This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json) Hash identifier: crCTNzvDGCGeYv0mjiQ917uHd2iO2gmUX6wOblAZ74U= Subject key identifier: 20:5B:79:29:FA:00:57:5D:0D:D1:99:12:51:D5:D7:B5:FD:F6:04:0D Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd Certificate serial: 019AF42E0932BD05F35CFCE38AC3C3EB8985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft Manifest number: 0657 Signing time: Sat 06 Dec 2025 15:00:48 +0000 Manifest this update: Sat 06 Dec 2025 15:00:48 +0000 Manifest next update: Sun 07 Dec 2025 15:00:48 +0000 Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: RiKDD2rrJsO4/2VVeBeljxSH7AH3aMrr5/u4Rz4nxh4=) 2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:09:32:bd:05:f3:5c:fc:e3:8a:c3:c3:eb:89:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd Validity Not Before: Dec 6 15:00:48 2025 GMT Not After : Dec 7 15:00:48 2025 GMT Subject: CN=205b7929fa00575d0dd1991251d5d7b5fdf6040d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:7b:c7:f3:d8:49:bf:8d:8c:f1:6d:8f:f1: 43:86:13:bb:72:e0:23:a7:1c:90:58:0c:e0:94:be: bf:49:22:6c:d1:fd:46:3a:45:fe:28:5c:45:a9:e2: 4c:0a:d1:b5:e1:84:dc:a0:e4:a5:78:b8:63:f8:c2: 5c:67:92:b7:27:c5:43:a0:91:19:8f:f0:e4:43:ca: 64:ce:26:71:7d:0d:51:f4:ce:f4:26:9a:a1:5c:8f: 54:04:97:21:25:10:5f:78:8c:b3:fd:34:26:ca:fa: 72:e4:4d:a7:91:72:4c:10:17:15:c0:55:e1:c4:01: 0e:87:c4:64:56:66:ee:38:43:46:ca:16:d6:f5:2f: 21:a4:5b:74:43:68:e2:80:be:d0:a8:04:b9:aa:6d: e4:10:5c:10:af:be:6f:1b:55:c8:5d:e1:d8:15:5b: ce:3b:51:bc:d5:3b:fd:a7:05:2c:1f:ce:74:ca:1c: af:b7:8e:66:ef:c4:b4:36:a8:e1:9d:0a:fd:6d:d7: e4:02:13:5d:9a:1c:56:35:9a:99:39:00:dc:b7:ee: 82:cd:bd:1d:f5:62:e7:9e:73:2f:a7:6a:e9:58:f4: 44:8b:e3:af:2f:c7:60:95:4d:30:5b:08:e1:14:cc: 5f:13:b1:1a:e3:95:02:c2:6a:c9:43:56:af:61:e6: ef:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5B:79:29:FA:00:57:5D:0D:D1:99:12:51:D5:D7:B5:FD:F6:04:0D X509v3 Authority Key Identifier: keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c3:dc:08:15:15:8c:92:f8:93:5b:42:6b:fb:96:16:26:61: cb:5c:25:4a:fb:72:7c:93:8b:4b:df:a7:c2:bd:e5:33:fb:5c: 5d:e9:3c:b8:82:49:fd:dc:a6:85:5b:06:8a:8e:13:49:48:ea: 6e:d1:5c:3f:4e:3c:61:17:0c:69:0b:a6:2f:03:c0:43:df:83: 53:26:22:34:cf:86:91:6e:02:77:3e:9c:be:f8:67:cd:29:fc: e2:b6:d5:db:77:17:6b:d7:8d:48:97:02:f2:31:05:11:60:20: 96:38:ba:3b:dc:d8:c1:8e:77:f5:80:66:2c:65:76:7c:ee:e5: 60:35:61:2d:82:1d:14:70:50:5d:2e:83:bc:0b:e1:c2:1f:b4: 88:bd:a2:83:95:df:a3:fb:62:72:24:df:f0:d4:93:03:1f:52: 4c:2d:a7:5f:2a:da:c3:54:bb:37:12:6f:e1:0e:18:b3:db:7b: a9:64:41:84:a0:9c:43:bb:5b:0a:22:ef:19:c3:79:0e:8e:28: 3a:15:f5:27:27:30:a0:8c:4e:f5:6e:6d:21:fe:7d:c3:70:23: ab:bf:ec:24:35:a7:6e:6c:7f:97:c8:b2:c2:b8:62:3d:c7:76: 5b:34:fe:b5:e4:9f:ba:2c:0c:56:ee:67:0c:fb:e3:3e:ff:ef: 22:d8:e6:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LgkyvQXzXPzjisPD64mFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmQyMmFmYjgwZGZhZGEyMDAzZDQwZTU0NmRhZmQzN2Zm ODY5ZmQwHhcNMjUxMjA2MTUwMDQ4WhcNMjUxMjA3MTUwMDQ4WjAzMTEwLwYDVQQD EygyMDViNzkyOWZhMDA1NzVkMGRkMTk5MTI1MWQ1ZDdiNWZkZjYwNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz57x/PYSb+NjPFtj/FDhhO7cuAj pxyQWAzglL6/SSJs0f1GOkX+KFxFqeJMCtG14YTcoOSleLhj+MJcZ5K3J8VDoJEZ j/DkQ8pkziZxfQ1R9M70JpqhXI9UBJchJRBfeIyz/TQmyvpy5E2nkXJMEBcVwFXh xAEOh8RkVmbuOENGyhbW9S8hpFt0Q2jigL7QqAS5qm3kEFwQr75vG1XIXeHYFVvO O1G81Tv9pwUsH850yhyvt45m78S0NqjhnQr9bdfkAhNdmhxWNZqZOQDct+6Czb0d 9WLnnnMvp2rpWPREi+OvL8dglU0wWwjhFMxfE7Ea45UCwmrJQ1avYebvlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBbeSn6AFddDdGZElHV17X99gQNMB8GA1UdIwQY MBaAFOu9Iq+4DfraIAPUDlRtr9N/+Gn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMt OTE5ZWFiYTYxYjk0LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMtOTE5ZWFiYTYxYjk0 LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8PcCBUV jJL4k1tCa/uWFiZhy1wlSvtyfJOLS9+nwr3lM/tcXek8uIJJ/dymhVsGio4TSUjq btFcP048YRcMaQumLwPAQ9+DUyYiNM+GkW4Cdz6cvvhnzSn84rbV23cXa9eNSJcC 8jEFEWAglji6O9zYwY539YBmLGV2fO7lYDVhLYIdFHBQXS6DvAvhwh+0iL2ig5Xf o/ticiTf8NSTAx9STC2nXyraw1S7NxJv4Q4Ys9t7qWRBhKCcQ7tbCiLvGcN5Do4o OhX1JycwoIxO9W5tIf59w3Ajq7/sJDWnbmx/l8iywrhiPcd2WzT+teSfuiwMVu5n DPvjPv/vItjmyg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:05:38 2025 by rpki-client