This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json) Hash identifier: iBzsTPEvEyNJSr6ghluMvOXR1M0B5ENc1tBwusQ0IoY= Subject key identifier: 79:C2:80:4F:BE:3D:25:F0:6D:63:0E:D4:D3:63:45:A3:0A:E2:DA:BD Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b Certificate serial: 019B1FBD2B96184C4FE0B3BF68C5C9A94E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 02:00:49 +0000 Manifest this update: Mon 15 Dec 2025 02:00:49 +0000 Manifest next update: Tue 16 Dec 2025 02:00:49 +0000 Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: BeBXVmhRm+8z5pvVA1nWKEqv1WPeuM6cdugdo5FtJNw=) 2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:2b:96:18:4c:4f:e0:b3:bf:68:c5:c9:a9:4e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b Validity Not Before: Dec 15 02:00:49 2025 GMT Not After : Dec 16 02:00:49 2025 GMT Subject: CN=79c2804fbe3d25f06d630ed4d36345a30ae2dabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:97:df:52:7a:f2:9a:22:f9:0a:f8:33:2c: fb:af:58:c9:d5:34:64:6e:d8:5b:20:18:87:b9:97: 59:9e:cb:33:80:c4:42:be:ab:c2:d0:10:da:f5:0d: 93:67:a8:ed:fb:4f:bd:71:8d:34:49:98:65:b2:49: 2d:25:04:f2:78:d9:f1:c4:91:60:7f:ad:aa:31:2e: ef:ae:76:3f:c4:d0:b3:e1:7d:3c:7c:5f:b1:cd:4e: 9d:a8:19:9b:80:07:52:80:14:47:55:e9:23:b0:86: 0b:92:8c:7c:d3:25:9f:0d:b5:d0:e4:31:8b:b6:8c: 54:0f:39:cb:75:3b:6b:80:9f:29:d4:a5:da:60:b8: ce:7c:48:2f:cc:bd:b7:d0:ea:6c:f3:a6:05:d3:b4: e0:33:d9:c5:cb:7e:d8:1d:02:20:88:89:05:2b:cd: 10:78:c8:03:1f:2a:3e:d7:d1:ad:05:73:a6:ef:de: bb:f5:54:85:21:eb:bc:22:13:9f:01:72:e2:5b:5d: d4:55:b0:58:0a:aa:cd:5a:72:67:4f:af:ca:96:4e: 1f:ae:28:be:f8:61:0f:92:f3:35:86:58:1d:b0:b2: 89:de:3d:1c:1f:b6:ca:22:10:f8:dd:25:2a:10:05: c7:71:fd:00:e5:49:53:88:9d:2e:1f:40:f6:ab:da: ee:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C2:80:4F:BE:3D:25:F0:6D:63:0E:D4:D3:63:45:A3:0A:E2:DA:BD X509v3 Authority Key Identifier: keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:87:50:ea:6c:7c:69:ce:e1:36:05:cf:53:1d:fa:21:a2:eb: 09:bd:62:b5:35:6c:fb:16:49:36:c0:76:11:cf:f0:c4:bf:bc: f1:92:f1:b7:bc:44:b0:ef:7e:13:26:6b:8f:ac:37:8d:74:26: a2:ab:3f:d1:0a:52:63:3f:ce:a3:f0:59:d1:33:20:85:5a:a5: 3c:5e:31:18:4f:15:4a:7a:cd:44:94:ba:d3:72:81:91:73:29: 38:6a:c8:46:83:f4:f4:41:ca:07:92:fb:90:2d:2b:fa:c3:bc: 89:80:b7:9b:d7:ef:6f:f0:13:1f:5c:5c:6c:71:19:e6:5c:41: 06:1d:3e:ac:3c:48:cd:b8:9c:46:2c:bd:fe:16:39:1e:ab:6c: 3d:3e:f4:4c:1f:da:e5:4a:8f:01:f3:67:34:68:1d:af:da:65: eb:52:aa:d2:15:b0:39:33:66:cf:a5:b5:73:bf:90:e3:6d:f8: fa:6c:bd:76:51:d8:b5:eb:c4:64:7e:21:36:ac:09:0e:39:a9: 44:70:f0:ac:1f:32:74:5d:21:ca:6c:02:c6:60:c6:93:07:e3: 45:46:b2:ee:42:d7:02:a9:2f:55:fa:f7:e1:55:03:0e:f4:15: 60:2d:c7:9b:aa:25:7e:79:fb:a3:f4:96:16:64:1f:f7:94:82: 7e:bf:ed:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvSuWGExP4LO/aMXJqU4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZTU2ODQxN2Y1OWEyMTEyOWZiMjQ4N2Y1ZTU3YmMxNzE2 MzFmN2IwHhcNMjUxMjE1MDIwMDQ5WhcNMjUxMjE2MDIwMDQ5WjAzMTEwLwYDVQQD Eyg3OWMyODA0ZmJlM2QyNWYwNmQ2MzBlZDRkMzYzNDVhMzBhZTJkYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5mX31J68poi+Qr4Myz7r1jJ1TRk bthbIBiHuZdZnsszgMRCvqvC0BDa9Q2TZ6jt+0+9cY00SZhlskktJQTyeNnxxJFg f62qMS7vrnY/xNCz4X08fF+xzU6dqBmbgAdSgBRHVekjsIYLkox80yWfDbXQ5DGL toxUDznLdTtrgJ8p1KXaYLjOfEgvzL230Ops86YF07TgM9nFy37YHQIgiIkFK80Q eMgDHyo+19GtBXOm79679VSFIeu8IhOfAXLiW13UVbBYCqrNWnJnT6/Klk4frii+ +GEPkvM1hlgdsLKJ3j0cH7bKIhD43SUqEAXHcf0A5UlTiJ0uH0D2q9ru3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnCgE++PSXwbWMO1NNjRaMK4tq9MB8GA1UdIwQY MBaAFBflaEF/WaIRKfskh/Xle8FxYx97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYt OWUzZTlhYWZiY2U0LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYtOWUzZTlhYWZiY2U0 LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFodQ6mx8 ac7hNgXPUx36IaLrCb1itTVs+xZJNsB2Ec/wxL+88ZLxt7xEsO9+EyZrj6w3jXQm oqs/0QpSYz/Oo/BZ0TMghVqlPF4xGE8VSnrNRJS603KBkXMpOGrIRoP09EHKB5L7 kC0r+sO8iYC3m9fvb/ATH1xcbHEZ5lxBBh0+rDxIzbicRiy9/hY5HqtsPT70TB/a 5UqPAfNnNGgdr9pl61Kq0hWwOTNmz6W1c7+Q4234+my9dlHYtevEZH4hNqwJDjmp RHDwrB8ydF0hymwCxmDGkwfjRUay7kLXAqkvVfr34VUDDvQVYC3Hm6olfnn7o/SW FmQf95SCfr/tEA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:37 2025 by rpki-client