This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json) Hash identifier: eXVpK0dYgnXvWZ4BMhpc0WClBRgo8PIbP1yUv8D9rtA= Subject key identifier: E6:20:33:99:4A:09:F4:A3:B9:DC:CC:04:B5:B4:DE:51:73:41:B5:05 Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757 Certificate serial: 019B318CE46C8401D8D7F87911B56073A75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft Manifest number: 02BD Signing time: Thu 18 Dec 2025 13:01:15 +0000 Manifest this update: Thu 18 Dec 2025 13:01:15 +0000 Manifest next update: Fri 19 Dec 2025 13:01:15 +0000 Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=) 2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: XHmgTEAIhwfPcYowW9NuYFRBxrhpoT0yyV0PynjjBkI=) 3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=) 4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:e4:6c:84:01:d8:d7:f8:79:11:b5:60:73:a7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587f5478d1e94f240705722c3789076daf553757 Validity Not Before: Dec 18 13:01:15 2025 GMT Not After : Dec 19 13:01:15 2025 GMT Subject: CN=e62033994a09f4a3b9dccc04b5b4de517341b505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:e3:a8:0c:1e:d9:b0:f2:b3:83:10:2d:4b: 8f:c9:cd:75:d7:16:e6:c2:cd:3d:4f:21:0d:a2:fd: 1f:f5:cb:98:12:83:e1:5f:fa:1a:47:97:78:3b:a1: bb:95:d7:eb:b9:48:ea:0d:c3:41:d7:fe:a4:87:05: 30:a0:7a:37:22:d0:d2:90:c2:99:80:51:00:d5:3d: 03:d5:26:21:85:ab:21:74:36:14:07:54:a4:40:34: a8:da:ce:39:93:43:b9:4b:cb:b5:cf:90:6c:c3:10: 6c:26:20:bf:a3:68:2d:9b:c7:b4:c5:41:52:2b:b9: 2f:4e:e9:f5:66:04:51:ff:e4:4b:22:6b:33:79:79: ac:8d:3d:e0:9d:0f:64:ff:ab:99:c6:a1:7d:cf:12: d0:65:fd:cc:f1:64:07:1e:78:5a:72:a4:ee:8b:b1: f6:fd:d0:0a:26:c8:9f:0c:bc:35:58:3a:76:52:5e: 48:21:c0:3c:bf:a6:68:16:56:45:63:ed:80:99:5b: 2b:82:9c:6a:e4:54:61:76:cc:36:83:c7:73:9e:5b: 4b:49:cb:17:f9:33:90:a6:1e:3e:69:75:79:7d:38: 8f:0f:f5:f1:29:6b:8b:95:08:eb:ce:5b:e2:38:40: ee:cf:0f:c2:5e:d6:bd:86:68:33:d1:b0:b8:47:cd: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:20:33:99:4A:09:F4:A3:B9:DC:CC:04:B5:B4:DE:51:73:41:B5:05 X509v3 Authority Key Identifier: keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ed:a6:a7:95:95:1d:3f:f6:76:75:9a:66:b2:f6:4a:ef:f2: 0b:3e:d1:b2:98:eb:ec:8f:2f:ea:8e:29:33:d6:19:25:f1:13: 7a:1f:45:be:ca:37:8c:fd:21:9d:01:40:5e:ad:ac:3b:8e:05: b0:e3:c4:cd:73:f8:4a:c5:80:43:e5:9d:87:4b:eb:0e:eb:ce: fb:75:a4:c6:5d:ba:fc:7f:39:4c:aa:15:9a:04:3f:24:cd:9c: 93:2a:04:61:75:e3:86:7d:03:98:2a:b5:37:c8:7d:81:25:2f: 0a:29:a4:38:13:2a:bc:a0:2d:46:0e:46:47:0c:41:89:39:2f: 58:af:e9:ba:4e:30:e3:9d:99:10:2d:dc:55:8f:cc:42:20:41: 38:b9:e8:70:f8:fc:2a:25:29:42:70:e3:97:9d:24:87:59:49: 68:a7:dc:03:ad:bd:1d:18:fd:46:d3:0c:f9:9b:94:bd:09:36: ec:09:1a:7c:df:38:92:19:75:da:98:a7:4d:5c:69:ee:b9:d8: 98:7a:26:ff:c5:20:45:33:f3:46:62:38:77:26:10:65:39:f3: 3f:11:2a:31:bc:b6:37:cd:db:6c:66:75:67:8c:63:53:7b:b8: 9f:6a:63:7d:9b:37:e3:10:c5:ad:bc:b0:ef:5d:f9:ef:7e:75: d1:a7:53:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjORshAHY1/h5EbVgc6ddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4N2Y1NDc4ZDFlOTRmMjQwNzA1NzIyYzM3ODkwNzZkYWY1 NTM3NTcwHhcNMjUxMjE4MTMwMTE1WhcNMjUxMjE5MTMwMTE1WjAzMTEwLwYDVQQD EyhlNjIwMzM5OTRhMDlmNGEzYjlkY2NjMDRiNWI0ZGU1MTczNDFiNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD7jqAwe2bDys4MQLUuPyc111xbm ws09TyENov0f9cuYEoPhX/oaR5d4O6G7ldfruUjqDcNB1/6khwUwoHo3ItDSkMKZ gFEA1T0D1SYhhashdDYUB1SkQDSo2s45k0O5S8u1z5BswxBsJiC/o2gtm8e0xUFS K7kvTun1ZgRR/+RLImszeXmsjT3gnQ9k/6uZxqF9zxLQZf3M8WQHHnhacqTui7H2 /dAKJsifDLw1WDp2Ul5IIcA8v6ZoFlZFY+2AmVsrgpxq5FRhdsw2g8dznltLScsX +TOQph4+aXV5fTiPD/XxKWuLlQjrzlviOEDuzw/CXta9hmgz0bC4R80FlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYgM5lKCfSjudzMBLW03lFzQbUFMB8GA1UdIwQY MBaAFFh/VHjR6U8kBwVyLDeJB22vVTdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMt Y2YwMDk5ZTA3MmMzLzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMtY2YwMDk5ZTA3MmMz LzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+2mp5WV HT/2dnWaZrL2Su/yCz7Rspjr7I8v6o4pM9YZJfETeh9Fvso3jP0hnQFAXq2sO44F sOPEzXP4SsWAQ+Wdh0vrDuvO+3Wkxl26/H85TKoVmgQ/JM2ckyoEYXXjhn0DmCq1 N8h9gSUvCimkOBMqvKAtRg5GRwxBiTkvWK/puk4w452ZEC3cVY/MQiBBOLnocPj8 KiUpQnDjl50kh1lJaKfcA629HRj9RtMM+ZuUvQk27AkafN84khl12pinTVxp7rnY mHom/8UgRTPzRmI4dyYQZTnzPxEqMby2N83bbGZ1Z4xjU3u4n2pjfZs34xDFrbyw 713573510adTkQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:11:56 2025 by rpki-client