This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json) Hash identifier: WRUndPDXY8eD0B4MnnPK21AjSoESUYknczwBEGOuP9w= Subject key identifier: 0A:00:A5:3D:1A:AD:02:58:09:15:64:52:3C:0C:FE:B7:F1:8D:AD:45 Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d Certificate serial: 019B7A4ADE56B1B19DF0A5E0414727A13530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft Manifest number: 1770 Signing time: Thu 01 Jan 2026 16:01:25 +0000 Manifest this update: Thu 01 Jan 2026 16:01:25 +0000 Manifest next update: Fri 02 Jan 2026 16:01:25 +0000 Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: sqfdUsXpXwbE++9zd0A8QbmQyPdTvGn8im709Cc+b9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:de:56:b1:b1:9d:f0:a5:e0:41:47:27:a1:35:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d Validity Not Before: Jan 1 16:01:25 2026 GMT Not After : Jan 2 16:01:25 2026 GMT Subject: CN=0a00a53d1aad0258091564523c0cfeb7f18dad45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:b1:e7:93:94:f2:67:cd:f2:c4:80:68:8b: dd:66:0e:bb:20:e7:96:45:f9:ca:ea:61:3f:0c:c5: 96:d3:99:66:92:78:6a:0e:ca:42:8b:d3:06:aa:8a: d6:72:bb:d7:a8:d7:50:bd:36:e8:75:25:83:a3:bd: 02:49:28:81:4a:39:d0:a3:06:ab:5c:f4:02:c1:99: 6e:68:fd:ba:09:96:8f:07:e5:30:b3:f6:0e:5b:c1: 81:f7:b9:c4:cc:cf:67:f2:b7:9f:5b:73:99:48:d8: e3:47:77:21:ab:2e:10:ff:7f:81:73:04:6e:82:ed: b0:df:64:18:07:1f:74:19:d0:25:29:c1:f0:14:f0: 03:8f:7b:82:a1:4f:1b:c3:c2:c6:f7:de:69:60:6b: 99:2f:f0:c3:be:df:4d:f4:f5:0b:4b:b7:99:76:6f: 6f:34:bc:35:f0:f7:d9:45:c5:ee:a4:1f:fd:af:9d: e8:16:54:5f:ee:96:74:36:20:3d:af:95:77:d8:bb: 35:e8:3f:96:82:01:87:f3:e3:db:ca:df:da:ef:f2: aa:0e:58:e4:ce:76:e1:93:4a:af:b2:93:12:e8:1f: 09:ce:12:fd:e5:f3:32:0a:a1:6e:14:7d:c3:41:a5: b3:76:d8:5c:0a:39:86:9d:4d:e0:5a:7c:22:7b:87: c4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:00:A5:3D:1A:AD:02:58:09:15:64:52:3C:0C:FE:B7:F1:8D:AD:45 X509v3 Authority Key Identifier: keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c8:77:27:bf:ca:16:e6:e7:7a:e4:84:d7:d8:fd:f0:3a:84: d5:de:93:f8:72:1e:30:a4:93:02:a6:0e:ca:c7:7d:66:06:75: 87:30:c9:6e:9d:ba:06:10:4c:05:92:41:67:ca:5c:fe:ab:53: 9e:01:4f:36:e6:38:b2:de:fa:f5:6c:0f:19:f9:3b:f7:e2:f2: 71:7d:10:f5:0d:75:bd:4c:39:de:52:ce:68:b7:89:c1:f3:4b: b3:85:d9:a7:ca:65:95:77:68:39:ec:b1:36:f7:d8:f1:d0:ee: 46:6f:61:42:84:00:dd:1e:5e:cd:2e:a3:d4:de:d2:74:05:09: 8b:98:b8:5a:7b:4a:8e:61:e0:41:04:96:33:65:88:28:fc:bb: ba:42:ca:26:3b:b6:1e:1e:fc:a1:55:10:f1:c4:60:1d:bb:9a: fc:45:3f:2e:27:81:04:64:49:c6:0c:dd:28:62:12:04:c4:f1: b8:63:c4:40:8a:e7:e4:f0:9f:f5:f6:36:ca:0e:01:58:db:0c: 03:05:fc:b0:ef:2d:10:4d:27:11:63:d1:ca:07:3e:e6:b4:3d: 7d:22:d8:a6:25:11:28:3b:72:d7:49:2c:ba:a1:4e:b1:0c:71: e0:43:37:5e:95:1f:98:a4:83:ab:09:b3:4c:60:9b:ef:4a:a7: 3e:7d:3d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6St5WsbGd8KXgQUcnoTUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTU2ODE5OWQyOTIzOWEyNzQ1YWQ0M2I2OTZmYmRjMmUw NjcwNmQwHhcNMjYwMTAxMTYwMTI1WhcNMjYwMTAyMTYwMTI1WjAzMTEwLwYDVQQD EygwYTAwYTUzZDFhYWQwMjU4MDkxNTY0NTIzYzBjZmViN2YxOGRhZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojqx55OU8mfN8sSAaIvdZg67IOeW RfnK6mE/DMWW05lmknhqDspCi9MGqorWcrvXqNdQvTbodSWDo70CSSiBSjnQowar XPQCwZluaP26CZaPB+Uws/YOW8GB97nEzM9n8refW3OZSNjjR3chqy4Q/3+BcwRu gu2w32QYBx90GdAlKcHwFPADj3uCoU8bw8LG995pYGuZL/DDvt9N9PULS7eZdm9v NLw18PfZRcXupB/9r53oFlRf7pZ0NiA9r5V32Ls16D+WggGH8+Pbyt/a7/KqDljk znbhk0qvspMS6B8JzhL95fMyCqFuFH3DQaWzdthcCjmGnU3gWnwie4fENQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoApT0arQJYCRVkUjwM/rfxja1FMB8GA1UdIwQY MBaAFFoVaBmdKSOaJ0WtQ7aW+9wuBnBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2Mt NWJlOTY4NjBhZmM0LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2MtNWJlOTY4NjBhZmM0 LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApch3J7/K FubneuSE19j98DqE1d6T+HIeMKSTAqYOysd9ZgZ1hzDJbp26BhBMBZJBZ8pc/qtT ngFPNuY4st769WwPGfk79+LycX0Q9Q11vUw53lLOaLeJwfNLs4XZp8pllXdoOeyx NvfY8dDuRm9hQoQA3R5ezS6j1N7SdAUJi5i4WntKjmHgQQSWM2WIKPy7ukLKJju2 Hh78oVUQ8cRgHbua/EU/LieBBGRJxgzdKGISBMTxuGPEQIrn5PCf9fY2yg4BWNsM AwX8sO8tEE0nEWPRygc+5rQ9fSLYpiURKDty10ksuqFOsQxx4EM3XpUfmKSDqwmz TGCb70qnPn09tg== -----END CERTIFICATE-----Generated at Thu Jan 1 19:46:49 2026 by rpki-client