This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json) Hash identifier: XwbI/T5KftE964ps1AcDfeFWgONAOQAZ+XdK6CLZddA= Subject key identifier: 55:75:49:DE:7B:DB:D6:31:81:49:6F:13:C7:95:25:E3:A9:56:00:56 Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Certificate serial: 019AF31D5BA5DF7BC12180271B355FB2B803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:02:58 +0000 Manifest this update: Sat 06 Dec 2025 10:02:58 +0000 Manifest next update: Sun 07 Dec 2025 10:02:58 +0000 Files and hashes: 1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=) 2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: Bg6y2Sjn5uAb35WCVRuOVbymQOop8JwD50/H+sjgZXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5b:a5:df:7b:c1:21:80:27:1b:35:5f:b2:b8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Validity Not Before: Dec 6 10:02:58 2025 GMT Not After : Dec 7 10:02:58 2025 GMT Subject: CN=557549de7bdbd63181496f13c79525e3a9560056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a9:a6:36:32:bf:74:09:eb:6c:a7:bd:c2:47: 80:b2:8c:1d:e7:20:1e:ba:d4:16:83:93:65:d2:1a: 07:06:a2:21:9d:2f:53:fe:a0:15:83:1f:6b:0d:d6: 34:2b:e7:e9:78:b2:87:42:2a:6e:02:f7:52:3b:fc: 52:bd:3d:36:a7:ea:9e:8b:29:08:d8:ba:7f:cc:b1: b5:63:93:fd:af:22:b2:83:11:90:7c:83:8d:db:bc: f6:54:ac:84:df:cf:82:6a:95:5d:3a:86:9b:fb:f3: f4:d4:13:f9:e5:5c:bb:0d:01:56:3c:01:f6:f7:43: 96:f8:e0:1f:61:34:b0:9d:60:b9:b5:f6:bb:00:48: ae:0f:af:b5:5b:72:b1:c5:23:4e:89:c1:ae:f6:63: 70:1a:ea:32:08:b9:95:4d:02:99:f5:51:e7:9c:7a: f6:59:71:2b:a4:a3:fb:0f:03:01:8e:59:fc:81:d0: c5:5b:b2:0a:52:51:7e:3e:88:bf:65:91:8f:7b:7d: 5f:0d:11:ef:06:a7:45:3a:28:c2:36:6f:75:0c:ec: dd:47:e1:d9:df:0f:cb:91:4c:9e:c7:8b:7e:ce:6b: 85:42:ee:10:dc:0f:4d:5f:dc:23:c4:76:4b:97:8c: 5f:7e:d3:f8:3d:e2:15:46:eb:ca:a2:84:9b:33:85: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:75:49:DE:7B:DB:D6:31:81:49:6F:13:C7:95:25:E3:A9:56:00:56 X509v3 Authority Key Identifier: keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:20:ed:13:b7:61:6c:19:79:c0:3f:4d:35:c2:ac:9f:72:86: d7:69:15:27:83:bb:59:63:5c:79:05:1b:b2:c7:e7:39:02:28: d3:66:5e:aa:46:74:14:0d:6a:43:59:82:16:92:5f:62:cd:ef: f6:fe:2c:cd:d9:e0:02:07:6a:ec:bb:59:9b:a9:02:00:be:9b: ef:38:6c:4a:ee:47:5c:fb:ef:27:5c:3f:bf:a9:1c:1a:ee:e7: dd:29:3f:23:ef:d9:8b:1d:d5:9c:f4:e9:93:20:66:67:78:a9: 5c:bb:57:35:52:cc:82:0c:09:51:1b:93:01:64:74:0d:dc:fe: e2:37:fc:64:91:0f:41:2c:1d:b0:7c:99:a1:23:45:a1:56:c1: f9:5b:6b:63:1d:2f:25:ae:7f:df:d3:9a:ac:4c:20:96:5d:35: 11:75:29:28:ed:12:fb:f9:22:2c:d9:e8:d1:9e:b0:ff:5e:bc: a2:61:52:f5:21:5a:d4:dd:2c:e4:47:fd:7a:09:0b:a0:ab:82: c8:03:b5:22:41:a8:15:18:49:68:c7:bd:57:05:46:63:e5:3b: 6c:9d:c8:f9:d6:43:45:7e:db:ab:74:49:21:8a:62:65:91:ca: 90:d7:56:67:ce:48:f9:96:7c:76:ab:25:99:6c:1e:44:90:57: 00:05:6c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVul33vBIYAnGzVfsrgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw YjUyZjQwHhcNMjUxMjA2MTAwMjU4WhcNMjUxMjA3MTAwMjU4WjAzMTEwLwYDVQQD Eyg1NTc1NDlkZTdiZGJkNjMxODE0OTZmMTNjNzk1MjVlM2E5NTYwMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66mmNjK/dAnrbKe9wkeAsowd5yAe utQWg5Nl0hoHBqIhnS9T/qAVgx9rDdY0K+fpeLKHQipuAvdSO/xSvT02p+qeiykI 2Lp/zLG1Y5P9ryKygxGQfION27z2VKyE38+CapVdOoab+/P01BP55Vy7DQFWPAH2 90OW+OAfYTSwnWC5tfa7AEiuD6+1W3KxxSNOicGu9mNwGuoyCLmVTQKZ9VHnnHr2 WXErpKP7DwMBjln8gdDFW7IKUlF+Poi/ZZGPe31fDRHvBqdFOijCNm91DOzdR+HZ 3w/LkUyex4t+zmuFQu4Q3A9NX9wjxHZLl4xfftP4PeIVRuvKooSbM4WwGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV1Sd5729YxgUlvE8eVJeOpVgBWMB8GA1UdIwQY MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiDtE7dh bBl5wD9NNcKsn3KG12kVJ4O7WWNceQUbssfnOQIo02ZeqkZ0FA1qQ1mCFpJfYs3v 9v4szdngAgdq7LtZm6kCAL6b7zhsSu5HXPvvJ1w/v6kcGu7n3Sk/I+/Zix3VnPTp kyBmZ3ipXLtXNVLMggwJURuTAWR0Ddz+4jf8ZJEPQSwdsHyZoSNFoVbB+VtrYx0v Ja5/39OarEwgll01EXUpKO0S+/kiLNno0Z6w/168omFS9SFa1N0s5Ef9egkLoKuC yAO1IkGoFRhJaMe9VwVGY+U7bJ3I+dZDRX7bq3RJIYpiZZHKkNdWZ85I+ZZ8dqsl mWweRJBXAAVs2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:16 2025 by rpki-client