This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft File: WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json) Hash identifier: lCMJCp/0eCNWk5ayKO0jvNlMf1w24AU0DwK2R+Iko9M= Subject key identifier: 1F:D8:8F:9D:9E:CC:27:E4:B8:6C:A1:B5:53:36:6A:1C:83:AD:D5:39 Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 Certificate issuer: /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23 Certificate serial: 019B0F6E22BCBC2EEBDBC36EF974E18EF80A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft Manifest number: 16BE Signing time: Thu 11 Dec 2025 22:00:34 +0000 Manifest this update: Thu 11 Dec 2025 22:00:34 +0000 Manifest next update: Fri 12 Dec 2025 22:00:34 +0000 Files and hashes: 1: 0fPXJz4ZkFhSnDl_qC3Oqnd5MPk.roa (hash: 9f23J/XrfHwop7pkXvCqZEzg16V5jFPr7gFFFr197JQ=) 2: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: 4yr7Hg2kb+dgJHR+GdyudyCkSyb01VyRIgCBkquPz6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:22:bc:bc:2e:eb:db:c3:6e:f9:74:e1:8e:f8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23 Validity Not Before: Dec 11 22:00:34 2025 GMT Not After : Dec 12 22:00:34 2025 GMT Subject: CN=1fd88f9d9ecc27e4b86ca1b553366a1c83add539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:27:22:fb:4e:9a:09:75:5b:d1:66:4d:cc: cd:ab:46:8b:e5:de:09:30:93:43:cd:80:14:9d:66: 57:c5:45:0b:cf:41:2c:71:ce:c4:24:15:59:91:d6: 44:f6:eb:83:f4:71:8a:9a:cc:9f:75:2f:ae:a4:d6: e9:d4:e7:9a:78:8c:77:f6:83:a9:ed:bb:44:1d:a5: 90:cd:ac:43:14:92:06:6e:31:53:9f:b1:07:67:92: 04:69:69:70:4d:a0:b4:64:e9:00:ba:7b:e3:6a:e9: f2:9c:91:ef:e8:fb:86:e5:7a:81:de:df:fd:36:d8: be:92:d9:1e:d8:1c:31:63:4a:7e:89:d7:0d:c2:eb: f7:e3:6a:1a:f8:7b:0e:c7:f2:98:55:d9:44:4b:18: 66:35:bf:83:35:00:42:59:5e:86:74:07:e7:2d:44: f9:81:f6:83:a4:4b:05:4d:09:3e:09:45:9f:0f:2f: b2:cd:34:26:de:27:41:fc:b3:9c:50:3b:08:6a:9d: 40:f3:4c:10:1a:98:f9:6a:49:c3:d0:4f:de:2d:35: 66:86:b0:ee:38:af:8e:f8:49:b4:7b:b4:17:fa:a2: 2a:bd:e4:1a:77:bc:ad:4f:dc:ea:06:66:e6:3e:64: b2:c1:44:10:47:a6:3e:30:c5:4b:88:b8:a2:0c:a9: 07:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D8:8F:9D:9E:CC:27:E4:B8:6C:A1:B5:53:36:6A:1C:83:AD:D5:39 X509v3 Authority Key Identifier: keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:22:c4:5e:a5:82:25:de:58:60:ef:de:0e:08:da:08:d7:21: 9f:84:1b:19:1c:40:a2:f1:f7:30:aa:81:88:33:88:6e:5f:38: 42:2f:c5:74:99:ca:7a:74:86:22:9d:e8:9a:96:c3:87:7a:c5: 9c:8c:11:bb:01:74:6a:06:fd:34:02:b1:10:b6:c3:5b:80:00: 4c:d0:75:5b:4a:b6:dd:50:0e:e7:b7:48:fa:4f:b2:e3:8e:b3: c3:69:a9:36:08:99:11:8c:1d:9f:c5:68:d7:4a:91:1a:b9:19: 9f:47:bf:fa:b1:ec:71:0a:5a:10:c9:22:68:71:ed:a3:79:51: e6:43:7b:96:3d:11:f9:2f:ee:87:40:64:a6:d5:80:d3:cd:17: 2a:9b:65:fc:ba:1e:dd:22:15:d7:ef:62:35:02:af:f7:51:fa: 5a:f6:ac:69:02:ac:c5:7d:dd:ad:2b:b4:2e:d5:14:1a:9b:78: 16:09:0a:d7:ac:7b:e7:e2:07:c2:c3:15:33:51:7b:96:a5:08: 38:2c:fc:f5:b9:9a:62:25:3c:a2:96:61:08:fd:cf:8f:8e:4c: 31:3a:ad:1e:66:db:26:25:21:69:0a:26:76:93:9c:82:ea:70: 9c:a5:fc:43:b3:30:8c:01:ce:1a:ad:c1:0c:aa:95:3a:d6:fb: c5:1d:88:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbiK8vC7r28Nu+XThjvgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTA2ODdhMjRkNmEzZTQxNGQ3OThkOWIyZmI2YzUyNTkx Y2JiMjMwHhcNMjUxMjExMjIwMDM0WhcNMjUxMjEyMjIwMDM0WjAzMTEwLwYDVQQD EygxZmQ4OGY5ZDllY2MyN2U0Yjg2Y2ExYjU1MzM2NmExYzgzYWRkNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39EnIvtOmgl1W9FmTczNq0aL5d4J MJNDzYAUnWZXxUULz0Escc7EJBVZkdZE9uuD9HGKmsyfdS+upNbp1OeaeIx39oOp 7btEHaWQzaxDFJIGbjFTn7EHZ5IEaWlwTaC0ZOkAunvjaunynJHv6PuG5XqB3t/9 Nti+ktke2BwxY0p+idcNwuv342oa+HsOx/KYVdlESxhmNb+DNQBCWV6GdAfnLUT5 gfaDpEsFTQk+CUWfDy+yzTQm3idB/LOcUDsIap1A80wQGpj5aknD0E/eLTVmhrDu OK+O+Em0e7QX+qIqveQad7ytT9zqBmbmPmSywUQQR6Y+MMVLiLiiDKkHGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/Yj52ezCfkuGyhtVM2ahyDrdU5MB8GA1UdIwQY MBaAFFjgaHok1qPkFNeY2bL7bFJZHLsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgt ZWI4NjEyNDU3NzE1LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgtZWI4NjEyNDU3NzE1 LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiLEXqWC Jd5YYO/eDgjaCNchn4QbGRxAovH3MKqBiDOIbl84Qi/FdJnKenSGIp3ompbDh3rF nIwRuwF0agb9NAKxELbDW4AATNB1W0q23VAO57dI+k+y446zw2mpNgiZEYwdn8Vo 10qRGrkZn0e/+rHscQpaEMkiaHHto3lR5kN7lj0R+S/uh0BkptWA080XKptl/Loe 3SIV1+9iNQKv91H6WvasaQKsxX3drSu0LtUUGpt4FgkK16x75+IHwsMVM1F7lqUI OCz89bmaYiU8opZhCP3Pj45MMTqtHmbbJiUhaQomdpOcgupwnKX8Q7MwjAHOGq3B DKqVOtb7xR2IUw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:46 2025 by rpki-client