This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json) Hash identifier: 2ynlMsOOPhGB1vo9eOgNVrNaTKleIo22DtX3wJ9DAUQ= Subject key identifier: 07:2D:0B:8E:00:E1:BF:20:B9:FD:B4:05:CF:BC:73:ED:01:5B:6A:BB Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Certificate serial: 019B0E24D3ED44BC5BFAD2FDE2F6118062DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 16:00:53 +0000 Manifest this update: Thu 11 Dec 2025 16:00:53 +0000 Manifest next update: Fri 12 Dec 2025 16:00:53 +0000 Files and hashes: 1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=) 2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: UJWEJ3oYirmfTgrVnzKbRvav0mqAFQdb0gM9FQ8nIww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:d3:ed:44:bc:5b:fa:d2:fd:e2:f6:11:80:62:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Validity Not Before: Dec 11 16:00:53 2025 GMT Not After : Dec 12 16:00:53 2025 GMT Subject: CN=072d0b8e00e1bf20b9fdb405cfbc73ed015b6abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:f2:c7:ea:54:28:ce:77:60:fb:d9:ab:58: 97:4c:ff:90:20:7a:64:21:ca:43:ba:45:4f:de:80: 16:a3:d6:fb:ae:ff:95:4c:be:51:8f:1f:01:4f:40: 8e:7e:ec:05:94:9c:73:3b:38:d0:7a:63:e0:12:a5: fe:d1:9a:19:cb:5f:6a:b0:a4:25:2f:07:54:cc:5b: 62:48:90:6c:35:96:22:ee:ea:e0:76:92:1b:54:4e: c4:2b:c2:2a:be:15:47:17:96:49:c2:38:92:4e:e8: c7:59:f2:e0:a3:31:81:41:77:b6:40:8b:f7:be:a7: 7d:93:b4:10:5e:04:da:c5:f8:eb:bf:9a:13:86:65: 01:60:88:c1:76:c1:ba:d9:53:9c:a8:aa:31:a9:c6: 20:26:fd:4c:c1:64:e2:7e:a9:48:8c:05:4c:6c:fe: 5a:73:43:25:8e:f7:6a:60:83:4b:ef:54:ee:f3:48: 94:21:a1:f8:ea:e8:d7:c3:dc:5a:76:93:94:c9:9a: 31:ae:c7:0e:88:7c:dc:4c:76:a4:40:7e:0b:c7:4a: a8:cc:a9:35:3e:e6:e5:de:55:61:75:f9:0d:03:78: 2a:d6:b5:ba:6f:09:96:1a:e9:4b:6e:8f:78:bd:b5: 35:58:b0:66:73:c9:a5:35:1c:61:72:ed:ff:20:4b: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2D:0B:8E:00:E1:BF:20:B9:FD:B4:05:CF:BC:73:ED:01:5B:6A:BB X509v3 Authority Key Identifier: keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:93:78:62:3f:7a:9c:9f:5b:96:f3:97:3a:bd:8d:d4:46:1f: e1:4b:ec:d7:22:3f:64:09:ad:ba:7c:df:8f:b0:fa:b0:11:ed: 8f:73:8f:d2:4c:08:a9:32:92:1e:da:c3:12:8b:ed:cb:7c:79: db:0c:3b:8c:da:11:31:79:bc:f1:5e:26:65:1d:ce:ef:f7:54: d5:89:45:23:f9:4e:82:16:1c:8a:ae:4f:bf:32:01:17:ca:db: 03:e3:62:4a:ab:18:84:a9:9d:0e:2d:ff:93:2c:cf:fa:6a:c7: d5:84:0b:b8:ae:dd:23:3f:fd:5b:c9:77:bb:35:5a:ed:8c:7f: db:93:e9:68:30:d5:2d:24:cd:77:8c:6b:58:09:ea:68:96:ab: fa:26:69:87:0a:7c:18:02:ad:49:73:cd:9a:4a:59:49:ba:df: ae:cd:1f:dc:bf:98:57:1b:42:c7:72:9d:22:49:5a:ab:e9:7b: a2:88:a3:32:24:78:fa:af:7c:5f:e6:33:19:76:87:fc:bb:a5: a1:07:6e:05:0d:40:15:7a:f8:e9:12:6f:6c:a2:9e:ca:b9:c9: 54:5d:57:77:f1:7e:36:a9:44:9a:f5:71:86:44:09:3e:0e:73: 12:0c:4c:0d:1b:27:bd:1e:78:a8:c9:4c:68:3c:ed:5e:4c:0f: 28:d7:8d:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJNPtRLxb+tL94vYRgGLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw YjUyZjQwHhcNMjUxMjExMTYwMDUzWhcNMjUxMjEyMTYwMDUzWjAzMTEwLwYDVQQD EygwNzJkMGI4ZTAwZTFiZjIwYjlmZGI0MDVjZmJjNzNlZDAxNWI2YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydnyx+pUKM53YPvZq1iXTP+QIHpk IcpDukVP3oAWo9b7rv+VTL5Rjx8BT0COfuwFlJxzOzjQemPgEqX+0ZoZy19qsKQl LwdUzFtiSJBsNZYi7urgdpIbVE7EK8IqvhVHF5ZJwjiSTujHWfLgozGBQXe2QIv3 vqd9k7QQXgTaxfjrv5oThmUBYIjBdsG62VOcqKoxqcYgJv1MwWTifqlIjAVMbP5a c0MljvdqYINL71Tu80iUIaH46ujXw9xadpOUyZoxrscOiHzcTHakQH4Lx0qozKk1 Publ3lVhdfkNA3gq1rW6bwmWGulLbo94vbU1WLBmc8mlNRxhcu3/IEsFcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFActC44A4b8guf20Bc+8c+0BW2q7MB8GA1UdIwQY MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpN4Yj96 nJ9blvOXOr2N1EYf4Uvs1yI/ZAmtunzfj7D6sBHtj3OP0kwIqTKSHtrDEovty3x5 2ww7jNoRMXm88V4mZR3O7/dU1YlFI/lOghYciq5PvzIBF8rbA+NiSqsYhKmdDi3/ kyzP+mrH1YQLuK7dIz/9W8l3uzVa7Yx/25PpaDDVLSTNd4xrWAnqaJar+iZphwp8 GAKtSXPNmkpZSbrfrs0f3L+YVxtCx3KdIklaq+l7ooijMiR4+q98X+YzGXaH/Lul oQduBQ1AFXr46RJvbKKeyrnJVF1Xd/F+NqlEmvVxhkQJPg5zEgxMDRsnvR54qMlM aDztXkwPKNeNfg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:35:32 2025 by rpki-client