This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft File: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json) Hash identifier: vuM35o3FYETB8g3E+5Ne5TWVVKvtd9/Pxi0SZygkkhs= Subject key identifier: CA:13:7E:8F:28:C2:4B:B3:05:E8:D2:CF:6C:A3:9A:36:EA:7C:23:1E Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3 Certificate issuer: /CN=179661a164d2d517ea7677fb229cafa19eba97f3 Certificate serial: 019B6B4596B0A1443BA7FD194B39BD252FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 18:01:21 +0000 Manifest this update: Mon 29 Dec 2025 18:01:21 +0000 Manifest next update: Tue 30 Dec 2025 18:01:21 +0000 Files and hashes: 1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: O/75B5kSXr4MiwL58G2Kg3VRX9p9uAme1pMSJ2M9gvw=) 2: WmJngWZzmKvAdcCFlnXZaxyPpiY.roa (hash: uKArgllEdQakrvIrUr4Tsros7JNu1glQJvvnJhzoD8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:96:b0:a1:44:3b:a7:fd:19:4b:39:bd:25:2f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3 Validity Not Before: Dec 29 18:01:21 2025 GMT Not After : Dec 30 18:01:21 2025 GMT Subject: CN=ca137e8f28c24bb305e8d2cf6ca39a36ea7c231e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:25:ef:91:b2:24:2a:80:92:0c:69:bd:80:d0: ae:72:ea:68:4f:8e:bc:a5:c1:fe:89:89:4a:a0:c4: 0f:f8:47:d0:f9:6a:d9:bd:5a:14:73:80:6d:a3:9f: 57:87:b9:e6:18:42:ba:fb:6e:6f:35:2e:9e:64:5f: 9c:ca:0d:8f:21:dd:59:21:bd:c6:da:82:a9:46:b5: fe:3c:7a:c0:52:ce:f3:c4:18:a0:84:f2:d3:f3:68: d5:13:6c:de:03:90:63:b3:7d:e0:91:3d:e8:34:49: 85:b9:07:c9:6f:e2:e4:1c:14:d7:c9:79:9e:c5:32: 3c:5b:62:f4:ba:8b:68:0d:b1:dc:08:23:16:33:1c: fb:2d:bf:d7:15:36:ee:b7:92:0a:8d:1a:9f:85:a7: 37:ca:b2:38:c8:1a:9c:c0:67:f4:c6:44:a2:35:5b: 8b:89:4b:f7:8d:32:e2:0e:ba:b1:a4:ef:ef:73:e4: a9:d8:33:3e:fe:49:d7:d5:13:23:1e:ea:f7:ae:86: fb:89:85:99:05:eb:ab:86:4b:9c:cf:8c:09:e2:a6: e5:4d:e0:8c:8a:2e:03:9f:45:09:7d:26:cb:f5:d5: eb:29:db:b4:02:65:94:59:fd:9c:ef:8f:48:6e:5f: 8b:e3:1c:71:bd:7a:d9:e1:4e:f2:fe:92:13:27:d0: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:7E:8F:28:C2:4B:B3:05:E8:D2:CF:6C:A3:9A:36:EA:7C:23:1E X509v3 Authority Key Identifier: keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e5:5a:95:10:aa:6b:5b:db:b9:0d:33:ff:45:6f:8f:d9:cb: ad:01:4c:42:50:07:f8:03:24:c7:37:7e:60:f2:4f:01:fc:44: cb:a6:b2:bb:15:fb:ea:39:d4:57:00:4f:b7:9a:03:b2:69:6c: 65:d1:10:5a:9c:87:68:58:0d:84:96:c6:d0:6c:c9:0b:d4:7d: 9a:be:6f:4a:89:a3:ca:2a:0d:3e:4d:34:3a:c2:b5:6a:ae:00: f6:9a:3d:f4:d7:5e:a2:ce:e6:d0:84:ea:8a:c1:89:03:55:20: ad:ee:f3:d7:ef:69:45:5c:27:a3:96:70:af:b6:4f:77:a5:48: 35:4e:ea:3f:a0:ce:e1:a3:c0:67:36:72:e7:b2:7d:9e:2f:85: 55:29:03:88:cb:ca:d3:06:a2:e8:b1:e3:c8:b8:2c:56:60:cd: fe:91:0b:0d:7f:30:d6:6c:a0:60:18:22:50:1e:c6:fd:b9:5c: 84:e0:00:fb:d7:76:68:9e:1c:6b:7a:28:52:fa:8a:5e:18:19: 67:12:87:c0:18:97:42:da:35:e7:20:78:ea:32:17:aa:56:75: 01:86:0a:a0:2f:f5:e6:ac:bd:b5:1f:a7:0f:b9:4f:3d:d5:39: 5e:0d:ba:7c:4b:69:66:4f:20:48:fc:55:a6:13:c6:84:9d:59: 7c:87:81:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRZawoUQ7p/0ZSzm9JS/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTY2MWExNjRkMmQ1MTdlYTc2NzdmYjIyOWNhZmExOWVi YTk3ZjMwHhcNMjUxMjI5MTgwMTIxWhcNMjUxMjMwMTgwMTIxWjAzMTEwLwYDVQQD EyhjYTEzN2U4ZjI4YzI0YmIzMDVlOGQyY2Y2Y2EzOWEzNmVhN2MyMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iXvkbIkKoCSDGm9gNCucupoT468 pcH+iYlKoMQP+EfQ+WrZvVoUc4Bto59Xh7nmGEK6+25vNS6eZF+cyg2PId1ZIb3G 2oKpRrX+PHrAUs7zxBighPLT82jVE2zeA5Bjs33gkT3oNEmFuQfJb+LkHBTXyXme xTI8W2L0uotoDbHcCCMWMxz7Lb/XFTbut5IKjRqfhac3yrI4yBqcwGf0xkSiNVuL iUv3jTLiDrqxpO/vc+Sp2DM+/knX1RMjHur3rob7iYWZBeurhkucz4wJ4qblTeCM ii4Dn0UJfSbL9dXrKdu0AmWUWf2c749Ibl+L4xxxvXrZ4U7y/pITJ9CtvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoTfo8owkuzBejSz2yjmjbqfCMeMB8GA1UdIwQY MBaAFBeWYaFk0tUX6nZ3+yKcr6GeupfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUt ZTRmMmUwYjIzNTBmLzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUtZTRmMmUwYjIzNTBm LzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeValRCq a1vbuQ0z/0Vvj9nLrQFMQlAH+AMkxzd+YPJPAfxEy6ayuxX76jnUVwBPt5oDsmls ZdEQWpyHaFgNhJbG0GzJC9R9mr5vSomjyioNPk00OsK1aq4A9po99Ndeos7m0ITq isGJA1Ugre7z1+9pRVwno5Zwr7ZPd6VINU7qP6DO4aPAZzZy57J9ni+FVSkDiMvK 0wai6LHjyLgsVmDN/pELDX8w1mygYBgiUB7G/blchOAA+9d2aJ4ca3ooUvqKXhgZ ZxKHwBiXQto15yB46jIXqlZ1AYYKoC/15qy9tR+nD7lPPdU5Xg26fEtpZk8gSPxV phPGhJ1ZfIeB9Q== -----END CERTIFICATE-----Generated at Mon Dec 29 22:38:28 2025 by rpki-client