This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft File: woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft (raw, json) Hash identifier: uZb09dhh5SNoNVUg1pcf4bU4cEqwPOfEeRSLDAHSRto= Subject key identifier: 7D:D0:7D:C4:0A:36:82:E1:CF:83:C3:39:64:40:0F:A9:42:5F:BD:21 Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6 Certificate issuer: /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6 Certificate serial: 019AF19B984F9C81146948F346BA9DC8D326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: cFpop9dizlBgkUyaV36_gGd8lnU.roa (hash: 4REvNTps3BupjiKoFenAilAIXfeTEPHale+uZfisCuc=) 2: woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl (hash: gGEQ9D0QVGC4sjggRlH0Hg2hzfcGqpXTSten9bUwOoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:98:4f:9c:81:14:69:48:f3:46:ba:9d:c8:d3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=7dd07dc40a3682e1cf83c33964400fa9425fbd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b9:f7:29:da:61:2c:11:3e:71:02:31:5e:80: 9e:ee:8b:ea:ac:6e:15:c2:65:88:d0:bf:c0:49:c4: 7a:09:f7:58:84:e0:f3:71:d3:7b:a5:ae:7a:55:82: d7:84:65:9c:2c:c2:5e:3f:3b:61:90:00:4a:23:bd: 69:14:15:76:03:b7:2e:dc:a2:98:7c:e4:7a:ee:14: 61:1a:47:c2:c8:56:05:a9:1e:c1:e2:00:d4:a5:58: 66:42:1e:1f:4c:07:17:5e:62:2c:dd:72:23:3d:9c: 45:a9:92:fa:58:f4:d9:af:34:ba:67:6e:ec:14:24: 8b:f4:82:70:75:c6:74:9b:55:26:e7:32:08:9a:f3: 17:e6:0b:b6:76:dc:06:41:77:50:47:9a:e9:f0:06: 90:c3:b5:44:2f:13:b3:69:35:86:01:61:f0:3d:7c: 5b:cc:8c:5a:9c:3d:ee:d8:ef:27:fb:76:a0:7f:9f: 33:e9:d1:bd:98:a6:b3:98:bb:ed:d1:b9:fb:d1:cd: f1:af:13:c6:e8:09:c2:9e:1a:4a:92:b5:d9:70:40: 97:ff:df:0b:13:49:42:8a:70:0e:03:81:ff:46:3d: cf:5b:1b:aa:47:ba:ea:af:84:f4:ac:4d:27:bc:55: f3:e0:7e:31:ea:2c:f9:30:18:ab:d0:b6:67:2b:86: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:7D:C4:0A:36:82:E1:CF:83:C3:39:64:40:0F:A9:42:5F:BD:21 X509v3 Authority Key Identifier: keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:81:8e:9a:fe:4d:7a:74:63:ec:60:bd:8b:a3:a3:b1:30:f7: a3:e4:7d:db:68:1e:66:fc:17:79:39:d2:5b:99:89:5c:4b:ed: f8:c0:e6:9b:5d:11:a7:8a:79:a8:e1:72:8f:16:b5:7f:be:5c: c9:ac:64:50:dc:5a:e1:b5:4b:d2:83:b7:a7:73:a7:f0:a6:01: ad:88:0d:0e:f5:8a:78:7d:81:3d:90:20:7e:d6:16:05:83:bf: b9:a3:28:fc:b1:bd:57:1a:eb:34:8c:0f:24:a3:0a:d6:d3:8c: c0:7f:88:30:cd:3e:91:78:fb:83:6b:95:3b:5d:09:da:50:4c: b5:c7:97:18:60:5c:28:42:89:68:0a:5c:cb:7f:ea:c2:5b:72: df:3d:b7:f4:ec:d1:24:7f:51:76:2b:71:90:8c:03:b0:df:b9: 85:86:22:6f:10:59:c6:7b:a0:3f:a3:4a:be:d2:ef:33:5d:05: 56:a7:9a:5c:3c:c6:50:8f:34:99:55:d4:0c:31:1c:0e:ca:83: 3c:08:c6:bd:b7:9a:c9:c6:5d:b9:a9:a0:f5:2e:f0:0d:d1:13: fc:a5:03:07:60:55:9b:d9:08:00:36:b5:39:fe:7e:81:33:c4: c2:72:5c:79:0a:f5:8a:2c:e6:50:4f:4d:8b:2c:2c:28:d0:d3: f1:a8:cf:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5hPnIEUaUjzRrqdyNMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODA3MDgxZDZmYzIyYmRmZjgwZDJiZDdlY2E4ZmVjMGZj NWZlZjYwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg3ZGQwN2RjNDBhMzY4MmUxY2Y4M2MzMzk2NDQwMGZhOTQyNWZiZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7n3KdphLBE+cQIxXoCe7ovqrG4V wmWI0L/AScR6CfdYhODzcdN7pa56VYLXhGWcLMJePzthkABKI71pFBV2A7cu3KKY fOR67hRhGkfCyFYFqR7B4gDUpVhmQh4fTAcXXmIs3XIjPZxFqZL6WPTZrzS6Z27s FCSL9IJwdcZ0m1Um5zIImvMX5gu2dtwGQXdQR5rp8AaQw7VELxOzaTWGAWHwPXxb zIxanD3u2O8n+3agf58z6dG9mKazmLvt0bn70c3xrxPG6AnCnhpKkrXZcECX/98L E0lCinAOA4H/Rj3PWxuqR7rqr4T0rE0nvFXz4H4x6iz5MBir0LZnK4ZfmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3QfcQKNoLhz4PDOWRAD6lCX70hMB8GA1UdIwQY MBaAFMKAcIHW/CK9/4DSvX7Kj+wPxf72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29Cd2dkYjhJcjNfZ05LOWZzcVA3QV9GX3ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80MTRiNDYtZGI1ZS00NDQwLWExZTQt M2M1NGQxMWY4NzJjLzEvd29Cd2dkYjhJcjNfZ05LOWZzcVA3QV9GX3ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS80MTRiNDYtZGI1ZS00NDQwLWExZTQtM2M1NGQxMWY4NzJj LzEvd29Cd2dkYjhJcjNfZ05LOWZzcVA3QV9GX3ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYGOmv5N enRj7GC9i6OjsTD3o+R922geZvwXeTnSW5mJXEvt+MDmm10Rp4p5qOFyjxa1f75c yaxkUNxa4bVL0oO3p3On8KYBrYgNDvWKeH2BPZAgftYWBYO/uaMo/LG9VxrrNIwP JKMK1tOMwH+IMM0+kXj7g2uVO10J2lBMtceXGGBcKEKJaApcy3/qwlty3z239OzR JH9RditxkIwDsN+5hYYibxBZxnugP6NKvtLvM10FVqeaXDzGUI80mVXUDDEcDsqD PAjGvbeaycZduamg9S7wDdET/KUDB2BVm9kIADa1Of5+gTPEwnJceQr1iizmUE9N iywsKNDT8ajPYg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:28 2025 by rpki-client