This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json) Hash identifier: /WrhIZTTWHi8t2OLCjbhcxdQlUTKR+LNW4DYnnQwZzk= Subject key identifier: 20:E6:F4:E5:A9:25:91:65:97:4D:E0:78:FF:30:E9:90:50:FF:84:7B Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c Certificate serial: 019B33443394CEE2BB7C40235F963146DB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft Manifest number: 1726 Signing time: Thu 18 Dec 2025 21:01:06 +0000 Manifest this update: Thu 18 Dec 2025 21:01:06 +0000 Manifest next update: Fri 19 Dec 2025 21:01:06 +0000 Files and hashes: 1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=) 2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: 14Bz4j6HTYppI3ZpAwHKwQM3fjeVNImq7ZPH0hGyreo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:33:94:ce:e2:bb:7c:40:23:5f:96:31:46:db:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c Validity Not Before: Dec 18 21:01:06 2025 GMT Not After : Dec 19 21:01:06 2025 GMT Subject: CN=20e6f4e5a9259165974de078ff30e99050ff847b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:38:59:91:c8:86:0a:6d:b0:48:ff:45:e8: 65:37:dd:71:fc:d5:b5:5e:e5:f0:9e:11:9f:37:4d: 02:d5:8b:53:10:5d:94:ae:dc:ab:94:d3:22:b6:0f: e5:db:af:2f:c0:6d:ca:f2:93:b9:6e:ee:60:51:68: 2f:6f:ef:4e:bb:d9:2d:02:05:4a:9b:92:c9:38:1f: 1c:67:e0:9f:09:ea:f9:42:70:b8:0b:80:58:1e:82: cf:13:3c:7b:9f:bd:4e:7e:4b:6b:06:20:31:e4:e8: 01:85:a1:c7:a3:43:dc:07:42:98:4b:f0:36:a9:46: ed:1d:31:f1:74:08:5d:83:92:d1:c4:95:dd:c2:33: 6c:be:d2:d2:78:6f:be:35:8a:43:de:60:2d:a6:21: 01:56:49:70:2e:bb:21:fb:e8:c1:70:70:e6:b0:2f: a7:65:51:35:dd:a6:15:7e:a3:e2:ec:28:10:f2:37: be:31:70:44:3e:d4:16:94:86:41:f3:35:6e:91:b4: b6:14:39:07:3b:82:40:50:1b:9d:d7:65:21:ab:42: d9:b8:a7:15:2a:94:18:3a:1b:e5:3e:a2:6f:9e:51: f7:f9:1b:4f:ef:ce:00:56:9f:af:37:91:25:bd:e1: a5:d3:6f:57:8a:64:40:6b:49:e3:51:8e:0f:02:fc: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:F4:E5:A9:25:91:65:97:4D:E0:78:FF:30:E9:90:50:FF:84:7B X509v3 Authority Key Identifier: keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e1:bb:94:2c:67:e7:ec:e4:0e:5a:37:15:ff:e8:05:9d:d5: 2b:3c:fc:72:e5:60:27:76:61:9d:2b:05:10:33:e4:63:14:f6: 1d:69:41:92:52:9a:8a:10:2e:53:98:6b:ea:ed:d1:e8:16:b2: f5:10:66:9e:84:7b:44:00:fc:66:30:53:8f:7b:32:8d:b8:f1: 09:ee:2a:dc:a9:56:9e:3d:48:cd:70:46:af:f7:c0:2d:b0:97: b3:42:b6:00:6c:02:22:26:c8:70:f5:11:20:40:e1:8a:12:b9: ea:02:98:ac:7e:fa:00:21:24:7c:0b:3b:64:82:e0:05:c2:66: cb:c7:17:ed:3b:6b:cb:fd:e6:45:fb:04:8c:60:72:08:dc:5e: 47:87:24:b4:6f:20:a9:12:4a:77:54:8e:22:dc:f5:cd:c0:4a: 98:65:97:2c:0e:a1:ec:22:29:99:59:a4:d9:ac:b8:98:7d:f5: d7:b0:da:e3:ce:7a:1b:9a:aa:50:f5:9c:82:c4:d0:79:d7:e9: 05:e3:43:0e:e9:02:5b:3c:42:ce:01:96:ad:2d:c9:4c:f2:85: 19:48:22:89:59:a9:f1:e3:3c:41:b6:7c:f5:a9:28:18:41:57: 3e:2f:57:ad:f7:4b:a0:e2:c2:5d:dc:19:26:e2:6a:c6:86:6b: fd:d3:06:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRDOUzuK7fEAjX5YxRtsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjFmMTg1YjRiMzg2Njc1NWRiYTAwMTBiY2YxMGI5NGE4 YWE2NmMwHhcNMjUxMjE4MjEwMTA2WhcNMjUxMjE5MjEwMTA2WjAzMTEwLwYDVQQD EygyMGU2ZjRlNWE5MjU5MTY1OTc0ZGUwNzhmZjMwZTk5MDUwZmY4NDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsk4WZHIhgptsEj/RehlN91x/NW1 XuXwnhGfN00C1YtTEF2UrtyrlNMitg/l268vwG3K8pO5bu5gUWgvb+9Ou9ktAgVK m5LJOB8cZ+CfCer5QnC4C4BYHoLPEzx7n71OfktrBiAx5OgBhaHHo0PcB0KYS/A2 qUbtHTHxdAhdg5LRxJXdwjNsvtLSeG++NYpD3mAtpiEBVklwLrsh++jBcHDmsC+n ZVE13aYVfqPi7CgQ8je+MXBEPtQWlIZB8zVukbS2FDkHO4JAUBud12Uhq0LZuKcV KpQYOhvlPqJvnlH3+RtP784AVp+vN5ElveGl029XimRAa0njUY4PAvymPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDm9OWpJZFll03geP8w6ZBQ/4R7MB8GA1UdIwQY MBaAFFoh8YW0s4ZnVdugAQvPELlKiqZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYt OWNiN2ZjMTU0NDI1LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYtOWNiN2ZjMTU0NDI1 LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+G7lCxn 5+zkDlo3Ff/oBZ3VKzz8cuVgJ3ZhnSsFEDPkYxT2HWlBklKaihAuU5hr6u3R6Bay 9RBmnoR7RAD8ZjBTj3syjbjxCe4q3KlWnj1IzXBGr/fALbCXs0K2AGwCIibIcPUR IEDhihK56gKYrH76ACEkfAs7ZILgBcJmy8cX7Ttry/3mRfsEjGByCNxeR4cktG8g qRJKd1SOItz1zcBKmGWXLA6h7CIpmVmk2ay4mH3117Da4856G5qqUPWcgsTQedfp BeNDDukCWzxCzgGWrS3JTPKFGUgiiVmp8eM8QbZ89akoGEFXPi9XrfdLoOLCXdwZ JuJqxoZr/dMGXw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:08:35 2025 by rpki-client