This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json) Hash identifier: tFjI2byKn83qe6by0SXeN9KaHWWeRFvJGkLEEm5IBKw= Subject key identifier: 05:4C:3F:A0:F5:1F:D1:79:3F:BD:31:50:B2:CB:4E:DA:F9:61:1C:37 Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0 Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0 Certificate serial: 019B330CBFDD731F69407F0B7584446832A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft Manifest number: 13E0 Signing time: Thu 18 Dec 2025 20:00:32 +0000 Manifest this update: Thu 18 Dec 2025 20:00:32 +0000 Manifest next update: Fri 19 Dec 2025 20:00:32 +0000 Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=) 2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: odqMIlpPAisn+A4/GNhnCv2Grn3nbvXoLNinXzDmFVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:bf:dd:73:1f:69:40:7f:0b:75:84:44:68:32:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0 Validity Not Before: Dec 18 20:00:32 2025 GMT Not After : Dec 19 20:00:32 2025 GMT Subject: CN=054c3fa0f51fd1793fbd3150b2cb4edaf9611c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:3d:e0:e5:ac:c7:ab:b5:fe:9e:6a:5e:d3: e3:e3:d2:74:7f:05:e0:49:37:52:26:84:22:a6:cf: a6:78:55:75:aa:2f:4b:4c:13:72:ee:62:00:26:02: b1:b6:6e:17:07:6e:cf:71:6a:94:23:58:a9:3b:bd: 9c:f6:7a:75:f8:8a:c0:e4:7d:80:37:59:4d:48:38: dd:00:87:6c:18:45:41:52:42:2a:6b:38:c6:1a:da: d5:1e:f8:9b:c5:08:1b:94:78:9f:b3:51:16:92:d1: fb:06:84:b7:7e:75:15:7c:7f:52:3e:b5:a1:27:92: ee:08:e1:4d:a2:02:19:0e:e8:58:d0:0f:aa:3b:70: 22:b8:05:11:e5:43:28:30:d6:2e:41:42:cc:23:6e: 71:d1:2b:32:9c:31:02:cc:48:01:a0:bb:70:06:e5: d2:5d:1c:49:21:37:e5:80:9e:ff:55:ca:9a:7b:92: 98:eb:4c:1a:a7:be:93:e6:b1:88:9d:f6:ee:0c:a6: 49:8f:e2:8d:aa:59:cd:27:7a:ba:34:99:8a:45:18: 38:bf:d6:9a:c1:80:da:49:0e:1f:1d:a2:b9:0d:46: ee:bb:73:c2:fb:d5:3e:82:e5:51:80:75:0a:c3:a8: 96:85:f8:61:f7:90:c7:b6:38:9c:26:9a:c0:f6:e7: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4C:3F:A0:F5:1F:D1:79:3F:BD:31:50:B2:CB:4E:DA:F9:61:1C:37 X509v3 Authority Key Identifier: keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cd:c4:76:1e:16:62:0d:f6:6f:00:1c:65:5b:aa:58:a1:3b: 28:4a:e7:70:81:1c:3d:75:fb:40:dd:05:84:1f:7d:7d:0c:4c: d6:7c:27:77:d3:1c:10:c0:f0:5c:f6:81:55:f9:fb:52:a6:22: 2c:59:7c:77:ae:1e:e8:66:99:0e:5e:ba:08:c7:c8:43:e2:57: 19:48:01:4f:e5:19:cf:74:45:f0:70:e9:9a:31:f7:ff:03:ed: 3c:e6:f4:6f:87:fd:4b:70:10:40:7b:3f:60:b9:e0:d3:48:28: 1f:2e:96:7e:17:1a:c8:7e:5f:eb:93:22:c0:35:c0:a4:ff:31: 6a:c7:8a:5f:51:ac:a5:5e:61:1c:63:85:bc:21:fd:9b:a4:8b: e3:57:27:f6:cf:96:d2:5f:60:17:f1:92:1f:b3:4d:5c:07:9d: 2b:7e:7c:ee:7e:28:ff:41:1f:eb:83:5f:92:9c:ea:8e:9a:0d: 31:a0:e0:01:55:7e:96:20:74:fe:76:ee:f8:5a:00:a1:db:5f: 5f:99:d4:a8:1b:38:54:c6:e6:15:02:e9:cc:3d:d5:13:48:ae: 92:8b:2a:ce:73:79:86:97:aa:52:16:d4:37:17:7a:e6:48:05: 30:b9:74:49:c7:50:9d:5a:77:ba:27:40:63:d9:78:3f:39:c8: ed:b9:5a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDL/dcx9pQH8LdYREaDKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTU1ZTMyYzRhOWNkYTFhODFiZDljNzM3MGRjMzRhYjAw NjUzYTAwHhcNMjUxMjE4MjAwMDMyWhcNMjUxMjE5MjAwMDMyWjAzMTEwLwYDVQQD EygwNTRjM2ZhMGY1MWZkMTc5M2ZiZDMxNTBiMmNiNGVkYWY5NjExYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhg94OWsx6u1/p5qXtPj49J0fwXg STdSJoQips+meFV1qi9LTBNy7mIAJgKxtm4XB27PcWqUI1ipO72c9np1+IrA5H2A N1lNSDjdAIdsGEVBUkIqazjGGtrVHvibxQgblHifs1EWktH7BoS3fnUVfH9SPrWh J5LuCOFNogIZDuhY0A+qO3AiuAUR5UMoMNYuQULMI25x0SsynDECzEgBoLtwBuXS XRxJITflgJ7/Vcqae5KY60wap76T5rGInfbuDKZJj+KNqlnNJ3q6NJmKRRg4v9aa wYDaSQ4fHaK5DUbuu3PC+9U+guVRgHUKw6iWhfhh95DHtjicJprA9ucDpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVMP6D1H9F5P70xULLLTtr5YRw3MB8GA1UdIwQY MBaAFFoVXjLEqc2hqBvZxzcNw0qwBlOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUt Y2QyZjU3NzFkYTk4LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81MmJjZGEtZjk3ZS00NzY1LWFhOTUtY2QyZjU3NzFkYTk4 LzEvV2hWZU1zU3B6YUdvRzluSE53M0RTckFHVTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs3Edh4W Yg32bwAcZVuqWKE7KErncIEcPXX7QN0FhB99fQxM1nwnd9McEMDwXPaBVfn7UqYi LFl8d64e6GaZDl66CMfIQ+JXGUgBT+UZz3RF8HDpmjH3/wPtPOb0b4f9S3AQQHs/ YLng00goHy6WfhcayH5f65MiwDXApP8xaseKX1GspV5hHGOFvCH9m6SL41cn9s+W 0l9gF/GSH7NNXAedK3587n4o/0Ef64NfkpzqjpoNMaDgAVV+liB0/nbu+FoAodtf X5nUqBs4VMbmFQLpzD3VE0iukosqznN5hpeqUhbUNxd65kgFMLl0ScdQnVp3uidA Y9l4PznI7blaaA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:08 2025 by rpki-client