This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json) Hash identifier: BmM9nh3cESGpsOw3ZOwCTm5tp5AjvauYVaCUDL0f32M= Subject key identifier: 81:18:34:EC:8B:2F:A6:85:C4:BB:33:EE:DE:12:FE:E3:B3:68:6B:8B Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1 Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1 Certificate serial: 019B0DB6E9D0AF9DE3A6564E3145FB5841AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft Manifest number: 0907 Signing time: Thu 11 Dec 2025 14:00:49 +0000 Manifest this update: Thu 11 Dec 2025 14:00:49 +0000 Manifest next update: Fri 12 Dec 2025 14:00:49 +0000 Files and hashes: 1: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: MYz95Tz/cH5maBv/U5OEH8qiNb3PVM0JWq0y4TKhDrI=) 2: Z4U4s6npqkkGcLAYBUlzliN7I6c.roa (hash: jhktH3rMjXeFPaMYfnlQRVzXRWKx1pb7NI8qgNj/AcI=) 3: mzKfcsB_6SZ92dtoyTzdmZT_D5Q.roa (hash: W3oo5zZMXU2kzBLMgAMNFTy/16dWodtGflb0+ZEqPmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:e9:d0:af:9d:e3:a6:56:4e:31:45:fb:58:41:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1 Validity Not Before: Dec 11 14:00:49 2025 GMT Not After : Dec 12 14:00:49 2025 GMT Subject: CN=811834ec8b2fa685c4bb33eede12fee3b3686b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:98:e8:5c:33:63:1c:dc:18:95:2e:fd:57: be:9a:f9:ce:fe:ac:da:42:17:85:aa:aa:44:52:6f: 32:2f:b7:e3:e2:d7:80:85:c4:42:60:3f:80:02:ac: 8f:91:83:a7:0c:40:77:15:6f:99:ad:fd:25:c0:6c: c3:34:e5:4a:b2:85:ca:1e:8a:51:45:3a:99:53:5a: a4:cf:0e:2a:50:38:31:61:36:45:3c:ed:c6:14:8f: 75:5d:1a:30:31:ca:8e:c7:67:5a:78:25:9a:a3:9a: 63:3b:3c:21:b7:7a:48:ab:61:69:ea:94:29:5a:47: e7:3e:b6:b2:0c:0a:7c:42:22:f9:37:54:d9:a7:94: e5:2b:0c:d6:9f:d0:9c:f7:c2:fb:a0:0d:33:df:3f: b9:c6:60:2a:0a:61:c6:7c:3a:ef:2e:c4:4b:48:51: 2d:df:a0:3e:77:c1:e7:b6:a3:6f:b2:d4:8e:cd:07: f1:15:08:77:1e:16:e0:e3:48:42:24:b8:21:e2:ae: 5d:f7:9d:c0:ba:ec:5c:0d:99:63:de:10:a3:9c:b4: e5:be:e0:06:88:db:a5:c9:ac:a5:bd:91:1b:5e:95: 1c:27:79:07:86:8d:db:45:9c:d0:12:f4:48:22:88: 09:21:f9:ec:d0:38:c8:dc:cd:6f:04:07:ed:5f:84: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:18:34:EC:8B:2F:A6:85:C4:BB:33:EE:DE:12:FE:E3:B3:68:6B:8B X509v3 Authority Key Identifier: keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ce:3b:02:49:67:12:ca:ec:f7:a7:41:54:92:94:71:c4:ff: 9f:36:7a:e9:84:5d:64:0b:f7:b3:56:c7:98:0e:2f:4b:11:16: 62:74:52:84:51:04:05:b7:81:c1:d0:fc:f0:e0:18:a5:1e:14: df:cd:24:2f:ff:5c:33:ec:00:9c:7d:39:e5:2b:e9:ef:6e:42: ca:d6:2b:43:52:90:a1:6b:ac:d2:e5:49:10:b2:b2:da:5c:f3: 8d:ee:4d:aa:37:8d:23:0e:33:42:e9:bc:33:dd:95:44:53:75: 8c:37:60:5f:d2:eb:03:fb:32:69:7f:c9:21:37:45:86:a2:08: d8:7c:4d:92:6c:d9:85:64:72:65:7c:15:f2:00:67:5a:18:25: 8e:69:43:05:fd:9d:88:7a:47:3f:d4:e6:4b:8a:49:83:be:12: 64:ba:f4:ff:4d:7d:cd:8c:89:d0:3d:7e:52:bd:f0:7f:3a:84: 22:84:cf:26:0b:d0:70:4e:06:4a:2a:7f:8a:d9:28:2d:19:e8: 62:fc:85:96:e0:fb:b0:94:3b:13:96:48:97:7b:8e:e5:bb:6b: 49:57:59:83:fc:b3:ee:b9:8a:71:b5:ab:ae:fd:d7:05:97:d9: ec:3c:41:e2:03:f3:5a:01:6c:20:89:46:c5:7a:7f:90:c2:8d: c0:af:c7:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtunQr53jplZOMUX7WEGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4N2Q4YjBlNzU0NjM1MTE3NmNjMGM2ZTUxZWQ0NTIwYWJl MDRlZjEwHhcNMjUxMjExMTQwMDQ5WhcNMjUxMjEyMTQwMDQ5WjAzMTEwLwYDVQQD Eyg4MTE4MzRlYzhiMmZhNjg1YzRiYjMzZWVkZTEyZmVlM2IzNjg2YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJyY6FwzYxzcGJUu/Ve+mvnO/qza QheFqqpEUm8yL7fj4teAhcRCYD+AAqyPkYOnDEB3FW+Zrf0lwGzDNOVKsoXKHopR RTqZU1qkzw4qUDgxYTZFPO3GFI91XRowMcqOx2daeCWao5pjOzwht3pIq2Fp6pQp WkfnPrayDAp8QiL5N1TZp5TlKwzWn9Cc98L7oA0z3z+5xmAqCmHGfDrvLsRLSFEt 36A+d8HntqNvstSOzQfxFQh3Hhbg40hCJLgh4q5d953AuuxcDZlj3hCjnLTlvuAG iNulyaylvZEbXpUcJ3kHho3bRZzQEvRIIogJIfns0DjI3M1vBAftX4T52wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEYNOyLL6aFxLsz7t4S/uOzaGuLMB8GA1UdIwQY MBaAFFh9iw51RjURdswMblHtRSCr4E7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDIt YzEwZjc4MmZiMDdmLzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84MWRjNjItYjNjYy00Zjk5LWFhNDItYzEwZjc4MmZiMDdm LzEvV0gyTERuVkdOUkYyekF4dVVlMUZJS3ZnVHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM47Akln Esrs96dBVJKUccT/nzZ66YRdZAv3s1bHmA4vSxEWYnRShFEEBbeBwdD88OAYpR4U 380kL/9cM+wAnH055Svp725CytYrQ1KQoWus0uVJELKy2lzzje5NqjeNIw4zQum8 M92VRFN1jDdgX9LrA/syaX/JITdFhqII2HxNkmzZhWRyZXwV8gBnWhgljmlDBf2d iHpHP9TmS4pJg74SZLr0/019zYyJ0D1+Ur3wfzqEIoTPJgvQcE4GSip/itkoLRno YvyFluD7sJQ7E5ZIl3uO5btrSVdZg/yz7rmKcbWrrv3XBZfZ7DxB4gPzWgFsIIlG xXp/kMKNwK/HOQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:57 2025 by rpki-client