This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json) Hash identifier: MtfR46sil67h6O23g6uVnmfR1932eKb19MfhAfZhF2o= Subject key identifier: 66:79:48:AF:67:16:33:1E:3D:6A:DC:5F:A9:9B:C2:F4:E9:D5:5D:16 Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Certificate serial: 019AF1647FC542276C4E2556C9D39170B149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=) 2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: IJoA77xI58M/zfAm2fUwl/BP0vR1VdWUfDr3CBiYQZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7f:c5:42:27:6c:4e:25:56:c9:d3:91:70:b1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=667948af6716331e3d6adc5fa99bc2f4e9d55d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:90:d1:87:0d:28:a0:7d:4e:8c:f2:98:fe: 17:91:67:ad:91:31:6e:00:5e:af:2f:28:02:fd:71: 7d:fc:e6:56:c3:34:64:64:e0:02:0a:27:da:eb:73: 2e:f5:d3:92:b8:ed:36:9a:33:5b:9d:0a:82:56:41: 93:89:bd:67:4b:08:32:a7:8e:19:12:4c:87:45:0f: 65:19:62:f4:a0:c9:e6:e5:af:77:48:85:be:60:ba: 09:87:65:43:f5:43:9d:7d:d0:58:7f:c4:20:da:90: 04:21:88:3f:1d:b4:33:a9:b4:7d:fa:d6:f0:03:83: ef:69:03:86:90:cf:b3:0c:50:f0:07:00:7a:72:6a: f1:96:b7:d1:f3:9d:40:57:96:83:9f:32:01:da:ec: 99:99:db:ee:8f:c6:b4:ec:b6:71:4c:73:c5:37:42: 79:98:e7:e9:de:38:01:14:5f:2f:6a:4e:97:75:8d: b3:f7:3f:83:aa:85:6b:68:ed:72:2d:01:84:c3:41: b0:a8:49:51:d7:03:68:40:1f:26:b6:0b:3d:3b:32: 3e:db:a0:38:43:2f:12:80:04:60:cc:f5:2e:aa:6c: 61:4f:b3:9c:ad:1a:1a:7d:dd:bb:ed:a5:62:2a:10: 14:a5:ec:7f:fb:f8:fc:a7:f5:f0:74:b5:c6:8b:06: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:79:48:AF:67:16:33:1E:3D:6A:DC:5F:A9:9B:C2:F4:E9:D5:5D:16 X509v3 Authority Key Identifier: keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:80:85:18:de:40:e7:ff:ad:ed:1f:9f:27:bf:a5:90:6b:c8: 92:57:9f:4f:90:21:e1:f9:9d:8f:15:d1:e8:8c:7e:19:ba:ce: e9:b7:ce:ed:ed:ec:07:c0:de:44:26:a3:86:46:44:b7:5e:00: c7:7c:13:01:c1:26:0a:9e:5e:e3:bb:0d:b0:6a:a4:20:8e:03: e8:63:e5:6b:d4:e9:80:82:4a:98:13:1c:a4:8b:38:81:5a:fc: 11:27:7e:15:56:2c:1f:a4:85:cd:ab:bd:c9:70:c4:e3:2e:b1: ef:46:41:36:05:ac:47:fe:09:07:d5:b4:95:c2:d3:04:f5:04: e8:14:6b:c5:1a:51:1e:e7:98:d4:3a:a6:f6:74:00:9a:a7:e7: e4:f6:78:b7:b7:fe:c1:36:87:a6:9f:aa:e6:01:98:e9:32:c9: 80:bf:30:e6:93:7b:23:ef:33:b0:9b:df:4d:ab:dc:bb:b3:d6: 4a:c1:59:ed:64:62:3f:62:6e:d8:84:aa:7a:cc:62:8c:ab:59: 75:67:cc:2a:65:76:0d:ba:81:f9:89:7f:e6:81:62:08:85:50: 47:6a:71:30:fe:4e:8c:87:a2:ce:2c:88:38:f8:1c:2b:27:ad: 5b:16:62:31:22:e1:c8:98:60:9f:b8:c2:b4:51:94:3c:f6:00: c9:77:64:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZH/FQidsTiVWydORcLFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODM4ZDFmM2IyMzFiZjcyZTQ1M2RkNzhjNGI1MGFjMDA5 ZmY3ZjEwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD Eyg2Njc5NDhhZjY3MTYzMzFlM2Q2YWRjNWZhOTliYzJmNGU5ZDU1ZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhaQ0YcNKKB9TozymP4XkWetkTFu AF6vLygC/XF9/OZWwzRkZOACCifa63Mu9dOSuO02mjNbnQqCVkGTib1nSwgyp44Z EkyHRQ9lGWL0oMnm5a93SIW+YLoJh2VD9UOdfdBYf8Qg2pAEIYg/HbQzqbR9+tbw A4PvaQOGkM+zDFDwBwB6cmrxlrfR851AV5aDnzIB2uyZmdvuj8a07LZxTHPFN0J5 mOfp3jgBFF8vak6XdY2z9z+DqoVraO1yLQGEw0GwqElR1wNoQB8mtgs9OzI+26A4 Qy8SgARgzPUuqmxhT7OcrRoafd277aViKhAUpex/+/j8p/XwdLXGiwY1WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ5SK9nFjMePWrcX6mbwvTp1V0WMB8GA1UdIwQY MBaAFMKDjR87Ixv3LkU914xLUKwAn/fxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2Ut MmIzYzY0ZjlmOWFiLzEvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2UtMmIzYzY0ZjlmOWFi LzEvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoCFGN5A 5/+t7R+fJ7+lkGvIklefT5Ah4fmdjxXR6Ix+GbrO6bfO7e3sB8DeRCajhkZEt14A x3wTAcEmCp5e47sNsGqkII4D6GPla9TpgIJKmBMcpIs4gVr8ESd+FVYsH6SFzau9 yXDE4y6x70ZBNgWsR/4JB9W0lcLTBPUE6BRrxRpRHueY1Dqm9nQAmqfn5PZ4t7f+ wTaHpp+q5gGY6TLJgL8w5pN7I+8zsJvfTavcu7PWSsFZ7WRiP2Ju2ISqesxijKtZ dWfMKmV2DbqB+Yl/5oFiCIVQR2pxMP5OjIeiziyIOPgcKyetWxZiMSLhyJhgn7jC tFGUPPYAyXdkqA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:23 2025 by rpki-client