This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json) Hash identifier: y5qJRiXenhklY0CUL3MfiVYdqzPPfa1CB5cCVS+FQDs= Subject key identifier: 70:15:15:15:2C:A8:44:56:0C:A8:5F:27:AC:35:A2:B8:7F:69:65:A9 Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Certificate serial: 019B34FBA015A1AB979AC1AB17B3E7E3820E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 05:01:04 +0000 Manifest this update: Fri 19 Dec 2025 05:01:04 +0000 Manifest next update: Sat 20 Dec 2025 05:01:04 +0000 Files and hashes: 1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=) 2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: spVh5rdqqcyieRlWB/+wv0LtcV9nCC4PcsS+EW7jyYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:a0:15:a1:ab:97:9a:c1:ab:17:b3:e7:e3:82:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Validity Not Before: Dec 19 05:01:04 2025 GMT Not After : Dec 20 05:01:04 2025 GMT Subject: CN=701515152ca844560ca85f27ac35a2b87f6965a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:e8:2c:ac:db:2e:09:68:16:92:2b:28:0d: 8c:92:8a:85:f1:e6:69:f4:b4:94:02:4f:7a:71:4f: b9:cb:56:04:bb:25:5b:8d:44:be:23:a2:c3:4d:d2: 48:dd:9a:97:af:44:67:5c:88:b6:79:59:61:4a:69: d5:f5:da:fa:2e:e5:b7:dd:35:14:95:36:d0:d3:03: c6:87:7b:7d:98:da:f7:7d:ad:5f:3d:fc:a9:ef:6d: a5:f5:e0:78:b4:83:3b:56:29:a0:c2:fc:95:2c:5c: f8:5f:ae:5c:9d:ae:81:cc:a6:22:46:a9:dd:be:07: e3:b0:80:2b:76:67:12:a0:29:00:f3:36:1b:b1:7b: 1c:9c:2d:1e:3c:b2:83:ae:e6:ad:c5:37:a1:a7:f5: 4e:b2:2e:89:f1:6e:64:5e:e2:13:4d:7b:cb:cc:5e: 9f:48:8b:16:df:1d:66:0e:32:0a:48:d4:bf:d6:f3: b9:0d:8b:24:49:72:53:f3:ab:d7:8c:00:97:41:1a: d7:9c:18:80:a3:26:79:37:12:39:bb:f1:9b:15:a9: 8b:ab:be:61:df:3c:42:08:47:c6:62:37:60:ff:75: ac:47:91:50:9f:8c:f5:c6:a3:ca:89:b1:e4:6b:1e: f8:ec:2b:27:0c:1f:ff:b4:d4:83:cc:56:03:9e:d4: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:15:15:15:2C:A8:44:56:0C:A8:5F:27:AC:35:A2:B8:7F:69:65:A9 X509v3 Authority Key Identifier: keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a9:51:eb:45:82:50:f0:39:41:a2:b1:f4:86:af:93:b9:57: 84:3e:7d:24:5b:64:dd:82:48:9e:e6:4d:33:17:f1:24:4b:86: d6:c5:78:46:9e:91:ab:3c:83:fe:54:90:82:01:f8:8e:c1:06: d1:cc:27:ee:6a:90:dc:24:4e:58:99:36:5b:f7:76:6b:76:08: 43:ce:4a:49:9b:d8:85:7e:45:99:9a:cc:1d:ff:db:22:b6:18: 44:19:1d:26:9e:b6:01:3a:3a:9f:aa:73:c2:91:29:08:3a:58: 4b:1e:89:3e:86:26:64:74:9c:c4:12:b6:76:db:72:7d:f1:28: 34:cd:d9:57:52:25:95:38:81:64:36:89:8c:98:06:56:fb:21: 9a:4a:6d:0f:fc:23:10:41:92:e0:29:9b:9c:dd:3e:2c:fd:6e: eb:05:54:69:02:e7:c5:90:09:3d:67:28:92:d5:80:9f:b2:e1: 0f:66:67:5f:b5:a7:a4:d6:46:6f:1b:74:66:bd:00:6e:3a:f5: ad:e1:6a:d3:56:f3:43:a5:af:bd:e0:ab:49:c4:14:6e:e8:12: 98:05:7b:06:d3:66:49:63:08:03:ed:d7:96:20:17:ab:31:d6: 2f:ad:d9:ca:f0:61:70:06:d6:50:76:9a:a5:84:82:b3:3e:ed: 76:a7:fa:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+6AVoauXmsGrF7Pn44IOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODM4ZDFmM2IyMzFiZjcyZTQ1M2RkNzhjNGI1MGFjMDA5 ZmY3ZjEwHhcNMjUxMjE5MDUwMTA0WhcNMjUxMjIwMDUwMTA0WjAzMTEwLwYDVQQD Eyg3MDE1MTUxNTJjYTg0NDU2MGNhODVmMjdhYzM1YTJiODdmNjk2NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt3oLKzbLgloFpIrKA2MkoqF8eZp 9LSUAk96cU+5y1YEuyVbjUS+I6LDTdJI3ZqXr0RnXIi2eVlhSmnV9dr6LuW33TUU lTbQ0wPGh3t9mNr3fa1fPfyp722l9eB4tIM7VimgwvyVLFz4X65cna6BzKYiRqnd vgfjsIArdmcSoCkA8zYbsXscnC0ePLKDruatxTehp/VOsi6J8W5kXuITTXvLzF6f SIsW3x1mDjIKSNS/1vO5DYskSXJT86vXjACXQRrXnBiAoyZ5NxI5u/GbFamLq75h 3zxCCEfGYjdg/3WsR5FQn4z1xqPKibHkax747CsnDB//tNSDzFYDntQFEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAVFRUsqERWDKhfJ6w1orh/aWWpMB8GA1UdIwQY MBaAFMKDjR87Ixv3LkU914xLUKwAn/fxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2Ut MmIzYzY0ZjlmOWFiLzEvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2UtMmIzYzY0ZjlmOWFi LzEvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANalR60WC UPA5QaKx9Iavk7lXhD59JFtk3YJInuZNMxfxJEuG1sV4Rp6RqzyD/lSQggH4jsEG 0cwn7mqQ3CROWJk2W/d2a3YIQ85KSZvYhX5FmZrMHf/bIrYYRBkdJp62ATo6n6pz wpEpCDpYSx6JPoYmZHScxBK2dttyffEoNM3ZV1IllTiBZDaJjJgGVvshmkptD/wj EEGS4CmbnN0+LP1u6wVUaQLnxZAJPWcoktWAn7LhD2ZnX7WnpNZGbxt0Zr0Abjr1 reFq01bzQ6WvveCrScQUbugSmAV7BtNmSWMIA+3XliAXqzHWL63ZyvBhcAbWUHaa pYSCsz7tdqf6kA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:54:07 2025 by rpki-client