This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json) Hash identifier: 7w1oKZHKi+F62qg7mDSqYu1BRht7+m1IM0cEGOx+bYE= Subject key identifier: 5E:06:59:50:87:2E:F9:50:A7:B5:2D:D0:8B:A7:7E:99:68:6D:79:84 Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd Certificate serial: 019BD5EB1BB94BF4B37F4AD45EE03322E015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft Manifest number: 06CC Signing time: Mon 19 Jan 2026 11:01:53 +0000 Manifest this update: Mon 19 Jan 2026 11:01:53 +0000 Manifest next update: Tue 20 Jan 2026 11:01:53 +0000 Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: kmOrXpLuWA1IWUIKMHvWJQzcr7VbFya2Vyy7DEaAyFI=) 2: euUp3-ezlCpILlf7qWV0a93H1yQ.roa (hash: kzeXchF7R0DCrCVUSaQcyQotUqQoTUlPfhRZvehXMko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:eb:1b:b9:4b:f4:b3:7f:4a:d4:5e:e0:33:22:e0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd Validity Not Before: Jan 19 11:01:53 2026 GMT Not After : Jan 20 11:01:53 2026 GMT Subject: CN=5e065950872ef950a7b52dd08ba77e99686d7984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:07:9d:0c:88:c9:ab:4f:25:c7:42:fb:0d: 20:66:78:f1:2f:80:8b:f1:ba:9b:78:5c:93:cd:40: db:01:01:b2:42:e2:f0:26:03:95:68:12:48:04:17: 88:22:5e:5f:fe:0e:bd:1e:b5:0a:55:57:41:fd:86: d2:2f:8b:49:32:77:4a:0b:2f:3b:da:59:d8:28:72: 39:d3:ee:2b:d9:ba:ae:8b:91:74:5e:5e:2c:34:61: 60:37:b4:0f:41:01:c4:3f:3b:8a:31:e3:58:52:f8: d9:10:fd:5a:44:2a:7b:a1:2a:b4:58:c5:f1:96:c1: ca:83:d8:2c:1a:c3:40:07:72:dc:14:ff:89:86:9a: b6:3b:50:0d:67:c1:68:24:05:8f:68:9a:19:76:f9: f2:a3:5d:7c:79:e9:b4:af:2c:a6:bf:41:84:35:20: ff:75:4b:f1:5e:49:92:9d:4b:0d:ea:d2:aa:8c:fd: be:f1:b6:5c:5f:d6:ed:eb:70:6a:33:0f:39:46:87: 0d:6c:6f:4f:46:81:f4:88:ec:18:c6:c1:53:3e:f3: 84:56:fb:fe:45:a2:4e:2f:5e:89:82:e4:d5:a9:6b: b4:21:81:c0:64:9f:66:3f:ef:a9:dc:f9:31:71:c6: b4:e6:8c:6f:19:49:6e:eb:34:dc:11:a9:ea:3d:c5: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:06:59:50:87:2E:F9:50:A7:B5:2D:D0:8B:A7:7E:99:68:6D:79:84 X509v3 Authority Key Identifier: keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:77:89:1c:a8:5c:0a:a3:bd:89:71:ca:5f:26:28:3d:81:c1: 18:22:7b:c2:aa:ee:e7:7d:70:22:e7:19:fa:50:c3:92:d1:8d: e7:1e:d6:09:35:9b:05:cc:c4:2f:39:ea:62:46:e6:dc:c9:96: e3:50:0c:49:a7:f5:8c:26:1f:7e:62:08:16:92:dd:1c:18:29: ea:95:fe:a3:75:07:3f:52:4d:60:c1:69:3d:e5:94:c0:50:1d: 62:13:e5:40:a9:0a:5d:14:86:6d:55:33:b0:1d:05:52:bf:6e: ce:70:b5:60:1d:e4:43:44:02:07:fb:cb:a4:29:dd:91:55:a9: b8:48:0a:47:1c:db:ce:b2:93:9a:03:ab:f0:1b:5d:fe:47:39: f2:f7:8c:de:63:12:22:6d:c1:52:ef:29:e7:c5:73:78:a1:ba: 09:2a:c2:a1:91:0f:b6:47:e6:3b:9d:8f:28:33:b1:01:66:90: ea:da:f7:a1:25:d5:10:08:3d:4b:9b:fc:9f:e3:a5:3c:ff:d9: d7:c1:04:47:9c:3f:45:47:25:53:59:97:bd:99:79:dc:57:4b: 34:e3:38:67:1e:fb:a1:4c:04:87:26:82:f0:73:0b:5e:f0:e4: e8:e4:ab:68:c2:71:e5:ba:7c:50:6e:8e:df:7f:33:47:45:94: 5a:7b:69:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvV6xu5S/Szf0rUXuAzIuAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmQyMmFmYjgwZGZhZGEyMDAzZDQwZTU0NmRhZmQzN2Zm ODY5ZmQwHhcNMjYwMTE5MTEwMTUzWhcNMjYwMTIwMTEwMTUzWjAzMTEwLwYDVQQD Eyg1ZTA2NTk1MDg3MmVmOTUwYTdiNTJkZDA4YmE3N2U5OTY4NmQ3OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5YHnQyIyatPJcdC+w0gZnjxL4CL 8bqbeFyTzUDbAQGyQuLwJgOVaBJIBBeIIl5f/g69HrUKVVdB/YbSL4tJMndKCy87 2lnYKHI50+4r2bqui5F0Xl4sNGFgN7QPQQHEPzuKMeNYUvjZEP1aRCp7oSq0WMXx lsHKg9gsGsNAB3LcFP+Jhpq2O1ANZ8FoJAWPaJoZdvnyo118eem0ryymv0GENSD/ dUvxXkmSnUsN6tKqjP2+8bZcX9bt63BqMw85RocNbG9PRoH0iOwYxsFTPvOEVvv+ RaJOL16JguTVqWu0IYHAZJ9mP++p3Pkxcca05oxvGUlu6zTcEanqPcXG3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4GWVCHLvlQp7Ut0IunfplobXmEMB8GA1UdIwQY MBaAFOu9Iq+4DfraIAPUDlRtr9N/+Gn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMt OTE5ZWFiYTYxYjk0LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83ZDM1NjUtN2IwMC00ZDgxLTlhYjMtOTE5ZWFiYTYxYjk0 LzEvNjcwaXI3Z04tdG9nQTlRT1ZHMnYwM180YWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHeJHKhc CqO9iXHKXyYoPYHBGCJ7wqru531wIucZ+lDDktGN5x7WCTWbBczELznqYkbm3MmW 41AMSaf1jCYffmIIFpLdHBgp6pX+o3UHP1JNYMFpPeWUwFAdYhPlQKkKXRSGbVUz sB0FUr9uznC1YB3kQ0QCB/vLpCndkVWpuEgKRxzbzrKTmgOr8Btd/kc58veM3mMS Im3BUu8p58VzeKG6CSrCoZEPtkfmO52PKDOxAWaQ6tr3oSXVEAg9S5v8n+OlPP/Z 18EER5w/RUclU1mXvZl53FdLNOM4Zx77oUwEhyaC8HMLXvDk6OSraMJx5bp8UG6O 338zR0WUWntp0A== -----END CERTIFICATE-----Generated at Mon Jan 19 20:20:02 2026 by rpki-client