This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json) Hash identifier: 2jtilFUsTKu8Ge6oYhtFevnx00fgoQH0TAIbCFtOFp8= Subject key identifier: 62:26:47:C1:BF:87:31:18:50:C4:3D:A2:0C:89:DB:9C:25:77:0E:36 Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b Certificate serial: 019B3EA34EEB53466F5525E92508F716B52F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 02:00:48 +0000 Manifest this update: Sun 21 Dec 2025 02:00:48 +0000 Manifest next update: Mon 22 Dec 2025 02:00:48 +0000 Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: A3kb2sQ+poC12CLyXRBIKapYUv/tbKAfqG6PKWdFZHY=) 2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:4e:eb:53:46:6f:55:25:e9:25:08:f7:16:b5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b Validity Not Before: Dec 21 02:00:48 2025 GMT Not After : Dec 22 02:00:48 2025 GMT Subject: CN=622647c1bf87311850c43da20c89db9c25770e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:f9:78:b3:9a:5e:6c:64:bb:03:3b:6a:2c: b3:5e:0e:e9:ef:3b:2c:54:3f:03:0b:b2:31:c9:25: 8d:dc:2f:76:38:1c:85:8e:14:db:a0:b7:cd:af:63: 69:f0:58:5a:b8:3a:f9:1a:21:18:00:8e:d5:4b:4d: 8c:02:08:e7:44:e4:33:1b:de:7e:22:5a:85:7c:ab: ae:13:eb:39:62:a9:ca:d5:1e:ee:c8:77:62:33:c2: f5:c7:0d:5e:b6:c0:33:e8:70:b1:38:a4:0d:f9:74: 40:8a:5a:f2:22:03:19:67:35:46:c3:55:07:19:d2: 3b:14:51:ab:fa:4d:04:c8:6f:e7:57:09:2b:90:25: f6:e2:28:d5:c0:32:4f:61:05:b4:de:07:6d:fe:58: a4:6f:42:df:60:d5:ce:67:ec:e0:fd:64:aa:26:ac: f4:f3:2f:4b:b4:7f:63:d1:3e:02:b9:58:a1:06:15: c3:2f:b4:3e:c2:86:cc:b7:f1:31:a4:95:b4:df:8a: 26:dd:1b:47:4e:b6:c2:f1:45:fc:69:04:04:b9:8e: 70:7b:e3:a8:2e:62:90:55:8b:07:07:81:b3:50:b9: ee:15:78:61:ab:a2:ae:61:d6:4f:fa:ff:cc:f4:64: 08:99:f4:7c:94:c9:70:23:d1:a6:23:eb:ad:f2:d5: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:26:47:C1:BF:87:31:18:50:C4:3D:A2:0C:89:DB:9C:25:77:0E:36 X509v3 Authority Key Identifier: keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c6:07:34:d2:81:50:e2:b5:ca:df:3d:9c:97:ec:97:91:2a: b7:60:a4:a5:5a:d7:9a:05:72:c1:db:68:56:f5:50:45:fc:b3: cb:39:76:c8:03:20:dd:34:fd:cc:06:b3:3f:eb:01:30:79:9a: a7:a0:d4:5a:53:3f:ea:3d:58:6e:26:e7:37:76:98:24:20:80: 78:14:df:b3:87:6f:cb:a5:f3:1f:79:3b:ca:05:a8:25:6c:71: 98:5d:c8:6d:bf:2f:85:91:6e:a7:90:25:19:a1:8b:88:dd:8b: b1:6e:f2:e0:f7:78:2f:77:f4:f1:eb:08:f1:7b:2d:77:0d:e1: 42:42:df:71:38:fc:05:c4:fe:a7:82:1c:09:5b:1f:5a:56:6c: 77:27:f3:6e:4d:cd:1d:98:2a:36:f2:fa:03:56:8f:a5:f5:27: af:22:0f:68:d4:82:97:b3:92:95:30:fd:26:78:2d:d1:6c:87: ec:48:c4:36:37:ca:0d:07:dc:f8:6a:53:3c:b1:04:99:77:b3: 56:ba:ff:46:56:dc:04:aa:bc:01:5f:ef:6c:1d:2c:cc:f6:49: 06:b2:05:57:89:3f:4c:31:2e:a7:78:49:06:b0:96:64:bd:59: 7e:fa:a0:9e:87:cf:b6:ff:0d:95:fb:5c:d7:8b:b9:1a:99:66: 51:91:1d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o07rU0ZvVSXpJQj3FrUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZTU2ODQxN2Y1OWEyMTEyOWZiMjQ4N2Y1ZTU3YmMxNzE2 MzFmN2IwHhcNMjUxMjIxMDIwMDQ4WhcNMjUxMjIyMDIwMDQ4WjAzMTEwLwYDVQQD Eyg2MjI2NDdjMWJmODczMTE4NTBjNDNkYTIwYzg5ZGI5YzI1NzcwZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHX5eLOaXmxkuwM7aiyzXg7p7zss VD8DC7IxySWN3C92OByFjhTboLfNr2Np8FhauDr5GiEYAI7VS02MAgjnROQzG95+ IlqFfKuuE+s5YqnK1R7uyHdiM8L1xw1etsAz6HCxOKQN+XRAilryIgMZZzVGw1UH GdI7FFGr+k0EyG/nVwkrkCX24ijVwDJPYQW03gdt/likb0LfYNXOZ+zg/WSqJqz0 8y9LtH9j0T4CuVihBhXDL7Q+wobMt/ExpJW034om3RtHTrbC8UX8aQQEuY5we+Oo LmKQVYsHB4GzULnuFXhhq6KuYdZP+v/M9GQImfR8lMlwI9GmI+ut8tWvVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGImR8G/hzEYUMQ9ogyJ25wldw42MB8GA1UdIwQY MBaAFBflaEF/WaIRKfskh/Xle8FxYx97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYt OWUzZTlhYWZiY2U0LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYtOWUzZTlhYWZiY2U0 LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8YHNNKB UOK1yt89nJfsl5Eqt2CkpVrXmgVywdtoVvVQRfyzyzl2yAMg3TT9zAazP+sBMHma p6DUWlM/6j1YbibnN3aYJCCAeBTfs4dvy6XzH3k7ygWoJWxxmF3Ibb8vhZFup5Al GaGLiN2LsW7y4Pd4L3f08esI8Xstdw3hQkLfcTj8BcT+p4IcCVsfWlZsdyfzbk3N HZgqNvL6A1aPpfUnryIPaNSCl7OSlTD9Jngt0WyH7EjENjfKDQfc+GpTPLEEmXez Vrr/RlbcBKq8AV/vbB0szPZJBrIFV4k/TDEup3hJBrCWZL1ZfvqgnofPtv8Nlftc 14u5GplmUZEdzg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:02:15 2025 by rpki-client