This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft File: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json) Hash identifier: 6cizenUKOq5yH2RbMaQBOIHGJWhNrYZ0nxAjPs4g/qE= Subject key identifier: 6B:3B:2D:19:45:34:8A:EE:A2:D4:42:7A:E3:65:9F:C6:CF:B7:86:85 Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 Certificate issuer: /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074 Certificate serial: 019AF19B3E67B612D7CDC91AD569A4FEA9E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: KkzZdtSbSgev6F4EciFP374t71M.roa (hash: RKNA7btFBFTKM+7ILEeu2plNQgmHlkDMuCESaQkp038=) 2: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: iPNAWzJyaYBesyzlj1OaSP9v8dglWmME4NJn9SWdMKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3e:67:b6:12:d7:cd:c9:1a:d5:69:a4:fe:a9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074 Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=6b3b2d1945348aeea2d4427ae3659fc6cfb78685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:d1:84:3d:ed:40:22:7f:cb:ed:7d:c2:27: 59:08:53:df:19:cb:5c:15:50:68:5f:cb:4d:4f:a0: 92:b4:0b:6b:df:59:66:0b:96:2f:2d:31:a2:0a:2b: 83:8b:16:85:d8:bb:18:e1:73:83:00:eb:64:df:39: 37:a2:10:46:b9:aa:06:9c:05:92:c0:17:4e:5e:7d: 8b:63:ef:43:ec:cb:3b:85:a8:1f:9a:d5:64:c8:f3: b4:cb:a5:5b:f7:f8:50:37:5c:3d:24:4f:76:4b:95: 03:5e:9a:ee:0c:5b:83:b1:72:3d:50:21:22:83:58: ba:0b:56:59:cd:71:a7:0d:8f:8e:f2:69:fa:1c:0b: 32:72:a5:92:30:54:c4:f2:44:c3:bd:f4:65:d9:40: db:78:0d:5d:29:d5:d1:b4:99:ab:0c:0f:f3:65:2f: 93:1a:7d:61:40:b8:e7:b2:62:e7:72:fc:c4:a5:06: 9f:9b:32:96:19:43:59:5a:c7:a0:6c:98:ab:b3:8e: 73:38:8f:41:93:01:4d:b9:6e:2d:a1:3d:72:e6:bf: ec:80:71:3f:d6:73:bd:89:df:2b:f8:35:02:b4:61: eb:b5:46:60:e4:f9:ad:9d:1f:dc:55:49:f5:34:6a: 54:f4:35:20:30:42:88:d4:b4:98:e6:d8:62:a4:1e: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3B:2D:19:45:34:8A:EE:A2:D4:42:7A:E3:65:9F:C6:CF:B7:86:85 X509v3 Authority Key Identifier: keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d2:97:c2:f3:34:7f:23:42:6a:27:0e:fd:ae:cb:5e:63:a6: 41:1a:69:cf:cd:5c:8a:67:9c:fb:ae:9c:d2:78:49:8e:60:50: 9b:26:b6:d7:e8:d8:59:f2:ba:e5:36:a9:ad:c6:50:78:77:26: 91:26:c3:a6:e9:05:af:dd:f2:e7:66:4d:df:e5:6a:94:0c:bf: a7:96:1a:61:9a:d6:d8:6f:e6:8e:49:7d:8a:5c:20:ab:23:7a: be:05:6e:0f:a4:34:63:d6:16:61:0c:20:e4:92:58:81:16:b5: c0:c6:80:bd:d9:36:b8:bd:ef:83:02:b5:0d:5b:49:fd:1c:d6: a8:96:fa:a6:d4:c7:f8:88:80:46:7d:8f:84:dd:a2:65:35:09: 29:cd:4c:84:cf:66:7b:fe:be:c1:15:4d:1f:eb:3d:f9:a9:a8: b1:3e:f8:05:88:46:bd:79:dc:ad:f2:69:c2:f3:0c:67:9f:a3: 81:c8:fb:a1:20:1b:ee:de:26:bd:0f:21:13:f0:68:df:02:d2: 93:7e:27:f4:95:5e:f5:4f:fe:ea:0d:0a:16:71:ce:46:84:3d: 01:71:1f:b4:78:e2:73:e1:10:e9:a1:df:80:f5:dc:25:35:72: e8:56:97:c2:b8:ed:2c:af:18:da:96:71:9c:b1:b1:31:97:93: 36:e0:45:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmz5nthLXzcka1Wmk/qnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGY4MTM2NmZmYzQzYzcxZjViYjUyMWY4MTUwMTc2MGVi ZWIwNzQwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD Eyg2YjNiMmQxOTQ1MzQ4YWVlYTJkNDQyN2FlMzY1OWZjNmNmYjc4Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKbRhD3tQCJ/y+19widZCFPfGctc FVBoX8tNT6CStAtr31lmC5YvLTGiCiuDixaF2LsY4XODAOtk3zk3ohBGuaoGnAWS wBdOXn2LY+9D7Ms7hagfmtVkyPO0y6Vb9/hQN1w9JE92S5UDXpruDFuDsXI9UCEi g1i6C1ZZzXGnDY+O8mn6HAsycqWSMFTE8kTDvfRl2UDbeA1dKdXRtJmrDA/zZS+T Gn1hQLjnsmLncvzEpQafmzKWGUNZWsegbJirs45zOI9BkwFNuW4toT1y5r/sgHE/ 1nO9id8r+DUCtGHrtUZg5PmtnR/cVUn1NGpU9DUgMEKI1LSY5thipB4SzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGs7LRlFNIruotRCeuNln8bPt4aFMB8GA1UdIwQY MBaAFFqPgTZv/EPHH1u1IfgVAXYOvrB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMt ODAyZDA5Y2ZjODM1LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMtODAyZDA5Y2ZjODM1 LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9KXwvM0 fyNCaicO/a7LXmOmQRppz81cimec+66c0nhJjmBQmya21+jYWfK65TaprcZQeHcm kSbDpukFr93y52ZN3+VqlAy/p5YaYZrW2G/mjkl9ilwgqyN6vgVuD6Q0Y9YWYQwg 5JJYgRa1wMaAvdk2uL3vgwK1DVtJ/RzWqJb6ptTH+IiARn2PhN2iZTUJKc1MhM9m e/6+wRVNH+s9+amosT74BYhGvXncrfJpwvMMZ5+jgcj7oSAb7t4mvQ8hE/Bo3wLS k34n9JVe9U/+6g0KFnHORoQ9AXEftHjic+EQ6aHfgPXcJTVy6FaXwrjtLK8Y2pZx nLGxMZeTNuBFHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:20 2025 by rpki-client