This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft File: WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json) Hash identifier: evh9DlXcs01mIyLHttBTQbBD1q9Dm6r2CuR8ZhG+n60= Subject key identifier: AB:1D:BF:34:DE:5C:F4:A1:8B:8B:D8:2A:2C:7A:3C:D6:79:98:85:85 Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 Certificate issuer: /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23 Certificate serial: 019B341F731D7A04AAB250C6411825E55151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft Manifest number: 16D1 Signing time: Fri 19 Dec 2025 01:00:34 +0000 Manifest this update: Fri 19 Dec 2025 01:00:34 +0000 Manifest next update: Sat 20 Dec 2025 01:00:34 +0000 Files and hashes: 1: 0fPXJz4ZkFhSnDl_qC3Oqnd5MPk.roa (hash: 9f23J/XrfHwop7pkXvCqZEzg16V5jFPr7gFFFr197JQ=) 2: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: B0FuW74mtdXdc36Jbz07e8s3t1A+s/1ZEVMm2nTEfLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:73:1d:7a:04:aa:b2:50:c6:41:18:25:e5:51:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23 Validity Not Before: Dec 19 01:00:34 2025 GMT Not After : Dec 20 01:00:34 2025 GMT Subject: CN=ab1dbf34de5cf4a18b8bd82a2c7a3cd679988585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:fe:ba:1e:15:19:55:8d:21:3b:a0:62:1a: 87:9a:26:64:cd:15:6c:a4:a0:5c:37:4f:13:ca:eb: 69:73:d3:66:34:2f:ca:84:95:88:a5:68:53:67:99: 71:05:b5:d2:cf:59:dd:86:09:44:c0:7c:b7:78:5f: 89:c1:ba:79:fc:41:5c:ac:a8:94:d4:a0:5b:17:5a: c2:0e:61:1a:e1:41:f9:a3:03:59:52:f9:74:f4:78: a6:21:31:ac:0e:6a:1e:6b:d8:0e:02:0c:4f:78:9d: f1:c2:2a:1e:9e:d3:f2:c9:31:10:48:99:11:02:ab: ce:8f:e0:bd:79:cc:83:11:6f:76:f9:1a:7e:d8:d6: 11:e8:be:b3:63:f6:7c:89:c8:a8:79:64:92:15:fa: b7:ef:06:6a:f8:4b:90:30:3a:de:5a:7d:ee:73:29: ac:72:a4:78:64:15:b1:93:f4:e9:32:84:3e:05:57: cd:d5:8f:63:34:8a:d2:41:c2:5c:71:d2:91:31:e9: 24:70:77:05:30:38:48:c1:86:d5:24:a7:7e:d6:3e: 5c:25:8e:bd:90:db:14:ed:61:31:b5:16:fd:6a:c5: c2:40:9e:e0:26:3e:b0:22:a5:3e:41:4e:6b:92:ab: d5:58:ae:c0:d9:86:86:8f:af:34:b2:7f:97:7e:82: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1D:BF:34:DE:5C:F4:A1:8B:8B:D8:2A:2C:7A:3C:D6:79:98:85:85 X509v3 Authority Key Identifier: keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:7b:ae:3f:bc:29:e7:0d:db:2a:5e:dc:d8:8a:c3:73:90:b7: 25:88:60:b9:ea:12:08:25:4a:c3:a0:37:cf:4f:77:e6:1d:9e: 02:17:2a:5d:93:cc:dc:63:19:29:c2:9f:97:04:c3:97:56:84: e1:8f:4d:ea:9a:ef:7c:f8:2e:70:1d:3d:3b:4d:36:a4:c0:b9: fa:ad:ba:a1:1e:00:c7:a2:62:28:0f:9b:c3:4a:c3:17:63:77: 1c:a4:99:6a:03:b3:ff:0d:5a:92:c2:9a:3d:2e:3d:7c:b6:2b: 52:e0:4f:dc:4f:a8:2e:35:83:58:76:d3:7c:53:c2:a4:9a:0d: ac:11:76:87:00:41:8d:ac:98:d2:81:51:1e:9b:a2:a0:72:b5: 8e:ca:6e:ba:10:c7:55:38:fc:d2:1f:01:c9:9d:3a:27:7f:bb: c3:e5:02:d8:10:07:7e:5d:63:aa:32:7e:e5:90:82:36:0a:3b: ed:e3:0a:e4:ad:db:1e:91:84:50:37:7c:e4:12:68:06:97:09: 23:3e:02:be:23:91:33:5d:90:98:fc:2b:f4:d5:34:44:f9:d6: 37:6a:4a:05:ac:1d:44:5a:be:77:9b:5a:80:c2:d2:4e:02:49: 60:61:87:a5:a1:b1:2f:34:7d:cc:f2:40:c4:78:d5:d9:cc:2d: c2:46:3d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H3MdegSqslDGQRgl5VFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTA2ODdhMjRkNmEzZTQxNGQ3OThkOWIyZmI2YzUyNTkx Y2JiMjMwHhcNMjUxMjE5MDEwMDM0WhcNMjUxMjIwMDEwMDM0WjAzMTEwLwYDVQQD EyhhYjFkYmYzNGRlNWNmNGExOGI4YmQ4MmEyYzdhM2NkNjc5OTg4NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraH+uh4VGVWNITugYhqHmiZkzRVs pKBcN08Tyutpc9NmNC/KhJWIpWhTZ5lxBbXSz1ndhglEwHy3eF+Jwbp5/EFcrKiU 1KBbF1rCDmEa4UH5owNZUvl09HimITGsDmoea9gOAgxPeJ3xwioentPyyTEQSJkR AqvOj+C9ecyDEW92+Rp+2NYR6L6zY/Z8icioeWSSFfq37wZq+EuQMDreWn3ucyms cqR4ZBWxk/TpMoQ+BVfN1Y9jNIrSQcJccdKRMekkcHcFMDhIwYbVJKd+1j5cJY69 kNsU7WExtRb9asXCQJ7gJj6wIqU+QU5rkqvVWK7A2YaGj680sn+XfoIIuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsdvzTeXPShi4vYKix6PNZ5mIWFMB8GA1UdIwQY MBaAFFjgaHok1qPkFNeY2bL7bFJZHLsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgt ZWI4NjEyNDU3NzE1LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgtZWI4NjEyNDU3NzE1 LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3uuP7wp 5w3bKl7c2IrDc5C3JYhgueoSCCVKw6A3z0935h2eAhcqXZPM3GMZKcKflwTDl1aE 4Y9N6prvfPgucB09O002pMC5+q26oR4Ax6JiKA+bw0rDF2N3HKSZagOz/w1aksKa PS49fLYrUuBP3E+oLjWDWHbTfFPCpJoNrBF2hwBBjayY0oFRHpuioHK1jspuuhDH VTj80h8ByZ06J3+7w+UC2BAHfl1jqjJ+5ZCCNgo77eMK5K3bHpGEUDd85BJoBpcJ Iz4CviORM12QmPwr9NU0RPnWN2pKBawdRFq+d5tagMLSTgJJYGGHpaGxLzR9zPJA xHjV2cwtwkY9Mw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:39:55 2025 by rpki-client