This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json) Hash identifier: CES+ayxFx34AfpbbIGw4E+GI+NYGxs7/OMMwwDmo9bU= Subject key identifier: E7:F9:85:03:2A:49:D4:F9:48:02:15:83:B8:5E:3D:E4:14:0F:27:C5 Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d Certificate serial: 019B3757F85BD02E61450E8412C90C5680F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft Manifest number: 0C58 Signing time: Fri 19 Dec 2025 16:01:10 +0000 Manifest this update: Fri 19 Dec 2025 16:01:10 +0000 Manifest next update: Sat 20 Dec 2025 16:01:10 +0000 Files and hashes: 1: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (hash: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=) 2: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: thOt9AWs4J51sprWyrqZLt810gWSIHitPcAzGZaNNg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:f8:5b:d0:2e:61:45:0e:84:12:c9:0c:56:80:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1a31909780e81734af6607272d18525db7657d Validity Not Before: Dec 19 16:01:10 2025 GMT Not After : Dec 20 16:01:10 2025 GMT Subject: CN=e7f985032a49d4f948021583b85e3de4140f27c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:d8:7f:56:57:0c:8c:c4:7d:a8:27:18:94: 12:15:30:20:c8:5d:d0:0d:c4:3d:d8:ac:54:d8:0e: bb:0c:b8:b1:76:37:03:a5:99:e7:08:ce:42:c7:59: 72:85:78:e9:ba:16:15:c7:aa:c7:28:62:f6:1d:d1: 96:e6:d7:73:de:15:83:3b:40:71:01:a2:03:7c:c9: 81:89:fa:32:ad:db:b9:59:03:58:f9:a1:0f:df:b5: c0:9a:14:b5:4e:79:eb:00:b6:42:06:4f:c1:21:6d: 25:ff:98:78:5d:96:d4:33:16:30:96:f2:0f:da:96: 3c:d7:0b:c9:0c:77:76:10:c2:45:d9:01:00:41:5d: 5b:9a:af:8a:cc:4b:78:42:9b:75:ab:61:85:52:1b: 0a:2d:e1:9e:6d:ff:ab:57:ce:61:41:e0:34:c3:61: c2:3a:a5:77:b1:12:67:b6:e9:08:52:88:d4:56:58: fa:98:04:e5:d7:0f:e8:fe:f5:52:a1:43:42:55:86: 43:c0:e9:68:85:f8:ca:ef:49:27:43:0a:4f:5d:12: 76:e8:b4:bc:d5:89:11:d8:bd:c5:97:4c:8f:ac:fa: 77:4f:ed:38:18:ab:3c:f8:5a:4d:a6:31:ee:fc:10: e0:da:6f:6c:54:8a:26:0c:7f:16:f5:89:91:d7:79: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F9:85:03:2A:49:D4:F9:48:02:15:83:B8:5E:3D:E4:14:0F:27:C5 X509v3 Authority Key Identifier: keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:67:86:50:66:34:ea:d3:c8:02:ac:5a:f4:18:6b:77:a4:64: 7a:1d:8b:d3:d7:76:09:08:9e:5e:ea:64:9f:97:5d:4e:82:c7: 2b:f1:75:60:dd:98:be:d7:b1:4e:9d:9a:72:a1:c4:2e:4d:5a: eb:81:06:1c:87:9c:48:8a:71:37:ec:52:9e:0c:e3:1b:31:34: 16:70:5e:05:73:8b:f9:6d:14:f8:35:35:32:d4:52:8e:22:13: d0:fd:8d:e1:ba:30:0e:bd:24:0c:62:0c:9a:d0:89:4b:98:be: 46:20:06:31:a7:8d:9e:4d:0b:8f:7d:35:d2:12:e9:47:99:c0: 7a:09:37:ff:4e:db:00:78:ee:c2:10:29:56:2d:d5:88:53:2e: 8c:97:9a:6c:e4:96:74:4c:ac:c7:3a:32:f5:92:89:9a:f3:b3: b7:b3:f6:81:65:f7:3a:64:e8:09:ee:5e:a3:be:e3:1c:fb:0a: 01:e8:70:bd:fa:cf:01:f3:c2:0b:72:d4:6f:dd:63:f9:29:b9: fd:8b:9c:c4:a6:c8:43:a4:9d:39:d6:ee:62:96:d1:c6:59:87: 0c:bf:d8:14:0f:72:50:e4:f3:32:a1:a4:50:e3:73:33:f1:80: 08:10:52:25:9c:bf:27:33:ee:9e:40:b4:5e:cb:9a:aa:67:81: 63:9e:3e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V/hb0C5hRQ6EEskMVoD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWEzMTkwOTc4MGU4MTczNGFmNjYwNzI3MmQxODUyNWRi NzY1N2QwHhcNMjUxMjE5MTYwMTEwWhcNMjUxMjIwMTYwMTEwWjAzMTEwLwYDVQQD EyhlN2Y5ODUwMzJhNDlkNGY5NDgwMjE1ODNiODVlM2RlNDE0MGYyN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxDYf1ZXDIzEfagnGJQSFTAgyF3Q DcQ92KxU2A67DLixdjcDpZnnCM5Cx1lyhXjpuhYVx6rHKGL2HdGW5tdz3hWDO0Bx AaIDfMmBifoyrdu5WQNY+aEP37XAmhS1TnnrALZCBk/BIW0l/5h4XZbUMxYwlvIP 2pY81wvJDHd2EMJF2QEAQV1bmq+KzEt4Qpt1q2GFUhsKLeGebf+rV85hQeA0w2HC OqV3sRJntukIUojUVlj6mATl1w/o/vVSoUNCVYZDwOlohfjK70knQwpPXRJ26LS8 1YkR2L3Fl0yPrPp3T+04GKs8+FpNpjHu/BDg2m9sVIomDH8W9YmR13n6YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf5hQMqSdT5SAIVg7hePeQUDyfFMB8GA1UdIwQY MBaAFFoaMZCXgOgXNK9mByctGFJdt2V9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQt Mjc1MmIzNzU5MDY2LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQtMjc1MmIzNzU5MDY2 LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGeGUGY0 6tPIAqxa9Bhrd6Rkeh2L09d2CQieXupkn5ddToLHK/F1YN2YvtexTp2acqHELk1a 64EGHIecSIpxN+xSngzjGzE0FnBeBXOL+W0U+DU1MtRSjiIT0P2N4bowDr0kDGIM mtCJS5i+RiAGMaeNnk0Lj3010hLpR5nAegk3/07bAHjuwhApVi3ViFMujJeabOSW dEysxzoy9ZKJmvOzt7P2gWX3OmToCe5eo77jHPsKAehwvfrPAfPCC3LUb91j+Sm5 /YucxKbIQ6SdOdbuYpbRxlmHDL/YFA9yUOTzMqGkUONzM/GACBBSJZy/JzPunkC0 XsuaqmeBY54+XQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:57:58 2025 by rpki-client