This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft File: wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json) Hash identifier: aimocNyr506kCKyjXOhvZLghHGpjcUHSGbzJASUUFJI= Subject key identifier: 0C:17:4C:AC:99:94:C2:DF:98:BD:A9:A6:A0:CE:71:86:A9:AB:00:28 Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 Certificate issuer: /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Certificate serial: 019B0E25CD91080F6C672EC4FAA54AABD274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft Manifest number: 176C Signing time: Thu 11 Dec 2025 16:01:57 +0000 Manifest this update: Thu 11 Dec 2025 16:01:57 +0000 Manifest next update: Fri 12 Dec 2025 16:01:57 +0000 Files and hashes: 1: AMYGfvxAWSGgHnKu_QntycSpGmI.roa (hash: QcPElnjpeBVJZHljf/0lA1BJWaDX6zX8ch7k4Gzc5Ng=) 2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: Ne3uP55iFQ0zvWRk/jyy/Obny3DtIXBJOUPm0gJZy6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:cd:91:08:0f:6c:67:2e:c4:fa:a5:4a:ab:d2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Validity Not Before: Dec 11 16:01:57 2025 GMT Not After : Dec 12 16:01:57 2025 GMT Subject: CN=0c174cac9994c2df98bda9a6a0ce7186a9ab0028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:96:75:20:6b:e5:d4:f5:7c:8d:13:df:55: b9:2f:77:bb:55:c1:75:30:5c:60:58:28:e3:97:da: fe:26:5d:5a:a9:1f:17:92:0d:d0:6c:eb:c0:31:65: 1c:25:fb:48:7d:4a:2f:3c:9c:f7:63:1c:8c:a1:de: 7c:22:a5:ae:9d:02:ee:dd:d5:81:3a:64:e1:63:a2: 5e:35:01:0b:e6:fe:6d:6d:15:19:ea:08:3b:aa:ee: 84:31:76:e3:19:85:33:4b:10:9d:45:eb:d4:e5:c5: 26:d0:41:f3:b9:a0:a8:bf:f3:a5:62:04:dd:47:63: 05:b2:d9:64:94:7b:8b:8e:74:9f:ec:5e:68:40:96: 8b:36:f1:c0:f9:05:4a:01:96:48:0e:b1:4b:66:28: 32:ef:cc:b3:13:f2:f8:6a:f5:de:7f:a3:c3:d6:af: e0:b7:26:67:b9:55:7c:38:2d:dc:42:d6:8b:d3:89: 3c:f2:d6:f5:3e:6b:ed:f5:c5:80:0f:c2:af:7c:e2: 21:94:ba:95:59:c8:fb:a5:49:3a:5b:a3:73:a3:dd: 9c:aa:da:50:6c:b4:8e:fe:a8:cf:41:eb:54:9f:42: 1b:a3:5a:2a:34:fc:4a:a7:44:c4:6f:76:b2:d6:da: 40:c6:a8:4a:82:2e:de:a7:52:88:0c:14:84:4a:6f: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:17:4C:AC:99:94:C2:DF:98:BD:A9:A6:A0:CE:71:86:A9:AB:00:28 X509v3 Authority Key Identifier: keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:21:e5:26:c2:66:9b:e4:77:d5:5a:cc:18:c2:7a:41:c7:0a: 4f:42:3c:dc:1b:62:2f:bb:c8:4f:a3:ef:00:4a:ec:38:c5:1f: 8e:ba:37:78:cb:a5:64:95:18:92:d1:be:98:79:b5:39:02:b1: d0:3b:28:09:ff:9f:90:cc:fc:ac:7b:e6:84:46:ae:e5:70:c0: 84:00:c5:11:6b:32:86:ee:1a:64:f4:40:46:ab:98:29:51:16: cb:cb:81:0c:bb:a2:d6:3f:93:c2:a0:70:0a:af:54:f5:44:51: 19:86:e8:55:da:a7:d8:99:71:26:f5:88:9f:df:13:b3:6d:a3: b9:80:30:17:ae:09:81:fd:1a:fc:31:20:4b:8d:fb:00:e1:22: 4f:90:1e:ce:b1:a4:51:be:6b:4a:ff:a3:30:7e:69:97:1a:73: bf:cb:7c:d0:32:00:f0:76:e2:63:74:d6:c1:54:72:9b:03:3e: 81:2b:f2:73:d8:a5:3b:b8:0e:a0:30:e7:37:fe:e8:a5:6e:28: 24:af:b7:1f:11:1e:8d:ec:ad:26:d4:a7:e5:30:76:d7:5c:87: e4:77:78:52:40:d0:72:17:01:58:a9:96:37:87:13:21:bd:6c: e0:5d:d7:69:47:73:47:38:c1:fb:5f:11:a9:8c:03:61:6e:90: 9e:4b:cc:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJc2RCA9sZy7E+qVKq9J0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWExZGRiYTRjYmQzY2I1N2VjODYwZDg1ZmY0ZmY5MzAx YWZjZTUwHhcNMjUxMjExMTYwMTU3WhcNMjUxMjEyMTYwMTU3WjAzMTEwLwYDVQQD EygwYzE3NGNhYzk5OTRjMmRmOThiZGE5YTZhMGNlNzE4NmE5YWIwMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnuWdSBr5dT1fI0T31W5L3e7VcF1 MFxgWCjjl9r+Jl1aqR8Xkg3QbOvAMWUcJftIfUovPJz3YxyMod58IqWunQLu3dWB OmThY6JeNQEL5v5tbRUZ6gg7qu6EMXbjGYUzSxCdRevU5cUm0EHzuaCov/OlYgTd R2MFstlklHuLjnSf7F5oQJaLNvHA+QVKAZZIDrFLZigy78yzE/L4avXef6PD1q/g tyZnuVV8OC3cQtaL04k88tb1Pmvt9cWAD8KvfOIhlLqVWcj7pUk6W6Nzo92cqtpQ bLSO/qjPQetUn0Ibo1oqNPxKp0TEb3ay1tpAxqhKgi7ep1KIDBSESm/FzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwXTKyZlMLfmL2ppqDOcYapqwAoMB8GA1UdIwQY MBaAFMDqHduky9PLV+yGDYX/T/kwGvzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt M2NmZDZjM2ZkY2E0LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0 LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyHlJsJm m+R31VrMGMJ6QccKT0I83BtiL7vIT6PvAErsOMUfjro3eMulZJUYktG+mHm1OQKx 0DsoCf+fkMz8rHvmhEau5XDAhADFEWsyhu4aZPRARquYKVEWy8uBDLui1j+TwqBw Cq9U9URRGYboVdqn2JlxJvWIn98Ts22juYAwF64Jgf0a/DEgS437AOEiT5AezrGk Ub5rSv+jMH5plxpzv8t80DIA8HbiY3TWwVRymwM+gSvyc9ilO7gOoDDnN/7opW4o JK+3HxEejeytJtSn5TB211yH5Hd4UkDQchcBWKmWN4cTIb1s4F3XaUdzRzjB+18R qYwDYW6QnkvMIw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:14:05 2025 by rpki-client