This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft File: woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json) Hash identifier: DkMdtUw6FNCibB7EEl4jR2FGQ+dC2asfw2vZa0iVKnE= Subject key identifier: 0E:9C:BC:4C:32:51:1D:AF:2C:BB:15:F5:AB:96:F1:3F:51:75:09:04 Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 Certificate issuer: /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Certificate serial: 019B5F783CF0817B4078ADE0ADB40AB28D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 11:01:14 +0000 Manifest this update: Sat 27 Dec 2025 11:01:14 +0000 Manifest next update: Sun 28 Dec 2025 11:01:14 +0000 Files and hashes: 1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=) 2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: AdKH0kWWGUHkWf+naDpD4knk/vc2KweGfWfno4wfrnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:78:3c:f0:81:7b:40:78:ad:e0:ad:b4:0a:b2:8d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1 Validity Not Before: Dec 27 11:01:14 2025 GMT Not After : Dec 28 11:01:14 2025 GMT Subject: CN=0e9cbc4c32511daf2cbb15f5ab96f13f51750904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:63:a7:56:64:8e:51:06:5c:b2:7b:ea:e9: 7a:86:ce:8b:03:b0:dd:07:f9:dc:56:40:cb:49:7d: b1:1b:17:bc:43:71:39:24:8d:c3:3a:f0:a6:60:78: 38:27:32:f7:15:89:ec:1f:79:cb:88:61:71:45:3f: fb:84:d6:8c:bb:3f:d0:98:a2:87:d8:72:70:7b:4e: 85:63:23:75:a3:48:d6:e1:50:5b:a3:e5:fe:c5:a6: 26:7a:fd:32:f0:35:f9:ae:45:c2:a9:82:72:fa:71: 26:33:42:bc:38:b9:40:cb:31:81:47:fe:20:bd:ea: 0e:91:b2:11:83:85:69:e6:c6:61:f1:d7:9f:ff:d4: 3e:a5:74:ae:dc:5d:cf:c7:97:c7:9a:ad:d6:3d:27: b5:eb:92:17:41:37:53:b6:93:47:52:c4:23:37:c4: 54:b6:32:7a:d4:fb:63:a7:45:03:66:2b:88:0f:09: e5:b0:aa:b8:a7:fb:f1:eb:9a:9a:53:7c:ab:07:f4: 14:7d:93:6a:89:12:8f:5e:d9:73:36:15:30:55:7c: e9:2f:9e:16:65:89:09:aa:94:21:3f:f8:2c:7c:c8: fb:03:52:62:c3:68:ee:d9:0b:ae:40:b7:33:85:60: 33:17:d5:fa:bf:81:83:3c:e1:58:49:dc:2a:5e:3a: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9C:BC:4C:32:51:1D:AF:2C:BB:15:F5:AB:96:F1:3F:51:75:09:04 X509v3 Authority Key Identifier: keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3c:58:2d:db:a5:e6:04:29:06:7b:dc:0e:1f:32:18:bb:0b: 24:0b:10:ae:8f:17:36:7c:fb:96:63:fc:b5:74:a1:ce:c2:e9: d8:31:44:24:be:39:dd:93:c6:1f:5d:48:d2:0c:0e:70:bf:d1: 10:28:df:e5:28:2d:f8:63:55:84:41:b8:22:84:6d:3f:24:c7: 16:d9:e7:95:e7:7e:63:cc:52:20:ee:04:7f:d4:11:7f:62:36: c1:53:11:7d:ec:f6:c3:81:f9:d1:1e:d1:c8:c3:01:ac:af:94: ed:3f:6c:55:18:1b:06:a1:06:66:a7:cc:4d:e4:1f:1e:e1:a7: 68:ed:4c:0f:c3:e3:f2:b2:a5:6e:40:60:be:97:02:e8:af:c9: 28:eb:ee:3b:26:7d:bc:d2:78:da:52:c8:ae:b6:67:c0:10:7d: 6b:23:77:42:f8:98:e8:fd:72:8d:3b:33:33:2b:0c:f4:8b:7c: 8c:a7:75:b2:9d:8b:17:61:0e:a8:a3:2e:43:fd:e1:ba:01:fc: b9:9b:41:88:c7:5b:fc:63:fd:11:dc:f6:41:3f:9d:d7:38:cf: 27:d1:74:67:b4:8a:9d:d0:85:f0:43:4b:e2:15:b3:8e:aa:48: f8:3a:e6:00:7c:58:39:e5:82:17:5e:c1:73:aa:01:68:41:5c: 78:82:aa:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfeDzwgXtAeK3grbQKso0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODM4ZDFmM2IyMzFiZjcyZTQ1M2RkNzhjNGI1MGFjMDA5 ZmY3ZjEwHhcNMjUxMjI3MTEwMTE0WhcNMjUxMjI4MTEwMTE0WjAzMTEwLwYDVQQD EygwZTljYmM0YzMyNTExZGFmMmNiYjE1ZjVhYjk2ZjEzZjUxNzUwOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR5jp1ZkjlEGXLJ76ul6hs6LA7Dd B/ncVkDLSX2xGxe8Q3E5JI3DOvCmYHg4JzL3FYnsH3nLiGFxRT/7hNaMuz/QmKKH 2HJwe06FYyN1o0jW4VBbo+X+xaYmev0y8DX5rkXCqYJy+nEmM0K8OLlAyzGBR/4g veoOkbIRg4Vp5sZh8def/9Q+pXSu3F3Px5fHmq3WPSe165IXQTdTtpNHUsQjN8RU tjJ61Ptjp0UDZiuIDwnlsKq4p/vx65qaU3yrB/QUfZNqiRKPXtlzNhUwVXzpL54W ZYkJqpQhP/gsfMj7A1Jiw2ju2QuuQLczhWAzF9X6v4GDPOFYSdwqXjo7EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6cvEwyUR2vLLsV9auW8T9RdQkEMB8GA1UdIwQY MBaAFMKDjR87Ixv3LkU914xLUKwAn/fxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2Ut MmIzYzY0ZjlmOWFiLzEvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zNjY3NDYtYzMwNi00MDhhLWJhN2UtMmIzYzY0ZjlmOWFi LzEvd29PTkh6c2pHX2N1UlQzWGpFdFFyQUNmOV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjxYLdul 5gQpBnvcDh8yGLsLJAsQro8XNnz7lmP8tXShzsLp2DFEJL453ZPGH11I0gwOcL/R ECjf5Sgt+GNVhEG4IoRtPyTHFtnnled+Y8xSIO4Ef9QRf2I2wVMRfez2w4H50R7R yMMBrK+U7T9sVRgbBqEGZqfMTeQfHuGnaO1MD8Pj8rKlbkBgvpcC6K/JKOvuOyZ9 vNJ42lLIrrZnwBB9ayN3QviY6P1yjTszMysM9It8jKd1sp2LF2EOqKMuQ/3hugH8 uZtBiMdb/GP9Edz2QT+d1zjPJ9F0Z7SKndCF8ENL4hWzjqpI+DrmAHxYOeWCF17B c6oBaEFceIKqOw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:14:58 2025 by rpki-client