/* WHISPER FOR TELECOM */
  Identity on the wire for the 5G core. Give every network function — AMF, SMF,
  UPF, PCF, UDM, AUSF, NSSF, a SEPP — an identity it can prove and no one can
  forge: a routable IPv6 /128 derived from the SBA key it already holds, keyed by
  the nfInstanceId its certificate SAN already carries, DNSSEC-anchored, DANE-EE
  pinned, RDAP-registered, verifiable by anyone with dig — across operators, IPX
  hubs and regulators. So a spoofed DNS answer, a rogue NRF, or an NF pulled from
  the NRF can't speak as one of yours. The docs and the whole system behind this
  are identical to whisper.online; only the story here is told for the mobile
  operator and the core-security team. Additive to your SBI mTLS + OAuth2 and your
  operator PKI — never a replacement.

/* THE OPERATOR */
  Operator: Whisper Security (viaGraph B.V.), Amsterdam, NL
  Network: AS219419, IPv6-only, RPKI-signed, MANRS-compliant
  Address space: AS219419 announces 2a04:2a01::/32, one /128 per NF/agent