This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft File: WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json) Hash identifier: fd792YxlmaKy9R6I/7wIY16NKiHLmME6WhNitMxRdiY= Subject key identifier: 6A:A8:A0:75:73:7D:CC:19:F7:D9:BB:01:A9:01:AF:2C:99:D8:C2:B0 Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840 Certificate serial: 019B2DB0B89937A9AE387CEC7CD45E77A55A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft Manifest number: 02B1 Signing time: Wed 17 Dec 2025 19:01:54 +0000 Manifest this update: Wed 17 Dec 2025 19:01:54 +0000 Manifest next update: Thu 18 Dec 2025 19:01:54 +0000 Files and hashes: 1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: kkWLHYXkcjskthtJy6UyzkPKrtsZtbBrTAovPFUoGZI=) 2: wKFImUWqJAZ63I73CUY6kU8vkUQ.roa (hash: 6TgnMHnPVKyV4LoYC0bcNEIls6efji/PtDzWQK1yR8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:b8:99:37:a9:ae:38:7c:ec:7c:d4:5e:77:a5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840 Validity Not Before: Dec 17 19:01:54 2025 GMT Not After : Dec 18 19:01:54 2025 GMT Subject: CN=6aa8a075737dcc19f7d9bb01a901af2c99d8c2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:e3:2c:75:79:36:1e:6b:39:1a:b1:48:a5: 44:a0:4c:4f:7f:09:5e:cb:d0:35:16:18:fb:90:4f: a0:32:9b:1e:4e:d2:12:6e:90:e9:17:80:0e:2c:13: f5:4f:fd:46:1f:00:db:1c:1c:4d:a3:73:68:78:af: b0:b9:b8:39:65:3d:80:13:f3:09:8d:b8:ef:51:bc: ce:af:85:94:45:00:59:a2:94:76:0e:3e:f3:30:e6: 1b:9d:d5:31:cd:0c:c8:c2:f2:27:cf:91:d6:4a:26: 57:81:7c:5a:c6:50:e2:f2:44:59:dd:7a:30:ed:50: 35:10:e6:dd:9c:94:95:0e:c0:cb:34:87:65:e2:91: 1f:59:82:60:1d:da:52:5e:b9:b1:87:bc:b3:ef:ec: 1b:5d:30:b0:85:03:1f:01:8b:7a:d7:36:26:d4:63: 11:53:49:be:f0:48:75:73:7c:27:cb:37:96:c5:31: 10:ef:5d:a7:92:48:bd:69:b8:bc:75:0f:a6:80:3d: 8b:50:3a:9b:8b:b4:46:30:9f:a1:01:3d:78:82:1a: 7a:d4:10:5c:d5:c7:46:0f:f3:11:2f:36:b9:b8:7d: 5e:18:ca:d9:88:52:21:13:77:fb:62:0f:06:7e:1f: 26:91:40:b0:24:fc:77:18:e5:78:e5:97:59:ca:be: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A8:A0:75:73:7D:CC:19:F7:D9:BB:01:A9:01:AF:2C:99:D8:C2:B0 X509v3 Authority Key Identifier: keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c4:0b:c6:5f:3c:0b:f9:64:7a:9f:69:27:a4:79:36:1d:56: c6:c1:98:79:4c:aa:1d:48:52:a5:23:20:2b:38:16:6e:ce:57: 3d:4e:dc:61:4d:c0:31:9a:d0:c5:e6:b4:f3:ed:7a:5b:8c:6f: 88:ca:b8:de:99:7a:cc:9d:77:fa:2d:cf:97:84:a9:85:98:2d: fe:52:c1:05:12:12:2e:14:fe:2f:b5:a4:3a:52:24:2b:ae:68: 0b:e5:58:6b:14:fc:e8:64:a3:77:76:fc:05:34:4d:96:8f:59: 2d:3d:f0:e0:af:73:64:7e:72:d2:28:39:fa:2c:5f:84:d8:15: df:32:50:1b:54:be:ac:37:b5:d1:3b:68:63:a7:a8:56:c2:d2: e6:88:c2:02:a4:f8:bf:5b:c9:ba:96:bb:c0:0c:e6:85:06:72: ba:f8:1d:e4:d8:ee:da:7a:00:6a:b7:bb:82:3b:19:d8:a3:9c: 4b:5a:cf:a4:01:ea:e3:85:71:46:30:66:f9:05:e8:06:4e:41: d4:7e:a4:f1:3a:99:a2:f4:4c:cf:5a:1f:4f:66:80:8d:76:d1: 10:8c:56:ac:83:7c:7c:69:46:65:52:d1:30:89:e3:5a:74:08: cd:82:17:cd:e6:4f:e6:f7:42:0b:21:4e:fe:07:72:b1:1e:7b: 28:82:ee:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsLiZN6muOHzsfNRed6VaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTAyZjJjYTgxYWI4MDI5Mzk1MzAxNTZlOTYzMWIxOGY1 MTU4NDAwHhcNMjUxMjE3MTkwMTU0WhcNMjUxMjE4MTkwMTU0WjAzMTEwLwYDVQQD Eyg2YWE4YTA3NTczN2RjYzE5ZjdkOWJiMDFhOTAxYWYyYzk5ZDhjMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG/jLHV5Nh5rORqxSKVEoExPfwle y9A1Fhj7kE+gMpseTtISbpDpF4AOLBP1T/1GHwDbHBxNo3NoeK+wubg5ZT2AE/MJ jbjvUbzOr4WURQBZopR2Dj7zMOYbndUxzQzIwvInz5HWSiZXgXxaxlDi8kRZ3Xow 7VA1EObdnJSVDsDLNIdl4pEfWYJgHdpSXrmxh7yz7+wbXTCwhQMfAYt61zYm1GMR U0m+8Eh1c3wnyzeWxTEQ712nkki9abi8dQ+mgD2LUDqbi7RGMJ+hAT14ghp61BBc 1cdGD/MRLza5uH1eGMrZiFIhE3f7Yg8Gfh8mkUCwJPx3GOV45ZdZyr7mHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqooHVzfcwZ99m7AakBryyZ2MKwMB8GA1UdIwQY MBaAFFjgLyyoGrgCk5UwFW6WMbGPUVhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMt ZDQ4ZDEzYTRkZTM4LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMtZDQ4ZDEzYTRkZTM4 LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMQLxl88 C/lkep9pJ6R5Nh1WxsGYeUyqHUhSpSMgKzgWbs5XPU7cYU3AMZrQxea08+16W4xv iMq43pl6zJ13+i3Pl4SphZgt/lLBBRISLhT+L7WkOlIkK65oC+VYaxT86GSjd3b8 BTRNlo9ZLT3w4K9zZH5y0ig5+ixfhNgV3zJQG1S+rDe10TtoY6eoVsLS5ojCAqT4 v1vJupa7wAzmhQZyuvgd5Nju2noAare7gjsZ2KOcS1rPpAHq44VxRjBm+QXoBk5B 1H6k8TqZovRMz1ofT2aAjXbREIxWrIN8fGlGZVLRMInjWnQIzYIXzeZP5vdCCyFO /gdysR57KILuiA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:41:36 2025 by rpki-client