This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft File: WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft (raw, json) Hash identifier: BTAhq0WxOHZ/2Icqpjz9C2DNWa5ZQMYFZQK4F6C1TKg= Subject key identifier: 85:EC:2A:90:AD:B7:78:BD:71:5F:D8:7C:AF:6D:2E:46:F3:3F:CC:72 Authority key identifier: 58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66 Certificate issuer: /CN=58ec149761a5d84b8c49e2c9936bbb748033fe66 Certificate serial: 019AF087E7302F33153234ABAB39DCCD1E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft Manifest number: 086D Signing time: Fri 05 Dec 2025 22:00:29 +0000 Manifest this update: Fri 05 Dec 2025 22:00:29 +0000 Manifest next update: Sat 06 Dec 2025 22:00:29 +0000 Files and hashes: 1: WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl (hash: L+8Q0xXFMrnFU+TCV8niFzehdvXtmzG8XGXlSBV3RlQ=) 2: YLZ4R2cXRiV8ZGqHdVbiXZ3u-6Q.roa (hash: cdselfx58yv16hOyAN0xxLi2jgGKa8b7Sqm03lityB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:e7:30:2f:33:15:32:34:ab:ab:39:dc:cd:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ec149761a5d84b8c49e2c9936bbb748033fe66 Validity Not Before: Dec 5 22:00:29 2025 GMT Not After : Dec 6 22:00:29 2025 GMT Subject: CN=85ec2a90adb778bd715fd87caf6d2e46f33fcc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:63:22:3f:9b:13:ef:91:db:53:a5:85:54: 50:56:fb:0b:73:1f:e6:7a:91:2c:7e:10:8c:16:55: 44:8c:4b:73:63:ab:66:8b:2a:bb:4a:b1:25:4c:5a: 57:e1:58:94:89:57:c8:c0:a5:c2:b5:86:43:38:19: ef:97:ed:14:60:f7:13:d8:9f:f7:e4:43:97:03:ba: 5b:e2:58:e7:67:14:c2:a3:81:bb:6e:d8:33:98:c4: db:58:a8:72:2f:9b:1f:f9:b5:f6:2d:ce:6f:b1:25: cf:53:b0:7b:f8:81:e0:2a:f3:61:68:83:1b:c5:ea: 99:8e:e5:56:92:42:88:e2:62:2f:66:36:ce:2c:ec: 1d:93:96:8d:b4:b2:d2:ef:27:e9:a2:74:49:d9:70: 56:7a:63:71:93:b7:a6:4c:99:51:52:2c:8b:76:fa: 07:91:f3:6c:31:b4:8a:e8:6b:e6:53:2c:17:a7:0a: eb:8b:2c:a6:2b:c1:f1:88:78:32:03:fb:d7:83:d2: 82:92:b9:29:25:39:83:22:79:b3:08:44:76:12:f4: 49:82:ed:85:8d:12:3f:4b:b4:74:75:a4:5f:d3:f6: 4d:81:82:4e:75:73:05:f9:fa:a8:7d:43:4e:f6:06: 2a:a1:24:e7:8f:e6:cc:c7:d9:89:4f:25:76:13:e5: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EC:2A:90:AD:B7:78:BD:71:5F:D8:7C:AF:6D:2E:46:F3:3F:CC:72 X509v3 Authority Key Identifier: keyid:58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:74:f7:a3:44:03:3d:51:ea:7e:a5:06:c2:43:6d:23:da:4c: 