This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft File: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json) Hash identifier: ge5vMtvbvfOvDbctDCV06nbhnpxRO9BCchA93Kh131E= Subject key identifier: 9B:85:F7:39:DC:99:CE:80:0C:3E:F9:ED:69:6F:63:05:C8:6A:5C:DC Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3 Certificate issuer: /CN=179661a164d2d517ea7677fb229cafa19eba97f3 Certificate serial: 019B3AFDDADA6FA5A53AC4C98DC678A1C42A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 09:01:13 +0000 Manifest this update: Sat 20 Dec 2025 09:01:13 +0000 Manifest next update: Sun 21 Dec 2025 09:01:13 +0000 Files and hashes: 1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: 5FUoie22TZ+qP6jx9TtajdIKtEPHz5tO6S+sjgORQsw=) 2: WmJngWZzmKvAdcCFlnXZaxyPpiY.roa (hash: uKArgllEdQakrvIrUr4Tsros7JNu1glQJvvnJhzoD8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:da:da:6f:a5:a5:3a:c4:c9:8d:c6:78:a1:c4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3 Validity Not Before: Dec 20 09:01:13 2025 GMT Not After : Dec 21 09:01:13 2025 GMT Subject: CN=9b85f739dc99ce800c3ef9ed696f6305c86a5cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1f:ff:6d:c6:c9:80:cf:d3:92:ad:05:f0:01: a8:15:57:3f:94:28:9f:16:bb:a2:81:74:b7:1a:9a: 63:70:4e:a4:68:09:6a:69:6c:f8:f9:a6:ca:66:9d: 77:d1:4e:da:81:c4:e2:cc:f9:d7:43:e0:83:ba:b3: e8:21:e6:ee:62:be:3d:5f:63:86:81:94:f0:d0:8f: f5:a6:06:44:0c:1e:25:0a:aa:cd:17:e6:39:e7:5d: 95:d5:7f:70:05:bc:2a:45:b3:f3:d3:e1:53:30:83: 4c:d6:0c:59:61:4a:88:b8:c0:10:5a:ae:8f:8a:06: 35:12:2c:38:b2:31:a5:01:c3:10:6a:f8:64:8b:21: 23:22:31:a3:02:64:c2:4f:f2:2a:95:ec:91:bc:35: de:2b:34:f6:95:92:a4:2a:55:90:a4:a4:b0:ec:66: f7:e4:d2:4f:9f:92:3c:0b:68:7a:dc:c6:b7:cb:7a: b5:7a:30:64:ab:05:46:5d:b8:85:4c:f7:ed:3e:19: 5e:aa:7f:65:ff:91:79:02:44:70:72:33:e3:4a:cb: 2a:26:4e:15:6b:57:e8:e8:62:bf:8b:38:5c:ef:fa: a9:83:f5:50:9b:c5:bd:46:df:7c:d1:bc:80:07:95: 3d:55:3e:3f:fd:00:18:a2:d8:68:ad:24:7c:4f:61: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:F7:39:DC:99:CE:80:0C:3E:F9:ED:69:6F:63:05:C8:6A:5C:DC X509v3 Authority Key Identifier: keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2e:02:49:73:f9:e1:65:d0:b2:c9:0a:1d:54:0b:1b:c8:88: c6:74:a4:9e:14:bb:80:3f:22:d3:70:55:90:9e:c8:92:c3:80: a4:5f:d3:3d:dd:3a:96:d9:93:25:92:e8:70:c6:a6:a3:df:f7: 48:cf:39:e7:2b:56:fe:73:66:36:26:f2:c6:df:b3:a6:b5:98: 0a:d8:a9:be:eb:eb:2c:f8:ab:16:84:be:a9:39:4e:c9:82:bc: ea:79:b4:00:e6:1e:18:74:69:62:d9:9d:70:04:47:34:92:a9: 91:7c:fc:d1:96:99:e3:47:26:44:1a:06:c3:d6:d6:a4:d7:75: d4:0c:76:82:dd:6e:5b:7c:58:9d:6e:a3:d9:52:7a:da:0b:f1: f5:31:47:59:66:14:0b:7b:89:01:30:7d:79:ba:77:f2:b7:f8: 36:f1:49:9d:76:9e:a9:e5:d6:de:9e:06:55:a4:f9:6c:ef:37: 14:42:84:8d:75:0c:7f:2a:60:1e:b5:fa:fb:85:85:83:c9:bd: 16:15:19:5b:0d:f7:02:0c:af:15:db:56:29:2d:69:72:bb:b7: a3:9b:44:43:e3:5c:8a:67:e6:c2:7b:0b:0b:61:d8:28:fc:50: 8e:3d:24:c0:6d:da:0b:73:e0:13:4a:30:08:cd:08:63:e9:4c: 1c:5a:57:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/drab6WlOsTJjcZ4ocQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTY2MWExNjRkMmQ1MTdlYTc2NzdmYjIyOWNhZmExOWVi YTk3ZjMwHhcNMjUxMjIwMDkwMTEzWhcNMjUxMjIxMDkwMTEzWjAzMTEwLwYDVQQD Eyg5Yjg1ZjczOWRjOTljZTgwMGMzZWY5ZWQ2OTZmNjMwNWM4NmE1Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx//bcbJgM/Tkq0F8AGoFVc/lCif FruigXS3GppjcE6kaAlqaWz4+abKZp130U7agcTizPnXQ+CDurPoIebuYr49X2OG gZTw0I/1pgZEDB4lCqrNF+Y5512V1X9wBbwqRbPz0+FTMINM1gxZYUqIuMAQWq6P igY1Eiw4sjGlAcMQavhkiyEjIjGjAmTCT/IqleyRvDXeKzT2lZKkKlWQpKSw7Gb3 5NJPn5I8C2h63Ma3y3q1ejBkqwVGXbiFTPftPhleqn9l/5F5AkRwcjPjSssqJk4V a1fo6GK/izhc7/qpg/VQm8W9Rt980byAB5U9VT4//QAYothorSR8T2Fe6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuF9zncmc6ADD757WlvYwXIalzcMB8GA1UdIwQY MBaAFBeWYaFk0tUX6nZ3+yKcr6GeupfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUt ZTRmMmUwYjIzNTBmLzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUtZTRmMmUwYjIzNTBm LzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC4CSXP5 4WXQsskKHVQLG8iIxnSknhS7gD8i03BVkJ7IksOApF/TPd06ltmTJZLocMamo9/3 SM855ytW/nNmNibyxt+zprWYCtipvuvrLPirFoS+qTlOyYK86nm0AOYeGHRpYtmd cARHNJKpkXz80ZaZ40cmRBoGw9bWpNd11Ax2gt1uW3xYnW6j2VJ62gvx9TFHWWYU C3uJATB9ebp38rf4NvFJnXaeqeXW3p4GVaT5bO83FEKEjXUMfypgHrX6+4WFg8m9 FhUZWw33AgyvFdtWKS1pcru3o5tEQ+NcimfmwnsLC2HYKPxQjj0kwG3aC3PgE0ow CM0IY+lMHFpXrw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:59:06 2025 by rpki-client