This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft File: wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json) Hash identifier: +Lg31U9cuRtshS1IQb8gxgtQ4J/KB9HbdHdvbYCBQTo= Subject key identifier: 37:BA:81:5D:99:10:6E:4D:1B:29:B7:96:B0:EA:36:68:07:3E:75:9E Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Certificate serial: 019AF389F124E10F545B939314C6F02356C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:01:34 +0000 Manifest this update: Sat 06 Dec 2025 12:01:34 +0000 Manifest next update: Sun 07 Dec 2025 12:01:34 +0000 Files and hashes: 1: 2nyycqBL-rAzEQltLGtAfMtGQLM.roa (hash: MBIXdHvXsLvgHf885v+F1wgnsNoLNTld5Y4auopwyqw=) 2: 3bQBeV9f56eObQzYUYLO4GAQ8UY.roa (hash: HtmwpWIMcqcjPv1ZUB2JqlVZpv8JVThGiHf7qzzoBm0=) 3: ChVY_yTwqfm0VnhsyIrbJGaer18.roa (hash: R+XyXjI6742+O3LetUXz9z0t0N+RLDWsKAzEnh76DmE=) 4: QeIXKKypRp3pUKZsAXhEwiToOAw.roa (hash: 4uaN2IkF9UjmjdQnaC+MinX3CAS8fZa9J2o5ym9jh2Y=) 5: Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa (hash: 91lRhrOUw2PQdAXyAGgZms7aAgC+waBbAPHPOWg5hPI=) 6: Sr0IV-rO-zHkL4o3XLlXoB58rKk.roa (hash: suoX77hNmWsUeC3U2K5nrNVPL2RuFHc2TD/yXsw9YqQ=) 7: ePEq_iR8SghIv87pTKid6AVEFNA.roa (hash: JKXKaBC2B7MQ6+tg8cpfMIILPOh/OoQhr9iR79J36DU=) 8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: DLHB13tw3t+ruuVLpqzHSrFSUb3KFQy5mu4Aw44VW0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f1:24:e1:0f:54:5b:93:93:14:c6:f0:23:56:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Validity Not Before: Dec 6 12:01:34 2025 GMT Not After : Dec 7 12:01:34 2025 GMT Subject: CN=37ba815d99106e4d1b29b796b0ea3668073e759e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:11:11:e0:98:aa:26:2d:07:db:88:49:a8:c9: 93:ab:14:15:4c:e6:01:e2:a2:75:04:e3:7e:90:2a: 3b:c8:5f:4c:ad:fb:16:54:63:95:8b:2d:3f:a7:d6: 79:ea:d0:24:2a:39:82:4c:21:18:ab:68:a0:41:b5: ae:3e:55:f2:18:cd:2f:f0:ca:1d:ba:9e:c7:a9:fb: 68:ef:5c:7c:61:f2:c6:0f:d3:66:6c:7c:2e:4e:83: e3:b1:87:fe:fd:c7:ed:92:4c:5e:45:d7:58:d2:c0: 8d:ed:00:3a:38:31:3f:c8:05:24:5d:57:c9:64:8c: d0:f8:51:37:11:0c:f6:b0:f9:b8:d9:0a:c4:09:b5: 52:a3:13:0b:c7:4e:79:5a:4f:dc:ea:ba:46:0e:58: 64:69:52:55:ee:39:be:fd:1c:67:d5:f1:e1:6a:6c: 80:e7:bc:93:75:b0:cc:8b:b7:42:92:09:ef:bf:b6: 3d:73:b1:b5:05:d6:3c:91:0f:50:2f:17:8c:f3:37: 7f:a7:84:63:a5:f5:70:e1:78:7c:42:16:79:4a:03: 00:90:4f:7b:ee:ad:c6:aa:ee:9c:d1:6c:15:08:e2: e9:c2:1a:fb:75:10:0d:1a:2c:42:14:81:04:73:8c: 