This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json) Hash identifier: qL4U19GNbOrusIPc+47ZxPBfl7YKvcUOoRz20S9RAB4= Subject key identifier: C4:5A:FE:69:1D:48:B3:63:71:42:E5:48:A5:99:ED:82:2A:32:83:EA Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Certificate serial: 019B39EB49EDAE13DE7F89A5C790A4331E5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft Manifest number: 0AA9 Signing time: Sat 20 Dec 2025 04:01:19 +0000 Manifest this update: Sat 20 Dec 2025 04:01:19 +0000 Manifest next update: Sun 21 Dec 2025 04:01:19 +0000 Files and hashes: 1: 0YAlpXVId3LHx7bUr5xQcDkFv50.roa (hash: TFSQN0O8fIRBDFY4jZJFLp3OndkfiZIj1gXdcop7ZBU=) 2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: RqQTcA3ins+MxRe/EY8uGbSS0BqONjV+AK2H90MpS5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:49:ed:ae:13:de:7f:89:a5:c7:90:a4:33:1e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Validity Not Before: Dec 20 04:01:19 2025 GMT Not After : Dec 21 04:01:19 2025 GMT Subject: CN=c45afe691d48b3637142e548a599ed822a3283ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cc:05:cc:85:d0:3f:70:b5:55:71:6b:9a:99: fc:38:87:4b:5a:ee:8f:bc:19:af:8f:bd:08:b7:4e: 7a:5c:c7:a8:8a:0e:19:fa:7b:85:50:99:aa:15:1a: 0d:bf:bd:d4:6b:d3:0d:18:25:ca:f2:25:25:93:8c: 8e:b0:11:e5:21:74:e3:9d:85:48:f2:b1:53:9a:88: d3:5c:a7:fd:a9:c2:9a:da:f9:64:6d:8f:79:db:dd: 24:30:08:a2:4f:e6:e4:ec:15:63:bc:7a:30:97:2e: bd:de:14:74:d6:dd:b5:b4:51:57:af:18:87:35:36: 51:d3:be:a6:41:9d:f2:45:8c:57:1d:68:c3:7e:53: d7:0f:bd:88:17:ad:04:2b:a9:e7:e0:e0:a1:ff:4f: 1b:52:85:d7:93:ee:29:a3:9d:9d:d2:5f:db:8f:56: ce:ea:5e:97:79:e4:9a:18:2a:60:47:9b:ed:e3:0e: bb:fc:39:35:d1:21:86:f1:28:c4:74:ab:81:db:ea: 3d:f3:96:aa:cd:e7:62:44:c5:34:a6:b8:a3:5f:35: 5a:ff:02:99:72:a3:11:13:43:13:ba:bf:b2:77:8e: 7c:56:be:c5:98:69:f0:91:7c:67:92:69:5b:9a:87: 40:ad:de:56:7e:05:52:bf:65:ae:91:c0:5f:93:b5: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:FE:69:1D:48:B3:63:71:42:E5:48:A5:99:ED:82:2A:32:83:EA X509v3 Authority Key Identifier: keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:93:9f:eb:cf:02:7b:b9:44:f3:ef:a8:22:60:0b:30:e4:02: f0:d5:fb:dc:8e:39:74:5c:08:cf:98:2a:32:6b:b2:48:8f:93: a2:b2:1b:f3:2d:3c:93:dd:01:0d:01:a3:32:cb:77:2f:09:fb: c5:47:e5:33:b2:cf:63:88:ab:35:da:32:3b:77:d5:e5:49:f0: 4f:7e:5a:ab:cd:8a:c0:54:d2:91:ae:ff:e5:84:4f:71:c3:cd: 16:12:18:e9:c0:c2:f0:0c:ee:fc:b7:4e:16:38:aa:68:ee:6e: 95:a6:78:65:d7:26:d9:16:78:f3:c1:09:71:cb:d7:01:69:09: 09:d8:41:e9:0c:ce:70:22:58:9a:73:6a:5b:25:b6:58:6e:90: cd:27:16:43:99:3d:ed:66:4b:34:a9:d4:f0:bb:8c:8a:6a:69: ae:c6:5f:6d:7a:ed:5c:b7:91:98:d2:a6:4a:4b:91:4e:4e:64: 05:6b:4c:61:97:0c:c7:44:96:71:e6:ae:48:84:3e:20:68:f1: 94:12:60:9c:22:32:d7:8f:64:c4:d8:6f:93:89:40:8b:88:6a: 37:55:98:a7:04:f7:8f:72:28:c1:3d:f0:21:1a:a7:4a:6a:69: 7e:80:76:3d:d4:ad:7e:d4:d6:60:f4:4e:f3:85:26:20:56:4b: a6:af:2a:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs560ntrhPef4mlx5CkMx5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3 MWRlMWMwHhcNMjUxMjIwMDQwMTE5WhcNMjUxMjIxMDQwMTE5WjAzMTEwLwYDVQQD EyhjNDVhZmU2OTFkNDhiMzYzNzE0MmU1NDhhNTk5ZWQ4MjJhMzI4M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MwFzIXQP3C1VXFrmpn8OIdLWu6P vBmvj70It056XMeoig4Z+nuFUJmqFRoNv73Ua9MNGCXK8iUlk4yOsBHlIXTjnYVI 8rFTmojTXKf9qcKa2vlkbY95290kMAiiT+bk7BVjvHowly693hR01t21tFFXrxiH NTZR076mQZ3yRYxXHWjDflPXD72IF60EK6nn4OCh/08bUoXXk+4po52d0l/bj1bO 6l6XeeSaGCpgR5vt4w67/Dk10SGG8SjEdKuB2+o985aqzediRMU0prijXzVa/wKZ cqMRE0MTur+yd458Vr7FmGnwkXxnkmlbmodArd5WfgVSv2WukcBfk7Vt3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRa/mkdSLNjcULlSKWZ7YIqMoPqMB8GA1UdIwQY MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt MzhlZmNmZGM0MTdiLzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5Of688C e7lE8++oImALMOQC8NX73I45dFwIz5gqMmuySI+TorIb8y08k90BDQGjMst3Lwn7 xUflM7LPY4irNdoyO3fV5UnwT35aq82KwFTSka7/5YRPccPNFhIY6cDC8Azu/LdO FjiqaO5ulaZ4Zdcm2RZ488EJccvXAWkJCdhB6QzOcCJYmnNqWyW2WG6QzScWQ5k9 7WZLNKnU8LuMimpprsZfbXrtXLeRmNKmSkuRTk5kBWtMYZcMx0SWceauSIQ+IGjx lBJgnCIy149kxNhvk4lAi4hqN1WYpwT3j3IowT3wIRqnSmppfoB2PdStftTWYPRO 84UmIFZLpq8qeA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:54 2025 by rpki-client