This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json) Hash identifier: 5Zsxz4/dG2lBoFJS/4KKd+qcvltrIhKBO9ChKyht258= Subject key identifier: 60:6B:77:B8:09:F1:54:29:DC:6B:BB:CD:A0:64:30:52:1A:6A:2B:81 Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b Certificate serial: 019B42800AE8A52457DCCB2F069A44FF7D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 20:00:46 +0000 Manifest this update: Sun 21 Dec 2025 20:00:46 +0000 Manifest next update: Mon 22 Dec 2025 20:00:46 +0000 Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: FCQcfDqx1c9MQUZCwXQVuGEnyirAuOiEsmGrVgbM/r8=) 2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:0a:e8:a5:24:57:dc:cb:2f:06:9a:44:ff:7d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b Validity Not Before: Dec 21 20:00:46 2025 GMT Not After : Dec 22 20:00:46 2025 GMT Subject: CN=606b77b809f15429dc6bbbcda06430521a6a2b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:5d:57:a6:92:58:a2:dc:ae:75:ed:46:aa: 00:c4:45:d4:f7:71:68:19:d0:96:a6:69:a8:92:e6: 4d:da:15:20:4f:d8:a2:0e:25:57:42:d3:b5:2f:1f: 73:ba:05:06:9b:d2:17:60:e6:14:c6:97:02:03:62: c4:ba:f1:f6:1d:35:b3:37:9b:12:eb:76:91:b3:15: 0c:1f:e5:24:47:38:b7:39:e1:ed:00:1f:4f:aa:c8: 99:1d:f4:aa:6c:c4:d6:39:84:b4:e5:c6:4e:d7:b6: ce:d4:69:e0:b1:e3:bb:c0:2a:f7:50:34:27:25:6f: ab:e8:76:3e:97:6a:4e:6a:5f:9e:61:e4:61:21:d7: 68:53:bf:5c:9c:44:e2:ad:ba:69:37:3e:b2:a4:f6: 6a:49:a0:78:50:34:6a:79:fb:72:21:ff:1a:b2:51: ee:a9:95:f5:f3:70:a6:df:fc:ff:ef:89:e7:1a:c8: c7:02:f9:87:33:81:51:27:bb:b7:56:2c:75:34:93: d9:71:57:65:83:17:c4:1d:82:ab:20:56:3c:24:6a: 3a:d6:5b:6c:07:5c:fc:cf:e9:ba:2b:07:2b:6c:45: 4f:ad:00:dc:67:80:ec:f5:2e:32:b9:bb:c1:52:42: 77:ca:11:ab:9f:3e:b3:e5:0f:a2:e1:04:c0:03:52: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:77:B8:09:F1:54:29:DC:6B:BB:CD:A0:64:30:52:1A:6A:2B:81 X509v3 Authority Key Identifier: keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:75:8c:bb:89:ad:bb:64:cc:a0:ed:f6:c5:fb:b8:76:52:c9: 83:76:b5:26:59:e4:da:54:4d:67:c7:63:19:f7:b4:82:01:23: 2a:6f:32:14:cf:d9:5d:a8:e7:fe:94:64:5d:43:92:55:ce:27: 2e:e7:01:74:a0:88:33:f0:18:c3:cf:cb:96:cf:7f:9c:10:11: 5b:9c:12:b1:ac:d2:25:2d:8f:41:84:1f:42:12:90:11:53:03: 0a:91:b7:15:a2:2c:4a:bf:1d:73:9d:30:a2:9c:4c:8e:47:46: 1a:05:5e:3e:6a:09:50:dd:ea:11:a9:e6:51:42:47:52:89:5d: cc:f2:bb:78:0b:e4:a6:78:03:b8:eb:8d:17:b1:6c:aa:e2:d7: 00:d2:ce:fd:98:85:b2:0a:b8:89:f4:5b:c4:8e:58:4d:85:a7: 05:3e:62:fe:30:69:3a:3b:c3:61:da:ac:30:18:cf:17:5f:15: 7c:be:05:e2:f2:6d:d2:40:77:8c:3a:68:81:a9:85:1e:18:e3: e6:ba:ea:8f:a0:bf:c1:bb:aa:f6:72:28:a5:10:9c:f0:74:e1: f5:b3:f9:b9:8a:90:b1:f2:fe:8f:96:ca:b4:2c:fb:c8:41:e5: cc:63:4e:2f:f1:03:d2:20:b1:04:ab:d0:25:12:54:a6:86:13: 8e:af:fe:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgAropSRX3MsvBppE/31PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZTU2ODQxN2Y1OWEyMTEyOWZiMjQ4N2Y1ZTU3YmMxNzE2 MzFmN2IwHhcNMjUxMjIxMjAwMDQ2WhcNMjUxMjIyMjAwMDQ2WjAzMTEwLwYDVQQD Eyg2MDZiNzdiODA5ZjE1NDI5ZGM2YmJiY2RhMDY0MzA1MjFhNmEyYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MhdV6aSWKLcrnXtRqoAxEXU93Fo GdCWpmmokuZN2hUgT9iiDiVXQtO1Lx9zugUGm9IXYOYUxpcCA2LEuvH2HTWzN5sS 63aRsxUMH+UkRzi3OeHtAB9PqsiZHfSqbMTWOYS05cZO17bO1GngseO7wCr3UDQn JW+r6HY+l2pOal+eYeRhIddoU79cnETirbppNz6ypPZqSaB4UDRqeftyIf8aslHu qZX183Cm3/z/74nnGsjHAvmHM4FRJ7u3Vix1NJPZcVdlgxfEHYKrIFY8JGo61lts B1z8z+m6KwcrbEVPrQDcZ4Ds9S4yubvBUkJ3yhGrnz6z5Q+i4QTAA1IIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBrd7gJ8VQp3Gu7zaBkMFIaaiuBMB8GA1UdIwQY MBaAFBflaEF/WaIRKfskh/Xle8FxYx97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYt OWUzZTlhYWZiY2U0LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYtOWUzZTlhYWZiY2U0 LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3WMu4mt u2TMoO32xfu4dlLJg3a1Jlnk2lRNZ8djGfe0ggEjKm8yFM/ZXajn/pRkXUOSVc4n LucBdKCIM/AYw8/Lls9/nBARW5wSsazSJS2PQYQfQhKQEVMDCpG3FaIsSr8dc50w opxMjkdGGgVePmoJUN3qEanmUUJHUoldzPK7eAvkpngDuOuNF7FsquLXANLO/ZiF sgq4ifRbxI5YTYWnBT5i/jBpOjvDYdqsMBjPF18VfL4F4vJt0kB3jDpogamFHhjj 5rrqj6C/wbuq9nIopRCc8HTh9bP5uYqQsfL+j5bKtCz7yEHlzGNOL/ED0iCxBKvQ JRJUpoYTjq/+Gw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:39 2025 by rpki-client