This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft File: WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json) Hash identifier: 28p50ii+tPZGN8mNtnMGRZffOZcjN8+ctleVpxbZp+4= Subject key identifier: C2:4D:65:28:D0:32:77:F6:AA:F4:4D:00:FE:41:AF:7E:81:95:86:8A Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 Certificate issuer: /CN=587f5478d1e94f240705722c3789076daf553757 Certificate serial: 019B337B17DDCF17E94EB0888BB82E17EF53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft Manifest number: 02BE Signing time: Thu 18 Dec 2025 22:01:03 +0000 Manifest this update: Thu 18 Dec 2025 22:01:03 +0000 Manifest next update: Fri 19 Dec 2025 22:01:03 +0000 Files and hashes: 1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=) 2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: 8/EeckUGtSqUChBmMnqdQFqbb+zzU/t6f1jiPwnC4mw=) 3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=) 4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:17:dd:cf:17:e9:4e:b0:88:8b:b8:2e:17:ef:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587f5478d1e94f240705722c3789076daf553757 Validity Not Before: Dec 18 22:01:03 2025 GMT Not After : Dec 19 22:01:03 2025 GMT Subject: CN=c24d6528d03277f6aaf44d00fe41af7e8195868a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:fa:6f:6f:c4:a2:65:a8:d4:c1:40:29:4c: cf:28:0c:de:b5:bb:11:18:ba:d2:84:63:72:8a:61: cf:32:08:c4:d6:8a:e1:2c:45:59:47:e9:a5:4c:7e: 3e:1a:d0:58:e5:36:73:4d:8c:e3:c3:b8:90:10:29: a1:b7:00:c1:1c:f0:61:a2:96:74:67:00:41:86:46: e0:13:37:28:ca:d3:04:77:a4:c6:21:7d:ca:35:99: 1c:82:0c:31:ef:7c:4b:a2:e5:50:75:2d:c0:31:d3: 17:7f:c2:ea:a2:d5:d8:23:bf:67:7e:f0:69:ef:e4: 73:a7:52:a9:01:f3:16:29:fa:bb:33:16:9c:66:49: 04:d0:ea:7a:7c:30:50:c4:8d:f9:a5:f9:25:7d:ad: d2:7a:5d:f2:ab:e3:d4:20:fa:ef:38:da:1e:f3:7b: 18:bc:4e:6c:09:49:6a:5b:cb:dd:63:f4:2c:7a:45: 22:2d:73:86:49:63:81:09:ad:f2:ef:b8:62:34:6e: 30:c5:40:b7:35:f9:71:f8:37:0b:2e:9b:5f:62:cd: f2:c1:61:0f:6b:52:14:9b:22:fe:82:e7:94:0a:96: 7f:7c:c0:93:b0:e6:ad:13:fb:ea:7f:3e:38:55:04: f3:99:9f:31:47:27:a1:b2:28:5c:bf:5d:37:6b:0c: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:65:28:D0:32:77:F6:AA:F4:4D:00:FE:41:AF:7E:81:95:86:8A X509v3 Authority Key Identifier: keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:33:bf:19:7f:43:37:dd:71:23:9f:f2:ad:2d:bb:36:01:d6: 9d:eb:02:76:c8:1c:3a:e2:4c:36:c0:ce:51:27:dd:d2:48:e0: 76:9d:9f:18:54:63:f6:4f:e1:d7:93:ec:0f:59:b3:2c:a4:b4: b8:46:ec:a0:3b:d3:2b:6d:d5:10:9a:6c:f6:08:38:f8:01:e3: 85:a0:05:7b:ea:f6:91:bc:6f:4f:87:d8:39:0e:4c:59:6b:9d: 04:33:1d:42:d9:80:09:f5:23:8b:7a:d7:15:75:99:04:15:fd: f5:a5:78:c5:f9:3e:0c:ce:4a:1b:9a:e2:a6:c2:76:13:94:8c: a5:b2:00:c5:9c:c5:12:fd:94:23:6c:a8:db:e2:03:86:af:49: 0d:21:fa:57:8b:6f:25:41:d4:b9:84:31:68:f1:40:d6:40:79: 2a:71:cf:af:f6:9d:3a:b2:d3:14:71:ca:82:b4:48:fa:ae:5f: 3d:4d:ad:4e:26:2e:3c:42:6d:d0:f5:ad:fd:a3:af:61:73:71: d2:f5:45:3b:74:a6:47:23:c6:a9:f4:d4:d8:24:56:ea:2c:52: e4:8b:ed:ba:64:55:80:92:a5:80:6e:83:eb:81:d8:37:94:4c: b9:43:89:93:43:d8:2c:df:65:93:81:7a:9b:d0:50:29:8b:92: 54:d4:2e:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszexfdzxfpTrCIi7guF+9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4N2Y1NDc4ZDFlOTRmMjQwNzA1NzIyYzM3ODkwNzZkYWY1 NTM3NTcwHhcNMjUxMjE4MjIwMTAzWhcNMjUxMjE5MjIwMTAzWjAzMTEwLwYDVQQD EyhjMjRkNjUyOGQwMzI3N2Y2YWFmNDRkMDBmZTQxYWY3ZTgxOTU4NjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k76b2/EomWo1MFAKUzPKAzetbsR GLrShGNyimHPMgjE1orhLEVZR+mlTH4+GtBY5TZzTYzjw7iQECmhtwDBHPBhopZ0 ZwBBhkbgEzcoytMEd6TGIX3KNZkcggwx73xLouVQdS3AMdMXf8LqotXYI79nfvBp 7+Rzp1KpAfMWKfq7MxacZkkE0Op6fDBQxI35pfklfa3Sel3yq+PUIPrvONoe83sY vE5sCUlqW8vdY/QsekUiLXOGSWOBCa3y77hiNG4wxUC3Nflx+DcLLptfYs3ywWEP a1IUmyL+gueUCpZ/fMCTsOatE/vqfz44VQTzmZ8xRyehsihcv103aww7SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJNZSjQMnf2qvRNAP5Br36BlYaKMB8GA1UdIwQY MBaAFFh/VHjR6U8kBwVyLDeJB22vVTdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMt Y2YwMDk5ZTA3MmMzLzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMtY2YwMDk5ZTA3MmMz LzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjO/GX9D N91xI5/yrS27NgHWnesCdsgcOuJMNsDOUSfd0kjgdp2fGFRj9k/h15PsD1mzLKS0 uEbsoDvTK23VEJps9gg4+AHjhaAFe+r2kbxvT4fYOQ5MWWudBDMdQtmACfUji3rX FXWZBBX99aV4xfk+DM5KG5ripsJ2E5SMpbIAxZzFEv2UI2yo2+IDhq9JDSH6V4tv JUHUuYQxaPFA1kB5KnHPr/adOrLTFHHKgrRI+q5fPU2tTiYuPEJt0PWt/aOvYXNx 0vVFO3SmRyPGqfTU2CRW6ixS5IvtumRVgJKlgG6D64HYN5RMuUOJk0PYLN9lk4F6 m9BQKYuSVNQulw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:30 2025 by rpki-client