This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft File: WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json) Hash identifier: XJNIy0nhKqAVz+9+OcyF/9/a/KvbE2Dw3O2nNhBFScQ= Subject key identifier: AC:FF:10:BE:C3:B7:8B:CF:9D:49:F0:A8:1C:05:6B:83:0B:55:55:E4 Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe Certificate serial: 019B3343B60E1405EE731807519E8462A1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft Manifest number: 14C8 Signing time: Thu 18 Dec 2025 21:00:34 +0000 Manifest this update: Thu 18 Dec 2025 21:00:34 +0000 Manifest next update: Fri 19 Dec 2025 21:00:34 +0000 Files and hashes: 1: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: 4FpZOKcYjQDP7Ip66eyQmkF+iXUzf6JwAOzmHx9JHdQ=) 2: za5pr_RdRVQCTgLd3W2Y-u8ZZIo.roa (hash: HsG6G2W0gO0SbTM6V5Eodd4DUw2y9g6vatwqlX3nzOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:b6:0e:14:05:ee:73:18:07:51:9e:84:62:a1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe Validity Not Before: Dec 18 21:00:34 2025 GMT Not After : Dec 19 21:00:34 2025 GMT Subject: CN=acff10bec3b78bcf9d49f0a81c056b830b5555e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:41:8d:0e:85:b2:28:46:af:57:54:1d:64: d0:37:f5:ed:7b:b5:59:29:5e:0b:ff:f9:cc:5d:18: 23:48:5b:d7:e2:de:cf:07:e7:3c:12:da:ac:86:0c: 9d:80:dd:ff:7b:09:99:43:4a:69:37:e4:05:f7:c1: d6:61:c5:44:40:4f:5c:bf:c8:57:66:a6:11:83:e7: 7b:e2:df:7a:b9:2d:17:e6:65:86:78:31:5a:0e:70: 14:77:fb:4f:02:9e:a3:bd:d9:0a:2c:25:ab:71:dd: 81:51:a7:fa:77:c4:a4:d9:59:d2:d5:4d:f8:dd:42: 28:79:6c:6d:bb:00:cb:ed:62:8d:58:2a:52:a5:33: 83:6b:15:3e:3d:00:6f:cb:26:7b:d6:60:87:d5:73: 37:6f:7c:1b:4b:12:25:bf:b1:9d:3f:23:b5:8b:d3: cf:fb:4b:53:bb:7c:27:ab:96:03:54:52:18:03:ca: e9:5a:81:44:53:10:02:8b:fc:c7:fc:b2:b9:9f:d4: 03:45:4a:db:ba:1f:41:f9:e1:32:3d:67:c5:e1:e9: 62:0d:37:df:05:24:d7:12:e5:94:ff:c3:19:92:b5: 36:be:0c:29:d7:d1:fe:32:25:57:b9:c4:34:a4:af: a8:8c:b4:07:33:71:54:e1:f1:29:54:95:d0:41:f7: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FF:10:BE:C3:B7:8B:CF:9D:49:F0:A8:1C:05:6B:83:0B:55:55:E4 X509v3 Authority Key Identifier: keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a8:99:86:45:d4:4f:32:91:14:aa:d6:88:bc:56:59:f6:88: c3:16:04:c7:93:6d:40:17:c1:18:fd:ed:4b:dd:55:26:b1:27: bc:82:9c:36:3f:b1:43:f7:3b:6e:8e:28:4b:62:43:7c:22:86: fa:97:65:e2:05:fe:95:09:3d:26:1f:ac:c8:70:0f:71:a6:57: 89:38:81:de:48:78:70:7d:c1:c6:73:33:33:1d:be:d7:c2:ef: ac:27:23:89:04:37:ec:54:d0:71:17:7c:d7:15:1c:71:12:8f: 01:c9:9b:f9:71:44:f9:bb:17:c9:ac:c1:9d:0e:de:64:92:8f: 55:95:76:6e:d9:31:1f:bc:3c:aa:38:74:2e:20:5c:0c:c4:4f: 71:cc:4d:69:af:1d:d2:92:9f:5c:8a:39:e0:9b:7b:4c:8d:b9: 20:de:3a:40:b5:01:67:e0:87:41:0c:81:66:a2:40:39:a5:7a: b3:82:04:a7:d7:e3:bc:ca:b3:e8:7c:5b:98:8a:48:00:99:00: cb:1e:33:66:61:b0:3d:2a:08:33:63:37:2f:c3:ac:63:0c:35: b1:92:68:4b:84:c2:28:2f:64:ae:2e:f2:6b:9c:66:85:5f:08: 5d:91:60:ae:2f:34:e4:76:09:99:3a:52:4e:36:ff:38:14:6a: f0:4c:c3:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ7YOFAXucxgHUZ6EYqHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Nzg4ZjM4NDI2ZTAzNjJiMzRkZDU2NzM0M2ZlODQ2MWE1 OGJhYmUwHhcNMjUxMjE4MjEwMDM0WhcNMjUxMjE5MjEwMDM0WjAzMTEwLwYDVQQD EyhhY2ZmMTBiZWMzYjc4YmNmOWQ0OWYwYTgxYzA1NmI4MzBiNTU1NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RFBjQ6FsihGr1dUHWTQN/Xte7VZ KV4L//nMXRgjSFvX4t7PB+c8EtqshgydgN3/ewmZQ0ppN+QF98HWYcVEQE9cv8hX ZqYRg+d74t96uS0X5mWGeDFaDnAUd/tPAp6jvdkKLCWrcd2BUaf6d8Sk2VnS1U34 3UIoeWxtuwDL7WKNWCpSpTODaxU+PQBvyyZ71mCH1XM3b3wbSxIlv7GdPyO1i9PP +0tTu3wnq5YDVFIYA8rpWoFEUxACi/zH/LK5n9QDRUrbuh9B+eEyPWfF4eliDTff BSTXEuWU/8MZkrU2vgwp19H+MiVXucQ0pK+ojLQHM3FU4fEpVJXQQfcZTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz/EL7Dt4vPnUnwqBwFa4MLVVXkMB8GA1UdIwQY MBaAFFh4jzhCbgNis03VZzQ/6EYaWLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQt YmZjMGZmOTdhMTkwLzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQtYmZjMGZmOTdhMTkw LzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqiZhkXU TzKRFKrWiLxWWfaIwxYEx5NtQBfBGP3tS91VJrEnvIKcNj+xQ/c7bo4oS2JDfCKG +pdl4gX+lQk9Jh+syHAPcaZXiTiB3kh4cH3BxnMzMx2+18LvrCcjiQQ37FTQcRd8 1xUccRKPAcmb+XFE+bsXyazBnQ7eZJKPVZV2btkxH7w8qjh0LiBcDMRPccxNaa8d 0pKfXIo54Jt7TI25IN46QLUBZ+CHQQyBZqJAOaV6s4IEp9fjvMqz6HxbmIpIAJkA yx4zZmGwPSoIM2M3L8OsYww1sZJoS4TCKC9kri7ya5xmhV8IXZFgri805HYJmTpS Tjb/OBRq8EzDmg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:35:11 2025 by rpki-client