3c:75:bc:e8:0c:35:cc:f9:02:59:e9:5a:ef:79:cb: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BA:81:5D:99:10:6E:4D:1B:29:B7:96:B0:EA:36:68:07:3E:75:9E X509v3 Authority Key Identifier: keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d7:4f:61:3f:9c:b2:c5:cf:96:c1:08:b3:03:39:ed:ec:a2: eb:33:01:e7:ef:5e:18:07:b8:bb:7a:d5:aa:d9:6a:7e:1d:11: 73:bc:25:54:b1:64:7b:c3:85:de:98:ce:57:87:4b:ca:57:0d: 75:93:64:38:78:96:4d:e4:2f:61:f9:0d:aa:69:16:4f:51:f3: 56:c2:0d:62:b4:d3:d0:58:6f:b0:00:3e:1b:e9:7f:9d:49:82: 3b:fc:e7:6b:44:17:1a:c1:4f:83:79:c8:9c:ff:f6:83:0a:ea: c6:35:e0:f8:b9:ed:74:05:c4:56:9c:73:4a:0b:36:5a:e7:60: a9:86:24:2d:28:6e:29:6d:0f:e8:8a:bc:f3:a0:9d:44:69:f3: 5c:a2:5a:12:b7:84:da:06:d0:a8:7b:83:76:a6:95:34:bf:82: 55:e7:f2:a8:a3:24:db:3e:ae:b6:8b:2f:24:4f:ad:ba:08:11: ca:c2:97:bd:4d:9d:21:ba:d4:26:8d:1d:de:7e:81:4c:67:01: 42:be:56:e7:27:65:04:aa:89:51:3d:87:a2:ec:7d:ee:fd:47: 86:24:5f:ca:8a:5f:ed:d0:61:ee:72:4b:34:c2:75:b5:73:db: 65:3b:6a:f2:d1:59:cb:6f:09:4f:c8:89:d3:04:05:62:19:6b: 33:11:d5:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifEk4Q9UW5OTFMbwI1bIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzQ3ZmJlMjZjOWNkZDc2MjhhZGZlZGI1N2I3OGJlOGRl NzVlMjkwHhcNMjUxMjA2MTIwMTM0WhcNMjUxMjA3MTIwMTM0WjAzMTEwLwYDVQQD EygzN2JhODE1ZDk5MTA2ZTRkMWIyOWI3OTZiMGVhMzY2ODA3M2U3NTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xER4JiqJi0H24hJqMmTqxQVTOYB 4qJ1BON+kCo7yF9MrfsWVGOViy0/p9Z56tAkKjmCTCEYq2igQbWuPlXyGM0v8Mod up7Hqfto71x8YfLGD9NmbHwuToPjsYf+/cftkkxeRddY0sCN7QA6ODE/yAUkXVfJ ZIzQ+FE3EQz2sPm42QrECbVSoxMLx055Wk/c6rpGDlhkaVJV7jm+/Rxn1fHhamyA 57yTdbDMi7dCkgnvv7Y9c7G1BdY8kQ9QLxeM8zd/p4RjpfVw4Xh8QhZ5SgMAkE97 7q3Gqu6c0WwVCOLpwhr7dRANGixCFIEEc4w8dbzoDDXM+QJZ6VrvecseLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe6gV2ZEG5NGym3lrDqNmgHPnWeMB8GA1UdIwQY MBaAFMB0f74myc3XYorf7bV7eL6N514pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDIt MzY4NjA4Mzg1ODgzLzEvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDItMzY4NjA4Mzg1ODgz LzEvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcddPYT+c ssXPlsEIswM57eyi6zMB5+9eGAe4u3rVqtlqfh0Rc7wlVLFke8OF3pjOV4dLylcN dZNkOHiWTeQvYfkNqmkWT1HzVsINYrTT0FhvsAA+G+l/nUmCO/zna0QXGsFPg3nI nP/2gwrqxjXg+LntdAXEVpxzSgs2WudgqYYkLShuKW0P6Iq886CdRGnzXKJaEreE 2gbQqHuDdqaVNL+CVefyqKMk2z6utosvJE+tuggRysKXvU2dIbrUJo0d3n6BTGcB Qr5W5ydlBKqJUT2Houx97v1HhiRfyopf7dBh7nJLNMJ1tXPbZTtq8tFZy28JT8iJ 0wQFYhlrMxHVUg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:45 2025 by rpki-client