This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft File: Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json) Hash identifier: 5ZPN4P0xm/gQ69uY5+RmDNFZ62iiwOiRYJhzXZoCc3M= Subject key identifier: 1E:37:70:52:03:A9:37:78:9D:DC:E2:C9:C7:5E:15:D3:AE:EC:77:38 Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D Certificate issuer: /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d Certificate serial: 019B559A50E10A5C32E87BD1679D0A99AFC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft Manifest number: 050A Signing time: Thu 25 Dec 2025 13:02:15 +0000 Manifest this update: Thu 25 Dec 2025 13:02:15 +0000 Manifest next update: Fri 26 Dec 2025 13:02:15 +0000 Files and hashes: 1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=) 2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: YMbaiNImoGfW1y9IxvITQeEaj+N5eohB5HSEWY/KHiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:50:e1:0a:5c:32:e8:7b:d1:67:9d:0a:99:af:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d Validity Not Before: Dec 25 13:02:15 2025 GMT Not After : Dec 26 13:02:15 2025 GMT Subject: CN=1e37705203a937789ddce2c9c75e15d3aeec7738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:65:52:79:d5:fb:00:4c:98:62:a5:4b:e5: ad:cb:20:93:2d:06:a5:9e:26:d2:fe:d5:06:04:e1: 68:ea:85:e6:88:0e:74:b0:3c:b7:6c:cc:35:87:75: 76:52:78:e9:6d:fb:e1:f5:a8:61:36:d1:32:2e:47: 81:96:be:bc:92:75:c3:64:96:49:bd:e2:8f:34:51: 4c:35:2c:09:d5:c8:95:eb:8c:84:4e:12:75:df:bc: 23:8f:06:29:c7:d1:1e:d2:92:e7:83:99:e7:df:60: 38:41:ee:61:bc:9a:f3:f1:76:0c:21:31:d5:66:0c: 20:51:f6:de:81:a3:77:be:f5:68:4e:d2:73:23:c2: a9:72:74:64:a7:85:d5:25:14:82:85:30:6b:c5:ec: 3b:26:23:27:7e:86:37:c9:eb:1c:6d:cf:dd:ea:48: d0:90:78:6f:e7:82:15:7a:86:a8:d7:48:f6:df:bd: 4b:d3:10:3b:70:5b:59:64:ab:09:b0:82:ab:93:3d: ee:69:97:e4:62:7b:0a:e1:3a:0f:41:84:99:ee:d3: 66:8a:81:12:f8:55:ed:5d:37:54:fa:a8:93:7c:ae: 78:d1:9f:f0:de:0c:8d:e1:91:01:28:52:19:97:68: 15:15:7a:4a:a3:1a:23:81:12:20:c1:aa:e2:1b:6b: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:70:52:03:A9:37:78:9D:DC:E2:C9:C7:5E:15:D3:AE:EC:77:38 X509v3 Authority Key Identifier: keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:18:fe:36:7f:18:e2:57:40:72:ff:44:db:c8:f7:c2:4e:b5: ee:30:9d:72:9b:91:63:62:70:68:f9:4f:b9:58:13:c3:d4:e7: aa:d8:4e:13:3c:50:a9:aa:21:75:40:65:5f:f0:54:2e:a9:c0: 3b:f6:dd:83:77:81:c8:5d:5a:b4:23:23:5a:24:a5:1e:17:d4: bf:fd:82:18:97:77:65:fc:dd:37:fe:96:13:9b:d0:14:22:e4: a4:4c:32:94:23:a8:e1:02:07:b3:ce:8a:99:79:18:fa:65:0a: d6:d7:93:40:99:03:3b:fe:69:c5:b7:4d:c8:8c:c9:3a:94:2d: 54:6b:c8:76:89:2f:9e:17:1a:cb:d6:ee:b5:e3:55:28:cb:ac: 5a:07:b3:0d:21:19:8a:bc:f2:7b:58:7b:40:16:d2:26:22:a6: b2:d0:05:b8:c4:52:c0:39:5c:66:f0:eb:35:45:f9:23:af:db: 1c:66:39:73:82:51:c7:06:10:c4:41:45:77:73:d7:ec:00:1c: 7a:b2:1d:ce:0c:ab:3e:c9:5a:1a:7e:84:34:b2:7f:b3:a0:30: 6e:d4:65:f3:d2:bf:9d:c0:5a:3a:d2:b3:94:7a:6b:00:f5:67: 7a:d1:5c:54:81:40:c3:74:59:e3:4c:11:9c:1c:0d:dd:d4:b6: af:94:7d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmlDhClwy6HvRZ50Kma/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhODdmY2M4NWNiNDk5NDE5YTFiMWVjMmYzMjA5YzJhNDM1 ZmI5MmQwHhcNMjUxMjI1MTMwMjE1WhcNMjUxMjI2MTMwMjE1WjAzMTEwLwYDVQQD EygxZTM3NzA1MjAzYTkzNzc4OWRkY2UyYzljNzVlMTVkM2FlZWM3NzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0NlUnnV+wBMmGKlS+WtyyCTLQal nibS/tUGBOFo6oXmiA50sDy3bMw1h3V2Unjpbfvh9ahhNtEyLkeBlr68knXDZJZJ veKPNFFMNSwJ1ciV64yEThJ137wjjwYpx9Ee0pLng5nn32A4Qe5hvJrz8XYMITHV ZgwgUfbegaN3vvVoTtJzI8KpcnRkp4XVJRSChTBrxew7JiMnfoY3yescbc/d6kjQ kHhv54IVeoao10j2371L0xA7cFtZZKsJsIKrkz3uaZfkYnsK4ToPQYSZ7tNmioES +FXtXTdU+qiTfK540Z/w3gyN4ZEBKFIZl2gVFXpKoxojgRIgwariG2vPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB43cFIDqTd4ndziycdeFdOu7Hc4MB8GA1UdIwQY MBaAFFqH/MhctJlBmhsewvMgnCpDX7ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMt OTk0YmI2MjhiYmE1LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMtOTk0YmI2MjhiYmE1 LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxj+Nn8Y 4ldAcv9E28j3wk617jCdcpuRY2JwaPlPuVgTw9TnqthOEzxQqaohdUBlX/BULqnA O/bdg3eByF1atCMjWiSlHhfUv/2CGJd3ZfzdN/6WE5vQFCLkpEwylCOo4QIHs86K mXkY+mUK1teTQJkDO/5pxbdNyIzJOpQtVGvIdokvnhcay9buteNVKMusWgezDSEZ irzye1h7QBbSJiKmstAFuMRSwDlcZvDrNUX5I6/bHGY5c4JRxwYQxEFFd3PX7AAc erIdzgyrPslaGn6ENLJ/s6AwbtRl89K/ncBaOtKzlHprAPVnetFcVIFAw3RZ40wR nBwN3dS2r5R9Xw== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:02 2025 by rpki-client