This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft File: F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft (raw, json) Hash identifier: l7NlytGmKocogPFH24tjdIxNet/st9aejP2AN6ZoGm8= Subject key identifier: AB:22:07:94:E5:A3:61:89:1B:78:FA:C2:79:09:63:55:56:55:73:A6 Authority key identifier: 17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B Certificate issuer: /CN=17e568417f59a21129fb2487f5e57bc171631f7b Certificate serial: 019AF1641077266CE921A4E1FECBA72CC30F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl (hash: 3GsLPbhwOtASpTy8uIuYt4vyWqtkESviWMJnNCgxq3E=) 2: MrFlnTciZWg6d5AqneKivrwpXHY.roa (hash: FLxls8UmKZo8IiJFx4AFIzBNESyxcnNxQs1Lj9129+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:10:77:26:6c:e9:21:a4:e1:fe:cb:a7:2c:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e568417f59a21129fb2487f5e57bc171631f7b Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=ab220794e5a361891b78fac279096355565573a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:91:6f:40:e1:59:db:6b:b6:e1:17:12:88: b9:38:8d:95:fc:b9:36:db:8c:c5:6d:26:c5:d0:6c: cf:50:72:fe:08:7a:54:9f:20:1f:41:ad:e1:4f:35: 9b:fe:5d:bf:30:f9:4f:db:95:e6:7e:4e:b0:17:6f: 76:5f:54:df:aa:b0:c0:62:33:82:f9:b5:70:11:18: f4:f9:17:69:ec:e6:5f:57:b4:ec:16:86:97:4c:e9: 29:9e:0c:04:5a:da:04:bb:e4:42:fd:38:c4:b1:4b: 0d:77:46:56:2d:e6:97:39:c8:1a:26:3c:dc:c2:56: 5e:be:39:86:d6:e3:0e:b2:cc:c9:c3:f6:88:b6:1e: 4d:f7:61:85:06:97:9f:af:aa:4b:d7:ee:d2:0c:98: dd:2c:08:90:15:30:37:29:3f:8a:44:fc:24:e7:39: c2:da:19:b9:0f:50:44:66:f6:4e:d1:e1:b5:9e:bd: 62:7f:36:0d:db:dd:4d:b3:f4:17:61:ca:db:e3:e5: 3b:08:43:1b:f5:10:5a:22:ed:60:75:8c:0b:f0:9d: 6e:cb:b9:f1:4d:d1:90:0b:8c:a6:67:9d:46:c1:23: a5:18:5e:9b:43:d5:f5:2d:13:51:bd:bf:32:97:82: f0:de:db:6d:c3:37:c0:67:50:aa:60:0f:df:d1:95: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:07:94:E5:A3:61:89:1B:78:FA:C2:79:09:63:55:56:55:73:A6 X509v3 Authority Key Identifier: keyid:17:E5:68:41:7F:59:A2:11:29:FB:24:87:F5:E5:7B:C1:71:63:1F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-VoQX9ZohEp-ySH9eV7wXFjH3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/00144f-85f3-4557-b1d6-9e3e9aafbce4/1/F-VoQX9ZohEp-ySH9eV7wXFjH3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:58:2e:46:f3:fc:b3:2b:6d:a9:7e:a4:e0:ac:c2:a7:c8:c4: 62:13:15:c8:60:ad:20:e6:11:02:57:29:a1:4e:a2:1f:ed:df: 6d:47:86:0c:f8:2b:50:6e:71:84:ff:73:6f:d3:c5:a9:9b:cf: f2:f7:c1:5a:85:ee:65:b1:f3:25:8e:db:9a:d5:db:1b:94:a1: 0d:c5:59:37:68:ec:5a:ce:d4:be:92:de:94:00:1a:e5:ef:ff: db:89:a6:e9:c2:f7:cc:3c:6a:05:b2:19:5c:16:b2:c1:27:6b: f7:87:c6:2e:a6:24:94:7b:16:4e:3e:2d:53:1e:f4:eb:5b:26: 1d:3e:96:a4:98:27:4c:1b:57:f8:ad:5b:81:ec:44:e2:86:d7: b6:38:65:38:3f:d1:1d:1f:61:85:fb:a1:4b:b6:36:48:be:6a: 3c:88:a7:85:1b:f6:b7:1e:9d:99:76:a7:ac:c1:ca:45:c9:36: 2d:6a:a3:ce:58:85:c7:f1:21:2a:ff:10:1f:9f:2a:bb:76:ea: 6b:be:af:4f:63:5b:ec:a5:9b:62:db:1d:90:19:07:4b:21:6b: 5f:64:ef:af:17:75:f5:60:52:37:fc:ae:2a:ac:67:03:b1:f1: 7a:5b:f1:50:de:ff:33:53:51:c1:2d:45:f5:c4:68:9d:f4:b8: 77:52:1d:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBB3JmzpIaTh/sunLMMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZTU2ODQxN2Y1OWEyMTEyOWZiMjQ4N2Y1ZTU3YmMxNzE2 MzFmN2IwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD EyhhYjIyMDc5NGU1YTM2MTg5MWI3OGZhYzI3OTA5NjM1NTU2NTU3M2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L2Rb0DhWdtrtuEXEoi5OI2V/Lk2 24zFbSbF0GzPUHL+CHpUnyAfQa3hTzWb/l2/MPlP25Xmfk6wF292X1TfqrDAYjOC +bVwERj0+Rdp7OZfV7TsFoaXTOkpngwEWtoEu+RC/TjEsUsNd0ZWLeaXOcgaJjzc wlZevjmG1uMOsszJw/aIth5N92GFBpefr6pL1+7SDJjdLAiQFTA3KT+KRPwk5znC 2hm5D1BEZvZO0eG1nr1ifzYN291Ns/QXYcrb4+U7CEMb9RBaIu1gdYwL8J1uy7nx TdGQC4ymZ51GwSOlGF6bQ9X1LRNRvb8yl4Lw3tttwzfAZ1CqYA/f0ZUlEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsiB5Tlo2GJG3j6wnkJY1VWVXOmMB8GA1UdIwQY MBaAFBflaEF/WaIRKfskh/Xle8FxYx97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYt OWUzZTlhYWZiY2U0LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wMDE0NGYtODVmMy00NTU3LWIxZDYtOWUzZTlhYWZiY2U0 LzEvRi1Wb1FYOVpvaEVwLXlTSDllVjd3WEZqSDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1guRvP8 syttqX6k4KzCp8jEYhMVyGCtIOYRAlcpoU6iH+3fbUeGDPgrUG5xhP9zb9PFqZvP 8vfBWoXuZbHzJY7bmtXbG5ShDcVZN2jsWs7UvpLelAAa5e//24mm6cL3zDxqBbIZ XBaywSdr94fGLqYklHsWTj4tUx7061smHT6WpJgnTBtX+K1bgexE4obXtjhlOD/R HR9hhfuhS7Y2SL5qPIinhRv2tx6dmXanrMHKRck2LWqjzliFx/EhKv8QH58qu3bq a76vT2Nb7KWbYtsdkBkHSyFrX2Tvrxd19WBSN/yuKqxnA7HxelvxUN7/M1NRwS1F 9cRonfS4d1IdoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:52 2025 by rpki-client