This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json) Hash identifier: WEGDWuKlM/YcaJk+B/EF+hDZ3neckaqy2MM+UOyLxmw= Subject key identifier: 29:B9:1D:F9:D6:E3:E5:7D:1D:10:F0:00:74:EA:35:1B:15:48:63:27 Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Certificate serial: 019BF4D1170FE02BF3B0DEFBA3B9B0BC1918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 11:01:42 +0000 Manifest this update: Sun 25 Jan 2026 11:01:42 +0000 Manifest next update: Mon 26 Jan 2026 11:01:42 +0000 Files and hashes: 1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=) 2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: wmYsNKKcpf95EcGIpqsZ62F5qQR4Dbryxuy8UEWGCro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:17:0f:e0:2b:f3:b0:de:fb:a3:b9:b0:bc:19:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Validity Not Before: Jan 25 11:01:42 2026 GMT Not After : Jan 26 11:01:42 2026 GMT Subject: CN=29b91df9d6e3e57d1d10f00074ea351b15486327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0d:75:02:31:28:af:6c:93:fd:d9:12:1f:a9: 83:f5:f2:e7:49:3f:94:15:a6:fa:01:a7:85:3c:a4: ba:e3:3a:4d:4d:e4:23:0d:c9:26:1b:8a:73:00:76: 85:53:82:28:84:06:bb:78:92:dd:dc:bf:7f:8a:31: 53:07:b4:f8:d9:65:53:ee:df:51:ad:ea:68:57:ef: 74:70:10:01:39:32:59:30:b9:01:b1:40:37:e5:ce: ea:16:05:23:02:cf:2b:dc:ef:aa:09:d6:6f:23:87: f6:58:46:ea:79:11:98:52:c9:b7:f5:64:dd:83:b8: 44:c9:40:05:6d:7d:c8:ba:14:d5:78:18:7b:28:19: 22:ea:5a:df:a8:fc:24:7c:07:ce:82:93:3a:26:0c: 47:bc:e0:dd:2b:db:e6:8a:67:40:e5:c2:0b:d8:ed: cd:1b:f3:4e:4d:cf:51:38:c1:ef:2e:b4:9d:08:bd: 89:ac:d4:c2:13:c7:57:46:27:7c:09:a4:c0:e8:be: 34:31:90:47:87:99:4e:f2:0d:95:e9:2d:4a:ae:3a: b3:81:c6:03:86:c4:c0:ba:be:ab:b1:00:fc:65:18: 18:c8:6b:72:7b:43:b1:5f:6e:46:11:e6:14:43:4f: 5b:a2:9b:18:32:bb:50:02:de:18:97:42:65:7e:7b: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:1D:F9:D6:E3:E5:7D:1D:10:F0:00:74:EA:35:1B:15:48:63:27 X509v3 Authority Key Identifier: keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:61:67:64:7d:95:d8:ee:95:b2:9d:e2:46:73:9d:68:5e:2f: a0:9d:cf:1f:94:c8:6e:28:51:4f:1d:3c:4a:0a:12:13:94:34: a0:b9:b6:70:0d:ff:58:19:6c:4d:63:40:bc:51:6a:4e:20:15: 41:92:31:eb:4c:e6:56:ce:cd:fe:c0:81:4d:dc:c4:3a:62:ca: 7c:48:a3:6d:66:6f:30:b3:71:de:3c:52:d1:a9:6b:2f:40:d8: 6d:64:c6:9a:09:73:2a:cd:9b:9d:e7:a7:36:ca:b4:69:8e:1c: dd:34:aa:bb:db:fa:09:44:f3:2d:2d:b5:74:ea:f2:ab:ae:0d: ad:3e:89:3d:b9:30:56:ae:64:53:19:00:a5:9b:9c:cb:0b:a8: 77:f9:9b:cf:28:d8:8e:3c:9b:fb:9a:00:5f:d4:33:32:43:37: 25:69:8c:a3:d4:ee:8a:ee:f1:43:63:52:ba:f4:44:38:9a:39: 1c:08:79:82:ab:96:f0:54:93:ac:62:bd:a3:45:c2:5b:89:8b: 31:95:49:07:29:73:74:df:9b:09:2b:61:cf:01:48:2a:0d:9d: 31:40:ae:35:67:05:2e:30:22:2b:aa:b6:e7:e1:15:8a:8f:97: 07:c0:ce:e0:e6:2f:59:96:7c:b5:db:be:cc:64:4e:b7:2e:60: 70:d9:c1:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00RcP4CvzsN77o7mwvBkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj NWVmY2YwHhcNMjYwMTI1MTEwMTQyWhcNMjYwMTI2MTEwMTQyWjAzMTEwLwYDVQQD EygyOWI5MWRmOWQ2ZTNlNTdkMWQxMGYwMDA3NGVhMzUxYjE1NDg2MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA11AjEor2yT/dkSH6mD9fLnST+U Fab6AaeFPKS64zpNTeQjDckmG4pzAHaFU4IohAa7eJLd3L9/ijFTB7T42WVT7t9R repoV+90cBABOTJZMLkBsUA35c7qFgUjAs8r3O+qCdZvI4f2WEbqeRGYUsm39WTd g7hEyUAFbX3IuhTVeBh7KBki6lrfqPwkfAfOgpM6JgxHvODdK9vmimdA5cIL2O3N G/NOTc9ROMHvLrSdCL2JrNTCE8dXRid8CaTA6L40MZBHh5lO8g2V6S1KrjqzgcYD hsTAur6rsQD8ZRgYyGtye0OxX25GEeYUQ09bopsYMrtQAt4Yl0JlfntPcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm5HfnW4+V9HRDwAHTqNRsVSGMnMB8GA1UdIwQY MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2 LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2FnZH2V 2O6Vsp3iRnOdaF4voJ3PH5TIbihRTx08SgoSE5Q0oLm2cA3/WBlsTWNAvFFqTiAV QZIx60zmVs7N/sCBTdzEOmLKfEijbWZvMLNx3jxS0alrL0DYbWTGmglzKs2bneen Nsq0aY4c3TSqu9v6CUTzLS21dOryq64NrT6JPbkwVq5kUxkApZucywuod/mbzyjY jjyb+5oAX9QzMkM3JWmMo9Tuiu7xQ2NSuvREOJo5HAh5gquW8FSTrGK9o0XCW4mL MZVJBylzdN+bCSthzwFIKg2dMUCuNWcFLjAiK6q25+EVio+XB8DO4OYvWZZ8tdu+ zGROty5gcNnB+g== -----END CERTIFICATE-----Generated at Sun Jan 25 18:16:14 2026 by rpki-client