This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: RcTEQYmfLjcx37s01ytQv5kgVVmqUGA+Y+Z53LENG0I=
Subject key identifier: 7E:20:D6:3C:55:22:60:09:BE:B7:DD:BB:D2:56:8A:D0:3D:7B:62:51
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 019B3FECD595FFA93E0E0F528DE21E4A7445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 0921
Signing time: Sun 21 Dec 2025 08:00:44 +0000
Manifest this update: Sun 21 Dec 2025 08:00:44 +0000
Manifest next update: Mon 22 Dec 2025 08:00:44 +0000
Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: y/2gDTci7GuqlsomO1qrneQFMf3/ZKk3MakquEd+joc=)
2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=)
3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:ec:d5:95:ff:a9:3e:0e:0f:52:8d:e2:1e:4a:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Dec 21 08:00:44 2025 GMT
Not After : Dec 22 08:00:44 2025 GMT
Subject: CN=7e20d63c55226009beb7ddbbd2568ad03d7b6251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:b9:13:05:5e:4b:dd:39:94:ef:50:92:58:
41:91:28:13:4d:f3:f0:58:de:71:f9:c0:96:7f:46:
a1:0d:32:e8:3d:40:4e:eb:15:15:7d:02:85:cd:74:
0f:be:9d:e1:34:be:c1:22:3c:56:b4:ca:f6:55:f4:
6d:0a:bb:94:da:94:e6:90:79:c3:a7:4e:b2:92:f7:
39:7a:c0:3d:2a:5d:18:bb:b5:8b:9b:f3:ab:2b:c4:
5c:d7:43:8c:85:f9:ef:7c:a5:14:6a:83:f0:48:17:
9a:84:db:58:c9:63:01:99:64:de:8c:03:cb:63:0e:
c1:34:0b:f1:5c:dd:fb:85:ca:a4:c3:a3:9d:46:90:
cf:e2:8b:48:11:3e:f3:c5:df:0f:43:a7:35:b0:95:
4d:6c:14:f9:14:ca:92:e6:35:62:50:45:a4:a2:e9:
24:1d:c2:0b:31:66:c4:fb:37:73:d7:e8:c5:c9:a5:
69:47:68:54:f3:dc:2a:c0:5c:78:9e:9e:85:77:da:
b6:e4:68:12:76:a3:70:18:4c:19:7d:cc:4a:bc:ad:
33:d0:f3:70:83:4e:96:c4:39:07:d1:cf:1e:c2:6c:
f2:54:0f:71:79:99:2d:1f:e2:c4:9a:3a:69:28:7b:
f2:a4:8a:b6:3e:aa:7e:4c:d0:01:97:3b:47:9b:b9:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:D6:3C:55:22:60:09:BE:B7:DD:BB:D2:56:8A:D0:3D:7B:62:51
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4a:f0:90:95:90:5b:35:b7:f7:05:a1:3a:52:ae:37:3a:d9:
42:c8:d9:af:af:0f:34:be:ee:6c:a9:39:29:87:d2:a0:d2:55:
af:37:ba:94:28:8e:c3:8d:56:c7:dd:6b:fa:d2:85:c4:6c:c0:
f5:a5:b8:c7:40:e2:a0:28:7b:31:e1:84:3e:72:1b:9e:87:e4:
e7:55:47:e4:6b:97:17:cd:d0:5b:34:4a:44:b4:31:f8:b6:f8:
12:82:8b:1e:5a:52:7e:29:da:47:47:d0:f1:f6:37:dc:c5:e9:
30:67:b8:c0:06:d0:5f:bf:ce:5a:3e:d0:65:25:c4:7a:dd:a7:
23:d0:20:b7:38:7f:f0:fe:c2:92:03:7e:4a:ec:e1:37:4b:cf:
bd:d6:eb:12:ad:72:b5:a4:45:2f:86:98:ab:a0:cf:8e:2f:be:
07:0e:60:98:a3:69:b2:51:d5:32:c1:d3:bb:70:50:16:fb:13:
f3:e4:74:ed:ed:ed:ff:e9:78:28:89:04:d5:28:c6:98:73:41:
1e:9d:f7:93:d0:6b:57:d3:18:23:7f:6c:64:69:de:8b:eb:29:
67:4c:98:2d:16:b9:f3:2f:c5:29:ee:9d:5a:5c:16:86:a1:38:
11:9b:38:48:b6:de:a9:6f:9f:ae:b1:50:5f:d1:cc:05:6f:ec:
bc:b5:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:52:52 2025 by rpki-client