This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json) Hash identifier: gGbsm/rtkdLqdxaHn0H8m1dkdkCDniy8DDHmZUANkk0= Subject key identifier: DD:52:54:78:CD:7A:EB:DC:04:0D:4A:4C:AA:39:48:C9:5A:90:3C:89 Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0 Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0 Certificate serial: 019B3CB51380A6619641D562E208C6FBBB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft Manifest number: 13E5 Signing time: Sat 20 Dec 2025 17:00:58 +0000 Manifest this update: Sat 20 Dec 2025 17:00:58 +0000 Manifest next update: Sun 21 Dec 2025 17:00:58 +0000 Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=) 2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: ALZVu+bUh6NZIixKQEX8pFQ378fvHTSOOJicMUJYDe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:13:80:a6:61:96:41:d5:62:e2:08:c6:fb:bb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0 Validity Not Before: Dec 20 17:00:58 2025 GMT Not After : Dec 21 17:00:58 2025 GMT Subject: CN=dd525478cd7aebdc040d4a4caa3948c95a903c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:5a:89:01:1e:89:a7:cf:23:9b:a4:65:19: d8:9f:34:43:5c:85:35:7d:1f:b8:11:55:f9:60:98: 1c:b5:92:7f:4c:11:ca:b0:50:5b:cb:6f:9c:2b:eb: 31:c2:43:a3:f1:ba:81:4d:d0:7e:56:a0:03:f1:98: 33:9e:9d:af:6e:30:96:63:c2:75:4f:9a:f3:51:b3: 47:b6:4e:22:91:43:4b:85:a4:7d:11:2e:ad:d8:e0: 0a:bb:50:db:67:36:45:e2:04:7d:e2:f3:cd:c0:d0: 64:4a:a6:8d:75:ed:b7:90:c2:bd:1f:1a:42:7d:df: 30:7f:f0:44:39:0e:e0:8c:a8:50:10:8f:2d:56:e3: 00:bd:55:5b:1f:e9:12:c4:da:62:79:ae:e2:39:2e: 1f:4d:a9:67:28:32:5f:1a:92:f5:23:f9:25:ac:e8: 40:6b:f0:4c:17:22:77:d6:a9:22:97:3c:ba:22:2d: 09:ca:53:a8:ed:74:ab:9c:a1:82:91:87:91:fc:d8: ca:85:d8:c5:42:a3:31:46:6a:ef:e9:bd:5e:73:be: c9:b7:93:7c:79:b6:ae:72:ce:e8:8f:7f:da:bd:da: f7:51:07:8d:49:9d:d3:a9:59:2c:cf:20:96:f1:ae: f9:44:ca:63:4b:a5:3f:4b:04:33:b6:c6:28:fd:20: 0d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:52:54:78:CD:7A:EB:DC:04:0D:4A:4C:AA:39:48:C9:5A:90:3C:89 X509v3 Authority Key Identifier: keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:48:f1:f1:92:90:7b:1c:dc:50:73:c4:66:a0:b9:49:3f:06: be:01:53:06:8e:07:90:01:03:3b:ed:90:7b:fa:53:fc:b1:35: a3:79:92:e6:df:81:d2:1f:63:2c:e5:04:9d:4e:e0:23:d0:60: d8:33:ed:98:4d:b2:81:e0:4b:75:24:0f:f0:35:7b:55:2e:ce: 5e:6c:d8:33:fd:82:3c:7b:15:65:6e:92:f7:da:ad:bf:4c:73: a0:20:06:f6:98:74:fb:52:e2:1d:98:ca:e2:b2:46:d5:0b:40: 1c:0a:be:3b:ae:57:6e:c6:7c:d3:81:5b:14:a9:94:8a:ce:0d: e5:dc:d9:62:8b:c7:a5:d1:dc:0b:b3:56:30:30:7d:30:8d:2e: 2d:ff:62:74:a2:0b:5c:a7:89:5e:1b:78:69:73:2a:0d:4e:45: fd:40:20:8f:19:15:e7:cd:8a:26:5c:4f:b8:5c:e5:e7:c4:00: 16:8e:b8:52:4e:61:49:1d:95:58:d6:3b:3e:7b:00:05:a7:d2: e0:af:42:c3:a8:f0:c7:48:75:6a:f9:75:e5:30:11:da:8b:15: e4:fa:d0:78:b9:60:8e:0d:d0:5b:91:af:c0:55:43:f0:bf:eb: c9:0c:2e:31:6e:12:e8:09:64:86:1d:78:9c:f7:14:c2:88:f5: 4d:be:50:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tROApmGWQdVi4gjG+7smMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw NjUzYTAwHhcNMjUxMjIwMTcwMDU4WhcNMjUxMjIxMTcwMDU4WjAzMTEwLwYDVQQD EyhkZDUyNTQ3OGNkN2FlYmRjMDQwZDRhNGNhYTM5NDhjOTVhOTAzYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP9aiQEeiafPI5ukZRnYnzRDXIU1 fR+4EVX5YJgctZJ/TBHKsFBby2+cK+sxwkOj8bqBTdB+VqAD8Zgznp2vbjCWY8J1 T5rzUbNHtk4ikUNLhaR9ES6t2OAKu1DbZzZF4gR94vPNwNBkSqaNde23kMK9HxpC fd8wf/BEOQ7gjKhQEI8tVuMAvVVbH+kSxNpiea7iOS4fTalnKDJfGpL1I/klrOhA a/BMFyJ31qkilzy6Ii0JylOo7XSrnKGCkYeR/NjKhdjFQqMxRmrv6b1ec77Jt5N8 ebaucs7oj3/avdr3UQeNSZ3TqVkszyCW8a75RMpjS6U/SwQztsYo/SANsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1SVHjNeuvcBA1KTKo5SMlakDyJMB8GA1UdIwQY MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt Y2QyZjU3NzFkYTk4LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4 LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUjx8ZKQ exzcUHPEZqC5ST8GvgFTBo4HkAEDO+2Qe/pT/LE1o3mS5t+B0h9jLOUEnU7gI9Bg 2DPtmE2ygeBLdSQP8DV7VS7OXmzYM/2CPHsVZW6S99qtv0xzoCAG9ph0+1LiHZjK 4rJG1QtAHAq+O65XbsZ804FbFKmUis4N5dzZYovHpdHcC7NWMDB9MI0uLf9idKIL XKeJXht4aXMqDU5F/UAgjxkV582KJlxPuFzl58QAFo64Uk5hSR2VWNY7PnsABafS 4K9Cw6jwx0h1avl15TAR2osV5PrQeLlgjg3QW5GvwFVD8L/ryQwuMW4S6Alkhh14 nPcUwoj1Tb5Q7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:27 2025 by rpki-client