This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft File: Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json) Hash identifier: 79yZWbunJas0/FDLI7hwHF2IP8royxu1DUj9zuKhrEA= Subject key identifier: 3F:6E:5D:8C:64:21:F2:18:CF:53:1C:6F:B9:93:56:E0:F6:10:D8:0A Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D Certificate issuer: /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d Certificate serial: 019B1BAA34D0628B670FF62FBA051C3173B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft Manifest number: 04EC Signing time: Sun 14 Dec 2025 07:01:37 +0000 Manifest this update: Sun 14 Dec 2025 07:01:37 +0000 Manifest next update: Mon 15 Dec 2025 07:01:37 +0000 Files and hashes: 1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=) 2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: pbhY2ti6+msbtGaihugFCUuyh1yR0M+D8Q7UaSuiOu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:34:d0:62:8b:67:0f:f6:2f:ba:05:1c:31:73:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d Validity Not Before: Dec 14 07:01:37 2025 GMT Not After : Dec 15 07:01:37 2025 GMT Subject: CN=3f6e5d8c6421f218cf531c6fb99356e0f610d80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:94:03:15:0a:69:9c:56:04:c9:b4:bc:06: 5f:d0:18:93:e1:ce:b1:b4:34:97:8d:80:49:e1:db: 9d:56:5c:35:90:e1:f4:cc:31:ab:99:93:36:c9:c6: 9e:8e:6c:8a:22:33:34:67:e1:3f:5f:19:1f:a1:4b: 7c:7f:4f:f6:a2:80:a7:62:58:62:d0:6d:67:8a:94: 2a:da:d4:69:a7:70:86:c7:32:6a:33:dd:7a:57:42: 43:ce:08:58:96:87:0a:8c:3d:45:77:b4:06:99:d7: 70:3e:ae:0c:83:ce:e0:6e:23:06:85:4f:c8:46:83: 85:d0:da:b8:f7:df:cd:19:24:05:ac:b3:2d:e0:66: ee:15:57:7b:d4:0c:2d:e1:94:d4:ea:c7:d3:7f:a8: 0d:11:74:78:4d:7e:87:c3:05:5b:38:88:77:fe:e6: 96:9f:ed:fe:63:19:26:08:e5:36:70:b3:05:6d:6c: 1c:5e:89:f8:22:84:12:2b:7d:1a:ba:59:6c:49:91: 61:71:15:11:d7:ac:c1:da:55:db:f5:ab:4c:57:83: 40:5d:e9:33:c2:2d:ff:fd:cb:49:d2:96:45:98:d2: 16:9a:be:ca:90:7d:95:c6:31:85:28:81:40:fa:21: 5a:db:f4:af:e4:07:f1:7e:8f:44:79:f1:21:6a:0c: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6E:5D:8C:64:21:F2:18:CF:53:1C:6F:B9:93:56:E0:F6:10:D8:0A X509v3 Authority Key Identifier: keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1c:dd:f8:c6:6a:6a:78:54:99:8c:ba:7d:f6:00:d1:2c:25: 20:0c:c6:44:28:47:39:31:f7:81:8f:b8:1d:c6:80:8c:eb:bf: 9b:26:5e:ea:9f:e9:e0:2e:4d:4f:41:73:db:a3:52:7b:7b:39: 20:8d:bb:5e:f3:7a:da:19:11:f7:23:27:38:1b:d1:ce:62:2c: 62:46:a5:2a:f6:4f:6d:9c:97:40:ff:e2:a8:4c:d7:fd:e9:d7: 76:8f:bd:9b:c8:c0:69:b3:dd:ad:3a:ac:a9:8f:37:fe:73:c4: 81:59:eb:f8:17:d2:d4:54:eb:28:15:4f:2f:d0:eb:09:5b:53: d0:9f:a8:66:d1:76:4f:47:c7:fd:a3:c8:0c:9b:0f:95:eb:f5: e2:f5:a6:bd:c6:2c:a1:14:30:9d:f3:c7:a6:a8:08:93:3b:a7: 3d:13:ae:1d:fd:90:b7:d7:fd:1f:fa:31:c3:7d:7e:ee:4c:5b: fc:0d:51:7a:5c:c2:2f:1b:b8:66:e2:bc:ed:aa:82:77:ab:e0: f0:a4:21:21:a3:14:1e:5a:a6:2d:75:bd:71:48:03:70:7f:c6: 49:ca:b6:33:aa:ea:43:b0:85:0e:be:3f:92:97:52:ad:5a:8f: 07:2b:ec:96:48:6f:83:c1:ab:f4:7c:45:e3:77:6a:40:ba:d0: b3:c2:69:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqjTQYotnD/YvugUcMXOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhODdmY2M4NWNiNDk5NDE5YTFiMWVjMmYzMjA5YzJhNDM1 ZmI5MmQwHhcNMjUxMjE0MDcwMTM3WhcNMjUxMjE1MDcwMTM3WjAzMTEwLwYDVQQD EygzZjZlNWQ4YzY0MjFmMjE4Y2Y1MzFjNmZiOTkzNTZlMGY2MTBkODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4biUAxUKaZxWBMm0vAZf0BiT4c6x tDSXjYBJ4dudVlw1kOH0zDGrmZM2ycaejmyKIjM0Z+E/XxkfoUt8f0/2ooCnYlhi 0G1nipQq2tRpp3CGxzJqM916V0JDzghYlocKjD1Fd7QGmddwPq4Mg87gbiMGhU/I RoOF0Nq499/NGSQFrLMt4GbuFVd71Awt4ZTU6sfTf6gNEXR4TX6HwwVbOIh3/uaW n+3+YxkmCOU2cLMFbWwcXon4IoQSK30aullsSZFhcRUR16zB2lXb9atMV4NAXekz wi3//ctJ0pZFmNIWmr7KkH2VxjGFKIFA+iFa2/Sv5Afxfo9EefEhagzmfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9uXYxkIfIYz1Mcb7mTVuD2ENgKMB8GA1UdIwQY MBaAFFqH/MhctJlBmhsewvMgnCpDX7ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMt OTk0YmI2MjhiYmE1LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMtOTk0YmI2MjhiYmE1 LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBzd+MZq anhUmYy6ffYA0SwlIAzGRChHOTH3gY+4HcaAjOu/myZe6p/p4C5NT0Fz26NSe3s5 II27XvN62hkR9yMnOBvRzmIsYkalKvZPbZyXQP/iqEzX/enXdo+9m8jAabPdrTqs qY83/nPEgVnr+BfS1FTrKBVPL9DrCVtT0J+oZtF2T0fH/aPIDJsPlev14vWmvcYs oRQwnfPHpqgIkzunPROuHf2Qt9f9H/oxw31+7kxb/A1RelzCLxu4ZuK87aqCd6vg 8KQhIaMUHlqmLXW9cUgDcH/GScq2M6rqQ7CFDr4/kpdSrVqPByvslkhvg8Gr9HxF 43dqQLrQs8JpGw== -----END CERTIFICATE-----Generated at Sun Dec 14 12:24:41 2025 by rpki-client