This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft File: Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json) Hash identifier: 6G7oNI+y9c5d3+c25f+/w1VWp9Kz+QLiQ9PpJFzK9yc= Subject key identifier: 06:A4:5C:B2:7B:AC:98:42:01:12:BB:B3:35:DC:5B:C9:A5:B0:B2:53 Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D Certificate issuer: /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d Certificate serial: 019AF31C93E56AE3696ABEFCC525EC810543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft Manifest number: 04D7 Signing time: Sat 06 Dec 2025 10:02:07 +0000 Manifest this update: Sat 06 Dec 2025 10:02:07 +0000 Manifest next update: Sun 07 Dec 2025 10:02:07 +0000 Files and hashes: 1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=) 2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: bVDpObvB3QcSdVJfih4WZHc6M/7pqH68GIGcNPRoCTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:93:e5:6a:e3:69:6a:be:fc:c5:25:ec:81:05:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d Validity Not Before: Dec 6 10:02:07 2025 GMT Not After : Dec 7 10:02:07 2025 GMT Subject: CN=06a45cb27bac98420112bbb335dc5bc9a5b0b253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:cb:77:f4:fd:03:fc:a1:f2:d8:83:73:6d: c3:22:9e:57:05:ba:95:36:2f:fe:96:7d:6e:1c:fa: 26:91:0b:df:bd:38:ae:cb:29:9a:41:52:db:68:af: f5:37:e6:3b:f9:a0:38:0a:2a:65:a2:40:94:b7:11: 7b:93:8e:bc:53:ce:f5:c4:9a:4d:ce:ad:4c:b8:78: ba:b2:89:15:e4:08:4c:dc:6a:c4:e5:fb:c7:3b:4c: 97:f9:57:2b:79:53:82:ca:3f:2a:44:80:3d:d3:85: f5:c9:52:ff:a9:2b:93:a3:33:c0:45:d5:9c:92:72: f4:32:24:4d:aa:17:96:9b:04:82:6d:28:e6:0f:15: 49:db:e2:8c:63:77:e9:df:9c:ad:5e:2c:31:bd:ff: 4c:0f:18:a8:f8:ee:65:6c:d9:24:a1:fa:d8:02:ee: 70:79:05:89:a7:0e:cb:24:59:a8:af:25:86:bf:32: 65:46:26:da:28:0f:06:81:aa:b4:20:0b:8a:5c:75: 08:90:57:d2:c7:62:7b:75:2b:42:7e:03:95:f0:bb: d7:b8:d7:d4:cb:d8:0a:d8:3d:d7:68:cf:e4:f8:f5: 24:9a:1d:2d:13:38:bc:c4:2d:18:01:13:7a:87:61: c9:c7:68:ca:f2:e5:58:95:0a:0f:a4:3a:81:ee:7e: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A4:5C:B2:7B:AC:98:42:01:12:BB:B3:35:DC:5B:C9:A5:B0:B2:53 X509v3 Authority Key Identifier: keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:72:3d:f9:dd:fa:89:b2:13:1e:8c:87:a9:d2:58:5d:36:2e: e0:34:99:1d:48:68:16:fe:3a:7d:ac:d5:03:52:23:b7:77:69: b2:12:dd:ce:4f:79:79:05:d8:52:f9:ee:4e:ae:58:fa:59:e3: da:f1:8b:21:47:d8:b4:ee:8f:23:13:bc:90:dd:ac:8f:9b:d9: 6a:39:a0:d0:1d:fd:22:c9:0b:7a:7e:64:1b:03:73:37:fc:ef: af:d7:d8:ea:b4:1e:2f:0f:c2:6c:82:e5:cc:44:c0:4f:f8:47: bc:5e:18:57:62:b4:fc:c8:1b:cf:3d:f5:80:ba:32:f9:0c:ee: 11:a3:66:63:fc:8d:2d:12:1e:11:27:0f:8e:2b:a1:c3:a8:01: 74:94:a3:76:49:49:99:86:0a:f7:66:49:bc:78:24:71:89:de: c2:5c:95:ea:10:45:13:5f:97:c3:33:e8:d1:ec:6e:93:75:10: 14:bd:25:fa:d2:4f:32:3a:c3:29:d8:24:ef:41:85:e7:a3:e1: 7e:b8:62:92:de:be:0b:db:c7:cf:66:81:d0:4c:0b:40:92:67: fc:0f:05:65:61:1b:64:6e:b1:b5:a7:e8:76:e0:a9:1c:8e:d9: ee:6f:de:d0:56:93:5c:00:a3:ab:9b:10:96:38:5e:2b:8d:ad: 18:d2:f8:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJPlauNpar78xSXsgQVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhODdmY2M4NWNiNDk5NDE5YTFiMWVjMmYzMjA5YzJhNDM1 ZmI5MmQwHhcNMjUxMjA2MTAwMjA3WhcNMjUxMjA3MTAwMjA3WjAzMTEwLwYDVQQD EygwNmE0NWNiMjdiYWM5ODQyMDExMmJiYjMzNWRjNWJjOWE1YjBiMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXzLd/T9A/yh8tiDc23DIp5XBbqV Ni/+ln1uHPomkQvfvTiuyymaQVLbaK/1N+Y7+aA4CiplokCUtxF7k468U871xJpN zq1MuHi6sokV5AhM3GrE5fvHO0yX+VcreVOCyj8qRIA904X1yVL/qSuTozPARdWc knL0MiRNqheWmwSCbSjmDxVJ2+KMY3fp35ytXiwxvf9MDxio+O5lbNkkofrYAu5w eQWJpw7LJFmoryWGvzJlRibaKA8Ggaq0IAuKXHUIkFfSx2J7dStCfgOV8LvXuNfU y9gK2D3XaM/k+PUkmh0tEzi8xC0YARN6h2HJx2jK8uVYlQoPpDqB7n5G5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAakXLJ7rJhCARK7szXcW8mlsLJTMB8GA1UdIwQY MBaAFFqH/MhctJlBmhsewvMgnCpDX7ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMt OTk0YmI2MjhiYmE1LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMtOTk0YmI2MjhiYmE1 LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHI9+d36 ibITHoyHqdJYXTYu4DSZHUhoFv46fazVA1Ijt3dpshLdzk95eQXYUvnuTq5Y+lnj 2vGLIUfYtO6PIxO8kN2sj5vZajmg0B39IskLen5kGwNzN/zvr9fY6rQeLw/CbILl zETAT/hHvF4YV2K0/Mgbzz31gLoy+QzuEaNmY/yNLRIeEScPjiuhw6gBdJSjdklJ mYYK92ZJvHgkcYnewlyV6hBFE1+XwzPo0exuk3UQFL0l+tJPMjrDKdgk70GF56Ph frhikt6+C9vHz2aB0EwLQJJn/A8FZWEbZG6xtafoduCpHI7Z7m/e0FaTXACjq5sQ ljheK42tGNL4Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:36 2025 by rpki-client