY5LwwJxq1 s5EJ7tGsNnl4FwVna1bRyjUwO9ByfKOaGSUsGaYfJVyIHn3+YmH4litbu6hCQjtl pqHrOmswpC6uuPGxVcqM+pl1p3UnXf/i1MrwgOI2ukHGshCClAJ6bL4f7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrvPnBBawSdi2m6Ra3cXfCrS5brMB8GA1UdIwQY MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2 LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOrIF/Kl eagyAiSYDhwtkSrPGVQarUb/ezWcldtkmCJ88MnAlcE3aLK+/cVXYBcVPIwL84tV EZ1PzeOcw7oKtooXW4dJpL0KJbQoOuwHdPM/aaXLdjGkujgnH8Q78EQVU0BW/7de s6DR/Zi45m/UZJCgmguptGvkZh/eOvGFcIp4GCo7hS5JW0SBtVt1RfNT6i0bmDwn 3zi88ZJpg8W8dQm4OiEvvCxLfb6V5c/UnjAdoFPgx9xy4yh+giZM0cpjAY27I3Fm wyC9UyK3GSplMnw313NJakzqcR7287aHOZR5i0P7EgkhP2+bJbB4+11Sn4GhFrj7 0QXNur9Cp6s2kA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:23:23 2025 by rpki-client