This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json) Hash identifier: MvDvy/VqJf5ugNKoZXlO0BP/nDbnS7M1b1WdGL+Hwrk= Subject key identifier: 0A:BA:29:BB:2E:90:8D:BA:DA:CE:4D:4A:B1:2D:38:C1:F2:AE:67:90 Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63 Certificate serial: 019B5976928627E266B6F9EE56B60495AECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft Manifest number: 0245 Signing time: Fri 26 Dec 2025 07:01:41 +0000 Manifest this update: Fri 26 Dec 2025 07:01:41 +0000 Manifest next update: Sat 27 Dec 2025 07:01:41 +0000 Files and hashes: 1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: r98zLfOfQuEjECUvfiru2vUn2LRiU9J15nYipumCjp8=) 2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:92:86:27:e2:66:b6:f9:ee:56:b6:04:95:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63 Validity Not Before: Dec 26 07:01:41 2025 GMT Not After : Dec 27 07:01:41 2025 GMT Subject: CN=0aba29bb2e908dbadace4d4ab12d38c1f2ae6790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:eb:19:f1:60:86:39:6c:38:9b:7c:fd:0e: 5a:e4:56:4a:97:dd:7a:91:72:ed:ab:44:8d:80:56: e8:ed:e2:f0:cf:18:fb:ff:97:c2:04:ef:cc:7c:c7: d7:d0:15:28:64:17:87:8f:7d:22:ef:fa:64:9a:06: 0a:b5:00:5a:ec:6f:13:59:57:9a:30:61:3b:bd:43: fe:5d:66:5d:8f:39:8a:6d:a2:d6:f9:bd:8a:56:e9: 22:9d:95:8d:36:21:47:c3:3d:a2:31:be:39:ab:f6: ac:35:a2:f6:6c:bf:4e:6c:f3:b6:3a:7c:60:74:fd: 45:b9:5a:b1:c6:32:ca:8e:ce:9e:6c:f6:af:7f:5d: be:7a:87:6b:16:18:a1:a2:3b:77:af:e2:5c:36:86: 53:89:67:e0:a4:52:bc:3e:2b:e4:2e:bb:47:8f:23: cc:42:0e:72:e2:ed:1b:65:7d:0b:2f:52:20:d3:ce: e6:a7:cd:5b:d3:0d:09:fb:ad:75:c5:a0:56:6a:61: e5:07:a7:e6:f1:bc:de:67:68:00:83:05:d6:c9:12: e5:18:fb:2b:b3:bb:74:42:05:a1:30:27:5f:06:0e: 44:5c:5c:ab:2e:f2:40:f2:f5:9c:78:d3:e3:c3:ff: 07:cb:c8:b2:8a:01:45:7e:81:65:87:0c:d6:32:40: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BA:29:BB:2E:90:8D:BA:DA:CE:4D:4A:B1:2D:38:C1:F2:AE:67:90 X509v3 Authority Key Identifier: keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ad:53:6f:5b:63:f1:55:7f:fc:a0:c8:30:cf:ba:bd:6e:c6: 08:0c:e7:ce:21:32:5a:b4:fc:e3:61:2e:2c:46:18:14:0a:a7: 21:62:f9:14:2e:da:af:a8:f5:d0:84:4e:04:b0:5a:2f:65:ac: ed:26:6e:f2:09:f3:db:86:4d:48:e3:36:b9:aa:85:df:5d:b4: cc:39:f7:1f:a8:d2:ac:94:8f:11:d9:1a:f5:e0:e4:30:cb:aa: 52:35:28:f3:9a:4a:58:c6:77:ea:e0:a1:1d:80:b4:e2:f1:17: ea:45:4e:18:df:e4:aa:29:79:43:58:6a:c4:cc:95:f4:0e:57: 77:35:3b:49:f5:3b:d4:62:76:99:2e:b3:6f:bb:fc:1e:fa:cc: 68:cd:c8:1b:cf:6d:24:37:6a:0f:f8:87:6b:c1:43:03:bb:65: ea:f7:cc:33:43:f7:08:d0:3a:4b:64:90:8a:2c:81:05:85:5c: df:46:20:a6:2e:e2:88:48:ff:d5:9f:49:82:2b:29:3a:fb:f6: af:48:d5:e1:e1:96:af:21:8a:ce:42:51:c4:bb:85:67:e6:82: cf:c2:51:57:fa:05:0e:ee:db:eb:a8:27:0b:05:fb:33:e7:64: 9d:16:fd:96:dc:ac:33:cc:b9:ff:2e:e6:82:35:1a:da:11:67: 4f:79:bb:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpKGJ+JmtvnuVrYEla7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjU4N2U0ZTA3YWNkZmIzODllMjU5MTYxZGExODZiMzg2 YjRmNjMwHhcNMjUxMjI2MDcwMTQxWhcNMjUxMjI3MDcwMTQxWjAzMTEwLwYDVQQD EygwYWJhMjliYjJlOTA4ZGJhZGFjZTRkNGFiMTJkMzhjMWYyYWU2NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5brGfFghjlsOJt8/Q5a5FZKl916 kXLtq0SNgFbo7eLwzxj7/5fCBO/MfMfX0BUoZBeHj30i7/pkmgYKtQBa7G8TWVea MGE7vUP+XWZdjzmKbaLW+b2KVukinZWNNiFHwz2iMb45q/asNaL2bL9ObPO2Onxg dP1FuVqxxjLKjs6ebPavf12+eodrFhihojt3r+JcNoZTiWfgpFK8PivkLrtHjyPM Qg5y4u0bZX0LL1Ig087mp81b0w0J+611xaBWamHlB6fm8bzeZ2gAgwXWyRLlGPsr s7t0QgWhMCdfBg5EXFyrLvJA8vWceNPjw/8Hy8iyigFFfoFlhwzWMkBB1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq6KbsukI262s5NSrEtOMHyrmeQMB8GA1UdIwQY MBaAFD/1h+Tges37OJ4lkWHaGGs4a09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEt NTZmYTA2YzQzMTgwLzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEtNTZmYTA2YzQzMTgw LzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK1Tb1tj 8VV//KDIMM+6vW7GCAznziEyWrT842EuLEYYFAqnIWL5FC7ar6j10IROBLBaL2Ws 7SZu8gnz24ZNSOM2uaqF3120zDn3H6jSrJSPEdka9eDkMMuqUjUo85pKWMZ36uCh HYC04vEX6kVOGN/kqil5Q1hqxMyV9A5XdzU7SfU71GJ2mS6zb7v8HvrMaM3IG89t JDdqD/iHa8FDA7tl6vfMM0P3CNA6S2SQiiyBBYVc30Ygpi7iiEj/1Z9JgispOvv2 r0jV4eGWryGKzkJRxLuFZ+aCz8JRV/oFDu7b66gnCwX7M+dknRb9ltysM8y5/y7m gjUa2hFnT3m72A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:50 2025 by rpki-client