This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json) Hash identifier: PzWBSkQ77MpUfLAcwgDVAkEXrnqWjSkZO/pdYAUZzSU= Subject key identifier: A1:AC:B7:0D:C2:64:89:CB:4B:A7:36:17:EF:5B:A9:02:8B:18:3B:E7 Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Certificate serial: 019AF19A8FB21D154C8AAFB325AB4C3F32FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:29 +0000 Manifest this update: Sat 06 Dec 2025 03:00:29 +0000 Manifest next update: Sun 07 Dec 2025 03:00:29 +0000 Files and hashes: 1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: 2SYTm7evavewSRjVE3YMPq8k7vQcxsrhJM3J6Mk+UK0=) 2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:8f:b2:1d:15:4c:8a:af:b3:25:ab:4c:3f:32:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf Validity Not Before: Dec 6 03:00:29 2025 GMT Not After : Dec 7 03:00:29 2025 GMT Subject: CN=a1acb70dc26489cb4ba73617ef5ba9028b183be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:85:e5:59:25:0d:36:06:1b:46:d7:82:42: af:f5:1a:2b:89:f8:39:f9:ae:a3:f7:6f:6e:c5:e1: fd:02:c1:d8:c3:63:d1:0a:a2:13:39:6e:bb:17:2f: 8c:2b:24:95:e4:d0:6e:51:32:64:71:1d:2b:f5:63: 48:b6:82:f7:d0:75:10:41:09:1e:1f:0e:25:54:ce: 7e:59:a9:c1:95:76:51:13:cb:ea:b9:f2:10:50:ab: 5b:8f:c9:54:09:3d:1c:4d:e1:f7:5a:b1:f5:60:ef: bb:0b:d9:15:ad:02:a3:7d:dd:50:58:4d:f3:49:3e: 51:31:ee:7b:04:51:6b:c6:27:d4:aa:20:15:d9:10: d0:99:14:8d:98:84:ca:b9:7e:ac:1b:7e:3c:47:4f: 39:86:4c:00:2b:a8:c4:bd:95:00:1c:97:8a:d9:e8: 67:e5:7d:a9:98:13:a3:9b:db:1b:3e:45:79:59:6e: e0:ee:0e:d5:e5:18:1f:7c:a2:e2:54:ab:e7:4b:29: 36:4e:5e:4e:0e:1c:15:3b:81:87:6f:41:3a:62:78: 99:d2:67:3a:d3:1d:ee:42:03:64:14:bd:84:99:fd: 78:a7:a7:0f:ca:e6:39:5f:20:bf:08:aa:5d:ef:f1: 27:e3:d2:8c:e0:73:b7:02:aa:52:ef:3b:19:8c:45: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AC:B7:0D:C2:64:89:CB:4B:A7:36:17:EF:5B:A9:02:8B:18:3B:E7 X509v3 Authority Key Identifier: keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:88:aa:aa:76:ef:8e:bb:ff:a8:db:d4:49:0d:19:2b:28:4e: b7:9d:5b:49:c2:59:bd:19:9b:8c:d8:30:12:c9:5c:b9:c8:f2: 97:5f:eb:f7:50:e8:58:a2:3d:30:92:9f:23:ad:d6:0f:81:92: 35:1b:72:44:ab:f0:a1:10:10:59:10:be:e2:40:ea:b9:89:c4: a5:af:7a:7f:54:f3:b1:36:2d:a7:bc:af:69:5c:87:05:36:2f: 98:6b:89:fd:40:3f:a4:d9:d1:05:5d:9b:32:d9:65:26:76:79: 0a:a2:b6:81:d2:86:f7:00:65:7d:a4:77:75:e6:6b:61:6b:d1: f9:2c:a9:f8:cf:52:e4:ff:4f:28:ea:5a:60:73:5a:4a:08:f3: 40:9d:c5:ea:13:26:11:e5:9e:6e:ad:8f:3f:ef:da:5d:64:cd: 68:a8:b2:2c:35:9e:4f:1d:f2:e3:66:67:32:37:4a:47:82:c1: e3:2c:c1:25:a7:da:ff:99:25:f0:46:e7:29:aa:fc:64:1a:c8: 2d:70:8b:e4:32:4b:e9:df:1a:1c:d4:6d:80:68:12:79:a7:80: 33:7a:c9:fe:00:36:8d:ba:74:29:91:a3:ac:ea:a5:45:12:ef: 5c:d2:d3:7e:9c:8e:90:d2:7c:6c:1e:02:70:a4:73:89:2e:81: ee:77:5f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmo+yHRVMiq+zJatMPzL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj NWVmY2YwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD EyhhMWFjYjcwZGMyNjQ4OWNiNGJhNzM2MTdlZjViYTkwMjhiMTgzYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fuF5VklDTYGG0bXgkKv9Rorifg5 +a6j929uxeH9AsHYw2PRCqITOW67Fy+MKySV5NBuUTJkcR0r9WNItoL30HUQQQke Hw4lVM5+WanBlXZRE8vqufIQUKtbj8lUCT0cTeH3WrH1YO+7C9kVrQKjfd1QWE3z ST5RMe57BFFrxifUqiAV2RDQmRSNmITKuX6sG348R085hkwAK6jEvZUAHJeK2ehn 5X2pmBOjm9sbPkV5WW7g7g7V5RgffKLiVKvnSyk2Tl5ODhwVO4GHb0E6YniZ0mc6 0x3uQgNkFL2Emf14p6cPyuY5XyC/CKpd7/En49KM4HO3AqpS7zsZjEU/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGstw3CZInLS6c2F+9bqQKLGDvnMB8GA1UdIwQY MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2 LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoiqqnbv jrv/qNvUSQ0ZKyhOt51bScJZvRmbjNgwEslcucjyl1/r91DoWKI9MJKfI63WD4GS NRtyRKvwoRAQWRC+4kDquYnEpa96f1TzsTYtp7yvaVyHBTYvmGuJ/UA/pNnRBV2b MtllJnZ5CqK2gdKG9wBlfaR3deZrYWvR+Syp+M9S5P9PKOpaYHNaSgjzQJ3F6hMm EeWebq2PP+/aXWTNaKiyLDWeTx3y42ZnMjdKR4LB4yzBJafa/5kl8EbnKar8ZBrI LXCL5DJL6d8aHNRtgGgSeaeAM3rJ/gA2jbp0KZGjrOqlRRLvXNLTfpyOkNJ8bB4C cKRziS6B7ndfpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:42 2025 by rpki-client