This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json) Hash identifier: 2UHNI8nAnYLcHS/V8rD0KunOW5O7idHausry6OVohik= Subject key identifier: 03:E6:DA:BE:33:32:0D:03:B9:E8:54:06:62:EE:5E:8D:C4:CB:90:64 Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6 Certificate serial: 019B1F8625894FCCFDACFC512F1AA8FC648B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft Manifest number: 15E1 Signing time: Mon 15 Dec 2025 01:00:43 +0000 Manifest this update: Mon 15 Dec 2025 01:00:43 +0000 Manifest next update: Tue 16 Dec 2025 01:00:43 +0000 Files and hashes: 1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=) 2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: fAIHylOeVpwBAG194fN78gCLFYx7lyT1DURkx3zzPag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:25:89:4f:cc:fd:ac:fc:51:2f:1a:a8:fc:64:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6 Validity Not Before: Dec 15 01:00:43 2025 GMT Not After : Dec 16 01:00:43 2025 GMT Subject: CN=03e6dabe33320d03b9e8540662ee5e8dc4cb9064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:88:19:9d:cc:33:37:9e:3a:2f:65:fb:9a: e5:23:86:70:bd:01:e0:75:83:05:f2:1b:af:31:82: aa:a3:8f:e3:12:35:6a:7c:d5:bc:5b:ed:f6:fc:7b: 70:8b:40:e9:1a:91:e2:9b:e9:d7:6b:dd:39:a6:25: f5:1a:15:f0:d8:38:b0:0c:ab:52:61:d9:0f:ef:af: 67:d1:08:16:93:75:36:25:a4:07:ad:48:ad:38:40: a1:68:b0:c7:f2:63:71:66:d8:63:54:30:63:35:17: ef:4e:10:60:ff:29:57:a8:85:82:64:37:da:57:dc: 19:23:d3:b2:a9:f7:dd:9d:d3:ba:1c:c6:53:7d:10: 5e:90:8c:a6:2f:4e:01:d5:5b:fb:89:7e:b2:42:42: 9b:99:7a:cb:35:4e:1c:f8:b8:be:75:00:d3:90:3c: 6f:3a:c9:ad:4d:b1:a8:c1:a4:d7:81:14:04:8a:52: 76:60:2e:4b:8c:c8:ad:07:0f:bf:d1:33:7b:8b:37: b2:14:1f:a1:73:66:63:f8:c0:9d:ee:e7:f8:a4:e6: aa:db:89:ee:1b:75:26:7f:4a:e4:a0:47:83:41:a7: f4:ba:e5:e8:a2:2b:25:dc:c5:f7:0e:64:72:fa:d3: 04:0e:6f:7f:98:fb:34:d6:5c:64:b9:e4:18:f4:75: 6d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E6:DA:BE:33:32:0D:03:B9:E8:54:06:62:EE:5E:8D:C4:CB:90:64 X509v3 Authority Key Identifier: keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:37:ce:5b:fe:2b:23:96:4e:f7:5d:14:54:29:25:48:05:33: e1:8f:b4:15:1f:60:54:92:c1:d8:4c:7b:c8:8e:4a:76:3f:6b: ad:bf:1f:bf:31:f0:5a:96:bb:ce:a0:fa:53:e7:42:1e:a1:97: f8:ca:71:c5:76:d9:b3:ca:1b:4f:05:c2:f2:df:e8:22:63:c5: 4c:06:7f:5e:ca:13:0a:fd:e6:e5:1d:d2:0c:12:88:4c:7d:b2: 9d:eb:30:80:04:5d:7f:00:e2:c9:b1:dc:ef:9b:79:af:80:d9: 63:5a:8b:bb:38:27:38:04:29:93:0a:ee:bf:28:fe:44:b3:0b: 6b:29:e8:20:bf:f5:d2:62:58:fa:3b:45:7d:63:1e:79:eb:d5: b0:de:29:21:7b:f9:8f:62:0b:e8:58:82:05:78:3c:9e:6d:c1: 9f:c2:1b:02:11:97:a3:58:47:7f:c1:a8:9f:da:7b:15:58:e9: 9f:6d:86:d4:26:cb:68:a2:29:5d:10:e9:fc:67:52:e3:0b:94: 22:11:f0:86:9c:3a:9a:74:7c:67:9e:47:30:a5:de:78:98:18: b7:6c:67:db:5c:ca:59:51:2f:8d:57:18:85:fc:31:58:ac:1e: 1c:a1:4f:59:33:d1:57:04:b5:39:89:cb:17:85:14:56:2a:ea: 41:a4:64:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhiWJT8z9rPxRLxqo/GSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGQzODkyNzg0ODVlZGQ1MGQzMmNmNWNhODRjZTI3Mjhj MDhjYzYwHhcNMjUxMjE1MDEwMDQzWhcNMjUxMjE2MDEwMDQzWjAzMTEwLwYDVQQD EygwM2U2ZGFiZTMzMzIwZDAzYjllODU0MDY2MmVlNWU4ZGM0Y2I5MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/yIGZ3MMzeeOi9l+5rlI4ZwvQHg dYMF8huvMYKqo4/jEjVqfNW8W+32/Htwi0DpGpHim+nXa905piX1GhXw2DiwDKtS YdkP769n0QgWk3U2JaQHrUitOEChaLDH8mNxZthjVDBjNRfvThBg/ylXqIWCZDfa V9wZI9OyqffdndO6HMZTfRBekIymL04B1Vv7iX6yQkKbmXrLNU4c+Li+dQDTkDxv OsmtTbGowaTXgRQEilJ2YC5LjMitBw+/0TN7izeyFB+hc2Zj+MCd7uf4pOaq24nu G3Umf0rkoEeDQaf0uuXooisl3MX3DmRy+tMEDm9/mPs01lxkueQY9HVtiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPm2r4zMg0DuehUBmLuXo3Ey5BkMB8GA1UdIwQY MBaAFFqNOJJ4SF7dUNMs9cqEzicowIzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAt NTJiY2NiMDZhZjNjLzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAtNTJiY2NiMDZhZjNj LzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTfOW/4r I5ZO910UVCklSAUz4Y+0FR9gVJLB2Ex7yI5Kdj9rrb8fvzHwWpa7zqD6U+dCHqGX +MpxxXbZs8obTwXC8t/oImPFTAZ/XsoTCv3m5R3SDBKITH2yneswgARdfwDiybHc 75t5r4DZY1qLuzgnOAQpkwruvyj+RLMLaynoIL/10mJY+jtFfWMeeevVsN4pIXv5 j2IL6FiCBXg8nm3Bn8IbAhGXo1hHf8Gon9p7FVjpn22G1CbLaKIpXRDp/GdS4wuU IhHwhpw6mnR8Z55HMKXeeJgYt2xn21zKWVEvjVcYhfwxWKweHKFPWTPRVwS1OYnL F4UUVirqQaRkTA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:40 2025 by rpki-client