This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json) Hash identifier: 6JexqBE1CM27+0zvwULx9AEvAG23HcRYiOKWGIQxKP8= Subject key identifier: 98:3C:68:A5:26:40:BA:EF:2A:AE:45:EB:0C:72:44:E4:D7:49:28:71 Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe Certificate serial: 019AF19A9D9A848E0BBE9AAEEEBD7FD78570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft Manifest number: 14A6 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: q+XatjqsR7kRp11NMdJa9MRl4L8ihk1lB2WBnMUEKes=) 2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9d:9a:84:8e:0b:be:9a:ae:ee:bd:7f:d7:85:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=983c68a52640baef2aae45eb0c7244e4d7492871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:8d:f5:d6:7d:e3:43:f4:97:ad:6c:9b:55: c6:0a:62:d1:07:95:15:a2:14:06:aa:a4:da:86:8a: 25:b4:b9:20:5a:e5:75:34:5c:fb:1b:ae:da:6e:35: d6:00:11:ad:ee:22:43:07:c2:a3:c9:9b:ff:52:c6: 34:11:0c:62:7e:24:63:3b:5b:94:87:58:8e:0c:98: bb:3a:04:09:6a:c0:dd:75:2b:88:e2:ca:66:71:60: 23:42:15:76:b5:23:af:46:3e:66:6e:cb:bb:9a:8e: cd:88:13:05:c3:17:d8:0d:e2:ef:c7:c1:59:4e:16: 1e:ef:cd:c4:d8:90:8c:50:3e:2b:7f:33:7e:14:ff: d1:82:da:99:b4:7b:1c:7c:b4:48:ac:65:0c:63:8f: f2:1a:c5:a3:02:33:39:ed:87:4b:9d:3a:6e:53:ff: ef:89:f7:9f:55:9c:84:48:44:e5:78:58:08:82:f6: ff:f6:c8:96:6a:be:b8:e5:3f:f1:af:a6:db:f1:fa: 6a:83:ab:f3:17:bd:45:4a:f4:9d:d2:0f:c7:f0:72: 40:d9:cb:1e:12:24:e6:66:d6:a3:da:dd:1a:60:e5: 27:70:0e:d7:12:4b:a2:a7:1b:a1:a4:e0:91:14:62: 98:37:43:d5:ac:06:a6:61:f6:21:a0:a7:e2:0f:30: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3C:68:A5:26:40:BA:EF:2A:AE:45:EB:0C:72:44:E4:D7:49:28:71 X509v3 Authority Key Identifier: keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:21:e7:df:19:ae:ee:f8:69:ff:19:9d:6c:cf:bb:69:23:8d: b6:96:fb:85:9a:b2:d0:65:db:f9:b2:05:74:59:98:09:e8:11: ae:28:77:c7:c5:c2:10:ef:26:e9:6f:76:73:50:d6:64:b8:aa: 4b:d4:87:e3:e5:cb:d2:21:c8:c3:69:bb:e9:c9:91:aa:c0:bc: 4f:b2:db:9d:e5:16:82:06:39:fa:ea:30:ad:df:65:ca:54:2b: f1:af:c1:64:59:70:0f:36:dc:2d:e5:f6:d5:34:25:b9:d8:c0: 98:a6:18:ac:ce:1e:fa:c2:6b:05:b4:f2:a9:12:74:5f:93:a8: cd:48:4b:59:ea:d5:5b:68:de:29:27:84:66:12:64:18:56:80: 4d:88:d3:3d:1d:62:95:11:34:a9:08:dd:47:ab:d2:4f:c8:39: c7:39:af:e2:db:37:75:c7:8f:c5:c0:47:1a:bc:25:07:f5:d6: 4f:8d:e4:41:ba:39:98:34:83:e7:8b:49:8f:1e:cb:b8:a5:6c: 4d:b6:15:f1:e1:20:e1:f1:34:b5:22:fc:0b:16:6e:5d:13:7f: ea:7f:6f:21:d4:9d:e9:70:9c:98:72:76:fa:10:8e:95:48:c8: 62:a5:87:dd:aa:db:85:45:53:02:2d:3e:c0:61:4c:e9:05:07: 11:b2:eb:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp2ahI4Lvpqu7r1/14VwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Nzg4ZjM4NDI2ZTAzNjJiMzRkZDU2NzM0M2ZlODQ2MWE1 OGJhYmUwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD Eyg5ODNjNjhhNTI2NDBiYWVmMmFhZTQ1ZWIwYzcyNDRlNGQ3NDkyODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oKN9dZ940P0l61sm1XGCmLRB5UV ohQGqqTahooltLkgWuV1NFz7G67abjXWABGt7iJDB8KjyZv/UsY0EQxifiRjO1uU h1iODJi7OgQJasDddSuI4spmcWAjQhV2tSOvRj5mbsu7mo7NiBMFwxfYDeLvx8FZ ThYe783E2JCMUD4rfzN+FP/RgtqZtHscfLRIrGUMY4/yGsWjAjM57YdLnTpuU//v ifefVZyESETleFgIgvb/9siWar645T/xr6bb8fpqg6vzF71FSvSd0g/H8HJA2cse EiTmZtaj2t0aYOUncA7XEkuipxuhpOCRFGKYN0PVrAamYfYhoKfiDzCfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg8aKUmQLrvKq5F6wxyROTXSShxMB8GA1UdIwQY MBaAFFh4jzhCbgNis03VZzQ/6EYaWLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQt YmZjMGZmOTdhMTkwLzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQtYmZjMGZmOTdhMTkw LzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyHn3xmu 7vhp/xmdbM+7aSONtpb7hZqy0GXb+bIFdFmYCegRrih3x8XCEO8m6W92c1DWZLiq S9SH4+XL0iHIw2m76cmRqsC8T7LbneUWggY5+uowrd9lylQr8a/BZFlwDzbcLeX2 1TQludjAmKYYrM4e+sJrBbTyqRJ0X5OozUhLWerVW2jeKSeEZhJkGFaATYjTPR1i lRE0qQjdR6vST8g5xzmv4ts3dcePxcBHGrwlB/XWT43kQbo5mDSD54tJjx7LuKVs TbYV8eEg4fE0tSL8CxZuXRN/6n9vIdSd6XCcmHJ2+hCOlUjIYqWH3arbhUVTAi0+ wGFM6QUHEbLrdg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:12 2025 by rpki-client