This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft File: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json) Hash identifier: 6UDXbTGblX30PKnrCExevTCeWa0yBZFtbt5t9ncsjog= Subject key identifier: A0:47:A6:FA:25:5D:31:8B:FE:35:BB:63:E3:8B:1B:C9:2C:07:5E:39 Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A Certificate issuer: /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a Certificate serial: 019B5CAE14F7336634E09572C71B094A9962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft Manifest number: 138C Signing time: Fri 26 Dec 2025 22:01:11 +0000 Manifest this update: Fri 26 Dec 2025 22:01:11 +0000 Manifest next update: Sat 27 Dec 2025 22:01:11 +0000 Files and hashes: 1: 7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (hash: 8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=) 2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: pOaiWcvbxnsBMYRELnvWl0GEPcSPX/BWqJ++zWDcfcc=) 3: tzFD8X16hDfmCWt1Dl4XGdomYg8.roa (hash: njuYkI0SwGGHpocv80e/q9DE78xBX5bJk4xkczhpvI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:14:f7:33:66:34:e0:95:72:c7:1b:09:4a:99:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a Validity Not Before: Dec 26 22:01:11 2025 GMT Not After : Dec 27 22:01:11 2025 GMT Subject: CN=a047a6fa255d318bfe35bb63e38b1bc92c075e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:52:51:e7:8c:ea:c0:1c:d5:a0:f8:2e:7c: 5e:53:ba:1e:50:64:e1:b3:58:6c:78:6a:b0:3d:fd: 9a:0a:25:25:d0:2e:e2:20:bd:84:03:03:2c:8c:fa: 7d:74:6d:26:5f:ee:a0:bc:d7:ed:0e:f0:43:58:cf: e1:76:3d:96:c6:b5:f3:31:63:59:46:39:4d:9f:6a: 45:fe:17:b6:da:2d:09:da:1d:ad:e0:fd:94:26:0e: bf:9b:c3:e3:95:a9:70:04:c2:9b:e7:bb:61:18:a1: ca:33:d2:21:ae:32:26:d6:d0:f7:b6:01:16:44:d2: 61:a1:21:a8:68:19:1f:6f:cc:e8:74:02:49:0b:01: d4:ff:85:5e:56:47:dc:d5:86:85:d1:af:dc:00:4f: 87:5e:c0:f5:b9:de:d0:ed:d2:23:84:85:6d:8a:f4: 99:90:c8:15:80:d3:5f:e9:4f:92:86:f1:a0:85:77: 8b:be:be:2a:8d:b1:79:c1:d1:1b:15:7d:ae:c6:bf: 1a:ec:0a:2a:f5:be:1c:1a:39:d2:b8:17:39:62:19: 37:ca:28:4d:a5:73:cd:8c:c5:6b:b1:7d:75:89:53: e7:63:26:c8:64:4a:42:ce:af:9d:fa:11:00:9d:a2: 38:84:31:04:17:7c:3b:f5:6b:4a:7a:10:0c:6f:b8: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:47:A6:FA:25:5D:31:8B:FE:35:BB:63:E3:8B:1B:C9:2C:07:5E:39 X509v3 Authority Key Identifier: keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:37:9d:f8:94:31:ae:8c:c6:95:1c:bf:44:fb:a6:08:29:e0: 32:b0:01:af:24:fd:7b:37:da:3f:c4:e8:b8:3d:12:b4:f7:3e: c2:f3:6e:ba:0b:3f:ea:a7:49:d9:68:9c:e0:32:26:17:2b:6e: 23:c4:c4:38:6c:02:59:91:35:1f:27:e8:97:db:c6:72:87:52: f4:57:01:f4:64:18:06:28:3a:7c:b7:aa:d6:cf:83:0a:73:a9: 45:97:29:63:b2:5f:ea:60:f2:97:ac:92:20:0a:b0:95:45:b8: e3:05:22:37:c3:34:88:47:49:20:66:60:ad:1e:22:2c:63:c0: 45:48:63:a2:a9:e9:46:83:71:ad:0c:03:c4:0c:16:a3:37:0c: 9f:ac:2d:28:d3:ed:f8:34:34:32:a2:e1:3c:44:92:98:46:a0: 17:a1:db:3b:98:c7:63:34:27:57:3e:2a:42:bd:67:28:af:84: a1:53:f7:8e:66:14:44:db:b9:24:95:b0:c3:e2:7e:cf:9b:33: 64:61:bd:91:c4:c1:eb:1c:c8:48:03:93:27:b6:a7:c0:8c:10: a5:9a:4a:e9:50:86:b1:9e:13:35:a9:73:62:08:28:cf:27:bf: 67:48:6a:64:9d:09:a5:15:bc:b3:c1:8f:6e:bb:94:74:18:b1: 27:e3:0e:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrhT3M2Y04JVyxxsJSpliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTgyOWFkNDY3YjRlNzNmZmU2OTFlYzE0NmI1NmIzNjkw OWY1MWEwHhcNMjUxMjI2MjIwMTExWhcNMjUxMjI3MjIwMTExWjAzMTEwLwYDVQQD EyhhMDQ3YTZmYTI1NWQzMThiZmUzNWJiNjNlMzhiMWJjOTJjMDc1ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGpSUeeM6sAc1aD4LnxeU7oeUGTh s1hseGqwPf2aCiUl0C7iIL2EAwMsjPp9dG0mX+6gvNftDvBDWM/hdj2WxrXzMWNZ RjlNn2pF/he22i0J2h2t4P2UJg6/m8PjlalwBMKb57thGKHKM9IhrjIm1tD3tgEW RNJhoSGoaBkfb8zodAJJCwHU/4VeVkfc1YaF0a/cAE+HXsD1ud7Q7dIjhIVtivSZ kMgVgNNf6U+ShvGghXeLvr4qjbF5wdEbFX2uxr8a7Aoq9b4cGjnSuBc5Yhk3yihN pXPNjMVrsX11iVPnYybIZEpCzq+d+hEAnaI4hDEEF3w79WtKehAMb7hvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBHpvolXTGL/jW7Y+OLG8ksB145MB8GA1UdIwQY MBaAFFoYKa1Ge05z/+aR7BRrVrNpCfUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hncHJVWjdUblBfNXBIc0ZHdFdzMmtKOVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmY0NTMtZjc5Ny00MDE5LWEwODYt NzRiNmZhYTNjODc3LzEvV2hncHJVWjdUblBfNXBIc0ZHdFdzMmtKOVJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMmY0NTMtZjc5Ny00MDE5LWEwODYtNzRiNmZhYTNjODc3 LzEvV2hncHJVWjdUblBfNXBIc0ZHdFdzMmtKOVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDed+JQx rozGlRy/RPumCCngMrABryT9ezfaP8TouD0StPc+wvNuugs/6qdJ2Wic4DImFytu I8TEOGwCWZE1Hyfol9vGcodS9FcB9GQYBig6fLeq1s+DCnOpRZcpY7Jf6mDyl6yS IAqwlUW44wUiN8M0iEdJIGZgrR4iLGPARUhjoqnpRoNxrQwDxAwWozcMn6wtKNPt +DQ0MqLhPESSmEagF6HbO5jHYzQnVz4qQr1nKK+EoVP3jmYURNu5JJWww+J+z5sz ZGG9kcTB6xzISAOTJ7anwIwQpZpK6VCGsZ4TNalzYggozye/Z0hqZJ0JpRW8s8GP bruUdBixJ+MOPQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:41:26 2025 by rpki-client