This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json) Hash identifier: bkJvci6EqopodAbwWAa42LFFZyKULzAoOFlwtwmDQ90= Subject key identifier: 06:D1:D3:98:09:24:81:C6:18:0E:89:7F:49:BC:89:7D:92:6A:43:4A Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Certificate serial: 019B5E9C3E911C254855873625500252E398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft Manifest number: 0ABC Signing time: Sat 27 Dec 2025 07:00:56 +0000 Manifest this update: Sat 27 Dec 2025 07:00:56 +0000 Manifest next update: Sun 28 Dec 2025 07:00:56 +0000 Files and hashes: 1: 0YAlpXVId3LHx7bUr5xQcDkFv50.roa (hash: TFSQN0O8fIRBDFY4jZJFLp3OndkfiZIj1gXdcop7ZBU=) 2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: RjO1SQtCSBdmEkw4zwaBHP3x4jmnQSfLwCy+Sk2rWWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:3e:91:1c:25:48:55:87:36:25:50:02:52:e3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Validity Not Before: Dec 27 07:00:56 2025 GMT Not After : Dec 28 07:00:56 2025 GMT Subject: CN=06d1d398092481c6180e897f49bc897d926a434a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:7f:54:79:bb:c0:0e:28:d1:0e:40:f9:0d: 9d:ac:ce:6f:58:e1:15:b5:8c:fa:16:5d:45:5d:2b: 26:db:47:a5:91:58:e1:e3:8a:19:03:f7:77:8b:44: 60:88:4b:a0:70:1a:70:f4:00:c7:a8:b5:da:f6:ed: a3:78:fb:12:4d:08:8c:c2:17:66:a8:70:70:de:c7: 57:54:71:13:05:15:a8:7e:90:4b:07:6d:e4:fc:cf: 3d:cd:ac:0f:f9:5e:c6:91:25:ae:cc:01:2a:27:3f: 8c:ea:0d:a7:bd:b7:3b:17:52:9b:e0:52:3a:ba:32: 67:2b:26:7f:f8:13:0d:c5:22:b3:d1:4b:f9:ec:71: ac:39:77:d4:c8:f1:68:f0:db:17:b6:99:f2:77:5a: 2e:c5:35:f5:b1:57:83:c5:9a:d8:3b:11:0b:bd:03: 9b:5d:41:8d:1e:69:5e:9d:6b:7b:60:76:2b:bc:29: 4c:49:59:c9:b1:e9:77:9b:77:c1:f8:f6:24:45:e9: b8:27:ca:c8:f9:d3:3a:f3:52:f8:6d:34:31:91:49: 0c:4a:9c:02:fe:97:04:8d:51:d6:8c:a8:1d:e0:5c: c5:d1:df:88:45:a8:de:d5:4c:d6:33:d3:e2:8b:57: 7b:d7:d7:16:2f:bd:de:f5:5b:38:1a:4b:9a:14:7c: d6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:D3:98:09:24:81:C6:18:0E:89:7F:49:BC:89:7D:92:6A:43:4A X509v3 Authority Key Identifier: keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:df:09:44:38:8f:bb:25:37:6b:09:3d:e2:ae:54:27:b5:29: 77:86:5d:17:58:e4:09:05:64:24:03:e4:7d:4b:29:cb:d3:03: 13:93:66:01:73:d7:fc:21:29:b6:59:3c:d2:45:b6:5e:7c:04: 2f:2b:61:74:63:7e:86:f9:2f:af:68:53:15:36:bb:0a:1f:22: b9:55:69:03:8d:dd:f4:e3:97:00:36:cf:14:86:03:d9:14:4f: 00:2e:54:07:0c:3c:57:62:b7:ed:8b:dc:82:65:8a:5f:7f:aa: e0:6d:79:6e:21:56:98:18:aa:3f:8b:23:bf:b6:92:50:96:dc: 57:f0:01:ec:cf:cf:4b:17:4d:bd:28:bf:d5:1c:28:60:4c:41: d8:60:15:85:ca:b4:00:52:30:e4:ac:8b:ca:a9:4d:ad:e8:f4: 55:25:76:d6:7a:dd:4a:b2:5f:06:e5:c5:f3:b0:4e:13:7c:90: 8a:4a:75:46:6a:f9:93:b9:1b:2d:a1:ae:b8:fd:ce:94:1d:00: 1c:49:73:35:66:76:2e:03:6a:30:e4:b4:58:3e:a3:b3:5c:7e: 6a:c7:af:8a:c1:b0:d0:05:e5:e5:c1:49:3d:9d:93:ed:2a:6d: be:73:c1:1f:dc:55:8c:4b:56:75:77:9c:c9:c5:72:05:0f:87: fc:bd:88:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenD6RHCVIVYc2JVACUuOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3 MWRlMWMwHhcNMjUxMjI3MDcwMDU2WhcNMjUxMjI4MDcwMDU2WjAzMTEwLwYDVQQD EygwNmQxZDM5ODA5MjQ4MWM2MTgwZTg5N2Y0OWJjODk3ZDkyNmE0MzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljx/VHm7wA4o0Q5A+Q2drM5vWOEV tYz6Fl1FXSsm20elkVjh44oZA/d3i0RgiEugcBpw9ADHqLXa9u2jePsSTQiMwhdm qHBw3sdXVHETBRWofpBLB23k/M89zawP+V7GkSWuzAEqJz+M6g2nvbc7F1Kb4FI6 ujJnKyZ/+BMNxSKz0Uv57HGsOXfUyPFo8NsXtpnyd1ouxTX1sVeDxZrYOxELvQOb XUGNHmlenWt7YHYrvClMSVnJsel3m3fB+PYkRem4J8rI+dM681L4bTQxkUkMSpwC /pcEjVHWjKgd4FzF0d+IRaje1UzWM9Pii1d719cWL73e9Vs4GkuaFHzWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbR05gJJIHGGA6Jf0m8iX2SakNKMB8GA1UdIwQY MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt MzhlZmNmZGM0MTdiLzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt8JRDiP uyU3awk94q5UJ7Upd4ZdF1jkCQVkJAPkfUspy9MDE5NmAXPX/CEptlk80kW2XnwE LythdGN+hvkvr2hTFTa7Ch8iuVVpA43d9OOXADbPFIYD2RRPAC5UBww8V2K37Yvc gmWKX3+q4G15biFWmBiqP4sjv7aSUJbcV/AB7M/PSxdNvSi/1RwoYExB2GAVhcq0 AFIw5KyLyqlNrej0VSV21nrdSrJfBuXF87BOE3yQikp1Rmr5k7kbLaGuuP3OlB0A HElzNWZ2LgNqMOS0WD6js1x+asevisGw0AXl5cFJPZ2T7SptvnPBH9xVjEtWdXec ycVyBQ+H/L2ILw== -----END CERTIFICATE-----Generated at Sat Dec 27 10:05:02 2025 by rpki-client