This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json) Hash identifier: kaR9YWNPkVcC7bTNuzdgBwagJDqUImVAkf0mDKJESoU= Subject key identifier: 68:93:A7:AE:2A:AC:15:4D:19:79:50:83:75:A8:43:AF:3C:AF:D8:8F Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B390F1388F805683C01D31CB50F37EE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 00:00:47 +0000 Manifest this update: Sat 20 Dec 2025 00:00:47 +0000 Manifest next update: Sun 21 Dec 2025 00:00:47 +0000 Files and hashes: 1: 9mv5BJvEaAqWoj8vH5r1xx_pFgo.roa (hash: IAS+DSX7WNtHYk4j+RDYn0qWAwRUWPxJ+A4Wt+jMAHQ=) 2: Jue_aw4zHx1sp-mJmowMMM2tGGA.roa (hash: 0Yitoumoz1xxoSRol/a1PWMjCmZIGDa9duJ/3vMhBiw=) 3: MpJGW61wsAY2na2GoCEJeo5HvXk.roa (hash: vRlmBz0iiqrk+J7PazbAwX0O6F7JU+iRJTTbiLqVjxU=) 4: PNxKt9EExJcdff8t4PlXHS3Zp8E.roa (hash: l/sm5m0RtWP1FamD6nvtIs4Wmty8En19TqcjOBknuMY=) 5: SNph92J-Xcf8IveNNNu0MkGJVWI.roa (hash: VJRwO2aW7uM1HccqCjhKGDaLckqIJFkhu3+W4SavOHw=) 6: U8yyp-JTHsc4PzNj0KNOVG9KECs.roa (hash: XL8cza6Y6dTsPDS6Eb2/zXU0zrVRVcGlEc/rkfzZaj0=) 7: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: tR1VMaf+iZviOSvZjedQrR61QYUQkOvkmLDAlWOTI2w=) 8: ve4iz1Nb8DcHS9BJwN65K0mM0-E.roa (hash: KrskrDJ9DRb/ge1dc1ifB8Oiho4jbO0ADnVg8CJqCCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:13:88:f8:05:68:3c:01:d3:1c:b5:0f:37:ee:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Dec 20 00:00:47 2025 GMT Not After : Dec 21 00:00:47 2025 GMT Subject: CN=6893a7ae2aac154d1979508375a843af3cafd88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:00:08:82:7f:6a:e3:31:2e:7e:44:29:af: cb:36:42:5e:bf:22:11:6f:33:41:24:49:5b:63:68: 2e:e0:72:37:8e:9c:2c:11:97:4f:d5:0d:04:00:ec: fa:bf:a0:9b:cf:1d:d2:94:d5:0d:2b:78:ae:7c:e2: 59:f3:ab:cb:d5:ab:b1:05:8b:7a:6a:05:93:83:13: bc:36:88:3e:b2:2c:b6:16:56:0b:e9:e2:9e:88:d6: 2c:d1:5f:4e:da:45:b8:fc:30:89:4b:48:b9:3d:e3: 00:18:87:62:e3:4b:88:1e:3b:1d:ba:dc:47:f1:19: 77:4a:91:04:aa:ae:fb:ad:48:86:1a:a0:0c:e9:97: c3:30:51:c5:48:17:37:8f:09:21:2d:a4:d9:b4:11: 39:4b:b4:ce:7f:a6:2d:21:31:a1:34:96:d7:0a:7d: 95:3d:b3:49:ba:b4:05:a1:b7:90:64:d4:6b:2e:b2: 39:e7:4b:67:a7:91:e3:20:c5:c5:45:78:6c:20:08: 7f:04:1c:3e:53:13:b1:52:46:e9:ee:e3:77:fa:bb: de:d9:7c:63:c6:ba:ba:e6:a6:c3:18:28:18:b9:f9: 