This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft File: wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json) Hash identifier: taf4qLMV5l/g+ydthjg5/zyQ3ldOulQKpLphMuuA3rA= Subject key identifier: 75:2D:7C:35:B6:39:2F:3E:1D:78:6B:3B:90:3F:C0:5B:85:C2:48:B2 Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45 Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845 Certificate serial: 019AF5783DBAD596BE38EA4EC0D8F9EB087D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft Manifest number: 14F0 Signing time: Sat 06 Dec 2025 21:01:29 +0000 Manifest this update: Sat 06 Dec 2025 21:01:29 +0000 Manifest next update: Sun 07 Dec 2025 21:01:29 +0000 Files and hashes: 1: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (hash: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=) 2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: GKs9WQNkjKDs7IYkejOFwQEixfxmQnN6iYZXaq/Tnas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:3d:ba:d5:96:be:38:ea:4e:c0:d8:f9:eb:08:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845 Validity Not Before: Dec 6 21:01:29 2025 GMT Not After : Dec 7 21:01:29 2025 GMT Subject: CN=752d7c35b6392f3e1d786b3b903fc05b85c248b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:34:0e:8e:9b:68:a1:3e:bf:90:75:43:d0: 67:2d:0e:6a:91:25:e8:6e:7e:b3:72:d8:98:e4:d8: 24:92:23:d8:af:72:d8:5f:f9:87:7c:44:73:53:0e: 15:fa:a5:9c:6e:d6:40:80:3d:3e:e9:9b:50:03:00: 03:fc:4f:2b:4e:c6:b1:57:e0:ae:22:01:ef:94:34: 1c:1f:0d:1b:08:7c:3f:e8:be:7b:dc:18:cd:fa:34: c9:48:d6:79:45:d2:5d:58:7f:59:a7:bd:2b:37:d0: 92:2c:2e:3a:2f:90:89:6a:6f:47:7f:50:c3:57:fc: b3:3c:8c:85:23:b4:36:81:cf:17:a0:34:1a:7b:16: b1:df:6c:03:1a:c3:c8:da:e7:3c:06:6c:3c:1b:fd: 8b:c2:cd:4c:0b:40:5f:71:ec:27:63:71:31:f4:34: 40:6e:ed:a9:01:3c:21:d2:ea:42:e0:4d:8c:e7:1b: 79:ec:52:d1:e0:da:55:bc:ee:38:d4:6f:13:64:36: a2:3a:fe:af:45:cd:76:32:f0:4f:e2:bb:7c:5e:5c: 02:30:f3:02:0b:79:21:1e:f4:36:81:c4:63:ea:ea: 73:7c:91:94:bf:85:71:82:d8:9f:a5:38:80:48:5a: 6d:0c:96:3a:4b:79:8b:ae:ef:a8:6b:fe:c8:51:24: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:7C:35:B6:39:2F:3E:1D:78:6B:3B:90:3F:C0:5B:85:C2:48:B2 X509v3 Authority Key Identifier: keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b2:9b:d8:c1:d8:80:70:35:66:9b:7d:9e:da:9b:41:33:6a: e2:3c:9d:92:1b:d0:a8:18:19:05:e9:7a:df:36:7a:2b:90:58: 0c:20:80:12:74:70:37:d6:7e:3d:e8:e0:94:8e:29:fb:d6:d6: e2:a1:3d:ae:69:a2:40:e9:2d:4a:77:61:6b:d3:43:d1:45:f0: a0:b6:a5:48:d2:1a:3a:68:0c:f3:f0:e0:a4:40:d2:f6:2b:ca: 8c:0d:7e:ce:75:57:51:ab:b0:4d:d3:8a:1e:26:56:ca:ad:7b: 85:58:67:f4:74:dd:f4:70:cf:bc:9c:da:3a:7b:63:f2:f0:c7: 9a:ae:e5:1c:0f:0c:13:1f:5d:f1:2f:2d:3a:44:9d:a2:b9:ba: cd:28:6d:5e:43:62:81:98:d4:bf:c9:78:89:d5:02:3a:c6:05: ae:cc:5a:e1:a6:4d:f5:be:dd:28:cc:16:34:3d:a2:43:58:46: 04:2e:f0:8e:ac:3b:08:66:d3:4c:bb:64:b6:68:d7:7b:c0:33: bc:c0:97:4e:1a:39:3f:09:83:8d:03:1a:97:f8:01:53:42:f9: a6:65:f6:60:23:7a:6e:01:a9:0d:99:2c:1d:47:cb:18:86:10: 59:0f:ef:a9:1c:01:d1:5e:02:cc:a5:98:30:1f:e5:c3:7e:a6: b1:bb:09:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eD261Za+OOpOwNj56wh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMWZhYjc2NzQ0N2QzNjkxMTk3NGNmOWJiMWQxYWU5MTMx ZmM4NDUwHhcNMjUxMjA2MjEwMTI5WhcNMjUxMjA3MjEwMTI5WjAzMTEwLwYDVQQD Eyg3NTJkN2MzNWI2MzkyZjNlMWQ3ODZiM2I5MDNmYzA1Yjg1YzI0OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBw0Do6baKE+v5B1Q9BnLQ5qkSXo bn6zctiY5NgkkiPYr3LYX/mHfERzUw4V+qWcbtZAgD0+6ZtQAwAD/E8rTsaxV+Cu IgHvlDQcHw0bCHw/6L573BjN+jTJSNZ5RdJdWH9Zp70rN9CSLC46L5CJam9Hf1DD V/yzPIyFI7Q2gc8XoDQaexax32wDGsPI2uc8Bmw8G/2Lws1MC0BfcewnY3Ex9DRA bu2pATwh0upC4E2M5xt57FLR4NpVvO441G8TZDaiOv6vRc12MvBP4rt8XlwCMPMC C3khHvQ2gcRj6upzfJGUv4VxgtifpTiASFptDJY6S3mLru+oa/7IUSRiVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUtfDW2OS8+HXhrO5A/wFuFwkiyMB8GA1UdIwQY MBaAFMIfq3Z0R9NpEZdM+bsdGukTH8hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2Yt NGYyMjVkMDg4NTY2LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jZWI1YTEtMTZjMC00NzhmLWEyY2YtNGYyMjVkMDg4NTY2 LzEvd2gtcmRuUkgwMmtSbDB6NXV4MGE2Uk1meUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbKb2MHY gHA1Zpt9ntqbQTNq4jydkhvQqBgZBel63zZ6K5BYDCCAEnRwN9Z+PejglI4p+9bW 4qE9rmmiQOktSndha9ND0UXwoLalSNIaOmgM8/DgpEDS9ivKjA1+znVXUauwTdOK HiZWyq17hVhn9HTd9HDPvJzaOntj8vDHmq7lHA8MEx9d8S8tOkSdorm6zShtXkNi gZjUv8l4idUCOsYFrsxa4aZN9b7dKMwWND2iQ1hGBC7wjqw7CGbTTLtktmjXe8Az vMCXTho5PwmDjQMal/gBU0L5pmX2YCN6bgGpDZksHUfLGIYQWQ/vqRwB0V4CzKWY MB/lw36msbsJaQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:33 2025 by rpki-client