This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json) Hash identifier: b5T0EkzxgJyGAcXLc2e8C7Lkpmt1Y6t4IdgSrnannN4= Subject key identifier: CD:98:FE:18:76:6D:21:1E:BD:44:B9:11:A0:04:EF:2B:82:5B:22:78 Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757 Certificate serial: 019B410005ABD1DFCC27716DA50521037E8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft Manifest number: 02C5 Signing time: Sun 21 Dec 2025 13:01:19 +0000 Manifest this update: Sun 21 Dec 2025 13:01:19 +0000 Manifest next update: Mon 22 Dec 2025 13:01:19 +0000 Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=) 2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: O5I8wE83lTSH2jdWJPZ3Y9gDoqAZNz54ibgDh8id094=) 3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=) 4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:05:ab:d1:df:cc:27:71:6d:a5:05:21:03:7e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587f5478d1e94f240705722c3789076daf553757 Validity Not Before: Dec 21 13:01:19 2025 GMT Not After : Dec 22 13:01:19 2025 GMT Subject: CN=cd98fe18766d211ebd44b911a004ef2b825b2278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:77:59:50:0e:99:3d:05:1a:6e:65:fa:6b: 0e:e4:b3:ce:07:db:fc:4b:dc:68:81:f8:11:92:af: d6:2c:42:be:9d:30:98:d6:57:23:ab:d0:d2:78:c0: 4b:2a:5d:11:c5:f1:c4:d6:d8:f6:f0:90:0e:a0:d9: ae:7c:f0:04:9e:5a:29:00:1f:ef:bf:b6:e9:47:2c: 33:d7:d6:24:06:ea:19:94:1d:83:75:29:57:de:0f: 76:75:90:8c:63:88:96:4b:b7:f6:09:d2:6c:35:6b: 9e:78:1d:6c:01:19:ae:67:87:85:3e:0d:60:21:0a: e7:42:2c:ac:8c:cd:d4:aa:7f:f4:6d:2e:e4:55:4b: a7:bc:f3:e1:8b:30:5a:c4:0c:64:c3:6c:24:5f:1c: 08:55:f0:f3:16:98:6e:dd:57:95:1e:2a:86:b8:34: 0f:57:5f:33:4f:3b:e3:1c:1a:f0:99:69:46:c8:05: 3d:29:f7:3e:2d:5f:63:a6:12:39:1e:40:a2:1b:ba: 82:72:28:39:78:49:a3:61:25:ba:e3:6b:d0:f4:f2: b4:5c:17:02:e7:c4:b6:b4:55:50:d5:92:62:06:63: 45:54:81:db:57:b2:28:d0:d2:4a:37:6d:d5:c0:db: 6b:c0:9c:bf:a2:3c:d8:9f:65:3f:69:8e:77:a8:d9: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:98:FE:18:76:6D:21:1E:BD:44:B9:11:A0:04:EF:2B:82:5B:22:78 X509v3 Authority Key Identifier: keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b1:56:10:c6:ec:2e:c7:af:f7:10:3e:f8:cd:5e:ed:8e:ad: ad:3b:75:21:16:57:a4:bb:e5:55:56:c9:3e:00:22:b0:65:e2: 1a:e1:2a:37:c8:f5:bf:96:11:e8:50:b2:7e:4a:3b:6e:4a:1c: 4a:2f:8c:ef:e1:75:49:d6:7b:44:1c:ce:ba:82:0a:2e:52:4c: 4a:37:03:ec:d1:65:92:c1:d3:25:7b:31:e6:a8:a4:cd:0b:54: 99:79:ac:ba:08:cd:b4:d9:92:74:bc:57:22:9a:db:88:b3:68: a0:d3:8b:10:48:04:db:0d:e5:93:ec:5e:5a:bd:16:10:d4:90: 8c:63:07:89:09:d0:a1:3a:e4:6c:99:ee:ad:17:81:ea:85:ab: 6b:39:6e:c7:0e:ac:84:4f:3f:b2:4e:83:4a:7b:4a:ae:3d:e9: 29:1e:ac:80:db:c7:d1:d7:1d:cc:40:39:0a:d4:ea:d7:f8:8d: 68:41:aa:ec:fb:f8:58:79:cb:36:b5:66:8f:ac:ee:79:21:cb: b4:ee:ab:e1:e5:d1:81:bb:bb:6c:5d:03:ff:f6:6a:e4:7b:9d: 45:40:1a:56:30:a8:cd:9a:2a:76:9a:22:79:ff:e3:6c:0e:40: ef:f0:a2:23:f0:59:d7:69:fd:98:f6:d5:80:1a:77:c5:65:ad: 00:ac:d6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAAWr0d/MJ3FtpQUhA36PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4N2Y1NDc4ZDFlOTRmMjQwNzA1NzIyYzM3ODkwNzZkYWY1 NTM3NTcwHhcNMjUxMjIxMTMwMTE5WhcNMjUxMjIyMTMwMTE5WjAzMTEwLwYDVQQD EyhjZDk4ZmUxODc2NmQyMTFlYmQ0NGI5MTFhMDA0ZWYyYjgyNWIyMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCZ3WVAOmT0FGm5l+msO5LPOB9v8 S9xogfgRkq/WLEK+nTCY1lcjq9DSeMBLKl0RxfHE1tj28JAOoNmufPAEnlopAB/v v7bpRywz19YkBuoZlB2DdSlX3g92dZCMY4iWS7f2CdJsNWueeB1sARmuZ4eFPg1g IQrnQiysjM3Uqn/0bS7kVUunvPPhizBaxAxkw2wkXxwIVfDzFphu3VeVHiqGuDQP V18zTzvjHBrwmWlGyAU9Kfc+LV9jphI5HkCiG7qCcig5eEmjYSW642vQ9PK0XBcC 58S2tFVQ1ZJiBmNFVIHbV7Io0NJKN23VwNtrwJy/ojzYn2U/aY53qNlb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2Y/hh2bSEevUS5EaAE7yuCWyJ4MB8GA1UdIwQY MBaAFFh/VHjR6U8kBwVyLDeJB22vVTdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMt Y2YwMDk5ZTA3MmMzLzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMtY2YwMDk5ZTA3MmMz LzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLFWEMbs Lsev9xA++M1e7Y6trTt1IRZXpLvlVVbJPgAisGXiGuEqN8j1v5YR6FCyfko7bkoc Si+M7+F1SdZ7RBzOuoIKLlJMSjcD7NFlksHTJXsx5qikzQtUmXmsugjNtNmSdLxX IprbiLNooNOLEEgE2w3lk+xeWr0WENSQjGMHiQnQoTrkbJnurReB6oWrazluxw6s hE8/sk6DSntKrj3pKR6sgNvH0dcdzEA5CtTq1/iNaEGq7Pv4WHnLNrVmj6zueSHL tO6r4eXRgbu7bF0D//Zq5HudRUAaVjCozZoqdpoief/jbA5A7/CiI/BZ12n9mPbV gBp3xWWtAKzWAw== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:37 2025 by rpki-client