This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json) Hash identifier: ofFVLRmw1hpmwloKgEybz5V91PR82tyX0HLHNsLMYME= Subject key identifier: 34:58:FD:86:9A:2C:13:70:1F:D3:69:3B:E6:D4:B2:01:53:56:D7:38 Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Certificate serial: 019B0EC9C4B055F7423707FC5D550B78FE83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 19:01:02 +0000 Manifest this update: Thu 11 Dec 2025 19:01:02 +0000 Manifest next update: Fri 12 Dec 2025 19:01:02 +0000 Files and hashes: 1: 8JW9cLvAYJiNfqMk8uXJViw4BMk.roa (hash: 3HRA7a+4Rt2v9iOopX7lbp4pjm2TOLImsuvkUPHsQDI=) 2: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=) 3: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: HMx7ZUNUuqCSAWg1Uh6EbgWR7Ewp0vH8DT2PRulA1w0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:c4:b0:55:f7:42:37:07:fc:5d:55:0b:78:fe:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Validity Not Before: Dec 11 19:01:02 2025 GMT Not After : Dec 12 19:01:02 2025 GMT Subject: CN=3458fd869a2c13701fd3693be6d4b2015356d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:88:cb:d9:66:fb:f4:10:0d:9b:2c:7e:9d: cb:db:45:2f:dc:65:ad:09:03:22:36:a0:07:ee:62: 4b:12:21:c2:25:d3:fa:dc:88:24:f1:25:a3:05:f1: 56:5b:5d:0d:d7:62:69:d3:a0:8a:86:70:74:6e:48: 68:72:8a:02:c1:5d:2f:64:f8:ca:41:be:77:fa:a9: 92:6d:3d:10:e7:14:cf:f5:3d:e8:71:3d:ef:c2:b2: 88:42:cf:50:5b:ae:63:d5:27:ee:7a:fc:f2:2f:24: 64:e6:34:ae:ad:72:0e:11:6a:9b:aa:06:17:3b:4c: 2e:4d:1b:4c:ce:c1:37:57:38:2b:3e:73:71:24:8d: d2:d8:94:8a:c7:27:7c:7c:c9:7a:0a:21:8c:e8:ee: 74:e0:0b:b3:95:23:ff:2a:cc:7f:02:ba:b0:6b:25: 63:d5:eb:a7:ce:97:48:92:6a:08:19:45:08:49:6d: 4b:c5:8f:3d:b1:6e:f1:65:fb:2c:50:8f:c2:27:c7: fb:37:1e:72:95:91:53:9c:0c:08:3f:af:a5:d4:db: d5:2c:21:3e:fb:b7:23:92:75:9a:f9:71:0d:da:c1: 55:05:a0:1b:39:1a:c7:2d:6e:fd:ea:89:23:88:74: 50:e1:46:77:29:4c:85:d1:aa:ad:e2:1f:a3:69:4b: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:58:FD:86:9A:2C:13:70:1F:D3:69:3B:E6:D4:B2:01:53:56:D7:38 X509v3 Authority Key Identifier: keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9b:bd:28:47:eb:8e:a9:bc:b1:0b:7a:df:9e:80:bb:06:91: 3f:85:ed:04:2b:23:ac:7a:b3:20:bf:e3:d1:12:20:ca:90:35: 08:3f:92:5a:f3:a2:56:be:f3:c9:87:e8:bc:11:24:61:98:dd: f1:6c:03:6a:e5:f6:7a:28:1b:cf:14:96:f9:34:cd:64:0f:a2: 33:4c:a0:78:91:69:6a:04:e6:4d:61:d1:cb:bf:37:ec:3f:7f: f5:2c:8b:93:6a:80:40:31:54:e2:37:c7:ec:69:a9:d5:42:77: e0:62:65:3a:f6:fe:0c:77:02:3d:88:66:ff:50:98:c2:0e:d4: f1:d1:bf:db:7c:24:56:64:cf:c5:a0:02:a7:cf:df:9c:25:8e: 4e:43:09:55:ce:5a:c7:f9:2e:7e:eb:f9:73:e3:6c:79:c5:fa: be:35:87:c6:c7:ee:6d:45:40:b7:48:35:be:98:99:ba:ed:5f: 73:9e:fd:75:f9:ad:61:3c:bb:22:7c:95:b9:1e:b3:94:46:46: 83:bb:c0:ea:4f:3d:4b:d5:53:d8:7e:93:d1:76:70:1c:ac:55: 70:a1:ae:3f:88:d8:25:bd:da:0d:05:0a:1e:f6:52:53:11:43: 4b:5d:a0:50:75:37:61:cc:33:2f:d8:80:37:11:d8:b3:fe:84: 90:10:ec:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOycSwVfdCNwf8XVULeP6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk YTQwZWEwHhcNMjUxMjExMTkwMTAyWhcNMjUxMjEyMTkwMTAyWjAzMTEwLwYDVQQD EygzNDU4ZmQ4NjlhMmMxMzcwMWZkMzY5M2JlNmQ0YjIwMTUzNTZkNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD2Iy9lm+/QQDZssfp3L20Uv3GWt CQMiNqAH7mJLEiHCJdP63Igk8SWjBfFWW10N12Jp06CKhnB0bkhocooCwV0vZPjK Qb53+qmSbT0Q5xTP9T3ocT3vwrKIQs9QW65j1SfuevzyLyRk5jSurXIOEWqbqgYX O0wuTRtMzsE3VzgrPnNxJI3S2JSKxyd8fMl6CiGM6O504AuzlSP/Ksx/ArqwayVj 1eunzpdIkmoIGUUISW1LxY89sW7xZfssUI/CJ8f7Nx5ylZFTnAwIP6+l1NvVLCE+ +7cjknWa+XEN2sFVBaAbORrHLW796okjiHRQ4UZ3KUyF0aqt4h+jaUu1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRY/YaaLBNwH9NpO+bUsgFTVtc4MB8GA1UdIwQY MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1 LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5u9KEfr jqm8sQt6356AuwaRP4XtBCsjrHqzIL/j0RIgypA1CD+SWvOiVr7zyYfovBEkYZjd 8WwDauX2eigbzxSW+TTNZA+iM0ygeJFpagTmTWHRy7837D9/9SyLk2qAQDFU4jfH 7Gmp1UJ34GJlOvb+DHcCPYhm/1CYwg7U8dG/23wkVmTPxaACp8/fnCWOTkMJVc5a x/kufuv5c+NsecX6vjWHxsfubUVAt0g1vpiZuu1fc579dfmtYTy7InyVuR6zlEZG g7vA6k89S9VT2H6T0XZwHKxVcKGuP4jYJb3aDQUKHvZSUxFDS12gUHU3YcwzL9iA NxHYs/6EkBDsxw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:21:19 2025 by rpki-client