This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft File: wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json) Hash identifier: 6W8S9fOxpp0DOoQeWNF2cmQX8VdF+IhOPhtsTlEVBoo= Subject key identifier: E0:5B:EB:C0:2E:EB:ED:5A:15:6C:5E:0E:E7:D1:A4:5B:E6:AA:B7:0A Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 Certificate issuer: /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Certificate serial: 019B3C7ED2294FDBF8C5CDF03FECBE24A789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 16:01:42 +0000 Manifest this update: Sat 20 Dec 2025 16:01:42 +0000 Manifest next update: Sun 21 Dec 2025 16:01:42 +0000 Files and hashes: 1: AMYGfvxAWSGgHnKu_QntycSpGmI.roa (hash: QcPElnjpeBVJZHljf/0lA1BJWaDX6zX8ch7k4Gzc5Ng=) 2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: 97q9q5TXeCguuONNWaFYI8rWGg5UlhblegZtWwAmOOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:d2:29:4f:db:f8:c5:cd:f0:3f:ec:be:24:a7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Validity Not Before: Dec 20 16:01:42 2025 GMT Not After : Dec 21 16:01:42 2025 GMT Subject: CN=e05bebc02eebed5a156c5e0ee7d1a45be6aab70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:59:4a:23:1d:fc:bd:47:40:bd:71:bb:b5: 94:58:c7:78:a3:a8:18:b9:c7:37:98:9f:45:bc:65: 5f:87:0a:9f:c1:f0:0f:36:be:f0:1c:05:bd:53:05: 4e:94:0e:ce:e2:71:ec:56:02:b2:32:83:dc:51:7b: f4:b4:f1:11:0a:5c:ac:16:86:b3:77:d0:be:ab:e9: 48:bb:ba:9c:3a:1d:39:ec:79:d7:a1:28:3d:2d:5c: 2f:02:64:71:99:c3:2e:13:e5:36:94:25:e1:3d:b1: 6f:fa:13:48:93:dd:5c:5e:0f:7e:c0:2b:7b:0b:ac: 6b:bf:10:72:66:7c:4a:41:a6:f0:d5:39:5c:7e:35: ef:7c:5e:a1:72:1c:75:93:ad:44:09:7f:74:e6:3a: ec:12:8d:48:59:22:dc:21:63:47:f9:42:5c:3d:e8: c7:a7:36:1d:1e:cd:3f:4e:f7:bf:da:78:60:1d:ac: 29:ad:63:6e:28:60:ce:48:bd:8f:f6:d7:62:a0:e5: 0b:a1:11:2a:1d:c8:63:1a:70:97:d5:9f:66:32:89: 92:a6:ab:7b:e9:ff:73:eb:ca:33:5d:6e:9a:88:db: b4:0e:a2:4c:a4:cf:1b:84:7d:67:0b:56:78:60:16: b9:fc:5c:da:69:84:ef:69:a8:37:d1:ab:7c:a3:81: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5B:EB:C0:2E:EB:ED:5A:15:6C:5E:0E:E7:D1:A4:5B:E6:AA:B7:0A X509v3 Authority Key Identifier: keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2f:c3:3f:5d:c0:01:be:1b:d0:c2:be:f4:9d:db:5b:5f:78: 92:59:6c:d8:cf:2e:a4:32:61:1f:9a:5f:2b:1d:0b:d1:fc:fc: 57:62:e8:46:1d:b6:5b:08:64:7b:04:77:8c:e5:e7:cc:ef:be: b0:91:0f:81:ec:24:67:a1:74:f9:6b:9c:21:da:63:11:43:5c: ed:64:dc:70:d2:77:2c:25:e4:ed:c1:b8:a1:e4:f5:61:25:2b: 84:8e:79:cb:dd:ff:b7:bc:18:45:82:11:c8:88:a8:61:79:b5: 62:75:df:e6:54:64:17:41:a9:64:71:4e:4f:f2:fb:b4:09:ad: 19:79:e2:ed:de:44:67:a2:55:fc:ac:58:c9:52:b8:fe:8b:cc: 20:96:33:b6:94:bf:ec:33:fc:79:55:1b:27:8a:68:f6:f5:3e: 38:05:02:a7:e4:77:56:68:b3:9e:07:22:d3:24:18:9f:9d:de: be:0b:1f:2d:9d:46:df:c3:d7:91:98:64:40:e9:b2:a7:24:6b: 20:26:0b:19:40:db:d3:ff:cb:df:10:bb:cd:d2:5c:48:75:36: 38:4b:af:6c:fb:df:11:23:0e:de:f6:4d:fe:4c:28:57:31:5b: c5:44:33:aa:f6:f6:f0:31:11:0e:a0:f8:4c:ec:24:a3:12:a2: 72:f7:2f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ftIpT9v4xc3wP+y+JKeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWExZGRiYTRjYmQzY2I1N2VjODYwZDg1ZmY0ZmY5MzAx YWZjZTUwHhcNMjUxMjIwMTYwMTQyWhcNMjUxMjIxMTYwMTQyWjAzMTEwLwYDVQQD EyhlMDViZWJjMDJlZWJlZDVhMTU2YzVlMGVlN2QxYTQ1YmU2YWFiNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcBZSiMd/L1HQL1xu7WUWMd4o6gY ucc3mJ9FvGVfhwqfwfAPNr7wHAW9UwVOlA7O4nHsVgKyMoPcUXv0tPERClysFoaz d9C+q+lIu7qcOh057HnXoSg9LVwvAmRxmcMuE+U2lCXhPbFv+hNIk91cXg9+wCt7 C6xrvxByZnxKQabw1TlcfjXvfF6hchx1k61ECX905jrsEo1IWSLcIWNH+UJcPejH pzYdHs0/Tve/2nhgHawprWNuKGDOSL2P9tdioOULoREqHchjGnCX1Z9mMomSpqt7 6f9z68ozXW6aiNu0DqJMpM8bhH1nC1Z4YBa5/FzaaYTvaag30at8o4GTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBb68Au6+1aFWxeDufRpFvmqrcKMB8GA1UdIwQY MBaAFMDqHduky9PLV+yGDYX/T/kwGvzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt M2NmZDZjM2ZkY2E0LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0 LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji/DP13A Ab4b0MK+9J3bW194klls2M8upDJhH5pfKx0L0fz8V2LoRh22WwhkewR3jOXnzO++ sJEPgewkZ6F0+WucIdpjEUNc7WTccNJ3LCXk7cG4oeT1YSUrhI55y93/t7wYRYIR yIioYXm1YnXf5lRkF0GpZHFOT/L7tAmtGXni7d5EZ6JV/KxYyVK4/ovMIJYztpS/ 7DP8eVUbJ4po9vU+OAUCp+R3Vmizngci0yQYn53evgsfLZ1G38PXkZhkQOmypyRr ICYLGUDb0//L3xC7zdJcSHU2OEuvbPvfESMO3vZN/kwoVzFbxUQzqvb28DERDqD4 TOwkoxKicvcvDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:37 2025 by rpki-client