This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft File: WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json) Hash identifier: 0lOfDqCNFDxRBhS8Fx8J/8xNITroezp9qR/gg6NUAJ4= Subject key identifier: 55:8F:BB:92:E3:58:FD:65:DD:00:CA:33:97:9A:2F:A2:69:18:61:22 Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840 Certificate serial: 019AF5AE4ADE8B2F0FBD45E8E8D934D39EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft Manifest number: 0294 Signing time: Sat 06 Dec 2025 22:00:31 +0000 Manifest this update: Sat 06 Dec 2025 22:00:31 +0000 Manifest next update: Sun 07 Dec 2025 22:00:31 +0000 Files and hashes: 1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: 4DmdCwzjGe7Dm7bq1pRRf6w1PBDTuAf0WtMIgTouIQA=) 2: wKFImUWqJAZ63I73CUY6kU8vkUQ.roa (hash: 6TgnMHnPVKyV4LoYC0bcNEIls6efji/PtDzWQK1yR8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:4a:de:8b:2f:0f:bd:45:e8:e8:d9:34:d3:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840 Validity Not Before: Dec 6 22:00:31 2025 GMT Not After : Dec 7 22:00:31 2025 GMT Subject: CN=558fbb92e358fd65dd00ca33979a2fa269186122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:63:c6:ad:ce:64:ce:ef:1d:b3:ab:39:fa: 63:29:26:53:9d:83:5d:bd:4a:87:9a:99:8c:12:f4: ae:7e:78:9c:af:f5:ff:14:a9:e5:53:35:04:7a:d6: 55:9d:ef:85:40:96:12:16:0d:92:fb:c2:6c:1d:60: 53:77:52:65:90:01:da:62:03:2c:2e:5d:9d:0b:53: 7a:01:6d:5b:e3:fa:1e:7c:57:b3:de:16:0f:84:fe: 59:ad:1a:18:91:82:ff:06:fe:04:23:33:9b:56:02: 85:15:e2:65:8e:cd:ba:df:fd:11:31:88:f5:f6:a0: ca:56:09:9d:a7:08:d4:72:5e:66:cf:f9:db:7e:9b: d4:a9:52:25:18:ea:7c:a5:55:c5:ec:56:68:d4:02: a1:5f:9b:a6:db:c9:8d:c6:32:5c:89:ed:a1:05:d4: 01:9a:6c:8d:77:6e:c4:61:25:6e:71:22:e2:0f:19: 01:03:22:ac:89:a0:a3:da:36:2d:26:a6:38:78:78: 58:0c:fe:7a:55:28:1c:e4:29:f1:50:53:6f:be:e6: b8:54:a2:2f:1a:51:fc:23:6f:23:b9:cb:d3:bf:cd: a0:cb:27:6f:8f:12:32:1f:06:80:cd:ed:8c:d3:60: b4:03:d2:8e:c2:a6:d9:60:7c:ea:09:a9:e4:1b:6a: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8F:BB:92:E3:58:FD:65:DD:00:CA:33:97:9A:2F:A2:69:18:61:22 X509v3 Authority Key Identifier: keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e1:92:4c:e0:43:9f:d9:b7:6d:02:89:5f:44:8c:a8:72:f3: c4:04:1f:a1:61:85:2e:97:e8:ed:77:b5:5d:df:61:ab:10:77: aa:c9:f1:6d:f0:f1:26:b7:81:08:e5:df:b1:7e:8d:2f:98:61: 80:a0:5a:d8:69:e8:17:9b:c9:06:e0:73:24:81:a0:a9:9f:77: 36:8e:5b:c9:d0:2d:c2:66:26:8c:a2:f4:04:c0:80:85:f4:0b: bb:52:9b:33:cb:a2:97:30:77:db:f7:f8:f7:85:d9:4b:15:48: d1:35:c5:f2:16:14:56:7e:92:81:3a:eb:03:db:d7:e0:9a:df: e2:65:e9:53:d2:48:77:bb:2b:aa:ba:50:48:90:54:d6:2d:29: 29:0b:d3:52:2a:89:af:84:7f:c5:52:b1:02:1f:53:c8:7b:7c: 08:5a:c9:24:54:43:8c:b3:d6:ae:b5:a4:51:69:38:5d:62:56: 74:7c:7f:2b:c7:9f:ea:55:3c:4b:7f:92:65:5c:e7:40:ab:6d: 2e:2c:26:5a:f8:b0:ea:d4:06:e3:1b:fb:83:1c:50:9a:6d:30: 8a:c3:29:d6:b9:69:4a:ae:c0:a1:52:b7:35:2e:05:68:16:02: 1d:f9:56:20:58:72:9f:35:ac:28:a2:24:71:a3:a8:8f:95:58: c8:04:e0:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rkreiy8PvUXo6Nk0057gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTAyZjJjYTgxYWI4MDI5Mzk1MzAxNTZlOTYzMWIxOGY1 MTU4NDAwHhcNMjUxMjA2MjIwMDMxWhcNMjUxMjA3MjIwMDMxWjAzMTEwLwYDVQQD Eyg1NThmYmI5MmUzNThmZDY1ZGQwMGNhMzM5NzlhMmZhMjY5MTg2MTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn1jxq3OZM7vHbOrOfpjKSZTnYNd vUqHmpmMEvSufnicr/X/FKnlUzUEetZVne+FQJYSFg2S+8JsHWBTd1JlkAHaYgMs Ll2dC1N6AW1b4/oefFez3hYPhP5ZrRoYkYL/Bv4EIzObVgKFFeJljs263/0RMYj1 9qDKVgmdpwjUcl5mz/nbfpvUqVIlGOp8pVXF7FZo1AKhX5um28mNxjJcie2hBdQB mmyNd27EYSVucSLiDxkBAyKsiaCj2jYtJqY4eHhYDP56VSgc5CnxUFNvvua4VKIv GlH8I28jucvTv82gyydvjxIyHwaAze2M02C0A9KOwqbZYHzqCankG2osaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWPu5LjWP1l3QDKM5eaL6JpGGEiMB8GA1UdIwQY MBaAFFjgLyyoGrgCk5UwFW6WMbGPUVhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMt ZDQ4ZDEzYTRkZTM4LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMtZDQ4ZDEzYTRkZTM4 LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuGSTOBD n9m3bQKJX0SMqHLzxAQfoWGFLpfo7Xe1Xd9hqxB3qsnxbfDxJreBCOXfsX6NL5hh gKBa2GnoF5vJBuBzJIGgqZ93No5bydAtwmYmjKL0BMCAhfQLu1KbM8uilzB32/f4 94XZSxVI0TXF8hYUVn6SgTrrA9vX4Jrf4mXpU9JId7srqrpQSJBU1i0pKQvTUiqJ r4R/xVKxAh9TyHt8CFrJJFRDjLPWrrWkUWk4XWJWdHx/K8ef6lU8S3+SZVznQKtt LiwmWviw6tQG4xv7gxxQmm0wisMp1rlpSq7AoVK3NS4FaBYCHflWIFhynzWsKKIk caOoj5VYyATgXQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:36 2025 by rpki-client