This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json) Hash identifier: 8nrmTRUMBzDHCpZJ1m35fpN8hOspByuY06CEjeJunz4= Subject key identifier: 6C:FF:62:D4:4E:34:E8:56:72:3D:B3:B1:AD:03:20:F2:7E:1D:61:7A Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Certificate serial: 019AF3C09DA556460DC9BF311399F3E2746B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:01:18 +0000 Manifest this update: Sat 06 Dec 2025 13:01:18 +0000 Manifest next update: Sun 07 Dec 2025 13:01:18 +0000 Files and hashes: 1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=) 2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: dMxbhXDzCrHuKOQXr+15HLw/M4Ct4qo/vPROpTX1gj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:9d:a5:56:46:0d:c9:bf:31:13:99:f3:e2:74:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Validity Not Before: Dec 6 13:01:18 2025 GMT Not After : Dec 7 13:01:18 2025 GMT Subject: CN=6cff62d44e34e856723db3b1ad0320f27e1d617a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:d0:4a:f6:20:3e:38:3e:29:59:92:ed:94: a5:55:66:e1:62:51:24:72:0c:7a:36:8a:00:07:12: 56:10:c0:90:28:86:69:57:89:b5:c0:0a:eb:56:d2: b1:5a:f0:d0:05:d3:14:b5:86:58:7b:5b:03:50:6b: c0:0c:d2:b8:96:ce:96:29:14:74:f6:42:83:73:e8: bd:79:c1:0b:8a:a8:82:a9:6f:4b:6d:8d:bf:9a:5f: c6:f6:bd:5e:75:1b:77:49:42:f1:5e:e3:cf:57:e6: ad:3e:c8:e4:bd:f2:67:c0:2f:31:d8:33:dd:82:03: bf:a7:38:94:d9:61:cc:68:24:13:49:d8:e9:d8:6c: 70:73:b3:7e:89:8e:29:74:14:8d:0c:98:eb:6f:ca: a6:a8:37:5d:08:fa:e4:d5:02:8f:e1:3a:df:13:7b: 92:e9:78:0f:bc:e5:fb:b5:7e:d9:06:9e:19:57:3e: 9c:f0:e1:4c:d8:da:01:a9:9a:9a:e4:1b:99:b5:ed: 3a:dc:06:ab:8b:cc:d9:14:c8:2a:72:c7:0f:90:c1: aa:0d:f0:9f:12:f3:0a:1f:7d:21:b3:56:67:e8:f2: 73:13:4d:3b:c1:54:f6:74:af:99:55:02:dd:2b:2c: b9:dd:ca:f6:23:4a:97:aa:82:c0:17:84:ee:29:ac: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FF:62:D4:4E:34:E8:56:72:3D:B3:B1:AD:03:20:F2:7E:1D:61:7A X509v3 Authority Key Identifier: keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:12:a9:63:b5:83:a6:e3:3d:d4:95:9a:19:5d:8d:f9:69:99: 63:37:9e:fc:e7:9f:fa:72:b2:ba:34:69:70:bc:0c:68:8c:3b: 83:24:f9:bc:e4:59:a0:42:95:c3:4f:df:db:32:11:e3:4e:d2: 3b:fc:fe:cc:6f:0d:88:89:1e:93:56:dc:46:64:20:57:48:c4: 12:50:58:51:06:40:db:21:72:b2:68:2e:d8:80:f5:13:9e:d0: 2d:df:42:11:dc:90:f3:4b:2d:a2:cf:85:fd:01:3c:64:35:a8: 6c:29:43:b7:e1:66:50:82:26:8e:d2:31:76:dd:92:fb:cf:30: d9:83:37:d8:70:89:b7:6a:e0:05:88:db:44:f8:4e:04:93:0b: 52:93:f1:3c:df:64:1f:c8:b3:55:fc:2b:5e:e7:f1:ba:eb:73: cc:0b:6b:9a:d6:e6:65:17:ae:86:fd:ac:8a:1f:08:b5:14:f2: 51:fd:5f:b6:82:60:30:60:41:92:86:8e:1c:8a:3b:39:24:c1: c2:e8:aa:ce:9f:3b:71:2e:dd:05:82:2b:f7:b1:a9:4a:80:72: 61:28:3d:e5:86:db:02:26:4b:40:b8:f5:b9:39:11:8e:6f:f5: cc:46:7c:fc:97:cb:f8:33:03:91:08:9f:18:81:75:25:5f:29: 4b:c2:fd:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJ2lVkYNyb8xE5nz4nRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi ZGE4M2IwHhcNMjUxMjA2MTMwMTE4WhcNMjUxMjA3MTMwMTE4WjAzMTEwLwYDVQQD Eyg2Y2ZmNjJkNDRlMzRlODU2NzIzZGIzYjFhZDAzMjBmMjdlMWQ2MTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYHQSvYgPjg+KVmS7ZSlVWbhYlEk cgx6NooABxJWEMCQKIZpV4m1wArrVtKxWvDQBdMUtYZYe1sDUGvADNK4ls6WKRR0 9kKDc+i9ecELiqiCqW9LbY2/ml/G9r1edRt3SULxXuPPV+atPsjkvfJnwC8x2DPd ggO/pziU2WHMaCQTSdjp2Gxwc7N+iY4pdBSNDJjrb8qmqDddCPrk1QKP4TrfE3uS 6XgPvOX7tX7ZBp4ZVz6c8OFM2NoBqZqa5BuZte063Aari8zZFMgqcscPkMGqDfCf EvMKH30hs1Zn6PJzE007wVT2dK+ZVQLdKyy53cr2I0qXqoLAF4TuKazWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz/YtRONOhWcj2zsa0DIPJ+HWF6MB8GA1UdIwQY MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2 LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxKpY7WD puM91JWaGV2N+WmZYzee/Oef+nKyujRpcLwMaIw7gyT5vORZoEKVw0/f2zIR407S O/z+zG8NiIkek1bcRmQgV0jEElBYUQZA2yFysmgu2ID1E57QLd9CEdyQ80stos+F /QE8ZDWobClDt+FmUIImjtIxdt2S+88w2YM32HCJt2rgBYjbRPhOBJMLUpPxPN9k H8izVfwrXufxuutzzAtrmtbmZReuhv2sih8ItRTyUf1ftoJgMGBBkoaOHIo7OSTB wuiqzp87cS7dBYIr97GpSoByYSg95YbbAiZLQLj1uTkRjm/1zEZ8/JfL+DMDkQif GIF1JV8pS8L92A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:03 2025 by rpki-client