This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json) Hash identifier: Vfk77WJCRGnwIpSq5zDBG02O2CPmPOCQp9lBzCbn84c= Subject key identifier: CA:8F:BE:0E:01:D4:4F:BB:98:E6:4B:62:A9:46:77:F4:FE:5D:7C:E5 Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c Certificate serial: 019B4C5F49C2F1A5D6F275A5B6ED78E8A420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft Manifest number: 1733 Signing time: Tue 23 Dec 2025 18:01:11 +0000 Manifest this update: Tue 23 Dec 2025 18:01:11 +0000 Manifest next update: Wed 24 Dec 2025 18:01:11 +0000 Files and hashes: 1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=) 2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: w3GEQjDZ1V7JrM9LmlCriRrHN2+OMYQbDkjBa/6emjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:49:c2:f1:a5:d6:f2:75:a5:b6:ed:78:e8:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c Validity Not Before: Dec 23 18:01:11 2025 GMT Not After : Dec 24 18:01:11 2025 GMT Subject: CN=ca8fbe0e01d44fbb98e64b62a94677f4fe5d7ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:ca:8d:4a:b7:b1:66:77:11:8b:7c:06:97: 9c:2b:fd:63:27:e0:d7:f5:55:ec:95:a2:df:58:c8: ad:11:15:bd:9d:61:43:aa:b0:80:3e:6c:e6:46:ea: 6d:f6:52:e4:c0:88:96:a5:40:80:42:a4:77:38:2f: 6c:cb:02:9f:b7:5f:6c:01:af:9b:10:d2:fe:17:1e: 3e:ba:cf:c8:1c:31:6f:01:7c:ef:b1:54:2f:87:e6: a3:86:06:e9:6a:2a:6b:a2:a8:10:41:5e:25:7d:1d: a8:a3:c5:38:80:c2:7a:c0:45:db:99:ef:99:d4:55: d6:f4:20:20:54:7f:88:29:4c:65:1e:7b:5b:8c:af: 53:87:89:f9:21:48:d4:e0:c3:e6:b9:01:00:3d:b3: f4:76:25:88:73:f8:11:d5:a8:be:93:5d:2e:00:84: fe:a9:a0:98:77:d8:46:53:22:b1:29:21:77:1c:89: 3b:94:7c:79:12:22:98:ab:b2:be:c2:22:ca:94:a3: 8e:ce:61:0e:87:2d:68:41:c7:63:0e:23:d3:67:41: 23:7a:74:cd:46:0d:ce:bc:bc:a5:73:d0:f4:59:9c: ac:c0:a5:d6:31:82:11:96:42:4f:fe:91:5a:85:3f: 23:1c:1a:b9:3c:96:a2:5d:26:14:44:c3:6f:65:fe: 3d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:BE:0E:01:D4:4F:BB:98:E6:4B:62:A9:46:77:F4:FE:5D:7C:E5 X509v3 Authority Key Identifier: keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:42:30:fd:a7:15:85:ff:f8:c3:b3:c9:7b:b8:e1:ab:fc:65: 8e:57:82:ae:fa:a5:36:a0:70:63:0c:cf:bc:f9:bb:cf:6c:fc: d2:5a:09:5d:b8:f3:f9:f0:6e:49:75:7a:ab:7b:87:6e:e8:f0: 9e:61:b1:26:c7:09:b2:1d:51:5e:cc:d4:2b:fa:75:dd:49:0e: 55:79:0b:39:cf:29:fd:e2:f2:c8:05:76:79:9b:41:ba:9b:11: 6e:ca:05:19:86:57:15:c2:a4:d5:e0:b4:08:ed:5c:fb:59:66: e5:95:4e:26:ad:f5:66:1f:4a:d1:33:15:52:00:06:da:e2:3f: 6a:0c:6e:fc:eb:a8:3e:fa:ba:64:52:30:60:2b:1d:d7:b3:e1: 1c:79:4e:70:f7:4a:c5:ee:c9:03:5d:af:21:52:0c:87:59:cb: 66:65:fe:4d:95:1c:d4:37:a8:86:97:34:f7:9b:da:38:65:65: 7d:4d:82:99:b3:f5:45:f1:f9:b0:ee:a7:49:db:47:23:d9:1b: fc:8d:3d:0e:10:96:09:a1:d2:03:6a:87:31:80:8b:07:bf:96: f3:ca:b4:b2:07:fc:f1:f4:73:e2:81:9c:3e:99:5b:36:98:e0: e6:9c:22:7d:2f:ed:12:d1:8f:ac:0a:bf:68:ff:02:77:3e:33: 44:58:55:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX0nC8aXW8nWltu146KQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjFmMTg1YjRiMzg2Njc1NWRiYTAwMTBiY2YxMGI5NGE4 YWE2NmMwHhcNMjUxMjIzMTgwMTExWhcNMjUxMjI0MTgwMTExWjAzMTEwLwYDVQQD EyhjYThmYmUwZTAxZDQ0ZmJiOThlNjRiNjJhOTQ2NzdmNGZlNWQ3Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7nKjUq3sWZ3EYt8BpecK/1jJ+DX 9VXslaLfWMitERW9nWFDqrCAPmzmRupt9lLkwIiWpUCAQqR3OC9sywKft19sAa+b ENL+Fx4+us/IHDFvAXzvsVQvh+ajhgbpaiproqgQQV4lfR2oo8U4gMJ6wEXbme+Z 1FXW9CAgVH+IKUxlHntbjK9Th4n5IUjU4MPmuQEAPbP0diWIc/gR1ai+k10uAIT+ qaCYd9hGUyKxKSF3HIk7lHx5EiKYq7K+wiLKlKOOzmEOhy1oQcdjDiPTZ0EjenTN Rg3OvLylc9D0WZyswKXWMYIRlkJP/pFahT8jHBq5PJaiXSYURMNvZf49zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqPvg4B1E+7mOZLYqlGd/T+XXzlMB8GA1UdIwQY MBaAFFoh8YW0s4ZnVdugAQvPELlKiqZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYt OWNiN2ZjMTU0NDI1LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYtOWNiN2ZjMTU0NDI1 LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUIw/acV hf/4w7PJe7jhq/xljleCrvqlNqBwYwzPvPm7z2z80loJXbjz+fBuSXV6q3uHbujw nmGxJscJsh1RXszUK/p13UkOVXkLOc8p/eLyyAV2eZtBupsRbsoFGYZXFcKk1eC0 CO1c+1lm5ZVOJq31Zh9K0TMVUgAG2uI/agxu/OuoPvq6ZFIwYCsd17PhHHlOcPdK xe7JA12vIVIMh1nLZmX+TZUc1Deohpc095vaOGVlfU2CmbP1RfH5sO6nSdtHI9kb /I09DhCWCaHSA2qHMYCLB7+W88q0sgf88fRz4oGcPplbNpjg5pwifS/tEtGPrAq/ aP8Cdz4zRFhVig== -----END CERTIFICATE-----Generated at Wed Dec 24 03:00:36 2025 by rpki-client