This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json) Hash identifier: gAvzzV/UebHm97cPK80MaMJ6NRxMypJfkCp0Ge4kCc0= Subject key identifier: A2:1C:AF:A4:AD:24:AA:1C:3D:A0:C1:33:01:C0:2C:AB:7B:65:57:A0 Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d Certificate serial: 019AF31D0A7BEA408B8B3E74B5E5839B37C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft Manifest number: 172A Signing time: Sat 06 Dec 2025 10:02:37 +0000 Manifest this update: Sat 06 Dec 2025 10:02:37 +0000 Manifest next update: Sun 07 Dec 2025 10:02:37 +0000 Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: m32lBdo42eZUloT/FC49TwQehrM4tmzdenRulkxEq6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:0a:7b:ea:40:8b:8b:3e:74:b5:e5:83:9b:37:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d Validity Not Before: Dec 6 10:02:37 2025 GMT Not After : Dec 7 10:02:37 2025 GMT Subject: CN=a21cafa4ad24aa1c3da0c13301c02cab7b6557a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:e5:d3:89:78:e5:3c:ae:94:8f:80:c2:e8: 5a:55:fc:a0:0c:bd:b3:c6:6d:44:cf:f6:5e:09:79: cf:4b:4a:57:6a:92:94:f4:a1:c6:e2:4d:d3:87:81: 7a:e3:d8:d2:87:19:da:4d:99:69:78:c8:88:7c:ee: 4d:4e:55:fb:ba:87:9b:5c:d3:89:4c:bb:87:6a:b5: 3e:b5:7e:39:4e:6e:73:0f:f4:fd:11:20:84:1b:5f: 44:cb:53:a1:e3:5a:98:ec:08:ed:7d:c0:69:76:56: 56:61:cd:5a:75:1e:bc:bd:d3:de:ae:60:d3:5d:2e: 82:38:2a:b7:57:f7:ac:8b:42:40:0c:03:4d:23:25: a7:c7:98:3b:4f:44:65:31:5c:f2:a7:95:41:58:14: f3:bb:25:cf:de:78:75:dd:4b:50:d0:21:62:7a:77: a5:32:52:a6:d3:79:93:7a:a0:fd:b1:22:67:f0:17: 9c:18:1e:ab:12:f4:8f:32:07:fd:15:6b:16:87:ab: 0f:16:b0:2e:01:0e:43:f4:b9:eb:72:dd:55:5b:a3: 7d:d4:32:1f:6d:c7:53:e5:af:0b:16:33:a2:d4:31: b4:5d:13:8b:55:c3:2e:af:71:ec:18:da:b3:7f:a4: 2e:81:cf:f2:2b:58:75:0a:e7:16:12:79:ae:03:77: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1C:AF:A4:AD:24:AA:1C:3D:A0:C1:33:01:C0:2C:AB:7B:65:57:A0 X509v3 Authority Key Identifier: keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:eb:78:b2:84:6a:d1:e4:01:6a:ed:35:ff:8f:2b:ca:2e:b5: 37:24:65:5e:62:c6:ef:55:9a:de:ee:a0:4a:1a:a0:af:83:f2: dd:ed:3c:d4:71:79:8c:a1:74:33:86:dd:d2:37:fc:81:d8:5f: 5a:55:9b:aa:63:d0:d4:df:db:51:72:7c:fc:39:13:12:e1:eb: ed:84:04:1f:a6:0c:5a:be:1e:01:dc:d7:2d:d4:bc:92:10:de: 9a:08:e7:a4:48:5f:e4:a9:b0:4c:3b:17:1f:f8:99:5c:b6:bb: be:d7:93:f7:62:5a:ba:da:85:b6:95:04:a6:e6:d6:72:fb:53: 7c:f9:3e:a3:fe:cd:ce:30:7a:30:2e:39:4a:f9:3f:d9:4a:a9: d7:3c:3e:36:1a:0f:e2:4a:a1:6d:74:36:e3:e7:6f:1c:b7:10: bb:84:2d:be:7c:1b:61:7e:61:5e:4c:81:35:1a:38:55:8f:86: 60:0d:6d:6b:31:2a:fc:35:d4:1c:cf:f8:13:d2:e3:f5:e7:33: 53:e5:55:68:7e:11:bf:d7:a0:ef:f4:65:a2:57:78:d1:df:c9: 2a:8a:e9:c7:2d:4f:e3:9c:66:64:1c:39:87:6a:68:1b:aa:0a: 12:df:af:ad:6a:4d:51:42:21:16:ba:6e:74:90:1a:54:07:84: 2d:16:04:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQp76kCLiz50teWDmzfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTU2ODE5OWQyOTIzOWEyNzQ1YWQ0M2I2OTZmYmRjMmUw NjcwNmQwHhcNMjUxMjA2MTAwMjM3WhcNMjUxMjA3MTAwMjM3WjAzMTEwLwYDVQQD EyhhMjFjYWZhNGFkMjRhYTFjM2RhMGMxMzMwMWMwMmNhYjdiNjU1N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHXl04l45TyulI+AwuhaVfygDL2z xm1Ez/ZeCXnPS0pXapKU9KHG4k3Th4F649jShxnaTZlpeMiIfO5NTlX7uoebXNOJ TLuHarU+tX45Tm5zD/T9ESCEG19Ey1Oh41qY7AjtfcBpdlZWYc1adR68vdPermDT XS6COCq3V/esi0JADANNIyWnx5g7T0RlMVzyp5VBWBTzuyXP3nh13UtQ0CFienel MlKm03mTeqD9sSJn8BecGB6rEvSPMgf9FWsWh6sPFrAuAQ5D9Lnrct1VW6N91DIf bcdT5a8LFjOi1DG0XROLVcMur3HsGNqzf6Qugc/yK1h1CucWEnmuA3cqzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIcr6StJKocPaDBMwHALKt7ZVegMB8GA1UdIwQY MBaAFFoVaBmdKSOaJ0WtQ7aW+9wuBnBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2Mt NWJlOTY4NjBhZmM0LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2MtNWJlOTY4NjBhZmM0 LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+t4soRq 0eQBau01/48ryi61NyRlXmLG71Wa3u6gShqgr4Py3e081HF5jKF0M4bd0jf8gdhf WlWbqmPQ1N/bUXJ8/DkTEuHr7YQEH6YMWr4eAdzXLdS8khDemgjnpEhf5KmwTDsX H/iZXLa7vteT92JautqFtpUEpubWcvtTfPk+o/7NzjB6MC45Svk/2Uqp1zw+NhoP 4kqhbXQ24+dvHLcQu4QtvnwbYX5hXkyBNRo4VY+GYA1tazEq/DXUHM/4E9Lj9ecz U+VVaH4Rv9eg7/Rlold40d/JKorpxy1P45xmZBw5h2poG6oKEt+vrWpNUUIhFrpu dJAaVAeELRYEvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:10 2025 by rpki-client