This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json) Hash identifier: Rj85BG+EnTohpakgCwVOPB2xHEsQvkXz8YqCAJmM/AQ= Subject key identifier: 80:87:37:7C:90:F0:A7:8C:F4:EF:CD:93:62:1F:D1:10:79:F1:CA:2F Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019B7D82556132EDA4D4827DF2D6AFF2A816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft Manifest number: 17B3 Signing time: Fri 02 Jan 2026 07:00:52 +0000 Manifest this update: Fri 02 Jan 2026 07:00:52 +0000 Manifest next update: Sat 03 Jan 2026 07:00:52 +0000 Files and hashes: 1: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=) 2: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=) 3: DbOeziXcPzk4KeUwNEQfmKbpBtc.roa (hash: iJzaS+LFDIToJy/KvKBwTeu0ofyf39v0k1O7+kAWgzQ=) 4: NbrX-DYcBWtycuQYT-jhpcFiOoU.roa (hash: x0hRQkO2Y1zh9lxhkUCPbygGJ3L2UD6I/3/m7QAzYf4=) 5: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=) 6: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: cfS1p1tvi9iMVzWxVHyOQbLKzgUEuHmleQKWDPvBoTU=) 7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=) 8: wWEaUT8GUtqpx9XZtRAWofH6W4k.roa (hash: VNBvCU4Sf2z12hvHly8WTlHbxCnV09UqgaRSgs6QCJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:82:55:61:32:ed:a4:d4:82:7d:f2:d6:af:f2:a8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 2 07:00:52 2026 GMT Not After : Jan 3 07:00:52 2026 GMT Subject: CN=8087377c90f0a78cf4efcd93621fd11079f1ca2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:34:67:4e:59:f2:33:0a:be:9e:e7:4f:b0: 6d:f7:ad:30:b5:08:55:cd:68:1f:f9:43:94:6b:cb: c4:96:6f:e7:a9:e6:5e:1c:54:df:82:98:f0:c4:52: 93:11:26:3a:fa:22:f3:0d:59:bd:78:33:13:1c:c9: ab:2e:aa:42:2c:f5:ad:52:e8:31:5d:c7:f6:04:62: 1c:b2:42:4c:9c:fa:79:21:52:6f:e1:ee:b6:ef:85: 1c:1c:52:08:0d:9f:fd:ac:38:4b:6e:71:bc:5a:40: 86:a0:aa:f6:77:2d:32:7a:fe:79:ef:a8:3a:87:b1: e2:ec:2a:84:a5:d9:01:ac:90:20:12:0b:f5:be:e7: 27:a6:eb:4c:25:db:cf:73:2d:55:0c:4c:43:8a:d0: c5:e6:18:81:b8:fb:87:93:58:2f:bf:89:ed:9f:fe: 6c:3e:28:e2:67:d8:52:33:96:c0:c6:47:5d:ab:f8: 3a:60:9e:4d:86:ab:47:4e:10:80:34:ca:bb:49:fe: e3:32:a0:00:3f:28:37:75:0d:91:6b:e8:99:c3:ec: 04:79:8a:34:97:3c:22:b5:df:78:92:81:9b:2c:6b: af:21:7b:37:f7:52:79:84:bd:61:43:6b:3c:89:72: 3a:7a:b2:bd:ce:bf:d5:c3:cd:d2:8f:e9:53:84:c6: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:37:7C:90:F0:A7:8C:F4:EF:CD:93:62:1F:D1:10:79:F1:CA:2F X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c0:c1:2c:02:26:ef:b7:bc:29:44:20:33:5a:b3:68:22:be: e8:e1:21:47:8d:38:49:1c:f7:77:fe:bd:94:39:ac:15:81:51: 57:89:c2:9d:f7:58:ef:36:a1:ac:c6:99:c4:51:e1:54:cd:32: 6d:d3:a7:4b:eb:41:99:3a:ee:3a:04:8d:e9:f3:d6:44:74:a7: f8:7e:e3:5c:bb:53:3f:02:63:3a:b3:9e:7f:cc:f8:e8:8d:8a: 80:21:b9:47:c1:cd:e3:04:b9:36:55:cf:24:52:73:65:b2:04: 0e:30:ea:eb:34:9c:7b:68:50:a4:aa:a8:33:c2:86:6f:14:10: e3:7c:64:5f:d8:3c:10:bf:b7:d7:43:7b:66:65:f3:06:99:14: b5:a1:85:0b:00:a1:ef:0b:3b:1d:ce:b2:6b:3e:02:33:3a:07: 70:d3:1c:29:21:85:81:23:2f:7d:af:00:35:58:6a:75:bc:f6: db:6d:41:fe:28:03:94:1f:06:71:75:f6:0f:2e:8a:cd:a6:f0: 92:c2:4a:b6:c6:c1:aa:5c:91:57:68:46:31:b2:f0:83:ed:cf: b1:27:23:73:7d:86:40:e5:b3:2c:0f:99:03:4a:79:4c:f2:3d: 51:21:fd:db:5b:22:78:1f:d5:7e:d8:48:86:40:e4:67:ff:be: 24:97:97:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9glVhMu2k1IJ98tav8qgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTAyMDcwMDUyWhcNMjYwMTAzMDcwMDUyWjAzMTEwLwYDVQQD Eyg4MDg3Mzc3YzkwZjBhNzhjZjRlZmNkOTM2MjFmZDExMDc5ZjFjYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL00Z05Z8jMKvp7nT7Bt960wtQhV zWgf+UOUa8vElm/nqeZeHFTfgpjwxFKTESY6+iLzDVm9eDMTHMmrLqpCLPWtUugx Xcf2BGIcskJMnPp5IVJv4e6274UcHFIIDZ/9rDhLbnG8WkCGoKr2dy0yev5576g6 h7Hi7CqEpdkBrJAgEgv1vucnputMJdvPcy1VDExDitDF5hiBuPuHk1gvv4ntn/5s PijiZ9hSM5bAxkddq/g6YJ5NhqtHThCANMq7Sf7jMqAAPyg3dQ2Ra+iZw+wEeYo0 lzwitd94koGbLGuvIXs391J5hL1hQ2s8iXI6erK9zr/Vw83Sj+lThMZzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICHN3yQ8KeM9O/Nk2If0RB58covMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscDBLAIm 77e8KUQgM1qzaCK+6OEhR404SRz3d/69lDmsFYFRV4nCnfdY7zahrMaZxFHhVM0y bdOnS+tBmTruOgSN6fPWRHSn+H7jXLtTPwJjOrOef8z46I2KgCG5R8HN4wS5NlXP JFJzZbIEDjDq6zSce2hQpKqoM8KGbxQQ43xkX9g8EL+310N7ZmXzBpkUtaGFCwCh 7ws7Hc6yaz4CMzoHcNMcKSGFgSMvfa8ANVhqdbz2221B/igDlB8GcXX2Dy6Kzabw ksJKtsbBqlyRV2hGMbLwg+3PsScjc32GQOWzLA+ZA0p5TPI9USH921sieB/VfthI hkDkZ/++JJeX6g== -----END CERTIFICATE-----Generated at Fri Jan 2 11:17:11 2026 by rpki-client