This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json) Hash identifier: ofjcmDHplueKzGgCAd3zJfFs3SLdQheNqsWYUvhUYMU= Subject key identifier: 26:D6:B0:B6:AE:17:A7:FF:05:FE:7F:1F:AE:52:C1:09:CE:1A:8C:3C Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Certificate serial: 019B3A9086025ED4011C407F60A7C7158B32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 07:01:48 +0000 Manifest this update: Sat 20 Dec 2025 07:01:48 +0000 Manifest next update: Sun 21 Dec 2025 07:01:48 +0000 Files and hashes: 1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=) 2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: ltymP1FcABATvp3Ug1mCGmubfmhLqMCSqR46udI5z9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:86:02:5e:d4:01:1c:40:7f:60:a7:c7:15:8b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Validity Not Before: Dec 20 07:01:48 2025 GMT Not After : Dec 21 07:01:48 2025 GMT Subject: CN=26d6b0b6ae17a7ff05fe7f1fae52c109ce1a8c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e7:0b:f7:96:38:44:e7:a0:20:25:fa:6e:02: 6b:4e:07:e7:b5:20:c4:1f:8b:8a:22:45:57:00:23: 30:2b:d6:2a:43:eb:be:61:e3:4b:fd:44:93:25:b4: f4:ad:9e:98:96:d1:a1:f4:c4:78:8b:f4:28:49:6d: 90:6f:88:5f:b6:ff:29:f2:8f:74:21:7a:69:e2:17: c8:c8:02:98:42:b6:a3:3b:9b:d5:f5:6f:e9:6b:52: b2:e0:13:05:21:ea:27:d2:96:ad:c6:df:5c:77:71: bf:cc:b0:48:96:c9:1e:e5:c6:65:7a:d4:cf:22:16: dc:ba:0f:40:76:4e:a2:68:cc:be:01:6f:4d:cc:75: 54:12:94:d9:6d:a0:7d:be:b0:d4:29:8e:18:82:6b: 31:5b:4b:df:23:ed:b4:52:b0:85:d2:4d:66:c4:3e: 53:94:d7:ce:66:b1:41:6b:2e:6d:2e:d3:29:c4:95: 11:cc:29:cb:f1:dc:bc:68:fb:b6:f1:bd:1d:0e:1e: b4:1f:a6:18:b3:74:fa:db:df:fc:45:43:91:df:14: cf:e0:0d:11:e1:5e:96:7f:ff:29:aa:9c:9a:b2:07: f2:4d:78:67:5c:5c:85:6e:a7:4c:fb:e2:e1:61:9c: 88:47:24:ad:91:29:29:42:a8:1f:02:d3:fc:ba:fc: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D6:B0:B6:AE:17:A7:FF:05:FE:7F:1F:AE:52:C1:09:CE:1A:8C:3C X509v3 Authority Key Identifier: keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fb:7f:29:c2:99:df:6b:7a:61:1e:cd:01:c8:0d:d0:96:b1: a9:82:c6:eb:42:c5:86:f6:5a:7d:41:8c:37:77:46:93:3a:5d: 12:2c:ae:6d:13:e3:a7:93:44:b8:8e:7b:a8:78:05:46:5b:45: 26:2c:2e:9e:e4:c2:64:ee:a8:29:d9:a4:5a:8c:7a:ca:88:4a: a3:ab:6a:fe:19:0b:4b:50:3e:c7:09:ed:97:a9:95:0d:2a:e2: af:0c:26:65:f4:84:19:25:21:a1:28:1c:87:4a:68:34:b4:50: 75:16:e2:49:20:7e:5b:ec:de:f9:8a:45:1d:03:d2:e7:9d:d3: e7:c8:dc:1d:7f:8b:20:8b:4c:da:c2:0a:e7:b8:80:02:ed:b4: d4:77:51:a5:30:13:56:1e:fd:a5:ea:f0:fb:0c:c0:8e:76:a7: 11:b1:90:f7:01:92:25:e3:4d:18:a2:33:14:1d:48:2b:59:75: ac:23:9f:ce:2e:d4:ca:08:b7:eb:92:0c:eb:13:93:d3:95:45: 45:37:55:b0:1c:a1:b5:2c:b0:99:f5:0b:43:46:32:06:b2:b0: 5f:d0:f5:15:2b:82:47:6f:23:1e:c1:d9:47:e1:a2:20:57:e4: f0:c4:a2:9a:81:d7:8e:f0:83:a1:78:08:d0:40:09:6f:95:df: ad:cd:d1:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kIYCXtQBHEB/YKfHFYsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw YjUyZjQwHhcNMjUxMjIwMDcwMTQ4WhcNMjUxMjIxMDcwMTQ4WjAzMTEwLwYDVQQD EygyNmQ2YjBiNmFlMTdhN2ZmMDVmZTdmMWZhZTUyYzEwOWNlMWE4YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+cL95Y4ROegICX6bgJrTgfntSDE H4uKIkVXACMwK9YqQ+u+YeNL/USTJbT0rZ6YltGh9MR4i/QoSW2Qb4hftv8p8o90 IXpp4hfIyAKYQrajO5vV9W/pa1Ky4BMFIeon0patxt9cd3G/zLBIlske5cZletTP Ihbcug9Adk6iaMy+AW9NzHVUEpTZbaB9vrDUKY4YgmsxW0vfI+20UrCF0k1mxD5T lNfOZrFBay5tLtMpxJURzCnL8dy8aPu28b0dDh60H6YYs3T629/8RUOR3xTP4A0R 4V6Wf/8pqpyasgfyTXhnXFyFbqdM++LhYZyIRyStkSkpQqgfAtP8uvwr/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbWsLauF6f/Bf5/H65SwQnOGow8MB8GA1UdIwQY MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/t/KcKZ 32t6YR7NAcgN0JaxqYLG60LFhvZafUGMN3dGkzpdEiyubRPjp5NEuI57qHgFRltF JiwunuTCZO6oKdmkWox6yohKo6tq/hkLS1A+xwntl6mVDSrirwwmZfSEGSUhoSgc h0poNLRQdRbiSSB+W+ze+YpFHQPS553T58jcHX+LIItM2sIK57iAAu201HdRpTAT Vh79perw+wzAjnanEbGQ9wGSJeNNGKIzFB1IK1l1rCOfzi7Uygi365IM6xOT05VF RTdVsByhtSywmfULQ0YyBrKwX9D1FSuCR28jHsHZR+GiIFfk8MSimoHXjvCDoXgI 0EAJb5Xfrc3R8g== -----END CERTIFICATE-----Generated at Sat Dec 20 10:00:22 2025 by rpki-client