This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json) Hash identifier: 56LhoOP1nO3j8d7kYIJvKNEAdVNpZ71qqbFiY1d2x/8= Subject key identifier: 72:EC:E8:8E:47:71:37:6B:6B:29:8F:E8:6F:9C:5F:18:23:8B:61:3F Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Certificate serial: 019AF5AEF400E609B297A00A3B3B31149C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 22:01:14 +0000 Manifest this update: Sat 06 Dec 2025 22:01:14 +0000 Manifest next update: Sun 07 Dec 2025 22:01:14 +0000 Files and hashes: 1: 8JW9cLvAYJiNfqMk8uXJViw4BMk.roa (hash: 3HRA7a+4Rt2v9iOopX7lbp4pjm2TOLImsuvkUPHsQDI=) 2: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=) 3: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: RMLx0M3ljLIFZR7gOBqMLH/6e1mg2pZmjX+4oerG1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:f4:00:e6:09:b2:97:a0:0a:3b:3b:31:14:9c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Validity Not Before: Dec 6 22:01:14 2025 GMT Not After : Dec 7 22:01:14 2025 GMT Subject: CN=72ece88e4771376b6b298fe86f9c5f18238b613f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:f9:e2:86:b2:fb:0c:3d:3b:4b:cf:b5:12: af:f8:86:14:d8:a6:3d:65:db:69:71:b4:3d:ca:8c: 83:9c:b2:9e:52:5f:c8:a4:2f:f1:9b:35:4a:f2:38: b0:44:7a:52:ed:32:00:1f:e1:9d:7c:7a:74:2c:b1: 4e:c0:de:7c:40:b1:f9:ba:7b:f0:0c:72:45:f2:91: f7:f2:de:f9:7d:53:ad:8b:11:d4:49:76:8e:63:ba: a1:0d:20:4a:55:8b:c7:3d:2c:9a:7a:ba:de:94:8c: 38:5d:1a:21:d6:59:09:60:bf:76:70:5b:aa:1b:91: da:4e:c3:18:c6:62:8e:00:91:9e:71:c9:69:f6:9d: 48:63:7b:48:c3:c5:54:0f:3e:ad:c9:59:6e:59:c9: 2d:6b:13:ca:1d:fd:64:dc:a2:62:45:32:b4:91:41: 75:75:26:15:2e:a2:3d:9e:9e:5a:ff:52:05:4d:ae: e4:1a:0d:19:d6:ac:df:0b:f7:5b:1a:a7:e2:ff:2d: ca:0e:89:3d:60:08:eb:d2:61:c1:7a:b2:12:7f:aa: 19:e7:1f:62:4b:19:08:fa:de:53:17:b2:8b:d8:79: 62:ed:ce:b5:f5:36:7f:07:fd:d7:fd:5d:d4:69:66: 77:78:ff:f8:f5:90:4c:4a:08:88:ec:12:c0:d3:66: bb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EC:E8:8E:47:71:37:6B:6B:29:8F:E8:6F:9C:5F:18:23:8B:61:3F X509v3 Authority Key Identifier: keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:88:cc:f9:3c:bd:e1:a3:29:d7:bf:7e:a1:9f:6f:7e:02:83: 39:92:af:a1:f2:65:87:a5:da:c3:a9:71:81:50:0b:85:1b:48: 5c:05:7d:e1:a6:e6:8a:10:11:f1:df:63:13:9a:b4:68:17:df: 04:a7:f6:ad:2b:bf:50:35:99:ac:79:d0:36:1f:25:75:5d:dd: 15:99:2d:2b:2b:e9:a5:f1:87:80:44:50:dc:8a:68:4c:d6:24: 34:2c:42:c8:3a:46:7f:90:fe:40:a6:93:0a:bb:6d:b3:e8:16: 32:93:c6:8b:0b:ee:2e:93:94:10:cf:7a:8d:35:53:2d:62:ad: 97:e1:b0:ee:11:31:ec:7e:60:76:96:dc:9b:88:f0:69:e1:5d: 94:af:dc:9b:8a:31:a3:13:a2:84:52:26:41:38:89:91:4f:8b: 89:2f:e3:8f:2b:68:0c:73:79:52:40:f4:ce:ef:35:9f:00:16: 77:3c:73:d0:1f:ea:84:54:bc:69:3c:3b:8d:3d:28:b7:da:f3: d7:4f:c5:12:2b:d2:0b:9a:9f:e8:1e:78:88:cb:71:f7:25:ae: 84:a4:32:2f:b7:29:53:40:52:05:23:bc:af:e0:cc:a7:db:da: 04:7f:b8:7c:cd:d9:ac:ca:46:c3:1b:ba:a3:cc:7d:11:ed:67: 9d:ca:b5:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rvQA5gmyl6AKOzsxFJwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk YTQwZWEwHhcNMjUxMjA2MjIwMTE0WhcNMjUxMjA3MjIwMTE0WjAzMTEwLwYDVQQD Eyg3MmVjZTg4ZTQ3NzEzNzZiNmIyOThmZTg2ZjljNWYxODIzOGI2MTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlD54oay+ww9O0vPtRKv+IYU2KY9 ZdtpcbQ9yoyDnLKeUl/IpC/xmzVK8jiwRHpS7TIAH+GdfHp0LLFOwN58QLH5unvw DHJF8pH38t75fVOtixHUSXaOY7qhDSBKVYvHPSyaerrelIw4XRoh1lkJYL92cFuq G5HaTsMYxmKOAJGecclp9p1IY3tIw8VUDz6tyVluWcktaxPKHf1k3KJiRTK0kUF1 dSYVLqI9np5a/1IFTa7kGg0Z1qzfC/dbGqfi/y3KDok9YAjr0mHBerISf6oZ5x9i SxkI+t5TF7KL2Hli7c619TZ/B/3X/V3UaWZ3eP/49ZBMSgiI7BLA02a71QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLs6I5HcTdraymP6G+cXxgji2E/MB8GA1UdIwQY MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1 LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdojM+Ty9 4aMp179+oZ9vfgKDOZKvofJlh6Xaw6lxgVALhRtIXAV94abmihAR8d9jE5q0aBff BKf2rSu/UDWZrHnQNh8ldV3dFZktKyvppfGHgERQ3IpoTNYkNCxCyDpGf5D+QKaT Crtts+gWMpPGiwvuLpOUEM96jTVTLWKtl+Gw7hEx7H5gdpbcm4jwaeFdlK/cm4ox oxOihFImQTiJkU+LiS/jjytoDHN5UkD0zu81nwAWdzxz0B/qhFS8aTw7jT0ot9rz 10/FEivSC5qf6B54iMtx9yWuhKQyL7cpU0BSBSO8r+DMp9vaBH+4fM3ZrMpGwxu6 o8x9Ee1nncq1Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:37 2025 by rpki-client