6f:49:ea:2b:35:70:1b:9b:65:b0:59:9e:2e:f7:77: a1:47:e2:16:ed:b4:f9:5f:15:6c:79:61:70:ae:f1: bb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:93:A7:AE:2A:AC:15:4D:19:79:50:83:75:A8:43:AF:3C:AF:D8:8F X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:84:7c:ee:ad:5a:3c:c6:ed:bb:48:46:74:82:b4:b6:a4:b2: dd:87:f4:49:57:93:00:36:8c:45:18:78:f9:d9:ae:8f:bb:0a: 45:c6:8c:16:0f:02:01:ee:da:66:0d:eb:13:1d:8a:da:64:f4: e5:5b:f3:c8:c2:eb:44:16:d8:90:2d:9a:1c:55:e4:72:06:20: b7:eb:c0:59:08:9a:98:01:9a:1a:95:89:ec:f4:9f:73:cd:9b: 1a:ab:8b:ab:75:86:20:0c:41:47:59:9e:26:bb:08:45:33:b5: 59:ff:dd:f9:66:c6:a2:14:6a:0e:d3:7c:b1:5f:ac:da:f3:fc: b8:d5:93:c6:b7:37:24:fc:7d:fe:13:97:9e:da:06:bc:72:c4: d1:34:cb:2b:cb:22:50:3f:d6:8a:fd:06:13:ec:47:9d:35:b7: da:3f:0e:39:7d:1b:1e:03:db:a6:f4:41:65:70:89:fe:b9:a5: 14:4c:b3:c3:8a:1f:51:3a:1c:2f:33:50:80:f6:31:7c:61:13: 9d:22:e4:15:dd:28:15:6c:08:75:37:e9:04:db:1a:52:73:d1: bc:5d:13:7c:38:a1:98:9a:e4:64:e4:b0:22:b0:86:30:fc:dd: ad:8d:20:c9:90:e3:79:70:6c:7b:83:20:f0:b4:79:e7:d1:24: 05:c9:87:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DxOI+AVoPAHTHLUPN+5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjUxMjIwMDAwMDQ3WhcNMjUxMjIxMDAwMDQ3WjAzMTEwLwYDVQQD Eyg2ODkzYTdhZTJhYWMxNTRkMTk3OTUwODM3NWE4NDNhZjNjYWZkODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWYACIJ/auMxLn5EKa/LNkJevyIR bzNBJElbY2gu4HI3jpwsEZdP1Q0EAOz6v6Cbzx3SlNUNK3iufOJZ86vL1auxBYt6 agWTgxO8Nog+siy2FlYL6eKeiNYs0V9O2kW4/DCJS0i5PeMAGIdi40uIHjsdutxH 8Rl3SpEEqq77rUiGGqAM6ZfDMFHFSBc3jwkhLaTZtBE5S7TOf6YtITGhNJbXCn2V PbNJurQFobeQZNRrLrI550tnp5HjIMXFRXhsIAh/BBw+UxOxUkbp7uN3+rve2Xxj xrq65qbDGCgYuflvSeorNXAbm2WwWZ4u93ehR+IW7bT5XxVseWFwrvG7/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiTp64qrBVNGXlQg3WoQ688r9iPMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4R87q1a PMbtu0hGdIK0tqSy3Yf0SVeTADaMRRh4+dmuj7sKRcaMFg8CAe7aZg3rEx2K2mT0 5VvzyMLrRBbYkC2aHFXkcgYgt+vAWQiamAGaGpWJ7PSfc82bGquLq3WGIAxBR1me JrsIRTO1Wf/d+WbGohRqDtN8sV+s2vP8uNWTxrc3JPx9/hOXntoGvHLE0TTLK8si UD/Wiv0GE+xHnTW32j8OOX0bHgPbpvRBZXCJ/rmlFEyzw4ofUTocLzNQgPYxfGET nSLkFd0oFWwIdTfpBNsaUnPRvF0TfDihmJrkZOSwIrCGMPzdrY0gyZDjeXBse4Mg 8LR559EkBcmHPA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:22:19 2025 by rpki-client