75:88:6a:ce:29:90:dd:6f:a0:88:02:e0:08:87:35:61:6d:46: b6:28:7c:45:e5:86:2e:52:58:67:9e:f5:5c:89:67:99:71:fb: d4:db:eb:2e:e4:b5:89:8f:66:16:44:57:c6:f7:b1:5e:d1:15: 27:f1:ef:c4:a8:b8:c5:8f:88:13:a8:26:d4:cd:9e:70:e5:c3: e8:12:24:7a:7b:f2:7f:c9:90:1a:ae:e2:1e:05:ab:53:cd:5e: 84:46:71:02:c1:88:79:f7:20:ea:52:18:d2:8d:03:cb:70:c2: d3:68:ef:6a:50:e4:12:27:5f:f1:ac:0a:c8:51:fe:f2:9c:3d: 22:04:0c:16:7a:43:5e:90:b6:49:e3:63:fa:f1:eb:4b:a3:6f: 60:c0:81:07:68:03:1f:76:1f:b7:8c:c2:9d:90:51:22:fc:2a: b1:87:3b:97:4d:e7:84:ac:27:69:f8:04:3b:b1:bf:46:53:f8: 92:77:b6:95:29:eb:03:11:18:de:68:7d:a4:e1:d7:5f:6b:22: e7:b8:52:c1:46:44:83:b8:f7:2b:ff:80:52:70:64:77:be:0a: 47:1d:0e:12:9c:cc:10:10:a3:26:42:b8:56:dd:8f:a9:0f:3d: 0e:bf:d4:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+cwLzMVMjSrqznczR5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWMxNDk3NjFhNWQ4NGI4YzQ5ZTJjOTkzNmJiYjc0ODAz M2ZlNjYwHhcNMjUxMjA1MjIwMDI5WhcNMjUxMjA2MjIwMDI5WjAzMTEwLwYDVQQD Eyg4NWVjMmE5MGFkYjc3OGJkNzE1ZmQ4N2NhZjZkMmU0NmYzM2ZjYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcpjIj+bE++R21OlhVRQVvsLcx/m epEsfhCMFlVEjEtzY6tmiyq7SrElTFpX4ViUiVfIwKXCtYZDOBnvl+0UYPcT2J/3 5EOXA7pb4ljnZxTCo4G7btgzmMTbWKhyL5sf+bX2Lc5vsSXPU7B7+IHgKvNhaIMb xeqZjuVWkkKI4mIvZjbOLOwdk5aNtLLS7yfponRJ2XBWemNxk7emTJlRUiyLdvoH kfNsMbSK6GvmUywXpwrriyymK8HxiHgyA/vXg9KCkrkpJTmDInmzCER2EvRJgu2F jRI/S7R0daRf0/ZNgYJOdXMF+fqofUNO9gYqoSTnj+bMx9mJTyV2E+Vx6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXsKpCtt3i9cV/YfK9tLkbzP8xyMB8GA1UdIwQY MBaAFFjsFJdhpdhLjEniyZNru3SAM/5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV093VWwyR2wyRXVNU2VMSmsydTdkSUF6X21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNGFkOWMtMGQwYi00YzNkLTg1MzMt ZGJmNjJmYzViZWIwLzEvV093VWwyR2wyRXVNU2VMSmsydTdkSUF6X21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iNGFkOWMtMGQwYi00YzNkLTg1MzMtZGJmNjJmYzViZWIw LzEvV093VWwyR2wyRXVNU2VMSmsydTdkSUF6X21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3T3o0QD PVHqfqUGwkNtI9pMdYhqzimQ3W+giALgCIc1YW1Gtih8ReWGLlJYZ571XIlnmXH7 1NvrLuS1iY9mFkRXxvexXtEVJ/HvxKi4xY+IE6gm1M2ecOXD6BIkenvyf8mQGq7i HgWrU81ehEZxAsGIefcg6lIY0o0Dy3DC02jvalDkEidf8awKyFH+8pw9IgQMFnpD XpC2SeNj+vHrS6NvYMCBB2gDH3Yft4zCnZBRIvwqsYc7l03nhKwnafgEO7G/RlP4 kne2lSnrAxEY3mh9pOHXX2si57hSwUZEg7j3K/+AUnBkd74KRx0OEpzMEBCjJkK4 Vt2PqQ89Dr/UAw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:34 2025 by rpki-client