This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json) Hash identifier: 6LEgcqv6bLVJ2Vmzj+6l06DHROUp/6Ey5pY3+HtMWOU= Subject key identifier: 09:EC:D7:47:4D:B1:F9:E0:F9:00:66:2F:9A:F3:F4:65:93:40:44:C8 Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9 Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9 Certificate serial: 019B3DC79B077E9844F0BD6EA4682A72F29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft Manifest number: 07E8 Signing time: Sat 20 Dec 2025 22:00:50 +0000 Manifest this update: Sat 20 Dec 2025 22:00:50 +0000 Manifest next update: Sun 21 Dec 2025 22:00:50 +0000 Files and hashes: 1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: sD8Xyz4lxEIsk+1y23j7NYC7rYRbFqFAEeuzLg7N3gE=) 2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:9b:07:7e:98:44:f0:bd:6e:a4:68:2a:72:f2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9 Validity Not Before: Dec 20 22:00:50 2025 GMT Not After : Dec 21 22:00:50 2025 GMT Subject: CN=09ecd7474db1f9e0f900662f9af3f465934044c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:cc:46:20:4b:5a:a6:4c:65:78:eb:26:b7: 4b:6d:0e:b5:62:68:a0:e9:0f:12:bd:1b:2a:f7:78: f1:07:b7:c1:b4:13:77:4d:c4:ce:68:82:56:0f:fa: 5e:1b:f0:90:f8:ea:e4:c9:5d:a4:b7:d3:54:1c:2b: 5d:ef:00:21:23:d3:5f:38:8d:62:c9:e2:c0:55:71: 55:37:25:f6:a8:bb:eb:8b:1d:2b:ca:c5:1b:1b:31: 7e:55:70:26:e4:4f:04:8b:b0:b3:d1:13:e9:38:9b: b6:d1:7a:3b:8c:fe:d7:ff:29:5e:38:87:78:b2:45: 30:49:7b:06:e2:42:2a:d9:af:36:ea:8e:3d:94:a7: 1f:d1:17:43:6d:f6:88:06:87:f3:c1:e2:4e:42:58: 46:91:f2:43:1f:60:1c:7f:2c:7f:c7:fd:05:ef:bb: 34:55:fd:a9:9c:98:66:9a:1b:f2:06:c3:c5:55:5d: c3:ec:e7:67:56:a9:fd:6a:76:e5:b3:3a:8c:e4:56: ad:7b:4b:2f:03:8c:92:5f:55:0f:e3:38:77:ca:ad: bb:bf:2a:bc:39:16:80:28:49:3a:a1:60:70:08:91: 75:b8:5a:1c:cb:d8:23:d6:37:8d:cd:8d:44:8f:5b: 11:c6:a6:69:67:ad:48:59:21:35:22:7c:b3:ee:a9: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EC:D7:47:4D:B1:F9:E0:F9:00:66:2F:9A:F3:F4:65:93:40:44:C8 X509v3 Authority Key Identifier: keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:b7:e1:00:7f:69:39:f9:f1:09:9b:3c:05:a5:b5:9d:cd:93: 8e:eb:6c:28:43:2b:ab:e8:55:e1:a7:3c:0c:0b:ad:7e:3a:3b: 3f:4d:5b:0d:cf:87:7a:a4:71:86:7e:92:81:10:38:66:c5:12: 96:58:c8:0d:3e:28:c3:2e:ed:1c:31:6f:ce:16:b0:df:3b:4d: 34:fc:51:0b:40:5e:16:e7:ef:1c:4c:74:20:1f:21:71:a8:4d: 19:b1:97:47:e4:b5:f2:fe:c6:dd:c6:0b:1a:38:bc:0c:b2:77: b2:75:99:2a:b7:12:e6:0c:b1:07:07:df:99:a9:0d:6e:6c:ec: 33:a9:36:c8:bb:ea:1a:ef:a3:6f:e9:3b:96:45:4b:97:d9:16: 65:db:d8:b3:2f:2c:b5:d4:db:25:2e:4c:5f:e2:d0:d3:28:fc: 4c:2a:4b:12:6a:66:b2:f2:b3:fd:e2:54:66:e7:ed:a1:8f:89: 96:17:49:23:94:89:c3:19:d9:8a:f4:0e:90:b3:e8:85:3c:3e: 37:88:76:95:2a:67:dd:0a:2a:c5:c1:ed:f8:1a:f6:89:14:e4: 7d:f3:4d:f2:dc:39:00:13:8a:99:63:e2:f6:88:61:64:02:1e: 08:81:0d:a8:e2:d8:de:f9:d5:8c:8a:2a:5c:fc:90:4c:7a:08: e9:33:5d:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x5sHfphE8L1upGgqcvKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWQ0NWVkZDdlZGRlOWE4Yjg2MmE3MzlhZGE4ZTc4Yjdk YzgyYjkwHhcNMjUxMjIwMjIwMDUwWhcNMjUxMjIxMjIwMDUwWjAzMTEwLwYDVQQD EygwOWVjZDc0NzRkYjFmOWUwZjkwMDY2MmY5YWYzZjQ2NTkzNDA0NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S3MRiBLWqZMZXjrJrdLbQ61Ymig 6Q8SvRsq93jxB7fBtBN3TcTOaIJWD/peG/CQ+OrkyV2kt9NUHCtd7wAhI9NfOI1i yeLAVXFVNyX2qLvrix0rysUbGzF+VXAm5E8Ei7Cz0RPpOJu20Xo7jP7X/yleOId4 skUwSXsG4kIq2a826o49lKcf0RdDbfaIBofzweJOQlhGkfJDH2Acfyx/x/0F77s0 Vf2pnJhmmhvyBsPFVV3D7OdnVqn9anblszqM5Fate0svA4ySX1UP4zh3yq27vyq8 ORaAKEk6oWBwCJF1uFocy9gj1jeNzY1Ej1sRxqZpZ61IWSE1Inyz7qmNywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAns10dNsfng+QBmL5rz9GWTQETIMB8GA1UdIwQY MBaAFFodRe3X7d6ai4Yqc5rajni33IK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYt YmM3ZmM3MTlkMzFiLzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYtYmM3ZmM3MTlkMzFi LzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzbfhAH9p OfnxCZs8BaW1nc2TjutsKEMrq+hV4ac8DAutfjo7P01bDc+HeqRxhn6SgRA4ZsUS lljIDT4owy7tHDFvzhaw3ztNNPxRC0BeFufvHEx0IB8hcahNGbGXR+S18v7G3cYL Gji8DLJ3snWZKrcS5gyxBwffmakNbmzsM6k2yLvqGu+jb+k7lkVLl9kWZdvYsy8s tdTbJS5MX+LQ0yj8TCpLEmpmsvKz/eJUZuftoY+JlhdJI5SJwxnZivQOkLPohTw+ N4h2lSpn3QoqxcHt+Br2iRTkffNN8tw5ABOKmWPi9ohhZAIeCIENqOLY3vnVjIoq XPyQTHoI6TNdmw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:04 2025 by rpki-client