This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
File:                     WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json)
Hash identifier:          L+HMp6r4MZwq90+RjzFQ/LN90mqZOhAN34JRNmVSWm0=
Subject key identifier:   BB:3C:5E:8D:2F:5A:E3:E9:CE:E1:9F:F8:E8:60:0C:0E:54:28:2C:A7
Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Certificate issuer:       /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Certificate serial:       019AF27662A87FC35BCE532077849B012334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
Manifest number:          16AF
Signing time:             Sat 06 Dec 2025 07:00:36 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:36 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:36 +0000
Files and hashes:         1: 0fPXJz4ZkFhSnDl_qC3Oqnd5MPk.roa (hash: 9f23J/XrfHwop7pkXvCqZEzg16V5jFPr7gFFFr197JQ=)
                          2: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: V03hTGWVMpGHqC1rt2vEHr2vOrfRFdVhnKYJXyF7vlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:62:a8:7f:c3:5b:ce:53:20:77:84:9b:01:23:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
        Validity
            Not Before: Dec  6 07:00:36 2025 GMT
            Not After : Dec  7 07:00:36 2025 GMT
        Subject: CN=bb3c5e8d2f5ae3e9cee19ff8e8600c0e54282ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:4d:bf:59:d9:e7:36:4d:54:54:cc:a8:3e:
                    a6:3d:41:ea:87:cc:14:3c:16:a1:b6:7b:ba:7e:67:
                    a4:78:7d:cf:08:ee:85:2d:f6:92:e4:ea:82:22:bd:
                    a0:9e:89:af:7f:f4:bd:88:9b:bd:b5:9f:44:51:a8:
                    34:b5:77:5b:58:8a:f9:fa:c5:43:eb:8f:9c:c4:df:
                    7c:38:36:d2:53:e0:16:b1:a8:83:40:d4:5f:c6:ce:
                    8d:a7:32:a7:36:fb:ca:b8:32:1d:ca:8a:17:39:3f:
                    f9:6a:c7:b6:fd:76:e0:f9:bc:4a:fd:38:ba:7f:43:
                    f7:69:2e:8b:45:23:de:d8:06:c8:a9:43:ba:d4:c8:
                    6c:65:31:2f:41:eb:c3:75:a0:15:92:cf:3a:20:7f:
                    c7:8e:fd:f4:7a:6c:6b:52:66:3f:d0:ee:0b:f9:a1:
                    c8:05:a3:98:2b:fe:53:7f:03:c1:74:61:c7:f5:7d:
                    96:b2:32:1f:6f:1f:76:aa:2d:62:40:b2:35:c8:27:
                    a4:08:58:a7:e2:41:38:42:fd:df:16:73:ec:97:f1:
                    5a:d2:b1:79:3e:b2:85:93:75:33:24:d5:1d:80:c2:
                    82:00:1f:8d:ed:4c:e6:60:56:ae:c0:da:24:a0:19:
                    5c:5d:9f:ff:58:08:68:ed:48:ca:ba:31:25:07:39:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3C:5E:8D:2F:5A:E3:E9:CE:E1:9F:F8:E8:60:0C:0E:54:28:2C:A7
            X509v3 Authority Key Identifier:
                keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:59:12:89:50:54:81:53:56:e2:06:a0:2d:d7:25:e5:64:
         09:f1:94:61:03:60:ab:7e:b8:86:0b:b9:10:45:fb:5d:e3:b4:
         9f:f9:0a:30:4a:13:f4:4a:6f:e1:6c:d5:da:ba:fb:3e:56:e5:
         8b:7d:4c:06:90:3c:d1:fd:ad:13:ff:fa:e6:52:50:f1:e4:bd:
         a8:86:72:51:17:3e:ea:89:80:07:61:f9:c6:20:66:ef:be:59:
         e8:c0:b2:4a:2b:2e:54:8f:78:9a:65:07:f3:a4:19:c1:67:b7:
         b8:e3:f6:b8:ba:84:e2:dd:da:f1:81:54:44:57:70:71:f2:29:
         b9:af:3d:d1:ca:84:e9:8c:d5:fa:9e:d3:70:49:55:21:40:a1:
         26:51:e9:e1:a5:e5:4d:21:e5:57:e6:ce:78:be:42:68:cf:6b:
         a1:cc:8a:0d:25:69:38:9e:5d:9e:d3:94:38:4e:3b:90:7b:82:
         54:6c:77:f2:c3:da:4d:95:12:8b:76:31:61:9c:27:fe:73:d9:
         d7:85:9a:5e:6c:53:69:39:b7:e3:90:27:f6:3d:8b:84:6c:11:
         9a:ec:50:6b:eb:e5:9d:94:36:34:bb:1d:58:89:1f:bd:36:c8:
         52:14:b9:88:9a:8f:74:c9:55:f0:5d:9c:fd:36:55:88:85:f7:
         e5:d6:e3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydmKof8NbzlMgd4SbASM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZTA2ODdhMjRkNmEzZTQxNGQ3OThkOWIyZmI2YzUyNTkx
Y2JiMjMwHhcNMjUxMjA2MDcwMDM2WhcNMjUxMjA3MDcwMDM2WjAzMTEwLwYDVQQD
EyhiYjNjNWU4ZDJmNWFlM2U5Y2VlMTlmZjhlODYwMGMwZTU0MjgyY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaJNv1nZ5zZNVFTMqD6mPUHqh8wU
PBahtnu6fmekeH3PCO6FLfaS5OqCIr2gnomvf/S9iJu9tZ9EUag0tXdbWIr5+sVD
64+cxN98ODbSU+AWsaiDQNRfxs6NpzKnNvvKuDIdyooXOT/5ase2/Xbg+bxK/Ti6
f0P3aS6LRSPe2AbIqUO61MhsZTEvQevDdaAVks86IH/Hjv30emxrUmY/0O4L+aHI
BaOYK/5TfwPBdGHH9X2WsjIfbx92qi1iQLI1yCekCFin4kE4Qv3fFnPsl/Fa0rF5
PrKFk3UzJNUdgMKCAB+N7UzmYFauwNokoBlcXZ//WAho7UjKujElBzkVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs8Xo0vWuPpzuGf+OhgDA5UKCynMB8GA1UdIwQY
MBaAFFjgaHok1qPkFNeY2bL7bFJZHLsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgt
ZWI4NjEyNDU3NzE1LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yZjlhMzMtY2Q4Yy00MWU0LTljNDgtZWI4NjEyNDU3NzE1
LzEvV09Cb2VpVFdvLVFVMTVqWnN2dHNVbGtjdXlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq59ZEolQ
VIFTVuIGoC3XJeVkCfGUYQNgq364hgu5EEX7XeO0n/kKMEoT9Epv4WzV2rr7Plbl
i31MBpA80f2tE//65lJQ8eS9qIZyURc+6omAB2H5xiBm775Z6MCySisuVI94mmUH
86QZwWe3uOP2uLqE4t3a8YFURFdwcfIpua890cqE6YzV+p7TcElVIUChJlHp4aXl
TSHlV+bOeL5CaM9rocyKDSVpOJ5dntOUOE47kHuCVGx38sPaTZUSi3YxYZwn/nPZ
14WaXmxTaTm345An9j2LhGwRmuxQa+vlnZQ2NLsdWIkfvTbIUhS5iJqPdMlV8F2c
/TZViIX35dbj6Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:41:29 2025 by rpki-client