This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json) Hash identifier: HeRO3dnVL2wHPEA5xqA5dTRHeDxFqRt1nG0iU7neHzg= Subject key identifier: 25:35:FF:31:CA:EA:19:33:65:7D:06:C0:2E:D5:B4:09:DE:99:B9:AD Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63 Certificate serial: 019AF31CA0DEA3A33C93628E2937EF1F50D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft Manifest number: 0210 Signing time: Sat 06 Dec 2025 10:02:10 +0000 Manifest this update: Sat 06 Dec 2025 10:02:10 +0000 Manifest next update: Sun 07 Dec 2025 10:02:10 +0000 Files and hashes: 1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: aJsawjBAhA/Aq5GugpXavG5g5FHHu7iOnV1m/mFGfL4=) 2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a0:de:a3:a3:3c:93:62:8e:29:37:ef:1f:50:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63 Validity Not Before: Dec 6 10:02:10 2025 GMT Not After : Dec 7 10:02:10 2025 GMT Subject: CN=2535ff31caea1933657d06c02ed5b409de99b9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:cc:b1:cf:4f:c5:70:1b:41:b0:6b:95:52: 77:a4:34:7b:34:bc:4b:b0:d9:2f:ce:12:05:83:8f: 87:97:ad:87:dc:98:63:e2:94:fc:cd:cb:0f:f1:4f: 1c:72:4e:31:b1:25:63:27:70:1a:ef:ea:6d:fd:3a: 30:ff:25:ef:49:74:98:ac:aa:bf:4e:06:b6:ea:ee: 8a:a3:80:d2:54:22:e0:55:22:21:8a:c8:ec:7f:5d: f7:32:f7:b7:91:43:38:7a:15:04:4f:dc:2c:5f:69: 0e:ea:47:53:1b:89:94:dd:b2:1f:8d:e5:4e:b8:5a: 46:de:0d:f1:3a:7f:67:6b:92:91:3c:8c:7f:d8:da: 70:4a:e4:1b:48:0f:ff:5c:0e:52:cd:95:ef:9f:3e: 29:e4:cd:db:b3:89:56:ef:c8:cc:99:4c:20:45:45: 20:08:ad:99:1d:af:0d:a6:84:96:ca:c3:9a:d2:3b: 73:cc:2d:24:8f:a1:97:23:0b:b2:56:2e:4f:24:61: fc:7f:90:d2:1d:ee:5e:43:08:09:cf:48:e6:ed:e7: b4:dc:44:6e:5b:e1:2a:cb:1e:87:15:e0:20:0d:05: bf:21:27:a2:3a:5a:35:ec:e7:11:b4:4a:20:3e:c6: ba:ff:fb:93:4d:8e:42:9e:12:9c:2f:2b:90:78:9d: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:35:FF:31:CA:EA:19:33:65:7D:06:C0:2E:D5:B4:09:DE:99:B9:AD X509v3 Authority Key Identifier: keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e5:c9:9d:29:ad:07:c2:5c:ac:01:77:6b:ce:a9:76:b0:f9: 36:a0:78:99:7a:49:c4:3b:c1:9a:f7:7a:cb:41:94:75:0e:8b: be:eb:6d:f5:01:cb:53:40:f4:02:26:de:d9:81:a2:01:5c:41: 44:78:02:7b:01:b5:46:61:68:07:25:fa:aa:60:8f:e1:b6:37: 87:39:d6:b8:1d:12:23:0a:a9:d2:9c:7d:00:9b:b0:f5:a6:1d: 34:1c:44:f1:15:a0:f1:f9:ce:fb:51:ff:0c:de:7f:84:3e:fe: ff:68:b3:71:b4:ee:67:95:ca:42:9a:d1:40:70:d4:57:78:88: 45:6f:90:7f:20:e6:e9:af:4c:df:f8:5f:65:a2:7e:5e:fb:1f: 7c:33:2f:e8:46:cb:ea:b7:a6:49:ad:2f:ad:b1:40:b9:1c:cd: 48:92:5e:91:41:bd:f4:84:2a:d3:4f:bc:f0:d4:3f:05:19:a1: a6:9c:c3:d6:78:01:6e:59:ba:de:f4:92:98:a8:91:3f:21:47: 4e:b7:ed:14:5f:09:3e:31:89:5f:ca:21:43:4f:69:f3:a7:96: 69:fc:fc:86:56:3b:88:6d:b0:d4:ef:37:76:3c:e9:8b:9c:40: 1a:82:0e:b0:ea:09:d4:75:a3:de:d7:f5:12:41:6d:fb:c0:da: c2:0d:c5:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKDeo6M8k2KOKTfvH1DUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjU4N2U0ZTA3YWNkZmIzODllMjU5MTYxZGExODZiMzg2 YjRmNjMwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD EygyNTM1ZmYzMWNhZWExOTMzNjU3ZDA2YzAyZWQ1YjQwOWRlOTliOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLXMsc9PxXAbQbBrlVJ3pDR7NLxL sNkvzhIFg4+Hl62H3Jhj4pT8zcsP8U8cck4xsSVjJ3Aa7+pt/Tow/yXvSXSYrKq/ Tga26u6Ko4DSVCLgVSIhisjsf133Mve3kUM4ehUET9wsX2kO6kdTG4mU3bIfjeVO uFpG3g3xOn9na5KRPIx/2NpwSuQbSA//XA5SzZXvnz4p5M3bs4lW78jMmUwgRUUg CK2ZHa8NpoSWysOa0jtzzC0kj6GXIwuyVi5PJGH8f5DSHe5eQwgJz0jm7ee03ERu W+Eqyx6HFeAgDQW/ISeiOlo17OcRtEogPsa6//uTTY5CnhKcLyuQeJ3zAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU1/zHK6hkzZX0GwC7VtAnembmtMB8GA1UdIwQY MBaAFD/1h+Tges37OJ4lkWHaGGs4a09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEt NTZmYTA2YzQzMTgwLzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEtNTZmYTA2YzQzMTgw LzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+XJnSmt B8JcrAF3a86pdrD5NqB4mXpJxDvBmvd6y0GUdQ6Lvutt9QHLU0D0Aibe2YGiAVxB RHgCewG1RmFoByX6qmCP4bY3hznWuB0SIwqp0px9AJuw9aYdNBxE8RWg8fnO+1H/ DN5/hD7+/2izcbTuZ5XKQprRQHDUV3iIRW+QfyDm6a9M3/hfZaJ+XvsffDMv6EbL 6remSa0vrbFAuRzNSJJekUG99IQq00+88NQ/BRmhppzD1ngBblm63vSSmKiRPyFH TrftFF8JPjGJX8ohQ09p86eWafz8hlY7iG2w1O83djzpi5xAGoIOsOoJ1HWj3tf1 EkFt+8Dawg3FNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:56 2025 by rpki-client