This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json) Hash identifier: 2UYfdqlQOKY47rMOYQUJ7XX12DPEi8fr/1BVB6ESpSU= Subject key identifier: F2:1B:14:CC:EB:3D:7E:36:BB:3E:AF:0E:4D:C3:C5:4A:2E:2F:E7:C5 Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Certificate serial: 019B318CA5730962094268D3AF54CF7C02B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 13:00:59 +0000 Manifest this update: Thu 18 Dec 2025 13:00:59 +0000 Manifest next update: Fri 19 Dec 2025 13:00:59 +0000 Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=) 2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: l6w6JCPiWDNPTBfpAIGwBHsRC1d04Ofhbo8smVmpDJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:a5:73:09:62:09:42:68:d3:af:54:cf:7c:02:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Validity Not Before: Dec 18 13:00:59 2025 GMT Not After : Dec 19 13:00:59 2025 GMT Subject: CN=f21b14cceb3d7e36bb3eaf0e4dc3c54a2e2fe7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:ca:78:22:ba:83:f6:ac:74:f6:e3:77:6d: 6b:f5:3a:2a:64:2e:0e:c7:69:f2:ce:96:a6:f9:5d: c4:63:8f:d5:88:17:14:6a:0b:52:cb:4d:30:53:8f: 78:7a:52:86:62:20:04:f7:69:86:58:09:54:12:a6: 73:e0:31:20:aa:88:67:a6:ca:b7:59:1f:1d:f9:ea: 88:60:fb:1e:6f:fe:84:fc:dc:f0:14:2b:83:d5:06: f6:61:f2:8e:fc:b9:b2:83:be:f6:cf:d0:f1:a1:3b: 0c:73:59:fb:ff:4d:dd:93:f8:11:93:f9:63:c9:6e: 5f:8a:7b:7b:fe:b8:60:08:4b:52:6b:bf:0a:17:1c: ae:d1:af:22:19:89:c3:da:73:6c:c1:00:5b:0b:07: 60:e4:ce:e0:61:5f:71:3a:27:37:54:1a:e7:bb:1e: 06:b6:4d:69:2b:6d:ce:25:c0:1b:28:de:88:b9:1b: ad:69:07:6c:55:3e:17:9e:f2:e7:22:06:ba:cc:74: d9:d2:f1:3c:3c:1a:bb:57:62:75:15:0b:b5:0d:e4: 55:e2:1f:bb:6a:a5:64:cc:5a:0f:ef:09:00:e2:eb: c8:04:83:2a:18:83:95:7d:43:98:75:32:e8:ef:58: 3e:d1:ad:33:15:cd:06:5d:17:55:e1:7d:28:cd:ef: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1B:14:CC:EB:3D:7E:36:BB:3E:AF:0E:4D:C3:C5:4A:2E:2F:E7:C5 X509v3 Authority Key Identifier: keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9f:ed:5c:60:a2:19:81:1a:c4:3b:23:d0:e5:ac:65:a7:9d: b8:c3:61:57:4b:8d:3e:41:31:ca:72:25:f4:8d:5b:9f:83:92: 3e:8b:f6:0c:73:bf:19:fc:4d:75:fb:27:20:33:9b:80:47:89: 91:79:4e:6f:14:fe:45:dd:6e:81:0c:80:de:fa:3e:c0:77:e9: 36:6e:90:29:fd:f2:52:b9:f7:63:8e:8c:31:fc:36:01:2a:83: 92:5f:a3:b5:0f:1f:e3:c2:3c:f6:c7:9a:cc:2d:46:3b:2b:28: 85:59:a2:b2:2d:8d:fc:03:06:44:77:94:02:f1:b9:05:17:b8: 7a:e6:bd:d1:01:af:cd:36:c4:85:d8:7f:38:25:3e:14:7e:8a: 39:cf:b8:cc:40:9d:f4:cb:b3:81:aa:f9:77:e0:80:d9:c0:00: db:3a:0e:b9:83:79:16:6a:6d:9a:12:dd:5e:87:6e:e3:e5:75: 7f:c4:44:9a:ce:36:9c:28:78:6a:40:31:d4:dc:0e:83:a3:d9: 50:df:ea:eb:b0:dd:ff:91:55:f7:ee:ba:31:7a:9a:65:69:c8: e1:31:f1:ae:37:48:db:97:d2:3d:7f:99:37:e3:74:d4:2f:f9: da:da:2c:ed:ee:c1:be:2e:31:35:9f:40:6d:0c:b9:9e:04:c3: db:7d:9e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjKVzCWIJQmjTr1TPfAKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi ZGE4M2IwHhcNMjUxMjE4MTMwMDU5WhcNMjUxMjE5MTMwMDU5WjAzMTEwLwYDVQQD EyhmMjFiMTRjY2ViM2Q3ZTM2YmIzZWFmMGU0ZGMzYzU0YTJlMmZlN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfnKeCK6g/asdPbjd21r9ToqZC4O x2nyzpam+V3EY4/ViBcUagtSy00wU494elKGYiAE92mGWAlUEqZz4DEgqohnpsq3 WR8d+eqIYPseb/6E/NzwFCuD1Qb2YfKO/Lmyg772z9DxoTsMc1n7/03dk/gRk/lj yW5fint7/rhgCEtSa78KFxyu0a8iGYnD2nNswQBbCwdg5M7gYV9xOic3VBrnux4G tk1pK23OJcAbKN6IuRutaQdsVT4XnvLnIga6zHTZ0vE8PBq7V2J1FQu1DeRV4h+7 aqVkzFoP7wkA4uvIBIMqGIOVfUOYdTLo71g+0a0zFc0GXRdV4X0oze9W7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIbFMzrPX42uz6vDk3DxUouL+fFMB8GA1UdIwQY MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2 LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp/tXGCi GYEaxDsj0OWsZaeduMNhV0uNPkExynIl9I1bn4OSPov2DHO/GfxNdfsnIDObgEeJ kXlObxT+Rd1ugQyA3vo+wHfpNm6QKf3yUrn3Y46MMfw2ASqDkl+jtQ8f48I89sea zC1GOysohVmisi2N/AMGRHeUAvG5BRe4eua90QGvzTbEhdh/OCU+FH6KOc+4zECd 9Muzgar5d+CA2cAA2zoOuYN5FmptmhLdXodu4+V1f8REms42nCh4akAx1NwOg6PZ UN/q67Dd/5FV9+66MXqaZWnI4THxrjdI25fSPX+ZN+N01C/52tos7e7Bvi4xNZ9A bQy5ngTD232eKA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:07:56 2025 by rpki-client