This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json) Hash identifier: rfXI8FdJV4E76KuqxKvXAY/DtCyQbOVHlMjOUXm3kkQ= Subject key identifier: 5D:56:B2:02:14:02:0D:6A:33:DE:DD:6A:29:EF:1D:42:C6:D8:85:6A Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90 Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90 Certificate serial: 019B30E93B1E29FAA0EC2303F151D45AB4F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft Manifest number: 0E09 Signing time: Thu 18 Dec 2025 10:02:29 +0000 Manifest this update: Thu 18 Dec 2025 10:02:29 +0000 Manifest next update: Fri 19 Dec 2025 10:02:29 +0000 Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: XWXov2sq7ZrhwYL7a94NvuE5jzUMSkERQck2RLmc1/Q=) 2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:3b:1e:29:fa:a0:ec:23:03:f1:51:d4:5a:b4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90 Validity Not Before: Dec 18 10:02:29 2025 GMT Not After : Dec 19 10:02:29 2025 GMT Subject: CN=5d56b20214020d6a33dedd6a29ef1d42c6d8856a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:2b:d2:ec:49:5f:62:a1:c8:76:c3:f8:41: 56:6b:8e:b2:01:1d:5b:75:e9:f3:51:29:f2:c2:ad: 32:27:ce:a1:44:ef:37:88:e3:c8:f8:a5:86:6c:f6: 62:b3:85:33:3d:98:2c:f3:c1:1d:b9:4a:6c:7e:8a: 6e:60:89:8b:1e:65:f9:9e:02:db:fa:b1:cb:d5:ad: 18:f1:31:ea:2a:96:4e:c1:77:b7:54:61:e4:2f:90: 69:17:35:b3:12:02:29:4b:62:bc:25:08:14:f9:fb: 39:39:ef:a1:92:eb:ab:12:89:1e:93:f6:7a:24:98: b6:a0:e6:f6:9a:fd:90:25:7d:4c:4f:13:79:f0:68: 88:f9:63:cc:05:a3:6d:e2:da:1d:51:50:94:84:ec: 59:0d:f2:6c:4d:53:b6:5b:41:79:2f:f9:5d:52:d1: 38:4e:c2:c9:e3:20:21:c1:8a:18:5a:39:10:1e:26: c1:4b:4a:82:c1:43:23:48:20:00:42:c9:89:20:db: 02:c6:5f:d2:24:a3:d2:5d:2e:c3:10:22:bd:5d:16: 85:c0:76:ee:f8:4f:6b:2e:2a:43:02:0a:12:86:15: b9:8b:47:f7:78:da:4e:0c:b4:a1:40:22:6f:74:7d: f2:3c:7f:74:b1:33:38:20:67:fb:11:21:e3:18:e3: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:56:B2:02:14:02:0D:6A:33:DE:DD:6A:29:EF:1D:42:C6:D8:85:6A X509v3 Authority Key Identifier: keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4d:59:74:7b:2f:f9:4a:81:e4:60:fb:c0:32:5a:07:52:6c: 64:cd:bd:a8:5b:cb:22:f3:19:4f:a1:70:d1:d0:af:10:61:d4: 88:88:d5:b8:e0:fe:d4:b7:d3:fe:7f:6d:14:88:b2:ee:b3:75: 9a:75:55:08:b2:57:7c:34:8f:e3:c0:ec:aa:43:88:49:a2:91: e1:80:51:16:b7:5a:50:f0:38:84:c6:f8:48:e9:14:00:d9:6e: 5a:00:e7:d2:3f:c8:90:a6:33:f0:98:41:65:3b:a6:df:72:0e: e9:6e:7b:01:18:12:1b:18:2f:65:d9:11:3f:cb:66:b5:ae:f7: d0:e6:0b:09:da:7a:54:1e:31:e6:d7:86:47:5c:5b:40:33:65: e2:87:ba:e1:62:57:ab:7f:e4:07:60:f6:bc:e9:6a:97:ea:03: e9:b1:20:04:25:c2:17:3d:b6:c1:d0:10:c9:8c:1d:b1:6c:13: dd:c7:e3:23:e6:60:ac:11:ee:d6:c4:d1:37:e4:72:98:42:79: ea:20:ba:d6:88:46:24:95:5a:2b:59:b0:68:32:6f:c2:e2:1e: b9:f3:dc:f6:b5:58:a9:3d:91:31:83:83:e7:4e:42:3b:65:e2: ab:b9:db:28:a0:0a:29:5a:8c:05:5a:3d:33:5b:7d:7f:62:74: 79:b0:e4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6TseKfqg7CMD8VHUWrT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTBhYmI3NzZkYWYyNWY3MjBkYjZhMjZiYjEyZmJkMzRk ZWVkOTAwHhcNMjUxMjE4MTAwMjI5WhcNMjUxMjE5MTAwMjI5WjAzMTEwLwYDVQQD Eyg1ZDU2YjIwMjE0MDIwZDZhMzNkZWRkNmEyOWVmMWQ0MmM2ZDg4NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ikr0uxJX2KhyHbD+EFWa46yAR1b denzUSnywq0yJ86hRO83iOPI+KWGbPZis4UzPZgs88EduUpsfopuYImLHmX5ngLb +rHL1a0Y8THqKpZOwXe3VGHkL5BpFzWzEgIpS2K8JQgU+fs5Oe+hkuurEokek/Z6 JJi2oOb2mv2QJX1MTxN58GiI+WPMBaNt4todUVCUhOxZDfJsTVO2W0F5L/ldUtE4 TsLJ4yAhwYoYWjkQHibBS0qCwUMjSCAAQsmJINsCxl/SJKPSXS7DECK9XRaFwHbu +E9rLipDAgoShhW5i0f3eNpODLShQCJvdH3yPH90sTM4IGf7ESHjGOPfoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1WsgIUAg1qM97dainvHULG2IVqMB8GA1UdIwQY MBaAFFjgq7d22vJfcg22omuxL7003u2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09DcnQzYmE4bDl5RGJhaWE3RXZ2VFRlN1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85MDQzNDEtNGE3My00MjZkLTliYWMt YTMzOWVlY2I4ZGM3LzEvV09DcnQzYmE4bDl5RGJhaWE3RXZ2VFRlN1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi85MDQzNDEtNGE3My00MjZkLTliYWMtYTMzOWVlY2I4ZGM3 LzEvV09DcnQzYmE4bDl5RGJhaWE3RXZ2VFRlN1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE1ZdHsv +UqB5GD7wDJaB1JsZM29qFvLIvMZT6Fw0dCvEGHUiIjVuOD+1LfT/n9tFIiy7rN1 mnVVCLJXfDSP48DsqkOISaKR4YBRFrdaUPA4hMb4SOkUANluWgDn0j/IkKYz8JhB ZTum33IO6W57ARgSGxgvZdkRP8tmta730OYLCdp6VB4x5teGR1xbQDNl4oe64WJX q3/kB2D2vOlql+oD6bEgBCXCFz22wdAQyYwdsWwT3cfjI+ZgrBHu1sTRN+RymEJ5 6iC61ohGJJVaK1mwaDJvwuIeufPc9rVYqT2RMYOD505CO2Xiq7nbKKAKKVqMBVo9 M1t9f2J0ebDktw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:21:40 2025 by rpki-client