This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft File: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json) Hash identifier: 9X3OK+MmgWjTbM9Ly4CpE038m/KI2K7YWBLeZ1rw+sM= Subject key identifier: 60:44:7C:F8:77:A2:4B:CD:AA:AE:2B:F3:91:5C:FA:C9:55:A4:EE:CC Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a Certificate serial: 019B397CD7C12D634B14AE0DC490A29AA957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 02:00:41 +0000 Manifest this update: Sat 20 Dec 2025 02:00:41 +0000 Manifest next update: Sun 21 Dec 2025 02:00:41 +0000 Files and hashes: 1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: 5Txrw4uhykwOA0XNWjqQy+41a/5P/iJBDqyrLcV8fXQ=) 2: zHqxbQjsVxET0tUTd0EOVp1axi0.roa (hash: 8HunWpHIu087fvWko+Ptb+/I6KzvPWrDFWZjAoDfaKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:d7:c1:2d:63:4b:14:ae:0d:c4:90:a2:9a:a9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871720a8884167fef82a49267661fb346d7561a Validity Not Before: Dec 20 02:00:41 2025 GMT Not After : Dec 21 02:00:41 2025 GMT Subject: CN=60447cf877a24bcdaaae2bf3915cfac955a4eecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:16:ad:34:bc:78:64:02:bb:8a:9b:7d:e0: 7d:85:16:db:2a:b4:03:72:ce:a5:8e:1b:db:6f:35: e2:ca:c7:55:38:ad:a0:6f:9d:94:ab:7b:df:dc:99: 56:a2:ef:5d:e4:20:33:93:1a:1e:63:7e:57:5c:ca: 8e:f9:6e:28:13:28:a5:1c:02:b0:c3:b1:03:f2:40: a6:94:8c:e6:16:a4:16:02:22:19:93:ee:01:85:00: 45:d8:6a:bb:7a:5e:1f:0a:ec:01:bc:f7:a1:27:8b: b8:26:5f:fe:ad:22:06:9d:7f:bd:45:3d:ed:5d:72: c8:04:4e:cd:8e:b8:bd:0d:12:93:fd:ab:8f:31:e8: d7:49:46:51:62:c8:a6:54:b2:0e:49:b7:19:5e:83: be:7a:cc:39:82:6a:2e:7a:38:c1:ba:fa:8c:14:c1: 80:44:02:e9:7c:32:13:a2:0e:66:58:36:ea:f0:9d: 84:6b:d3:34:a4:65:a6:40:ff:05:52:2f:aa:4d:ef: 05:ec:1a:5e:73:ef:8e:f0:08:32:68:26:dc:cc:7c: 37:8f:4a:9d:3b:55:b9:75:2c:91:0f:fc:e1:62:1b: e6:1f:03:f5:df:84:b7:76:c4:1b:e1:7a:3d:ff:48: 32:bf:da:d5:97:c1:49:2a:0f:20:93:10:dd:01:7b: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:44:7C:F8:77:A2:4B:CD:AA:AE:2B:F3:91:5C:FA:C9:55:A4:EE:CC X509v3 Authority Key Identifier: keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:59:d3:ce:5e:18:8e:61:e3:8f:e9:c4:f6:62:e1:cd:87:6d: ea:6b:75:1f:47:f9:6f:b3:a5:f0:ea:0b:50:27:d5:4f:f4:ed: 32:4f:57:b5:cb:cc:5c:19:5f:4f:cf:3b:46:81:9a:51:56:1a: 53:46:e5:1d:62:ba:c8:3d:7a:f4:c1:51:15:9a:63:36:13:ea: 4d:1c:c2:08:7e:be:a1:13:ed:2b:b3:9b:6f:9a:e0:d4:0f:ca: 77:17:89:d4:83:be:f2:ce:aa:93:9a:1d:b3:c4:5c:dd:81:03: ac:c5:52:d6:50:39:f0:96:28:f3:83:c2:e6:7a:e6:03:b5:53: 3d:54:98:1e:3d:0f:90:f1:be:a2:c2:bb:bb:a4:3a:38:fb:31: 34:f8:b8:c8:24:03:04:e3:96:24:f8:cb:1c:0f:0d:73:82:45: 9f:63:15:a7:a1:a8:ac:7e:d3:35:ad:d5:5e:12:9b:d4:43:80: 22:b1:d5:2e:35:99:44:d5:23:70:e8:71:9b:27:84:6e:10:76: c7:0b:3c:9e:21:18:0b:99:10:48:0c:44:68:b1:bf:36:d9:31: 18:f8:ae:39:12:91:dd:1d:1d:50:e5:17:40:00:24:70:e5:6b: 39:a0:b2:00:be:f0:49:fb:f3:9b:9d:a1:9f:64:84:1a:43:0c: 2e:10:bd:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fNfBLWNLFK4NxJCimqlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NzE3MjBhODg4NDE2N2ZlZjgyYTQ5MjY3NjYxZmIzNDZk NzU2MWEwHhcNMjUxMjIwMDIwMDQxWhcNMjUxMjIxMDIwMDQxWjAzMTEwLwYDVQQD Eyg2MDQ0N2NmODc3YTI0YmNkYWFhZTJiZjM5MTVjZmFjOTU1YTRlZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSYWrTS8eGQCu4qbfeB9hRbbKrQD cs6ljhvbbzXiysdVOK2gb52Uq3vf3JlWou9d5CAzkxoeY35XXMqO+W4oEyilHAKw w7ED8kCmlIzmFqQWAiIZk+4BhQBF2Gq7el4fCuwBvPehJ4u4Jl/+rSIGnX+9RT3t XXLIBE7Njri9DRKT/auPMejXSUZRYsimVLIOSbcZXoO+esw5gmouejjBuvqMFMGA RALpfDITog5mWDbq8J2Ea9M0pGWmQP8FUi+qTe8F7Bpec++O8AgyaCbczHw3j0qd O1W5dSyRD/zhYhvmHwP134S3dsQb4Xo9/0gyv9rVl8FJKg8gkxDdAXtlhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBEfPh3okvNqq4r85Fc+slVpO7MMB8GA1UdIwQY MBaAFFhxcgqIhBZ/74KkkmdmH7NG11YaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYt N2RhODljZGE5ZjcxLzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYtN2RhODljZGE5Zjcx LzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzVnTzl4Y jmHjj+nE9mLhzYdt6mt1H0f5b7Ol8OoLUCfVT/TtMk9XtcvMXBlfT887RoGaUVYa U0blHWK6yD169MFRFZpjNhPqTRzCCH6+oRPtK7Obb5rg1A/KdxeJ1IO+8s6qk5od s8Rc3YEDrMVS1lA58JYo84PC5nrmA7VTPVSYHj0PkPG+osK7u6Q6OPsxNPi4yCQD BOOWJPjLHA8Nc4JFn2MVp6GorH7TNa3VXhKb1EOAIrHVLjWZRNUjcOhxmyeEbhB2 xws8niEYC5kQSAxEaLG/NtkxGPiuORKR3R0dUOUXQAAkcOVrOaCyAL7wSfvzm52h n2SEGkMMLhC97w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:04:08 2025 by rpki-client