This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
File: WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft (raw, json)
Hash identifier: GKChcxvPL+JoMCFZHDF9Ny3e0m0kcOB1m2JwE82L4jY=
Subject key identifier: 41:B0:36:F3:B4:FA:6B:F8:59:98:9E:FF:7F:61:9E:50:A4:82:A3:DC
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Certificate issuer: /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial: 019AF12ECD2C7E9280484946443A55FA4811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
Manifest number: 0DE8
Signing time: Sat 06 Dec 2025 01:02:47 +0000
Manifest this update: Sat 06 Dec 2025 01:02:47 +0000
Manifest next update: Sun 07 Dec 2025 01:02:47 +0000
Files and hashes: 1: WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl (hash: BtoFZzTCPRugCRv5XaqbESFHDnSNy/LKPLda4auw9oU=)
2: yIEPYCgadoB6X07AnuVv3-Sl8cU.roa (hash: muswJ5Tpw03mqWebPMphb2rOsPv5OQmKFZxcXdUMf8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:cd:2c:7e:92:80:48:49:46:44:3a:55:fa:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Validity
Not Before: Dec 6 01:02:47 2025 GMT
Not After : Dec 7 01:02:47 2025 GMT
Subject: CN=41b036f3b4fa6bf859989eff7f619e50a482a3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:3a:13:6e:68:88:8a:9d:de:20:44:ae:2c:
b9:65:88:bc:ed:57:08:40:5a:7a:c1:4f:3c:cc:07:
c6:8d:7c:f7:bd:36:04:d9:35:1f:27:ab:a4:5c:c4:
9b:b2:6a:84:a2:72:e4:fa:d9:37:48:55:22:e7:9c:
3f:98:19:63:8a:4c:0a:6f:73:73:19:b0:9c:d6:f8:
94:92:c5:75:43:30:7b:7b:c7:5c:db:4f:57:2b:53:
76:2e:ce:74:ab:b2:89:d1:a1:76:ea:24:4f:92:9d:
ec:47:f0:e3:0d:98:c5:0f:91:0b:45:73:8c:5a:64:
36:54:1b:8a:04:d2:8b:99:75:c1:a0:0a:33:2e:9f:
c8:9f:55:fd:d6:66:9c:ef:84:3c:2c:fe:ec:02:2e:
1a:f4:7b:16:02:68:05:c2:10:23:69:b6:43:4d:46:
2f:8e:23:79:95:c3:28:bf:6d:04:92:79:26:e9:18:
9c:ad:2b:d3:6f:29:ac:ad:36:ec:77:45:25:93:92:
ec:6f:11:a1:b2:86:10:80:f3:63:5c:dd:4b:5e:8f:
77:2a:5c:73:bd:35:64:6b:97:93:af:cc:32:ad:8d:
56:41:01:3c:50:a4:20:c7:99:e1:5b:b2:be:c3:52:
f6:84:99:23:06:9f:b0:f8:2b:50:6d:ba:10:ed:3d:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B0:36:F3:B4:FA:6B:F8:59:98:9E:FF:7F:61:9E:50:A4:82:A3:DC
X509v3 Authority Key Identifier:
keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:96:6e:6f:c7:ef:54:e0:dd:1a:15:1a:b5:2e:d4:a3:25:8e:
12:fd:8b:17:e9:68:f3:e4:99:bd:a6:92:5d:17:81:62:94:da:
e5:31:9d:fd:cc:0b:2b:4a:cc:00:9a:80:51:c7:ee:50:88:ed:
5d:ef:af:82:51:60:9c:91:fc:93:1d:7f:6e:c7:ee:d2:77:0a:
6f:62:73:9a:d7:c3:6a:ed:7a:16:ac:84:1b:71:1a:56:db:9c:
fd:d6:ba:91:b4:e5:fb:50:25:89:51:9d:99:56:e1:87:62:25:
53:2a:e5:f0:84:bb:fc:88:03:4b:9d:45:9a:db:6b:da:15:27:
07:df:8c:bb:b3:59:93:96:d3:9f:fe:a4:42:c1:80:8b:8f:6f:
aa:d9:68:12:9b:6e:91:01:f9:98:57:c7:e4:c8:dd:72:6b:a3:
81:a5:73:31:60:08:5f:67:88:4e:d7:a7:7e:9d:df:32:0c:83:
37:bc:f7:c4:32:71:79:81:e7:60:41:64:e4:53:c1:b5:a8:61:
18:68:56:dd:2b:ff:08:a7:1c:0f:78:5a:e1:a2:7f:66:15:94:
a3:b0:4f:ac:f0:2a:6b:38:f9:0f:f8:9c:20:11:d2:b5:c3:d1:
6e:ca:c9:82:3b:8f:4a:96:69:ba:e4:3b:44:ad:40:ae:22:62:
ea:62:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:06:29 2025 by rpki-client