This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File:                     WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier:          GKChcxvPL+JoMCFZHDF9Ny3e0m0kcOB1m2JwE82L4jY=
Subject key identifier:   41:B0:36:F3:B4:FA:6B:F8:59:98:9E:FF:7F:61:9E:50:A4:82:A3:DC
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer:       /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial:       019AF12ECD2C7E9280484946443A55FA4811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number:          0DE8
Signing time:             Sat 06 Dec 2025 01:02:47 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:47 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:47 +0000
Files and hashes:         1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: BtoFZzTCPRugCRv5XaqbESFHDnSNy/LKPLda4auw9oU=)
                          2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:cd:2c:7e:92:80:48:49:46:44:3a:55:fa:48:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
        Validity
            Not Before: Dec  6 01:02:47 2025 GMT
            Not After : Dec  7 01:02:47 2025 GMT
        Subject: CN=41b036f3b4fa6bf859989eff7f619e50a482a3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:3a:13:6e:68:88:8a:9d:de:20:44:ae:2c:
                    b9:65:88:bc:ed:57:08:40:5a:7a:c1:4f:3c:cc:07:
                    c6:8d:7c:f7:bd:36:04:d9:35:1f:27:ab:a4:5c:c4:
                    9b:b2:6a:84:a2:72:e4:fa:d9:37:48:55:22:e7:9c:
                    3f:98:19:63:8a:4c:0a:6f:73:73:19:b0:9c:d6:f8:
                    94:92:c5:75:43:30:7b:7b:c7:5c:db:4f:57:2b:53:
                    76:2e:ce:74:ab:b2:89:d1:a1:76:ea:24:4f:92:9d:
                    ec:47:f0:e3:0d:98:c5:0f:91:0b:45:73:8c:5a:64:
                    36:54:1b:8a:04:d2:8b:99:75:c1:a0:0a:33:2e:9f:
                    c8:9f:55:fd:d6:66:9c:ef:84:3c:2c:fe:ec:02:2e:
                    1a:f4:7b:16:02:68:05:c2:10:23:69:b6:43:4d:46:
                    2f:8e:23:79:95:c3:28:bf:6d:04:92:79:26:e9:18:
                    9c:ad:2b:d3:6f:29:ac:ad:36:ec:77:45:25:93:92:
                    ec:6f:11:a1:b2:86:10:80:f3:63:5c:dd:4b:5e:8f:
                    77:2a:5c:73:bd:35:64:6b:97:93:af:cc:32:ad:8d:
                    56:41:01:3c:50:a4:20:c7:99:e1:5b:b2:be:c3:52:
                    f6:84:99:23:06:9f:b0:f8:2b:50:6d:ba:10:ed:3d:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B0:36:F3:B4:FA:6B:F8:59:98:9E:FF:7F:61:9E:50:A4:82:A3:DC
            X509v3 Authority Key Identifier:
                keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:96:6e:6f:c7:ef:54:e0:dd:1a:15:1a:b5:2e:d4:a3:25:8e:
         12:fd:8b:17:e9:68:f3:e4:99:bd:a6:92:5d:17:81:62:94:da:
         e5:31:9d:fd:cc:0b:2b:4a:cc:00:9a:80:51:c7:ee:50:88:ed:
         5d:ef:af:82:51:60:9c:91:fc:93:1d:7f:6e:c7:ee:d2:77:0a:
         6f:62:73:9a:d7:c3:6a:ed:7a:16:ac:84:1b:71:1a:56:db:9c:
         fd:d6:ba:91:b4:e5:fb:50:25:89:51:9d:99:56:e1:87:62:25:
         53:2a:e5:f0:84:bb:fc:88:03:4b:9d:45:9a:db:6b:da:15:27:
         07:df:8c:bb:b3:59:93:96:d3:9f:fe:a4:42:c1:80:8b:8f:6f:
         aa:d9:68:12:9b:6e:91:01:f9:98:57:c7:e4:c8:dd:72:6b:a3:
         81:a5:73:31:60:08:5f:67:88:4e:d7:a7:7e:9d:df:32:0c:83:
         37:bc:f7:c4:32:71:79:81:e7:60:41:64:e4:53:c1:b5:a8:61:
         18:68:56:dd:2b:ff:08:a7:1c:0f:78:5a:e1:a2:7f:66:15:94:
         a3:b0:4f:ac:f0:2a:6b:38:f9:0f:f8:9c:20:11:d2:b5:c3:d1:
         6e:ca:c9:82:3b:8f:4a:96:69:ba:e4:3b:44:ad:40:ae:22:62:
         ea:62:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:06:29 2025 by rpki-client