This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json) Hash identifier: sMOkHPuH/UjiIw6SD1gj24e/Va4T8Z+HNe3JBab7vI8= Subject key identifier: 2F:BD:9C:2A:1E:54:32:3A:EE:63:6B:3F:22:84:7F:DB:6A:EF:3D:DB Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0 Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0 Certificate serial: 019AF1644AD6F3AB1C85E5A5D39A0F3D85A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft Manifest number: 13BE Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=) 2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: YO96YnQ/JFDpUyZyitoySa39DngFva9GtI67luEWeUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4a:d6:f3:ab:1c:85:e5:a5:d3:9a:0f:3d:85:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0 Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=2fbd9c2a1e54323aee636b3f22847fdb6aef3ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:da:60:e0:a5:6e:3a:cc:5c:93:a9:92:5b: b6:12:42:5a:c1:bc:8c:fc:11:b7:96:f7:2b:f9:47: f5:ab:2f:b3:7e:f2:7d:b3:a3:db:0f:f3:97:39:8e: 32:4c:6c:95:94:22:b1:a2:c7:38:c6:44:1e:68:e7: b3:b9:e8:17:21:99:22:6d:6e:3f:98:c0:15:d5:20: 6e:cc:71:0a:60:ef:63:24:21:78:9a:e8:69:ba:72: 54:c8:19:2a:94:39:f0:5c:ca:fe:40:51:e4:07:eb: 08:96:8b:d3:8f:1e:bd:b1:69:03:ae:1c:8f:e8:36: a6:fa:10:83:39:29:66:21:fc:23:70:9c:08:00:ab: 5e:b4:89:a3:f1:d1:e8:f3:2c:c8:63:4e:11:d5:1f: e0:0d:18:ee:6d:bd:d2:9f:ca:fe:57:cd:53:e5:df: e9:bd:b7:40:ac:75:13:39:8a:e8:05:1b:60:cd:2b: 1c:9f:e0:2f:87:92:99:77:93:8c:f3:84:51:3f:1d: 5a:d9:c0:be:36:f5:99:f1:11:de:a9:48:08:22:2c: 64:f8:fb:8e:28:54:75:e8:39:8c:96:58:ca:64:96: c1:4c:37:e4:68:9d:a2:8e:b9:e7:32:a1:59:84:87: fb:f2:92:83:11:7f:ee:62:c1:30:68:a5:70:e6:6e: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BD:9C:2A:1E:54:32:3A:EE:63:6B:3F:22:84:7F:DB:6A:EF:3D:DB X509v3 Authority Key Identifier: keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ab:e6:83:e3:94:85:38:f9:1c:b0:be:45:1f:f3:a1:38:f7: 71:01:76:d9:9b:d6:64:12:86:e5:24:7a:06:36:36:38:ba:09: a7:b4:17:68:b2:87:94:4b:d6:9f:42:4e:74:81:b8:e0:8b:f3: 57:af:f5:ee:e4:14:ca:1a:ce:9d:50:ca:7c:6b:01:d0:c9:c3: d1:73:9f:2c:86:7f:db:fb:46:5e:df:5e:0b:3c:df:de:aa:e8: b8:c6:65:2f:45:9b:eb:8e:e6:2d:17:07:f1:b9:08:f2:00:32: 9f:50:64:f7:27:9e:83:ec:1c:e9:c9:c3:da:f2:98:00:ea:8d: 27:18:c8:ab:1d:c0:a9:cc:e6:a5:11:ce:f6:d5:68:ad:1b:b7: 8e:0b:a7:6a:60:e2:fd:02:91:2d:9a:3a:30:70:29:a4:2c:61: 7f:bc:4d:b4:f0:5a:5c:1e:07:c7:9f:02:e4:0c:6e:4c:2b:0d: b2:26:03:8f:0b:b2:59:12:8d:f3:63:6c:e2:f4:a9:23:24:b1: 13:18:30:99:19:9e:88:4a:7f:a5:87:39:a7:a2:9c:4c:a6:c2: bd:54:0d:58:5a:75:dc:89:ac:1c:95:94:40:46:b5:e9:18:4a: bb:89:22:aa:c9:be:af:a1:6d:44:d3:d2:65:b3:5c:9f:00:96: 36:30:2f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZErW86scheWl05oPPYWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw NjUzYTAwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD EygyZmJkOWMyYTFlNTQzMjNhZWU2MzZiM2YyMjg0N2ZkYjZhZWYzZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul7aYOClbjrMXJOpklu2EkJawbyM /BG3lvcr+Uf1qy+zfvJ9s6PbD/OXOY4yTGyVlCKxosc4xkQeaOezuegXIZkibW4/ mMAV1SBuzHEKYO9jJCF4muhpunJUyBkqlDnwXMr+QFHkB+sIlovTjx69sWkDrhyP 6Dam+hCDOSlmIfwjcJwIAKtetImj8dHo8yzIY04R1R/gDRjubb3Sn8r+V81T5d/p vbdArHUTOYroBRtgzSscn+Avh5KZd5OM84RRPx1a2cC+NvWZ8RHeqUgIIixk+PuO KFR16DmMlljKZJbBTDfkaJ2ijrnnMqFZhIf78pKDEX/uYsEwaKVw5m7r5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+9nCoeVDI67mNrPyKEf9tq7z3bMB8GA1UdIwQY MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt Y2QyZjU3NzFkYTk4LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4 LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJavmg+OU hTj5HLC+RR/zoTj3cQF22ZvWZBKG5SR6BjY2OLoJp7QXaLKHlEvWn0JOdIG44Ivz V6/17uQUyhrOnVDKfGsB0MnD0XOfLIZ/2/tGXt9eCzzf3qrouMZlL0Wb647mLRcH 8bkI8gAyn1Bk9yeeg+wc6cnD2vKYAOqNJxjIqx3AqczmpRHO9tVorRu3jgunamDi /QKRLZo6MHAppCxhf7xNtPBaXB4Hx58C5AxuTCsNsiYDjwuyWRKN82Ns4vSpIySx ExgwmRmeiEp/pYc5p6KcTKbCvVQNWFp13ImsHJWUQEa16RhKu4kiqsm+r6FtRNPS ZbNcnwCWNjAv1g== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:34 2025 by rpki-client