This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft File: WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json) Hash identifier: 5xgLCC4q6mLtjeF9TNm9E/v4Ce3xXGwaWnb6tQR8W3Y= Subject key identifier: AD:FA:5B:84:A3:DD:15:C9:26:1B:A9:18:36:9E:79:1B:CF:C6:D7:1B Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0 Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0 Certificate serial: 019AF0BF9FFA1BCA46C1144F39D3270764E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft Manifest number: 1745 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: 4Kwxj4Vu5Gl0qjC+RXziC8LvIpDSK6kVnBiz4flZD54=) 2: xpr6j5qD5UdOagMSyrjdwDfXHto.roa (hash: Mriecoo+rGC6VfC/mDPx2uqP6uBkHc2BL1+0p0xJdvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9f:fa:1b:ca:46:c1:14:4f:39:d3:27:07:64:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0 Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=adfa5b84a3dd15c9261ba918369e791bcfc6d71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:9d:2d:f6:3f:50:91:34:6d:63:e4:ab:d3: 32:64:9d:2c:0b:1b:6f:ca:6a:c0:af:a3:bf:5b:04: 2a:a6:b6:e1:1f:74:08:79:fa:d5:96:16:d7:03:2a: c4:48:64:f9:77:2e:1a:d3:0c:41:0c:7d:b1:c4:b9: 04:0a:b9:88:1c:4a:be:30:a2:a5:9f:2b:9d:a8:97: 6f:e2:43:db:d4:0c:6e:51:02:da:26:bc:5a:0c:9b: b9:6c:14:00:68:76:31:58:ab:39:9b:bf:e1:f6:ef: 67:64:30:6e:6b:f9:10:b1:30:a9:11:bd:47:db:5f: 26:0f:3a:5b:da:b3:74:ac:51:0d:81:8e:92:65:4f: cf:43:7c:d5:bd:e4:74:67:69:ed:91:4f:e5:fd:02: 71:31:6a:de:35:4b:3c:c4:f8:84:4e:ae:65:2b:70: 03:6e:64:aa:7e:3e:22:a7:48:8f:13:46:cc:ee:8f: fc:2e:c2:84:ff:f0:75:a7:cf:40:3c:ee:51:36:cb: f1:f4:77:93:24:25:9a:07:02:fc:85:34:9e:21:b5: 2d:7f:f9:4c:04:a9:37:44:c7:1f:e6:17:16:22:bf: c9:c1:1f:67:2d:4a:16:11:52:21:4b:57:c3:1f:f2: d0:cd:98:8c:3e:86:20:49:bb:80:1b:14:43:d9:7b: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:5B:84:A3:DD:15:C9:26:1B:A9:18:36:9E:79:1B:CF:C6:D7:1B X509v3 Authority Key Identifier: keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:ad:37:08:3e:fd:0e:b5:60:02:1e:29:75:08:fe:35:1f:ca: c8:79:c9:07:6b:e3:da:db:d6:e2:b0:42:f7:3d:80:58:42:70: f3:b7:a2:c0:cc:71:c9:ab:c8:d7:9e:c3:de:4a:ab:19:89:5a: c4:ee:f8:69:b5:53:a0:13:bd:49:9f:ba:b1:e8:eb:de:31:90: 28:39:95:de:d1:85:ff:2b:6a:24:21:85:40:8b:35:ca:b8:fb: f4:ce:4a:1c:1d:38:67:ac:8e:10:01:a1:bb:e3:01:65:04:bc: 17:93:6d:3d:66:6f:af:11:15:e8:73:bf:bb:69:2d:d1:14:63: ae:55:45:c4:3a:ff:c9:58:27:5a:27:c5:ac:fc:da:82:a5:6b: 1e:dd:10:e3:30:1a:12:b5:01:78:22:fe:39:84:61:98:a4:e2: 6d:e1:de:0b:3c:13:2c:ef:d8:80:8e:0d:10:a9:97:16:43:4e: bb:fa:8d:91:ce:81:e7:35:7a:2f:7b:58:28:fb:08:7b:9e:2c: 81:dd:55:e4:b2:85:dc:13:a2:7e:f1:53:e0:06:66:73:44:d6: 60:ac:53:a9:51:dc:e2:6d:20:4f:6f:43:82:23:c5:15:23:9f: 70:ce:b5:88:86:5f:6e:77:3a:8e:c5:b5:cd:3a:a8:c8:63:32: da:43:d5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5/6G8pGwRRPOdMnB2TnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4N2VkN2U5Zjk4YTFmMTk3NWVlOWZiY2IwOTVjM2FkZmEy OGFlYzAwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD EyhhZGZhNWI4NGEzZGQxNWM5MjYxYmE5MTgzNjllNzkxYmNmYzZkNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlGdLfY/UJE0bWPkq9MyZJ0sCxtv ymrAr6O/WwQqprbhH3QIefrVlhbXAyrESGT5dy4a0wxBDH2xxLkECrmIHEq+MKKl nyudqJdv4kPb1AxuUQLaJrxaDJu5bBQAaHYxWKs5m7/h9u9nZDBua/kQsTCpEb1H 218mDzpb2rN0rFENgY6SZU/PQ3zVveR0Z2ntkU/l/QJxMWreNUs8xPiETq5lK3AD bmSqfj4ip0iPE0bM7o/8LsKE//B1p89APO5RNsvx9HeTJCWaBwL8hTSeIbUtf/lM BKk3RMcf5hcWIr/JwR9nLUoWEVIhS1fDH/LQzZiMPoYgSbuAGxRD2XvzJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK36W4Sj3RXJJhupGDaeeRvPxtcbMB8GA1UdIwQY MBaAFFh+1+n5ih8Zde6fvLCVw636KK7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2Yzct MGE5ZTNjYjRkYzEzLzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hMDY0MDctYTFmMi00YjQ3LTk2YzctMGE5ZTNjYjRkYzEz LzEvV0g3WDZmbUtIeGwxN3AtOHNKWERyZm9vcnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4K03CD79 DrVgAh4pdQj+NR/KyHnJB2vj2tvW4rBC9z2AWEJw87eiwMxxyavI157D3kqrGYla xO74abVToBO9SZ+6sejr3jGQKDmV3tGF/ytqJCGFQIs1yrj79M5KHB04Z6yOEAGh u+MBZQS8F5NtPWZvrxEV6HO/u2kt0RRjrlVFxDr/yVgnWifFrPzagqVrHt0Q4zAa ErUBeCL+OYRhmKTibeHeCzwTLO/YgI4NEKmXFkNOu/qNkc6B5zV6L3tYKPsIe54s gd1V5LKF3BOifvFT4AZmc0TWYKxTqVHc4m0gT29DgiPFFSOfcM61iIZfbnc6jsW1 zTqoyGMy2kPVzA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:58 2025 by rpki-client