This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft File: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json) Hash identifier: sOdE4xcyOD823PmFN7aPFqAfkAoYFDObQerFQNC2XwQ= Subject key identifier: 54:2F:C2:C6:EF:56:93:CE:F4:1D:BC:5A:76:8F:B0:C2:CD:79:C4:E8 Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a Certificate serial: 019AF208A1F729D241D6489C640A3225772A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: eGRsgU3+iYX0VOdsIMVjon/6rjkyCD3hwAE9pJUl3rA=) 2: zHqxbQjsVxET0tUTd0EOVp1axi0.roa (hash: 8HunWpHIu087fvWko+Ptb+/I6KzvPWrDFWZjAoDfaKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a1:f7:29:d2:41:d6:48:9c:64:0a:32:25:77:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5871720a8884167fef82a49267661fb346d7561a Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=542fc2c6ef5693cef41dbc5a768fb0c2cd79c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:80:ef:a9:91:8e:a6:14:77:21:5e:41:37: ba:ef:4f:9d:bf:28:53:7e:ec:e7:65:01:09:8f:8e: 2e:bc:39:82:f3:1d:c2:dc:62:df:a4:87:10:7a:1b: 6f:74:b0:36:8c:1c:18:fd:dd:1d:37:cc:ce:80:68: a0:ff:dc:a5:9b:0f:f3:77:66:99:70:fc:69:e0:c5: e7:58:44:bc:d8:0c:46:f2:4a:a4:71:40:b9:b0:b7: 59:a4:09:16:26:88:b5:53:9b:9f:21:05:2e:ac:a3: e1:fd:68:c8:7a:ab:8a:f5:c0:27:c8:01:95:a0:3f: 24:ed:ea:e9:3d:45:6b:06:1d:45:7f:dc:53:ff:dc: 84:07:49:91:71:c1:67:c2:ca:32:04:b2:99:b2:9a: b5:1d:c0:77:39:03:79:69:40:18:2f:b5:3f:db:54: 4c:f7:72:73:16:00:d9:69:97:e7:16:5d:0c:c0:53: c3:d5:9b:48:6f:2a:7a:7d:e3:ec:cb:ae:17:c9:7d: ab:5b:7e:70:a8:59:7b:46:b9:21:70:15:19:ac:1c: 9e:78:b9:a7:aa:27:20:db:aa:4d:19:72:d2:81:44: 7f:1b:98:54:28:6d:5b:4a:e5:40:a4:20:56:b7:57: 7e:ec:f1:96:68:09:d1:3d:c1:8f:35:35:08:43:c3: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2F:C2:C6:EF:56:93:CE:F4:1D:BC:5A:76:8F:B0:C2:CD:79:C4:E8 X509v3 Authority Key Identifier: keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1d:5b:a8:48:d5:3a:16:49:c0:65:3b:52:42:c0:9f:f1:b1: bc:a5:ba:01:7d:70:eb:25:03:88:01:21:06:26:65:98:7e:67: 3c:fd:d2:0a:8c:6d:9b:53:23:91:dd:ec:18:57:0f:ea:5c:44: ea:0f:8d:7b:b3:67:e0:1a:9f:8a:49:e3:d4:d5:49:3e:e1:2f: f9:43:7c:26:94:83:32:f7:34:0c:2a:81:11:03:60:04:27:f5: b7:4e:c9:e6:6a:d9:6b:d3:2a:4b:d6:23:0e:26:23:25:7d:03: 30:8a:e3:9e:a9:09:8a:1c:29:7b:61:48:52:a1:c3:5f:a8:59: 00:1e:9d:3e:8a:94:c7:79:54:8a:7f:4c:1f:a9:0b:82:80:11: 8d:0c:55:b9:bd:8d:34:c5:06:7d:76:50:b5:cd:57:a1:2d:33: 58:15:b5:d3:f5:d6:32:c7:a3:d5:7a:d6:af:18:64:86:57:3d: 52:5d:81:09:8e:2c:6f:48:44:98:89:2e:21:64:bc:9a:a3:cb: c4:35:74:d7:17:ac:0b:26:a9:ef:19:37:91:11:62:7b:e2:b6: 2b:c2:a5:59:c4:6a:49:c9:b8:ae:cc:b4:9b:e4:cb:90:16:d2: aa:4b:81:69:09:1e:06:b6:e4:2b:22:b2:f1:48:9b:ef:52:e5: cf:a2:51:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKH3KdJB1kicZAoyJXcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NzE3MjBhODg4NDE2N2ZlZjgyYTQ5MjY3NjYxZmIzNDZk NzU2MWEwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD Eyg1NDJmYzJjNmVmNTY5M2NlZjQxZGJjNWE3NjhmYjBjMmNkNzljNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBSA76mRjqYUdyFeQTe670+dvyhT fuznZQEJj44uvDmC8x3C3GLfpIcQehtvdLA2jBwY/d0dN8zOgGig/9ylmw/zd2aZ cPxp4MXnWES82AxG8kqkcUC5sLdZpAkWJoi1U5ufIQUurKPh/WjIequK9cAnyAGV oD8k7erpPUVrBh1Ff9xT/9yEB0mRccFnwsoyBLKZspq1HcB3OQN5aUAYL7U/21RM 93JzFgDZaZfnFl0MwFPD1ZtIbyp6fePsy64XyX2rW35wqFl7RrkhcBUZrByeeLmn qicg26pNGXLSgUR/G5hUKG1bSuVApCBWt1d+7PGWaAnRPcGPNTUIQ8Pz/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQvwsbvVpPO9B28WnaPsMLNecToMB8GA1UdIwQY MBaAFFhxcgqIhBZ/74KkkmdmH7NG11YaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYt N2RhODljZGE5ZjcxLzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYtN2RhODljZGE5Zjcx LzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjx1bqEjV OhZJwGU7UkLAn/GxvKW6AX1w6yUDiAEhBiZlmH5nPP3SCoxtm1Mjkd3sGFcP6lxE 6g+Ne7Nn4Bqfiknj1NVJPuEv+UN8JpSDMvc0DCqBEQNgBCf1t07J5mrZa9MqS9Yj DiYjJX0DMIrjnqkJihwpe2FIUqHDX6hZAB6dPoqUx3lUin9MH6kLgoARjQxVub2N NMUGfXZQtc1XoS0zWBW10/XWMsej1XrWrxhkhlc9Ul2BCY4sb0hEmIkuIWS8mqPL xDV01xesCyap7xk3kRFie+K2K8KlWcRqScm4rsy0m+TLkBbSqkuBaQkeBrbkKyKy 8Uib71Llz6JRgw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:46 2025 by rpki-client