This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft File: wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json) Hash identifier: n6PCK14hrBA24kchBvWMXzWCsWQj+6oHP6eTrqX7iD8= Subject key identifier: 98:A5:EE:62:10:CB:5E:6A:01:E4:DA:CB:AA:29:EC:9F:D6:C7:83:86 Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 Certificate issuer: /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Certificate serial: 019AF31C4736251136A4E82F218AB0C30B37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:47 +0000 Manifest this update: Sat 06 Dec 2025 10:01:47 +0000 Manifest next update: Sun 07 Dec 2025 10:01:47 +0000 Files and hashes: 1: AMYGfvxAWSGgHnKu_QntycSpGmI.roa (hash: QcPElnjpeBVJZHljf/0lA1BJWaDX6zX8ch7k4Gzc5Ng=) 2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: HuR+MDfA7b19Ucqi6ftbC+n2kQ4AoXF2Rvzt7yOCQks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:47:36:25:11:36:a4:e8:2f:21:8a:b0:c3:0b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Validity Not Before: Dec 6 10:01:47 2025 GMT Not After : Dec 7 10:01:47 2025 GMT Subject: CN=98a5ee6210cb5e6a01e4dacbaa29ec9fd6c78386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:97:0e:d3:d6:53:bf:32:55:f9:8f:71:b3: 65:79:5b:88:1d:36:e9:01:01:40:46:36:5e:b4:99: 94:1a:97:30:ea:7a:65:19:31:d3:9d:e4:05:23:28: 63:06:ee:09:fa:b8:7e:15:5e:47:f9:f2:83:d6:e5: 9e:42:f1:db:bf:35:8b:6c:15:27:cd:e8:27:08:18: cd:cb:61:5a:62:28:02:c2:3a:8c:7a:17:bb:47:27: 4a:90:ef:51:90:25:cb:eb:e5:c2:57:ad:d1:ba:7e: 5f:07:8f:fe:ef:01:52:58:b0:a7:f2:76:68:3a:fe: c2:79:22:69:97:20:b0:a1:2a:a6:a9:b3:fb:90:89: 2b:56:c0:36:d9:9c:95:f0:02:b1:46:c0:dd:43:62: 21:1f:6a:0c:4f:76:13:e1:d2:7b:8a:75:da:9b:9a: 8d:8b:a3:58:a8:ab:ce:c5:af:c8:c8:9a:28:3a:22: 29:2c:01:0a:97:0f:89:94:96:4e:d4:45:2a:98:c4: e7:98:8d:87:12:71:1b:12:de:42:55:f7:e8:9b:b3: 7b:3d:d1:e7:70:fc:32:df:3d:49:55:2e:94:80:a5: 6b:be:94:36:7e:d2:ca:cf:0b:f7:5a:04:d0:00:b7: b7:70:b0:a8:7b:1a:be:4f:4d:f4:68:49:42:e1:19: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A5:EE:62:10:CB:5E:6A:01:E4:DA:CB:AA:29:EC:9F:D6:C7:83:86 X509v3 Authority Key Identifier: keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:bb:22:89:4d:45:4c:06:dc:68:1f:be:d7:4d:82:ed:8a:75: 17:9b:f8:d4:51:f0:97:35:d4:5a:0f:f3:58:c6:5a:3b:fb:b2: 92:a7:17:d3:19:6f:b9:4f:bb:a6:9d:55:34:4c:fb:62:84:e5: e1:d0:a1:c9:e2:98:35:d5:91:86:75:1c:91:8c:d2:35:c1:10: 81:28:18:59:64:99:fa:55:db:9f:de:33:f6:d6:12:a6:08:0d: 09:2d:8c:be:f9:32:2a:cc:ea:44:02:4f:01:46:e3:c7:07:2a: ab:7a:0a:c3:6b:9d:c2:ae:ab:ee:88:40:2c:53:ee:9f:0a:2c: 77:05:45:d6:65:31:d6:da:b3:30:43:cb:6e:4d:80:8d:7b:4f: ae:18:dc:15:26:8d:c4:92:f7:b3:1f:22:5d:d9:66:cd:60:0a: 3c:01:3a:0d:40:70:13:4e:9f:5c:ba:de:e2:5c:6c:86:40:43: 54:cc:f2:eb:e5:26:aa:d1:67:96:bd:8f:08:ac:60:4b:27:d7: e2:f1:49:41:39:bd:4b:5b:69:3a:12:10:23:3b:e3:53:44:84: 11:09:21:6e:87:e5:3f:56:51:3c:bb:12:ce:04:2f:84:8c:65: bb:af:f8:9d:94:2f:91:a1:2b:ea:38:fe:21:7e:f0:9c:02:43: d7:ef:ef:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEc2JRE2pOgvIYqwwws3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWExZGRiYTRjYmQzY2I1N2VjODYwZDg1ZmY0ZmY5MzAx YWZjZTUwHhcNMjUxMjA2MTAwMTQ3WhcNMjUxMjA3MTAwMTQ3WjAzMTEwLwYDVQQD Eyg5OGE1ZWU2MjEwY2I1ZTZhMDFlNGRhY2JhYTI5ZWM5ZmQ2Yzc4Mzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9KXDtPWU78yVfmPcbNleVuIHTbp AQFARjZetJmUGpcw6nplGTHTneQFIyhjBu4J+rh+FV5H+fKD1uWeQvHbvzWLbBUn zegnCBjNy2FaYigCwjqMehe7RydKkO9RkCXL6+XCV63Run5fB4/+7wFSWLCn8nZo Ov7CeSJplyCwoSqmqbP7kIkrVsA22ZyV8AKxRsDdQ2IhH2oMT3YT4dJ7inXam5qN i6NYqKvOxa/IyJooOiIpLAEKlw+JlJZO1EUqmMTnmI2HEnEbEt5CVffom7N7PdHn cPwy3z1JVS6UgKVrvpQ2ftLKzwv3WgTQALe3cLCoexq+T030aElC4RkO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJil7mIQy15qAeTay6op7J/Wx4OGMB8GA1UdIwQY MBaAFMDqHduky9PLV+yGDYX/T/kwGvzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt M2NmZDZjM2ZkY2E0LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0 LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrsiiU1F TAbcaB++102C7Yp1F5v41FHwlzXUWg/zWMZaO/uykqcX0xlvuU+7pp1VNEz7YoTl 4dChyeKYNdWRhnUckYzSNcEQgSgYWWSZ+lXbn94z9tYSpggNCS2MvvkyKszqRAJP AUbjxwcqq3oKw2udwq6r7ohALFPunwosdwVF1mUx1tqzMEPLbk2AjXtPrhjcFSaN xJL3sx8iXdlmzWAKPAE6DUBwE06fXLre4lxshkBDVMzy6+UmqtFnlr2PCKxgSyfX 4vFJQTm9S1tpOhIQIzvjU0SEEQkhboflP1ZRPLsSzgQvhIxlu6/4nZQvkaEr6jj+ IX7wnAJD1+/vQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:57 2025 by rpki-client