This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json) Hash identifier: /YlqptebBxjL1RCHgjIp7h7fPWPNH5DzjFMO68u0EgQ= Subject key identifier: 65:E1:81:37:5B:DE:9B:97:58:25:51:63:40:6E:6A:E5:1A:50:05:5F Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6 Certificate serial: 019AF12CE4B5D7A2CF292D9DF5DD66609A00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft Manifest number: 15C9 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=) 2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: pAIEaBOJ3p7OO2EROzDYusw8nCGVkW+TmMohctkkhPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e4:b5:d7:a2:cf:29:2d:9d:f5:dd:66:60:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=65e181375bde9b9758255163406e6ae51a50055f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:48:3d:14:cc:d8:a3:9d:53:50:36:fc:08: 31:ce:40:be:02:82:b3:90:cd:19:22:6e:b8:d0:35: d9:c9:af:88:b6:0d:c8:a7:10:79:a5:93:6e:bc:d7: d0:33:1a:5f:49:d7:e7:32:d9:3e:3d:a4:93:5f:3c: dc:2b:f4:ab:51:d3:54:65:d4:96:99:f6:23:5a:9b: 37:e4:26:44:ea:14:83:72:b9:f2:c6:ce:94:ba:d8: c9:ea:c7:ec:11:70:ec:cb:a6:84:89:62:0d:b9:85: 7d:a5:cf:1f:8d:9d:f9:c0:be:bf:95:fb:93:ff:37: df:0c:cd:e9:72:b2:9e:72:b8:2c:90:a2:20:06:9e: 2b:65:63:87:5b:65:9a:1f:cc:15:f9:25:e4:b1:72: 93:25:18:d4:3e:a3:be:8c:2d:8e:68:7d:be:88:59: 78:bf:95:da:b3:a6:88:08:cd:98:ae:ce:47:9e:a1: da:7b:81:68:91:65:32:b7:08:f4:70:a7:eb:4c:b5: c8:b7:c8:13:55:d3:44:49:3d:2b:c3:f4:2d:a1:a1: 6b:e2:99:c8:41:80:1a:5b:bc:33:0f:fc:a6:3e:ec: 63:74:9c:ac:ed:46:dc:aa:3f:60:2a:f4:a5:de:4d: f1:d9:33:0a:59:7a:ce:44:3d:5a:d3:65:1f:54:ae: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E1:81:37:5B:DE:9B:97:58:25:51:63:40:6E:6A:E5:1A:50:05:5F X509v3 Authority Key Identifier: keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:61:27:fd:5d:a2:22:bf:43:84:df:a8:5e:d3:4b:b3:ba:ff: 57:83:fc:e9:3f:4e:c1:a2:f6:f2:c0:3e:85:61:d6:00:db:d2: de:4e:22:ac:1f:1c:4f:0f:b9:99:c9:71:e2:71:54:21:f1:0d: d1:db:78:30:ad:bf:5a:f0:fa:8b:66:12:31:cf:21:66:dd:81: cc:a7:66:cb:48:65:c7:f4:1e:64:a0:ec:99:54:ef:61:12:68: 41:75:f1:82:0b:c7:2f:0f:a3:6f:39:4f:13:ed:f3:07:44:d0: 07:90:bd:95:c2:8d:af:83:6c:0b:a5:03:97:3c:71:0d:56:df: 91:54:ce:05:b0:7f:95:cb:3a:a5:67:36:27:ed:5e:df:58:7e: 44:41:94:16:4c:27:ea:5d:44:f4:d7:66:1e:99:06:e1:21:86: 86:71:d4:71:90:e0:98:52:71:51:fa:d9:11:15:4e:74:ba:37: 7f:2a:6e:7b:32:21:71:07:75:99:01:8a:35:68:47:ab:4e:a5: 10:cc:01:6f:f4:5c:7c:b2:ff:f2:73:fb:5a:ff:5c:b0:98:34: 1c:b1:ce:eb:0d:9b:64:ee:14:59:6c:c6:86:c1:9d:1a:14:fa: ed:32:01:ad:be:33:c9:8f:03:0e:be:73:9c:16:4b:9a:35:3a: cc:0d:bf:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOS116LPKS2d9d1mYJoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGQzODkyNzg0ODVlZGQ1MGQzMmNmNWNhODRjZTI3Mjhj MDhjYzYwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD Eyg2NWUxODEzNzViZGU5Yjk3NTgyNTUxNjM0MDZlNmFlNTFhNTAwNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYpIPRTM2KOdU1A2/AgxzkC+AoKz kM0ZIm640DXZya+Itg3IpxB5pZNuvNfQMxpfSdfnMtk+PaSTXzzcK/SrUdNUZdSW mfYjWps35CZE6hSDcrnyxs6UutjJ6sfsEXDsy6aEiWINuYV9pc8fjZ35wL6/lfuT /zffDM3pcrKecrgskKIgBp4rZWOHW2WaH8wV+SXksXKTJRjUPqO+jC2OaH2+iFl4 v5Xas6aICM2Yrs5HnqHae4FokWUytwj0cKfrTLXIt8gTVdNEST0rw/QtoaFr4pnI QYAaW7wzD/ymPuxjdJys7Ubcqj9gKvSl3k3x2TMKWXrORD1a02UfVK7JPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXhgTdb3puXWCVRY0BuauUaUAVfMB8GA1UdIwQY MBaAFFqNOJJ4SF7dUNMs9cqEzicowIzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAt NTJiY2NiMDZhZjNjLzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82MDFkNmYtYjMxYS00OTJlLThlZjAtNTJiY2NiMDZhZjNj LzEvV28wNGtuaElYdDFRMHl6MXlvVE9KeWpBak1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWEn/V2i Ir9DhN+oXtNLs7r/V4P86T9OwaL28sA+hWHWANvS3k4irB8cTw+5mclx4nFUIfEN 0dt4MK2/WvD6i2YSMc8hZt2BzKdmy0hlx/QeZKDsmVTvYRJoQXXxggvHLw+jbzlP E+3zB0TQB5C9lcKNr4NsC6UDlzxxDVbfkVTOBbB/lcs6pWc2J+1e31h+REGUFkwn 6l1E9NdmHpkG4SGGhnHUcZDgmFJxUfrZERVOdLo3fypuezIhcQd1mQGKNWhHq06l EMwBb/RcfLL/8nP7Wv9csJg0HLHO6w2bZO4UWWzGhsGdGhT67TIBrb4zyY8DDr5z nBZLmjU6zA2/oA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:34 2025 by rpki-client