This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json) Hash identifier: yLkpBylFQzRBB710eP4VKxtFmtxKjuVqhNR/TfiNRzQ= Subject key identifier: 6D:DA:31:E0:70:B0:E3:BB:7D:DA:0A:EA:B0:F4:63:CB:AD:44:BC:81 Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Certificate serial: 019B3B34BC9C27E9F2DEB48BBC4E9FC46764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 10:01:10 +0000 Manifest this update: Sat 20 Dec 2025 10:01:10 +0000 Manifest next update: Sun 21 Dec 2025 10:01:10 +0000 Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=) 2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: g4uSKe8MQN97jbAAE/YujpIX4tuOjSiOSD6x+NIFMiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:bc:9c:27:e9:f2:de:b4:8b:bc:4e:9f:c4:67:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Validity Not Before: Dec 20 10:01:10 2025 GMT Not After : Dec 21 10:01:10 2025 GMT Subject: CN=6dda31e070b0e3bb7dda0aeab0f463cbad44bc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:52:d2:8a:da:7a:0b:5b:fc:4e:af:30:7c: c6:d5:a3:dd:5b:cc:53:b9:ff:0e:33:fb:1c:bf:dc: b8:b3:f6:6f:25:f7:37:86:17:38:6e:e0:30:ce:70: a7:dd:d0:b3:a9:67:16:e2:10:eb:46:36:f6:d6:e3: fc:3b:48:7d:21:c3:5d:0d:4b:fd:40:c9:2a:8e:f0: 34:8e:c5:14:39:f8:55:12:1d:95:d2:85:8f:fd:05: d3:39:a0:ad:91:ae:e9:bb:36:e0:88:40:2f:f0:7c: b1:a3:ac:4d:4b:52:af:74:fd:a9:f3:c0:d7:a7:9c: de:b6:83:d7:1c:6f:4c:5d:5a:48:aa:39:2c:7f:01: 38:7e:54:7e:03:c0:de:1d:6e:de:86:ff:94:a5:2c: c8:00:f7:10:5f:1e:9a:41:49:fe:23:8a:af:08:16: 77:16:d3:a2:77:e4:53:e5:44:7a:e8:76:70:c5:54: 07:0d:40:e7:be:49:10:a7:37:4e:86:d1:87:29:ac: 9f:0b:dc:cf:4f:7e:59:c8:4b:f5:65:79:01:1d:0c: e0:75:19:5d:bc:9b:db:a6:a0:a5:87:bc:ce:78:74: cc:54:18:90:fb:0f:fd:64:31:24:ed:d9:33:66:79: 6f:9b:a3:db:46:48:1a:86:b4:a7:10:ab:cb:30:c2: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DA:31:E0:70:B0:E3:BB:7D:DA:0A:EA:B0:F4:63:CB:AD:44:BC:81 X509v3 Authority Key Identifier: keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:8d:45:f9:6e:15:05:c4:e0:52:85:d1:db:b4:57:45:03:44: 98:b2:bc:5a:24:07:82:f3:31:13:7b:7c:c6:0c:c8:60:36:3c: 47:a4:a0:f5:1a:74:50:98:67:a0:7e:96:fe:66:e7:98:85:c6: da:fa:b9:76:9b:d7:9c:67:f4:83:20:52:11:60:77:8a:ba:66: 34:a7:f3:4f:67:5a:f2:0c:15:3f:aa:f3:60:3a:61:4e:a1:9b: de:3a:7e:ab:e0:44:fe:df:85:d6:9f:13:88:da:0f:d7:4f:ee: 82:01:44:7e:5c:a7:e8:f0:8d:54:e8:d7:79:2a:94:14:1b:01: f0:0c:ab:67:58:c8:5c:50:34:66:84:a0:74:23:aa:94:a2:01: 21:ea:01:76:3f:1f:02:91:66:b6:7a:82:3c:01:ca:27:54:45: 10:06:c2:9a:f8:05:7c:a1:cc:11:3d:72:ec:42:f1:2b:ea:a8: e0:b7:e5:11:90:b9:13:76:f0:9d:8b:d7:c9:7e:0b:30:8c:97: 89:6c:08:6c:64:c4:14:5c:9f:39:40:03:e9:0f:61:cd:3c:e5: 72:e9:ea:d9:59:34:ec:54:af:d7:e4:9c:96:db:7c:38:09:0f: 37:3c:b9:3d:d8:09:27:c2:ef:38:b5:07:6a:7b:4b:27:7b:b2: 6a:5c:17:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLycJ+ny3rSLvE6fxGdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi ZGE4M2IwHhcNMjUxMjIwMTAwMTEwWhcNMjUxMjIxMTAwMTEwWjAzMTEwLwYDVQQD Eyg2ZGRhMzFlMDcwYjBlM2JiN2RkYTBhZWFiMGY0NjNjYmFkNDRiYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+tS0oraegtb/E6vMHzG1aPdW8xT uf8OM/scv9y4s/ZvJfc3hhc4buAwznCn3dCzqWcW4hDrRjb21uP8O0h9IcNdDUv9 QMkqjvA0jsUUOfhVEh2V0oWP/QXTOaCtka7puzbgiEAv8Hyxo6xNS1KvdP2p88DX p5zetoPXHG9MXVpIqjksfwE4flR+A8DeHW7ehv+UpSzIAPcQXx6aQUn+I4qvCBZ3 FtOid+RT5UR66HZwxVQHDUDnvkkQpzdOhtGHKayfC9zPT35ZyEv1ZXkBHQzgdRld vJvbpqClh7zOeHTMVBiQ+w/9ZDEk7dkzZnlvm6PbRkgahrSnEKvLMMI08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3aMeBwsOO7fdoK6rD0Y8utRLyBMB8GA1UdIwQY MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2 LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuY1F+W4V BcTgUoXR27RXRQNEmLK8WiQHgvMxE3t8xgzIYDY8R6Sg9Rp0UJhnoH6W/mbnmIXG 2vq5dpvXnGf0gyBSEWB3irpmNKfzT2da8gwVP6rzYDphTqGb3jp+q+BE/t+F1p8T iNoP10/uggFEflyn6PCNVOjXeSqUFBsB8AyrZ1jIXFA0ZoSgdCOqlKIBIeoBdj8f ApFmtnqCPAHKJ1RFEAbCmvgFfKHMET1y7ELxK+qo4LflEZC5E3bwnYvXyX4LMIyX iWwIbGTEFFyfOUAD6Q9hzTzlcunq2Vk07FSv1+Scltt8OAkPNzy5PdgJJ8LvOLUH antLJ3uyalwX3g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:56 2025 by rpki-client