This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json) Hash identifier: +azhwFX6FxA6gaCY/hMibGzj840Ufp59TTf34wA+cyU= Subject key identifier: 90:FC:ED:C2:A7:3B:50:60:D7:AD:75:44:47:83:6B:93:28:45:90:6D Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9 Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9 Certificate serial: 019AF2771C498708A122ADA5FA1B67274A3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft Manifest number: 07C1 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: zPsAJYl4BN6AMxApily6KRvICgVX+y9uECX2SyIQ5Bs=) 2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1c:49:87:08:a1:22:ad:a5:fa:1b:67:27:4a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=90fcedc2a73b5060d7ad754447836b932845906d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:f2:51:ba:79:b0:4f:0e:fa:03:87:ca:c7: d2:fe:9c:2f:55:7c:95:19:06:ce:b8:5b:62:7f:06: 05:60:01:ce:15:bc:ac:bf:f4:e2:e1:0e:a2:48:bc: 14:c8:cc:af:bd:d3:07:b4:2b:5a:46:c8:e6:28:39: e6:8d:0d:6b:25:cd:ab:d3:d8:b4:4b:68:78:d8:90: eb:c7:79:de:36:f9:19:6a:08:a3:e3:b8:a3:70:5d: d0:5e:a5:f5:b0:10:d5:35:ad:cc:00:29:59:44:54: 07:64:96:5f:f7:be:bc:52:74:de:c0:36:e3:ba:83: 9c:43:a0:ca:04:8b:ae:1d:04:aa:da:06:1e:31:48: c8:55:b5:12:be:03:22:6f:7c:54:17:12:f0:41:00: 61:9d:d2:f0:d2:34:8b:ba:94:00:3e:c3:7f:b4:8a: b5:3f:2a:6b:62:e9:27:fb:81:8d:48:d2:89:74:d5: a7:bd:ff:53:ef:49:51:fc:bb:c4:b9:38:a8:b2:11: 21:d1:4e:79:46:ce:b0:c1:80:ab:58:83:a3:ff:65: b5:94:c8:53:88:99:8e:23:af:fd:01:d7:b4:ea:1b: e5:2d:f1:55:5d:88:db:8a:61:e4:29:71:2c:ff:15: 4a:79:00:e5:18:06:ac:f4:e9:ba:18:20:a5:34:51: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FC:ED:C2:A7:3B:50:60:D7:AD:75:44:47:83:6B:93:28:45:90:6D X509v3 Authority Key Identifier: keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:76:d7:1d:db:d5:3b:43:84:6b:b9:c8:a5:f0:6b:df:b7:d1: 7a:28:a8:60:09:5e:a6:1f:9d:8c:b1:74:fa:c8:eb:6b:ea:ae: 57:83:3f:e0:22:36:f8:41:a1:66:5e:8a:bd:f3:63:f2:92:a1: dc:38:d4:54:c0:32:e1:07:eb:85:e2:31:70:f7:12:cc:38:f9: 0b:11:00:73:7a:ba:03:7e:9a:02:7f:db:74:db:4b:12:5d:d0: 4a:62:a1:8f:3e:46:12:12:ec:a4:23:bf:89:f2:00:ed:b7:f5: 1c:59:e0:a9:91:e9:7b:37:ff:17:88:09:f7:4f:77:b5:68:3c: 3d:1d:64:dd:21:36:c2:d7:a4:97:fe:a3:96:56:e9:3e:79:5d: b5:aa:94:24:ad:a4:e5:a2:0e:91:e1:d9:c6:6b:c1:69:99:ac: 17:7b:84:89:ea:b6:f2:03:31:32:b9:35:99:74:52:78:04:96: 45:a8:85:b5:34:ab:f4:c1:75:fd:de:1f:e1:c3:94:bc:0d:02: 30:2c:8f:a0:27:6d:47:e3:79:2a:b4:f0:cf:4f:b2:e8:7c:2e: 86:67:e4:2b:76:f6:51:c5:b4:7c:1c:57:78:59:15:ac:5f:fa: 98:16:4e:f5:52:b3:11:ee:36:df:99:56:d2:a6:10:a6:97:ea: 94:0c:9e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxxJhwihIq2l+htnJ0o7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWQ0NWVkZDdlZGRlOWE4Yjg2MmE3MzlhZGE4ZTc4Yjdk YzgyYjkwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD Eyg5MGZjZWRjMmE3M2I1MDYwZDdhZDc1NDQ0NzgzNmI5MzI4NDU5MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+fyUbp5sE8O+gOHysfS/pwvVXyV GQbOuFtifwYFYAHOFbysv/Ti4Q6iSLwUyMyvvdMHtCtaRsjmKDnmjQ1rJc2r09i0 S2h42JDrx3neNvkZagij47ijcF3QXqX1sBDVNa3MAClZRFQHZJZf9768UnTewDbj uoOcQ6DKBIuuHQSq2gYeMUjIVbUSvgMib3xUFxLwQQBhndLw0jSLupQAPsN/tIq1 PyprYukn+4GNSNKJdNWnvf9T70lR/LvEuTioshEh0U55Rs6wwYCrWIOj/2W1lMhT iJmOI6/9Ade06hvlLfFVXYjbimHkKXEs/xVKeQDlGAas9Om6GCClNFEwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD87cKnO1Bg1611REeDa5MoRZBtMB8GA1UdIwQY MBaAFFodRe3X7d6ai4Yqc5rajni33IK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYt YmM3ZmM3MTlkMzFiLzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zNzNlY2EtY2E0My00ZDYyLWExMGYtYmM3ZmM3MTlkMzFi LzEvV2gxRjdkZnQzcHFMaGlwem10cU9lTGZjZ3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHbXHdvV O0OEa7nIpfBr37fReiioYAleph+djLF0+sjra+quV4M/4CI2+EGhZl6KvfNj8pKh 3DjUVMAy4QfrheIxcPcSzDj5CxEAc3q6A36aAn/bdNtLEl3QSmKhjz5GEhLspCO/ ifIA7bf1HFngqZHpezf/F4gJ9093tWg8PR1k3SE2wtekl/6jllbpPnldtaqUJK2k 5aIOkeHZxmvBaZmsF3uEieq28gMxMrk1mXRSeASWRaiFtTSr9MF1/d4f4cOUvA0C MCyPoCdtR+N5KrTwz0+y6HwuhmfkK3b2UcW0fBxXeFkVrF/6mBZO9VKzEe4235lW 0qYQppfqlAyenQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:40 2025 by rpki-client