This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft File: WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json) Hash identifier: UU7VNyQEtKbfQSTs1ENCQPvMIqw5rA7gg0CVWWYEqzg= Subject key identifier: 2A:B9:68:45:1A:DF:C4:D7:C8:47:14:C6:64:08:A4:E8:88:02:72:F8 Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c Certificate serial: 019B2B8AAE728920B761368AFC05EBBB0E37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft Manifest number: 1722 Signing time: Wed 17 Dec 2025 09:01:07 +0000 Manifest this update: Wed 17 Dec 2025 09:01:07 +0000 Manifest next update: Thu 18 Dec 2025 09:01:07 +0000 Files and hashes: 1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=) 2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: Nm4KqBaFjmExI0NzpVSaX8XCtYG9m1WucPQpd0S/nUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:ae:72:89:20:b7:61:36:8a:fc:05:eb:bb:0e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c Validity Not Before: Dec 17 09:01:07 2025 GMT Not After : Dec 18 09:01:07 2025 GMT Subject: CN=2ab968451adfc4d7c84714c66408a4e8880272f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:b2:4c:04:bd:cb:40:49:86:09:c5:b4:af: 40:23:d0:12:3a:72:ec:ba:6e:7f:00:94:3e:8c:6a: cf:15:3f:d7:5d:65:f3:e7:00:7f:ee:4e:73:ff:dc: b6:a4:ef:a0:18:33:16:28:dc:3a:7e:47:5a:58:bd: 16:bf:15:d5:9d:66:b4:31:e1:b1:4f:27:80:91:5f: 19:cd:7f:50:a2:5a:5a:30:c8:c6:f1:d5:55:54:c2: 41:4c:1b:02:69:55:d9:eb:53:df:c0:b5:71:61:ad: ff:ac:95:4b:2d:38:85:c2:e3:6b:67:96:11:3e:fd: 08:e2:cb:89:53:2b:d5:22:fa:62:ea:20:b7:25:6b: ed:ef:85:ff:11:47:cf:f4:cb:85:5d:e7:9c:0e:84: 6c:fa:8d:c1:07:eb:e9:0f:a7:d1:8c:38:76:dd:30: 3a:b2:35:9e:04:ee:9a:e1:09:b3:44:25:13:73:9a: 94:d5:9b:4a:a5:29:1b:b7:c0:93:92:a6:9a:e0:6f: 76:01:53:8a:d8:74:6f:d7:11:76:f9:d3:d7:de:30: 72:13:f2:60:6e:26:ec:1f:08:e5:c5:b2:0b:62:65: 42:ed:61:a8:2b:03:b1:94:df:c5:48:9b:76:cc:9d: c0:5d:7c:84:33:ae:ed:58:ed:aa:26:0d:dc:dc:37: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B9:68:45:1A:DF:C4:D7:C8:47:14:C6:64:08:A4:E8:88:02:72:F8 X509v3 Authority Key Identifier: keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bf:ed:bb:4a:7d:93:21:56:60:de:b2:b5:80:a9:f9:c3:c5: f1:e4:0e:54:b7:fd:0c:e4:c6:a4:d0:ed:07:b0:11:1f:d5:74: a0:71:64:e4:97:ba:0e:ad:d8:e1:8d:54:4c:4b:7c:67:1a:a0: 83:32:fa:5a:ea:25:45:17:ca:44:d4:23:67:dc:40:65:65:00: 62:ae:a9:0c:b3:2c:46:a9:f4:3b:26:40:d6:8d:16:f9:ca:da: 82:35:58:34:7c:49:cf:e8:7a:b3:69:75:96:ee:d3:af:a6:42: 74:15:4d:af:64:9e:24:be:ba:65:58:00:e7:c8:c2:83:e6:0f: d6:66:9f:be:b8:b1:37:6e:ce:1b:ca:9d:bb:bf:b5:8f:a4:30: a4:aa:01:48:e2:a3:0d:9d:4d:65:e3:12:c5:86:85:85:2c:a7: 3f:c0:b7:d2:74:26:23:2e:13:b3:b2:58:5c:b4:5b:21:34:54: 4b:98:b1:c1:61:75:fc:1f:f3:47:5e:92:eb:f4:ae:9f:65:6b: a8:5c:ed:e4:82:c9:29:39:ff:5e:b8:c3:06:0f:91:73:f2:2b: a6:d8:67:a6:2f:9c:06:23:b9:94:15:18:6b:98:cd:9a:57:5d: 4a:d8:da:fc:3e:25:82:d2:e0:24:fb:24:21:f1:4e:a3:06:ad: 1d:c5:29:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriq5yiSC3YTaK/AXruw43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjFmMTg1YjRiMzg2Njc1NWRiYTAwMTBiY2YxMGI5NGE4 YWE2NmMwHhcNMjUxMjE3MDkwMTA3WhcNMjUxMjE4MDkwMTA3WjAzMTEwLwYDVQQD EygyYWI5Njg0NTFhZGZjNGQ3Yzg0NzE0YzY2NDA4YTRlODg4MDI3MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA6yTAS9y0BJhgnFtK9AI9ASOnLs um5/AJQ+jGrPFT/XXWXz5wB/7k5z/9y2pO+gGDMWKNw6fkdaWL0WvxXVnWa0MeGx TyeAkV8ZzX9QolpaMMjG8dVVVMJBTBsCaVXZ61PfwLVxYa3/rJVLLTiFwuNrZ5YR Pv0I4suJUyvVIvpi6iC3JWvt74X/EUfP9MuFXeecDoRs+o3BB+vpD6fRjDh23TA6 sjWeBO6a4QmzRCUTc5qU1ZtKpSkbt8CTkqaa4G92AVOK2HRv1xF2+dPX3jByE/Jg bibsHwjlxbILYmVC7WGoKwOxlN/FSJt2zJ3AXXyEM67tWO2qJg3c3DfmjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq5aEUa38TXyEcUxmQIpOiIAnL4MB8GA1UdIwQY MBaAFFoh8YW0s4ZnVdugAQvPELlKiqZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYt OWNiN2ZjMTU0NDI1LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iZjczZjUtZjQxNC00YTEzLWI3MTYtOWNiN2ZjMTU0NDI1 LzEvV2lIeGhiU3pobWRWMjZBQkM4OFF1VXFLcG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL/tu0p9 kyFWYN6ytYCp+cPF8eQOVLf9DOTGpNDtB7ARH9V0oHFk5Je6Dq3Y4Y1UTEt8Zxqg gzL6WuolRRfKRNQjZ9xAZWUAYq6pDLMsRqn0OyZA1o0W+cragjVYNHxJz+h6s2l1 lu7Tr6ZCdBVNr2SeJL66ZVgA58jCg+YP1mafvrixN27OG8qdu7+1j6QwpKoBSOKj DZ1NZeMSxYaFhSynP8C30nQmIy4Ts7JYXLRbITRUS5ixwWF1/B/zR16S6/Sun2Vr qFzt5ILJKTn/XrjDBg+Rc/Irpthnpi+cBiO5lBUYa5jNmlddStja/D4lgtLgJPsk IfFOowatHcUp+Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:10:22 2025 by rpki-client